Brute forcing the key simply means iterating over all the possible keys, assuming you know the mode of operation (in this case CTR) and the IV. Then if a likely plaintext is found then you've found your key.
It's always possible you find the wrong key, but the chances of you doing so diminishes with the amount of bits known of the plaintext. Usually you know enough about the plaintext to do so.
For instance, you can use the fact that the highest order bit of ASCII is always zero, most files have specific headers, you can do frequency analysis, etc. etc. If you perform an attack you might as well assume you know, say, 4 blocks of plaintext. In that case you can be next to certain that you found the right key to decrypt the rest.
Note that brute force attacks are very easy to parallelize; just split the key space and perform the decrypt / validation phase in separate threads.