Overview

overview

10

Static

static

5

NEAS.8e9b3...e0.exe

windows7-x64

10

NEAS.8e9b3...e0.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.8e9b337630a0b0c075d1efec3b609ee0.exe

  • Size

    1.5MB

  • Sample

    231028-yph3qsaf99

  • MD5

    8e9b337630a0b0c075d1efec3b609ee0

  • SHA1

    13003d55ca413198f0bea71311248a21dc3e04a1

  • SHA256

    3611f30f4ffe3589bee23f3f09bd535d09c186e6bfd5b87af0f4101314601acb

  • SHA512

    091b5f6f55e11a72e6be503db5b39402ed1c6a47a3f465527cf50b7cdf662295ec06eadcafdf5d259743f3fb302434cfef5e01364c98b076e84ed049c058ab93

  • SSDEEP

    24576:dbCj2sObHtqQ4QqH0XlE654b4fX3fo8wBgNcP:dbCjPKNqQqH0XSucJ

Score
10/10
babylonrattrojanupx

Malware Config

Targets

    • Target

      NEAS.8e9b337630a0b0c075d1efec3b609ee0.exe

    • Size

      1.5MB

    • MD5

      8e9b337630a0b0c075d1efec3b609ee0

    • SHA1

      13003d55ca413198f0bea71311248a21dc3e04a1

    • SHA256

      3611f30f4ffe3589bee23f3f09bd535d09c186e6bfd5b87af0f4101314601acb

    • SHA512

      091b5f6f55e11a72e6be503db5b39402ed1c6a47a3f465527cf50b7cdf662295ec06eadcafdf5d259743f3fb302434cfef5e01364c98b076e84ed049c058ab93

    • SSDEEP

      24576:dbCj2sObHtqQ4QqH0XlE654b4fX3fo8wBgNcP:dbCjPKNqQqH0XSucJ

    Score
    10/10
    babylonrattrojanupx

    • Babylon RAT

      Babylon RAT is remote access trojan written in C++.

      trojanbabylonrat

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • AutoIT Executable

      AutoIT scripts compiled to PE executables.

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks