General

  • Target

    162203827cddadcc6f1605f98cfdde7a6cd0ae2eab610428b1a55b3000dd79ba.exe.zip

  • Size

    351KB

  • Sample

    231031-q8dncsgg8w

  • MD5

    22377eb3baf1f5b71a7def7f73cd3db2

  • SHA1

    b109c52d5b2c789f7264571d5f985b7158d46954

  • SHA256

    f720228cd2ab29366bb4a3606319887776b62eeefd190946ed5b272e51cf4a7f

  • SHA512

    b7b12d2694154f8aba7d656f478ee96446abca14d08b68f143a95d1c388445c2330bf9ed74c66e7afc04b93d12263ff8cd76e3c3ce29a2060ef25e620a3e5c52

  • SSDEEP

    6144:B8A8sEYxWmKZincemPpo5P3GcGJFT+ndCDufhfbL+GXJj9nvrz3t:j8s5YLZ++Ppo5aeoDopbv5nV

Score
10/10

Malware Config

Extracted

Family

babylonrat

C2

172.18.67.100

Targets

    • Target

      162203827cddadcc6f1605f98cfdde7a6cd0ae2eab610428b1a55b3000dd79ba.exe

    • Size

      355KB

    • MD5

      6c968234b8d4a9fae56e630ea0db1044

    • SHA1

      b0e8f0fbe4978c567e5534cb55ca090f750ee636

    • SHA256

      162203827cddadcc6f1605f98cfdde7a6cd0ae2eab610428b1a55b3000dd79ba

    • SHA512

      35f9139a1fad6eaddbc8b67bbee4a76c90f012dfc5367327d9033596482eb3697ec0d659167ffef918be80ba1f0761ef7a5843f3d2c3c1c5b5b722dfa87ec83d

    • SSDEEP

      6144:ZL1ncfWwN0oc35jeRh8Xqfy/Ka1OHAH0tMrKCTEABG+Z9d3cQT/9nR4Ioy19O:ZLdcfxaeM6fy/KaVUtgKkTZ73coNRJO

    Score
    10/10
    • Babylon RAT

      Babylon RAT is remote access trojan written in C++.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix

Tasks