RecordBreaker Infostealer Disguised as a .NET Installer

Malware that are being distributed disguised as cracks are evolving.

In the past, malware was simply distributed as the executable itself. However, there was a gradual shift towards also including normal files within a compressed file. More recently, there was a sample where a normal installer was downloaded and executed.

If the malware is executed in an ordinary user environment, the encrypted malware file is downloaded from the threat actor’s server and executed. The malware in this instance is the …

distributed file files infostealer installer malware malware analysis recordbreaker