Analysis
-
max time kernel
147s -
max time network
152s -
platform
windows11-21h2_x64 -
resource
win11-20241007-en -
resource tags
-
submitted
25-10-2024 10:24
General
-
Target
c3439bcb0ee6d1bda33ef15a3d1d040c331e77d5.dll
-
Size
724KB
-
MD5
12d56ac4ed9cadb4f6f54c7bd7fdfeb6
-
SHA1
c3439bcb0ee6d1bda33ef15a3d1d040c331e77d5
-
SHA256
c6c697d658dd221f27a8d58e79a478646877ac6afcf0cbe2ce919862f3889c6b
-
SHA512
1a6737f4977b2a0e94498edda635cb09d1ea63ee0072fedec16f1227d99d602298e60d091fd958494b4a6b7730f8c11c670c1164ac57a8c7e7aeb98deb3390b0
-
SSDEEP
12288:+h/M5nsxW5fFcrGn7Q21Svj07MGpmeSM6C4LWYv1AoMVPPynuJskZVjSKUCWnkoD:+rr+VPPnJs3KUCWkC3r
Score
10/10
Malware Config
Signatures
-
Brute Ratel C4
A customized command and control framework for red teaming and adversary simulation.
-
Detect BruteRatel badger 1 IoCs
-
Blocklisted process makes network request 6 IoCs
-
Suspicious behavior: EnumeratesProcesses 6 IoCs
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\c3439bcb0ee6d1bda33ef15a3d1d040c331e77d5.dll,#11⤵
- Blocklisted process makes network request
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
304KB
-
Filesize
248KB
-
Filesize
304KB