A Deep Dive into Brute Ratel C4 payloads – Part 2

Summary

Brute Ratel C4 is a Red Team & Adversary Simulation software that can be considered an alternative to Cobalt Strike. In this blog post, we’re presenting a technical analysis of a Brute Ratel badger/agent that doesn’t implement all the recent features of the framework. There aren’t a lot of Brute Ratel samples available in the wild. This second part of the analysis presents the remaining commands executed by the agent. The commands include: user impersonation, inject shellcode into processes, …

adversary adversary simulation agent amp analysis badger blog blog post brute brute ratel brute ratel c4 cobalt cobalt strike deep dive dive features framework malware analysis ratel red team simulation software strike team technical technical analysis