bruteratel | ba847f3edf4f9c540641c30f45e40baee8287d30d5aef59543d24f0375140f27 | Triage

Analysis

max time kernel
94s
max time network
138s
platform
windows10-2004_x64
resource
win10v2004-20250217-en
resource tags

arch:x64arch:x86image:win10v2004-20250217-enlocale:en-usos:windows10-2004-x64system
submitted
13/03/2025, 12:45

Sharing

Report Analysis Logs

General

Target

badger_x64_stealth_rtl.bin.dll
Size

282KB
MD5

decf7b259d75e0e499f44c5a915b3175
SHA1

af87c4222d4538fd4d43eaa0cb30974af08ea21e
SHA256

ba847f3edf4f9c540641c30f45e40baee8287d30d5aef59543d24f0375140f27
SHA512

7602933fc82ca0c974ab2803ee833af6db325cbea6dc5d4cf7b2a5c83205342d57d2e852b9e1225026cad1bc56f4574fe8bc0419fb31e1b68f00712cc4921b5b
SSDEEP

6144:Gq2UhPqeabCJNzgNm/qVoe93Zi861RyyZMAyqK2kY:bBhJNzOOQJi86Sy

Score

10^/10

bruteratel backdoor

Malware Config

Signatures

Brute Ratel C4
A customized command and control framework for red teaming and adversary simulation.
backdoor bruteratel
Bruteratel family
bruteratel

Detect BruteRatel badger 1 IoCs

resource	yara_rule
behavioral2/memory/2876-0-0x000001F1A6400000-0x000001F1A643E000-memory.dmp	family_bruteratel

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\badger_x64_stealth_rtl.bin.dll,#1
1⤵
PID:2876

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2876-0-0x000001F1A6400000-0x000001F1A643E000-memory.dmp

Filesize
248KB

Download
memory/2876-1-0x00007FFEE0E70000-0x00007FFEE1065000-memory.dmp

Filesize
2.0MB

Download
memory/2876-2-0x00007FFEE0E70000-0x00007FFEE1065000-memory.dmp

Filesize
2.0MB

Download