General

  • Target

    https://github.com/thehackersafi/rat

  • Sample

    240210-a1y2bsfd4s

Malware Config

Targets

    • Target

      https://github.com/thehackersafi/rat

    • Babylon RAT

      Babylon RAT is remote access trojan written in C++.

    • Babylonrat family

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Legitimate hosting services abused for malware hosting/C2

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks