Analysis
-
max time kernel
20s -
max time network
16s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
27-11-2024 14:54
General
-
Target
196b4d327d8cc1fab8d801c19872c0b084d7485aeb1a103396652ff40fae45e1.dll
-
Size
233KB
-
MD5
e7afaf7e063d5c07dbbc2bc8cd7832f6
-
SHA1
91c785431d3489743e59df2889b9c495443bc277
-
SHA256
196b4d327d8cc1fab8d801c19872c0b084d7485aeb1a103396652ff40fae45e1
-
SHA512
e38684cbcbe6ae88c0cd98874231cbb34d67cdacb3c03d3f61cea61a1396b259be8a799c500bbfec2677788750c56fe36e6e4acf281107e5659eef814ebd2ce6
-
SSDEEP
3072:2Bs/p0Fq9NCotWnnPWDrfBcskSKGD4HUNjeFlGOBuhvgxgsZLqPXPCbUW5JbLVYO:WsxjCotWkESsWIusRuKbN513Qau81U
Score
10/10
Malware Config
Signatures
-
Brute Ratel C4
A customized command and control framework for red teaming and adversary simulation.
-
Bruteratel family
-
Detect BruteRatel badger 1 IoCs
-
Blocklisted process makes network request 2 IoCs
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\196b4d327d8cc1fab8d801c19872c0b084d7485aeb1a103396652ff40fae45e1.dll,#11⤵
- Blocklisted process makes network request
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
220KB
-
Filesize
280KB
-
Filesize
268KB