Resubmissions

07/02/2024, 10:49

240207-mws1qsgaa410

07/02/2024, 10:31

240207-mkk6rafgg910

General

  • Target
    Babylon 1.5.1.0.zip
  • Size 127KB
  • Sample240207-mws1qsgaa4
  • SHA256 4f12d0dba738f2fa84c2facbac90066853b04c160f334ef218906cd3e1c1df2d
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10

Malware Config

Targets

    • Target
      Babylon 1.5.1.0.zip
    • Size 127KB
    • SHA256 4f12d0dba738f2fa84c2facbac90066853b04c160f334ef218906cd3e1c1df2d
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    • Babylon RAT

      Babylon RAT is remote access trojan written in C++.

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Legitimate hosting services abused for malware hosting/C2

MITRE ATT&CK Enterprise v15

Tasks