Overview

overview

10

Static

static

3

twist.dll

windows7-x64

10

twist.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    twist.dll

  • Size

    1.9MB

  • Sample

    241022-pyn6nsxfkl

  • MD5

    33fe5e2d127a35797c7086a0d1ff1102

  • SHA1

    b6c6a5396a23b1aee2e5bac94eff70822f59b125

  • SHA256

    714944899f2b0fe6496ac15359ba90fb9d9891a84111fc7dc3cd5b1093b17347

  • SHA512

    7882fbb011fe4c0ca12491d2cde92090a512944d6eebbeedc10e05bde07bdd87359b1c28941b50b6bebc5416215931e67e178fe2ee7e6013d9d58a5fae459930

  • SSDEEP

    24576:2g7GfSjvBt2ptVDe6jKBNu9+oyOjTCXM79Keh6ykUEPP3:2g7OSNkw7CEoyuuXmUehjkUS

Score
10/10
bruteratelbackdoor

Malware Config

Targets

    • Target

      twist.dll

    • Size

      1.9MB

    • MD5

      33fe5e2d127a35797c7086a0d1ff1102

    • SHA1

      b6c6a5396a23b1aee2e5bac94eff70822f59b125

    • SHA256

      714944899f2b0fe6496ac15359ba90fb9d9891a84111fc7dc3cd5b1093b17347

    • SHA512

      7882fbb011fe4c0ca12491d2cde92090a512944d6eebbeedc10e05bde07bdd87359b1c28941b50b6bebc5416215931e67e178fe2ee7e6013d9d58a5fae459930

    • SSDEEP

      24576:2g7GfSjvBt2ptVDe6jKBNu9+oyOjTCXM79Keh6ykUEPP3:2g7OSNkw7CEoyuuXmUehjkUS

    Score
    10/10
    bruteratelbackdoor

    • Brute Ratel C4

      A customized command and control framework for red teaming and adversary simulation.

      backdoorbruteratel

    • Detect BruteRatel badger

    • Blocklisted process makes network request

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks