General

  • Target

    BABYLONexe.exe

  • Size

    355KB

  • Sample

    230629-tpe9maeb45

  • MD5

    072428ed08c736d6f81aea71741389b8

  • SHA1

    6efa1a089267ce56b1962f2f93e5564256d38a1e

  • SHA256

    e8eefab37fec532a017d60a2851ed8aff3f4589028e9ca6794d100ea758bddb1

  • SHA512

    f53ba351383eaa4f375b89032f974215b808b0e50591a430e552e29d43a327da4ed028d5cd01e4a1d7b332b6fcfd21cc6609d54cd88a5ce4909df0c7cd393c15

  • SSDEEP

    6144:9L1ncfWwN0oc35jeRh8Xqfy/Ka1OHAH0tMrKCTEABG+Z9d3cQT/9nR4Ioy19N:9LdcfxaeM6fy/KaVUtgKkTZ73coNRJN

Score
10/10

Malware Config

Extracted

Family

babylonrat

C2

179.43.162.58

Targets

    • Target

      BABYLONexe.exe

    • Size

      355KB

    • MD5

      072428ed08c736d6f81aea71741389b8

    • SHA1

      6efa1a089267ce56b1962f2f93e5564256d38a1e

    • SHA256

      e8eefab37fec532a017d60a2851ed8aff3f4589028e9ca6794d100ea758bddb1

    • SHA512

      f53ba351383eaa4f375b89032f974215b808b0e50591a430e552e29d43a327da4ed028d5cd01e4a1d7b332b6fcfd21cc6609d54cd88a5ce4909df0c7cd393c15

    • SSDEEP

      6144:9L1ncfWwN0oc35jeRh8Xqfy/Ka1OHAH0tMrKCTEABG+Z9d3cQT/9nR4Ioy19N:9LdcfxaeM6fy/KaVUtgKkTZ73coNRJN

    Score
    10/10
    • Babylon RAT

      Babylon RAT is remote access trojan written in C++.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix

Tasks