Overview

overview

10

Static

static

3

mscrt64.dll

windows7-x64

10

mscrt64.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    mscrt64.dll

  • Size

    864KB

  • Sample

    241024-h3yscaycjf

  • MD5

    26410763627000bebb937a9aa82a49fb

  • SHA1

    d99dbca2f85aaaa469523ddcceff55cb97f2cf4d

  • SHA256

    d5021f46ede912812913214014b9798cbc031b118429da8934d058d980993241

  • SHA512

    558725a25cfc193d91aa20e40080e4e7a7d1985926723d68eabc09e9c9ee24d1573c2be7bf17271de437692ba70fc7a51c1a53f10982098f5495322bf96389f4

  • SSDEEP

    24576:P59SvY72FFmwJKjHfqI6ilZqk6oby4TPfpHu:vSvpFswJKDiDiTJGcHu

Score
10/10
bruteratelbackdoor

Malware Config

Targets

    • Target

      mscrt64.dll

    • Size

      864KB

    • MD5

      26410763627000bebb937a9aa82a49fb

    • SHA1

      d99dbca2f85aaaa469523ddcceff55cb97f2cf4d

    • SHA256

      d5021f46ede912812913214014b9798cbc031b118429da8934d058d980993241

    • SHA512

      558725a25cfc193d91aa20e40080e4e7a7d1985926723d68eabc09e9c9ee24d1573c2be7bf17271de437692ba70fc7a51c1a53f10982098f5495322bf96389f4

    • SSDEEP

      24576:P59SvY72FFmwJKjHfqI6ilZqk6oby4TPfpHu:vSvpFswJKDiDiTJGcHu

    Score
    10/10
    bruteratelbackdoor

    • Brute Ratel C4

      A customized command and control framework for red teaming and adversary simulation.

      backdoorbruteratel

    • Detect BruteRatel badger

    • Blocklisted process makes network request

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks