bruteratel | ba847f3edf4f9c540641c30f45e40baee8287d30d5aef59543d24f0375140f27 | Triage

Analysis

max time kernel
16s
max time network
17s
platform
windows7_x64
resource
win7-20240729-en
resource tags

arch:x64arch:x86image:win7-20240729-enlocale:en-usos:windows7-x64system
submitted
13/03/2025, 12:45

Sharing

Report Analysis Logs

General

Target

badger_x64_stealth_rtl.bin.dll
Size

282KB
MD5

decf7b259d75e0e499f44c5a915b3175
SHA1

af87c4222d4538fd4d43eaa0cb30974af08ea21e
SHA256

ba847f3edf4f9c540641c30f45e40baee8287d30d5aef59543d24f0375140f27
SHA512

7602933fc82ca0c974ab2803ee833af6db325cbea6dc5d4cf7b2a5c83205342d57d2e852b9e1225026cad1bc56f4574fe8bc0419fb31e1b68f00712cc4921b5b
SSDEEP

6144:Gq2UhPqeabCJNzgNm/qVoe93Zi861RyyZMAyqK2kY:bBhJNzOOQJi86Sy

Score

10^/10

bruteratel backdoor

Malware Config

Signatures

Brute Ratel C4
A customized command and control framework for red teaming and adversary simulation.
backdoor bruteratel
Bruteratel family
bruteratel

Detect BruteRatel badger 1 IoCs

resource	yara_rule
behavioral1/memory/2328-2-0x0000000001F90000-0x0000000001FCE000-memory.dmp	family_bruteratel

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\badger_x64_stealth_rtl.bin.dll,#1
1⤵
PID:2328

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2328-1-0x0000000001F90000-0x0000000001FCE000-memory.dmp

Filesize
248KB

Download
memory/2328-2-0x0000000001F90000-0x0000000001FCE000-memory.dmp

Filesize
248KB

Download