bruteratel | 97669bb81731306e2753ebd9113121d61a71f7808b551b406e2fe49b1f1c0540

General

Target
Dahuasecurity PRO.zip
Size 13.6MB
Sample260721-c3jerses71
SHA256 97669bb81731306e2753ebd9113121d61a71f7808b551b406e2fe49b1f1c0540
MD5 1cd87f03c008279a1dc917fef38fb865
SHA1 08d819178b2f58f7399a3e89425256ff51fd125a
SHA512 536da4096150467c898ef6ae019cf412eceb28352ca9a6aec66adc71cc01af827f32deef19283c2a790d220a85661a1284ab2cffc77ae0b24725fcfd070d832e
SSDEEP 393216:LLxQfp4mFzFL19/tsYQd/5VkBXsYRGXqTwlRsLTh7LxiJ9zBDTD:xaRLHvW/5GBSNRs31Iz1TD
TLSH
T1BEE633D5911F7AF48CBC95C36C8B7F353A28209931BFAD66902B879BDD14B30962748C
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

bruteratel backdoor

Malware Config

Targets

- Target
  Dahuasecurity PRO\Dahuasecurity PRO.exe
- Size 12.7MB
- SHA256 58f85760cc060962f7eaec337c03828c61d9b4b786ee4cd497a1a3fc3e5671ec
- MD5 af21e97ec39351803ea5630632f7f212
- SHA1 c460ce3b651f7a490e209839cab8f1839e0a94f7
- SHA512 707215b07c202c5172015e1f187c8a7946cb0c79c61486b386610455b6115a58887d63e8addb5c5e35bb81d4fafec05465215b05567f3cd5895381ba9a528294
- SSDEEP 196608:qjglIgGBQry1EBo6m2SioktSmHP3RsaZSmf8rA+vO1P+bTrOEbPwVpf:QKyOo2ZHPBsd3A+vcPgXOgQf
- TLSH
  T152D612956AD4C77CC4858238F14516F8F0D57C898CFD991ABFC794227A70DA8C8B2BE2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

10^/10

backdoor bruteratel
- Family: Brute Ratel C4
  A customized command and control framework for red teaming and adversary simulation.
  backdoor bruteratel
behavioral1
- Target
  Dahuasecurity PRO\Qt6Core.dll
- Size 5.8MB
- SHA256 05982ff42ba7ae3074badaee1a09ff7f45e694de815bb06b514b28c28cfe0500
- MD5 928709b99a4c567e5b377cdb025d7c91
- SHA1 c9d3ed5d55d9b08ba7918fdef0babf1d062b4f64
- SHA512 3d3f70d3e08cb9a942273bbf78acd0ddd8c498c0e3f8b8752f212c2f1d9dd5ec57a5c4d7b11dc621bc8de2860e05247435c0d89a13a8b8d6da6e8d4b360f64c3
- SSDEEP 98304:gHAWMgeRErPcbO5KFdu9CwJsv6tdhj/3+:gEg2E1KFdu9CwJsv6td5/3+
- TLSH
  T1A2568D1762FA0095D8BBC1398B579603EBB3B81603219BDF01A4A6156F77BF5193F328
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral2
- Target
  Dahuasecurity PRO\Qt6Xml.dll
- Size 152KB
- SHA256 1520afd2abeebbd26766b6bdc5f88e9d3cb2b887bdf38559233b1bd4cdebd553
- MD5 8d14a198df12b48de463158e48764798
- SHA1 aeaeac489d50021afc9decb5dc01e69c76434728
- SHA512 6e5e28353cf430f8494130af8d58b843a49b383bce7085a2600c46b45d41436769f43cf3bb320a2b73165289efdbe4a80d5a23f297de65b9296a971d47a30137
- SSDEEP 3072:COs07eXbdg6smqkBcEVjmBFC8cc++jjb/bccYBKR:11ahzqHEor++jjVR
- TLSH
  T107E3298773694286D4AAC278CA1B451BEBB3B45053139BEF8255893A2F33FD26D3D350
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3

MITRE ATT&CK Matrix

Tasks

Sharing

General

Malware Config

Targets

Family: Brute Ratel C4

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

behavioral2

behavioral3