Analysis
-
max time kernel
149s -
max time network
145s -
platform
windows10-ltsc 2021_x64 -
resource
win10ltsc2021-20241023-en -
resource tags
-
submitted
19-11-2024 14:49
General
-
Target
test2.exe
-
Size
1.8MB
-
MD5
f27427e8fcda05388bc238b8d6b1590a
-
SHA1
5f273d7fc5696c738879a60e8d49b66eefdf87c7
-
SHA256
31a480c85705f4c532ecc57d8a66d8658ecc18f43115f67b2a65d441a9b6c6a0
-
SHA512
85273040cfb86ffaa8201d889061c51e609ffdbc26211ee01603a6def2dc5a76d1305cf48b89f5ef5fb2d4cf893b27420558b04cedd342d55c72f81add153351
-
SSDEEP
24576:88s7u7nB/DBD9accSqVO9y/QaDC4F3Zuk5UDJjbDE2W4VO8I/nY:qy/DBD9MVO9yosHF395UlbDBw82n
Malware Config
Signatures
-
Brute Ratel C4
A customized command and control framework for red teaming and adversary simulation.
-
Bruteratel family
-
Detect BruteRatel badger 1 IoCs
-
Loads dropped DLL 1 IoCs
-
Suspicious behavior: EnumeratesProcesses 6 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\test2.exe"C:\Users\Admin\AppData\Local\Temp\test2.exe"1⤵
- Loads dropped DLL
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.6MB
MD586b57c9deafed093d4b47b03823b4d14
SHA147947da463dd6f4ecf61ae960235a35144e903a8
SHA256f8e3eef1fda5969a7aabcc8fb5cc9f5fe245bbf6cc8e480459977b8e91eab9bd
SHA5125f855ed0a3ecf561c45608d7f4579d6e4b1f1953863e97e0b5fea1f33b38d0e03fef16207d88864d2d936a4e65b677cd259ec248dbf06447b50f9e0488acead3
-
Filesize
304KB
-
Filesize
248KB
-
Filesize
304KB