Analysis
-
max time kernel
121s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system -
submitted
14/03/2025, 15:17
Static task
static1
Behavioral task
behavioral1
Sample
a8a494eafd9b63902a549c9d239d1011fe9f636a6822c331d7d6543b35d2f60c.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
a8a494eafd9b63902a549c9d239d1011fe9f636a6822c331d7d6543b35d2f60c.dll
Resource
win10v2004-20250314-en
General
-
Target
a8a494eafd9b63902a549c9d239d1011fe9f636a6822c331d7d6543b35d2f60c.dll
-
Size
3.0MB
-
MD5
2eb3eb998752690ddfaf4368b190c7e7
-
SHA1
aad94876cbbd01e8c651adce89c4097663e3edc3
-
SHA256
a8a494eafd9b63902a549c9d239d1011fe9f636a6822c331d7d6543b35d2f60c
-
SHA512
4b58fa44d288d791cda7027bf4011dcce7214e1742c64ada40d9721df19fc69499f3ba9d2ff93be8f32d26540ee23975a35d1439cd5b848609f5bde422515f01
-
SSDEEP
49152:Bav/OuC5jIUM0kV8wghgqehsTeDjNm45cPQACW4LBLPrPWbalUEci/hUyA4OKcMT:BadjDrPLBLzWbk75G4pn
Malware Config
Signatures
-
Brute Ratel C4
A customized command and control framework for red teaming and adversary simulation.
-
Bruteratel family
-
Detect BruteRatel badger 5 IoCs
resource yara_rule behavioral1/memory/1992-0-0x00000003A6450000-0x00000003A649A000-memory.dmp family_bruteratel behavioral1/memory/1992-4-0x0000000000320000-0x000000000035E000-memory.dmp family_bruteratel behavioral1/memory/1992-1-0x00000003A6450000-0x00000003A649A000-memory.dmp family_bruteratel behavioral1/memory/1992-6-0x0000000001EC0000-0x0000000001F0A000-memory.dmp family_bruteratel behavioral1/memory/1992-26-0x00000003A6450000-0x00000003A649A000-memory.dmp family_bruteratel