Brute-Ratel-C4-Community-Kit

Brute-Ratel-C4 本仓库包含用于 Brute Ratel C4 https://bruteratel.com/ 的脚本、配置和已弃用的 payload 加载器。添加到 deprecated 文件夹中的任何内容都不会包含在 BRc4 的最新版本中。...

BruteRatel-DetectionTools

BruteRatel-DetectionTools 一个用于解码 Brute Ratel C4 badger 的工具和规则集合 所有工具和规则均基于 PaloAlto 在其报告 https://unit42.paloaltonetworks.com/brute-ratel-c4-tool/ 中识别的样本 Yara 规则 该 Yara 规则已针对 Unit42 报告中包含的样本以及由该规则识别出的其他样本进行了测试 ❯ yara rule.yar BruteRatel ./hacker.exe BruteRatel ./badgerx64.exe BruteRatel...

Patchwork Hackers Target Bhutan with Advanced Brute Ratel C4 Tool

The threat actor known as Patchwork has been linked to a cyber attack targeting entities with ties to Bhutan to deliver the Brute Ratel C4 framework and an updated version of a backdoor called PGoShell. The development marks the first time the adversary has been observed using the red teaming...

Black Basta Ransomware Hackers Infiltrate Networks via Qakbot to Deploy Brute Ratel C4

The threat actors behind the Black Basta ransomware family have been observed using the Qakbot trojan to deploy the Brute Ratel C4 framework as a second-stage payload in recent attacks. The development marks the first time the nascent adversary simulation software is being delivered via a Qakbot...