Brute Ratel C4 Detected - 85[.]10[.]144[.]61:443

The Information provided at the time of posting was detected as “Brute Ratel C4”. Depending on when you are viewing this article, it may no longer be the case and could be determined as being a false positive. Please do your own additional validation. – RedPacket Security

TimeStamp 2024-08-01T03:56:11.878368

Cloud Information

Provider
Region
Service
ASN	AS20857

Domain Information

Domains

transip.net

HTTP Information

Redirects
Headers Hash	775801073
Host	85[.]10[.]144[.]61
HTML	404 file not found
HTML Hash	-1957161625
Location	/
Robots	N/A
Robots Hash	N/A
Security TXT	N/A
Security TXT Hash	N/A
Server	Apache/2.4.58 (Ubuntu)
Sitemap	N/A
Sitemap hash	N/A
Status	404
Title	N/A

Location Information

Area Code	N/A
City	Amsterdam
Country Code	NL
Country Name	Netherlands
Latitude	52.37403
Longitude	4.88969
Region Code	NH

SSL Information

Cert Fingerprint SHA1	90df6fb24533dc4ef3a009b8cb77eae89fe392d2
Cert Fingerprint SHA256	c4d22f1495c957917bcc92c2bb0f7f3d443cb64109021163dd606952fdbba5c1
Issuer	Let’s Encrypt
Subject CN	cloud.roxxle.nl
Expired	N/A
Cipher	TLS_AES_256_GCM_SHA384
Version

Tag Information

Tags	c2
Tags
Tags	N/A
Tags	N/A

Host Information

OS	N/A
Transport	tcp
Data	HTTP/1.1 404 Not Found Date: Thu, 01 Aug 2024 03:56:11 GMT Server: Apache/2.4.58 (Ubuntu) Content-Length: 18 Content-Type: text/plain; charset=utf-8
Port	443
IP	85[.]10[.]144[.]61

A considerable amount of time and effort goes into maintaining this website, creating backend automation and creating new features and content for you to make actionable intelligence decisions. Everyone that supports the site helps enable new functionality.

If you like the site, please support us on “Patreon” or “Buy Me A Coffee” using the buttons below

Buy Me A Coffee

Patreon

To keep up to date follow us on the below channels.

Tags: Brute Ratel C4, OSINT, threatintel

Brute Ratel C4 Detected – 85[.]10[.]144[.]61:443

Cloud Information

Domain Information

HTTP Information

Location Information

SSL Information

Tag Information

Host Information

Cobalt Strike Beacon Detected – 103[.]56[.]113[.]11:7777

Cobalt Strike Beacon Detected – 8[.]218[.]174[.]208:443

Cobalt Strike Beacon Detected – 124[.]222[.]124[.]9:8011

Cobalt Strike Beacon Detected – 103[.]30[.]40[.]70:443

Cobalt Strike Beacon Detected – 134[.]175[.]158[.]225:443

Cloud Information

Domain Information

HTTP Information

Location Information

SSL Information

Tag Information

Host Information

You may have missed

Cobalt Strike Beacon Detected – 103[.]56[.]113[.]11:7777

Cobalt Strike Beacon Detected – 8[.]218[.]174[.]208:443

Cobalt Strike Beacon Detected – 124[.]222[.]124[.]9:8011

Cobalt Strike Beacon Detected – 103[.]30[.]40[.]70:443

Cobalt Strike Beacon Detected – 134[.]175[.]158[.]225:443