Analysis
- max time kernel
127s - max time network
140s - platform
windows10-2004_x64 - resource
win10v2004-20241007-en - resource tags
- submitted
20/11/2024, 02:07
General
- Target 14ffcbbfb305287ea15264df3363567f36a26917ae2018af0f40e2009b8a7184.dll
- Size 1.3MB
- Sample241120-cj8wbasqgl
- SHA256 14ffcbbfb305287ea15264df3363567f36a26917ae2018af0f40e2009b8a7184
Score
10/10
Malware Config
Signatures
- Brute Ratel C4
A customized command and control framework for red teaming and adversary simulation.
- Bruteratel family
- Detect BruteRatel badger 1 IoCs
- Blocklisted process makes network request 4 IoCs
- Suspicious behavior: EnumeratesProcesses 4 IoCs
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\14ffcbbfb305287ea15264df3363567f36a26917ae2018af0f40e2009b8a7184.dll,#11⤵
- Blocklisted process makes network request
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/4468-0-0x000002F0858F0000-0x000002F08592E000-memory.dmp
memory/4468-1-0x000002F085950000-0x000002F08599C000-memory.dmp
memory/4468-16-0x000002F085950000-0x000002F08599C000-memory.dmp