General

  • Target

    4037cfec21b00f6439e37a3c45f36e66

  • Size

    355KB

  • Sample

    240104-hzbteaahcr

  • MD5

    4037cfec21b00f6439e37a3c45f36e66

  • SHA1

    47d064bf3480ae850e23c51e728a90ba5c5d2734

  • SHA256

    4278064ec50f87bb0471053c068b13955ed9d599434e687a64bf2060438a7511

  • SHA512

    261ea33d505045515e27679e487d5796c19286b3d6aca30ee3c6f9d5e3e1b67ac2b60540acb57e38ca08ed7043e3a60e665380895311905183cfa0e18abac449

  • SSDEEP

    6144:DL1ncfWwN0oc35jeRh8Xqfy/Ka1OHAH0tMrKCTEABG+Z9d3cQT/9nR4Ioy19s:DLdcfxaeM6fy/KaVUtgKkTZ73coNRJ

Score
10/10

Malware Config

Extracted

Family

babylonrat

C2

88.99.99.222

Targets

    • Target

      4037cfec21b00f6439e37a3c45f36e66

    • Size

      355KB

    • MD5

      4037cfec21b00f6439e37a3c45f36e66

    • SHA1

      47d064bf3480ae850e23c51e728a90ba5c5d2734

    • SHA256

      4278064ec50f87bb0471053c068b13955ed9d599434e687a64bf2060438a7511

    • SHA512

      261ea33d505045515e27679e487d5796c19286b3d6aca30ee3c6f9d5e3e1b67ac2b60540acb57e38ca08ed7043e3a60e665380895311905183cfa0e18abac449

    • SSDEEP

      6144:DL1ncfWwN0oc35jeRh8Xqfy/Ka1OHAH0tMrKCTEABG+Z9d3cQT/9nR4Ioy19s:DLdcfxaeM6fy/KaVUtgKkTZ73coNRJ

    Score
    10/10
    • Babylon RAT

      Babylon RAT is remote access trojan written in C++.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix

Tasks