Quick-Analysis/RecordBreaker.md at main · vc0RExor/Quick-Analysis
Tags
cmtmf-attack-pattern: Process Injection
attack-pattern: Data Domains - T1583.001 Domains - T1584.001 Installutil - T1218.004 Malware - T1587.001 Malware - T1588.001 Process Injection - T1631 Search Engines - T1593.002 Server - T1583.004 Server - T1584.004 Installutil - T1118 Process Injection - T1055
Show in Graph
Common Information
Type Value
UUID eb0c2eb2-3e59-4297-9807-23dff1762bba
Fingerprint 85925c452f771a5b
Analysis status DONE
Considered CTI value 2
Text language
Published Jan. 1, 2023, midnight
Added to db Jan. 16, 2023, 3:54 p.m.
Last updated Nov. 8, 2024, 11:37 a.m.
Headline Name already in use
Title Quick-Analysis/RecordBreaker.md at main · vc0RExor/Quick-Analysis
Detected Hints/Tags/Attributes 23/2/33
Source URLs
Redirection Url
Details Source https://github.com/vc0RExor/Quick-Analysis/blob/main/RecordBreaker/RecordBreaker.md
URL Provider
Details Provider Source level domain
Details github.com github.com
Attributes
Details Type #Events CTI Value
Details Domain 1 
recordbreaker.md
Details Domain 11 
rgyui.top
Details Domain 9 
acacaca.org
Details File 103 
regasm.exe
Details File 72 
regsvcs.exe
Details File 48 
applaunch.exe
Details File 83 
installutil.exe
Details File 40 
aspnet_compiler.exe
Details sha256 2 
502e941d65f743b781b0214c9c37b8d4cca4b27fa7d62be943a63a9de93812d3
Details sha256 2 
7f2e0645947bc96cd2f5edd2260db48f09102dcfd0fcd85896d287c1b621770d
Details sha256 2 
7dc73e29c582c16283115de0c5d03ecc102b47b82f4b4e957f2630d935967b61
Details sha256 2 
b5137e4be20605c7ad8b5bc1045210c9c42ae4190be76aab1bc72e0a71c703d2
Details sha256 2 
ba69e1ed08c7288821223595c9b220bc5c53d0485930958a1db415a3f7f56945
Details sha256 2 
767cdc4f8adf3bdfeec2879b0976476dcc0aeeeee5e524d3c2e4ade70c181e9c
Details sha256 2 
207256464e91fde4a35aad23a7a56ef9f9438cd3ef946418f6e06a00e70d7808
Details sha256 2 
d184612e2f0b0b065986b94869296330d56e356e2d1ef077461e064bdcb4d3a2
Details sha256 2 
0050ab6912e9c63bb65930ef52094fca855f8dab9210f74b1d9e2c6c61c9d5b0
Details sha256 2 
dba0be52e9c4d97b164f7c131710f4761b16b2c4ddacafe5cfe10bfbc6148c3c
Details sha256 2 
3bf0e1d823e337ba4372bd55bb57d93789bda09c5bf3d8b82a308781c8f9a09f
Details sha256 2 
3339d515567a632170ca67cf4ee006f24166f9fb47b317b44abada6f5174d1f9
Details sha256 2 
69eac55ff687843f9d856e7facdef36d1c53faa5df6ff3eab874a1426a5efcea
Details sha256 2 
4dd0e5762e6ae6553863f594262e8a1d3f48635d1f49ced7975fc5842fa69a14
Details IPv4 2 
89.208.104.46
Details IPv4 3 
88.119.170.241
Details IPv4 4 
85.192.63.46
Details IPv4 2 
206.166.251.254
Details IPv4 2 
172.111.36.191
Details IPv4 2 
102.130.114.185
Details IPv4 2 
91.201.25.172
Details IPv4 2 
94.131.107.239
Details IPv4 3 
193.106.191.223
Details Url 2 
http://rgyui.top
Details Url 2 
http://acacaca.org