Brute Ratel C4 Detected – 152[.]67[.]78[.]82:443

The Information provided at the time of posting was detected as “Brute Ratel C4”. Depending on when you are viewing this article, it may no longer be the case and could be determined as being a false positive. Please do your own additional validation. – RedPacket Security

TimeStamp 2022-07-15T00:45:49.856768

Cloud Information

Provider	Oracle Cloud Infrastructure
Region	eu-zurich-1
Service	N/A
ASN	AS31898

Domain Information

Domains

eu.org

HTTP Information

Redirects
Headers Hash	144518609
Host	152[.]67[.]78[.]82
HTML	404 file not found
HTML Hash	-1957161625
Location	/
Robots	N/A
Robots Hash	N/A
Security TXT	N/A
Security TXT Hash	N/A
Server	N/A
Sitemap	N/A
Sitemap hash	N/A
Status	200
Title	N/A

Location Information

Area Code	N/A
City	Oberengstringen
Country Code	CH
Country Name	Switzerland
Latitude	47.40841
Longitude	8.46515
Region Code	ZH

SSL Information

Cert Fingerprint SHA1	c9200daf227512009f4eaaef795616db2bc4346b
Cert Fingerprint SHA256	f8b8b563a94e9268571171b2f198ba27df5c33d2952c750b177165c037fc6005
Issuer	TrustAsia Technologies, Inc.
Subject CN	*.windowsupdate.eu.org
Expired	N/A
Cipher	TLS_AES_128_GCM_SHA256
Version

Tag Information

Tags	cloud
Tags
Tags	N/A
Tags	N/A

Host Information

OS	N/A
Transport	tcp
Data	HTTP/1.1 200 OK Date: Fri, 15 Jul 2022 00:45:49 GMT Content-Length: 18 Content-Type: text/plain; charset=utf-8
Port	443
IP	152[.]67[.]78[.]82

---

A considerable amount of time and effort goes into maintaining this website, creating backend automation and creating new features and content for you to make actionable intelligence decisions. Everyone that supports the site helps enable new functionality.

If you like the site, please support us on Patreon using the button below

---

To keep up to date follow us on the below channels.