General

  • Target

    babylon.exe

  • Size

    370KB

  • MD5

    8ad907b86f83e876957c78e5d3a30de1

  • SHA1

    5a436c1076d3a03711d5729f324364c2e15b3ad1

  • SHA256

    f217ef2073103275063ea594fcb775a023bb3c057593c3ebb315b798f635ae1e

  • SHA512

    ccbc1e8cff4f6e867456cc4d80556b839fc890b80319132e69b0f986b1dd8f1e2c167567b48322da27a8577a2077d8e58b78358b7ea9f0c0d5b6cf1d651367c1

  • SSDEEP

    6144:CL1ncfWwN0oc35jeRh8Xqfy/Ka1OHAH0tMrKCTEABG+Z9d3cQT/9nR4Ioy19F:CLdcfxaeM6fy/KaVUtgKkTZ73coNRJF

Score
10/10

Malware Config

Signatures

  • Babylonrat family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • babylon.exe
    .exe windows:5 windows x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86


    Headers

    Sections