Extracted

• • Target

    https://download2330.mediafire.com/uq55c5rg3y0g/bc8azynqlw2thf4/Main_File_Pass_1234.rar

  Score

  10^/10

  recordbreakerevasionstealertrojan

  • RecordBreaker

    RecordBreaker is an information stealer capable of downloading and executing secondary payloads written in C++.

    stealerrecordbreaker

  • Identifies VirtualBox via ACPI registry values (likely anti-VM)

    evasion

  • Executes dropped EXE

  • Checks BIOS information in registry

    BIOS information is often read in order to detect sandboxing environments.

  • Checks whether UAC is enabled

    evasiontrojan

  • Suspicious use of NtSetInformationThreadHideFromDebugger

  behavioral1