Overview

overview

10

Static

static

10

Diln External V3.exe

windows7-x64

10

Diln External V3.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Diln External V3.exe

  • Size

    426KB

  • MD5

    c600a79fd780a84a5fed6af7c03767b7

  • SHA1

    dcf2a842ebdd284136ad29915e5bc2541cef306d

  • SHA256

    bf4391a80d1b0062f1f8bab43759981d971a5e8319aefb65273f3d276130c1fb

  • SHA512

    188ec0ace793cf024cc3cad564e6832e3564c119dbbb3313f038d45e5df7dde2aed6bf3a83ba9cfb9591b99e4dc46f0d302731d8a2ef5508049983b37e5e57b2

  • SSDEEP

    12288:HLdcfxaeM6fy/KaVUtgKkTZ73coNRJmj:rkIZGSAtgN+eJmj

Score
10/10
upxbabylonrat

Malware Config

Extracted

Family

babylonrat

C2

178.237.233.106

Signatures

  • Babylonrat family
    babylonrat
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • Diln External V3.exe
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections