Analysis
- max time kernel
30s - max time network
32s - platform
windows10-2004_x64 - resource
win10v2004-20241007-en - resource tags
- submitted
27/11/2024, 14:55
General
- Target 196b4d327d8cc1fab8d801c19872c0b084d7485aeb1a103396652ff40fae45e1.dll
- Size 233KB
- Sample241127-sae5msxrey
- SHA256 196b4d327d8cc1fab8d801c19872c0b084d7485aeb1a103396652ff40fae45e1
Score
10/10
Malware Config
Signatures
- Brute Ratel C4
A customized command and control framework for red teaming and adversary simulation.
- Bruteratel family
- Detect BruteRatel badger 1 IoCs
- Blocklisted process makes network request 1 IoCs
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\196b4d327d8cc1fab8d801c19872c0b084d7485aeb1a103396652ff40fae45e1.dll,#11⤵
- Blocklisted process makes network request
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/5040-0-0x000002C039EA0000-0x000002C039ED7000-memory.dmp
memory/5040-2-0x000002C039F20000-0x000002C039F66000-memory.dmp
memory/5040-12-0x0000000066780000-0x00000000667C3000-memory.dmp