Overview

overview

10

Static

static

3

c3f8ebc9cf...c7.msi

windows10-2004-x64

10

c3f8ebc9cf...c7.msi

windows11-ltsc_2024-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    5a16d78666f7affc6bf7ee6e9c1d1e9cec173de491e844dcba9b6b1e083a16e9
  • Size 1.0MB
  • Sample260812-p9wpwsvxav
  • SHA256 5a16d78666f7affc6bf7ee6e9c1d1e9cec173de491e844dcba9b6b1e083a16e9
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
bruteratelbackdoordiscoverypersistenceprivilege_escalationransomware

Malware Config

Targets

    • Target
      c3f8ebc9cfb7ebe1ebbe3a4210753b271fecf73392fef98519b823a3e7c056c7.msi
    • Size 1.6MB
    • SHA256 c3f8ebc9cfb7ebe1ebbe3a4210753b271fecf73392fef98519b823a3e7c056c7
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    10/10
    backdoordiscoverybruteratelpersistenceprivilege_escalationransomware

    • Detect BruteRatel badger

    • Family: Brute Ratel C4

      A customized command and control framework for red teaming and adversary simulation.

      backdoorbruteratel

    • Executes dropped EXE

    • Loads dropped DLL

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v16

Tasks