A Deep Dive into Brute Ratel C4 payloads

Summary

Brute Ratel C4 is a Red Team & Adversary Simulation software that can be considered an alternative to Cobalt Strike. In this blog post, we’re presenting a technical analysis of a Brute Ratel badger/agent that doesn’t implement all the recent features of the framework. There aren’t a lot of Brute Ratel samples available in the wild. The malware implements the API hashing technique and comes up with a configuration that contains the C2 server, the user-agent used during the …

adversary adversary simulation agent amp analysis badger blog blog post brute brute ratel brute ratel c4 cobalt cobalt strike deep dive dive features framework malware analysis ratel red team simulation software strike team technical technical analysis