General

  • Target

    4037cfec21b00f6439e37a3c45f36e66

  • Size

    355KB

  • MD5

    4037cfec21b00f6439e37a3c45f36e66

  • SHA1

    47d064bf3480ae850e23c51e728a90ba5c5d2734

  • SHA256

    4278064ec50f87bb0471053c068b13955ed9d599434e687a64bf2060438a7511

  • SHA512

    261ea33d505045515e27679e487d5796c19286b3d6aca30ee3c6f9d5e3e1b67ac2b60540acb57e38ca08ed7043e3a60e665380895311905183cfa0e18abac449

  • SSDEEP

    6144:DL1ncfWwN0oc35jeRh8Xqfy/Ka1OHAH0tMrKCTEABG+Z9d3cQT/9nR4Ioy19s:DLdcfxaeM6fy/KaVUtgKkTZ73coNRJ

Score
10/10

Malware Config

Signatures

  • Babylonrat family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 4037cfec21b00f6439e37a3c45f36e66
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections