Overview

overview

10

Static

static

10

Babylon/Ba...AT.exe

windows10-2004-x64

10

Babylon/Ob...ew.dll

windows10-2004-x64

1

Babylon/SH...U$.url

windows10-2004-x64

3

Babylon/Sh...GI.dll

windows10-2004-x64

1

Babylon/Sh...D1.dll

windows10-2004-x64

1

Babylon/Sh...10.dll

windows10-2004-x64

1

Babylon/SharpDX.dll

windows10-2004-x64

1

Babylon/Theme.dll

windows10-2004-x64

1

Resubmissions

06-05-2024 03:14

240506-drhjrsfc3x 10

06-05-2024 03:08

240506-dm8kdsaa57 10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Babylon.rar

  • Size

    4.3MB

  • Sample

    240506-dm8kdsaa57

  • MD5

    315da7f02041bb40285ebfab39ad6c3e

  • SHA1

    a170933f7218340197abb695a4f5ef54bf0bd027

  • SHA256

    9b35515881e9df17f63e542ec471ab11e41dbef91eec80ed2d751b449fc80db3

  • SHA512

    fc8780cc1214d1b7df30f1af741f058e1dd56f2bc6b1cbe476bba769be848b81870dfb254d5df02c89fd70b677daa89684626ecb10ebf7801d7b681739d5c9dd

  • SSDEEP

    98304:5PouEQ7dZ1qoJuKHjUUwHfKpxeE5kI9elPTr6htWXoj:5PiUZYoJDDsHCpxeEqnlP3KtWX2

Score
10/10
babylonrattrojanupx

Malware Config

Targets

    • Target

      Babylon/Babylon RAT.exe

    • Size

      6.7MB

    • MD5

      aecdce1d7e2a637d1dcacd2b4580487b

    • SHA1

      d5cd12f7a18d6777c9ec8458694aa3a74fd23701

    • SHA256

      9157a48c53ca7a4543bac5b771886c87ea407bab6bbb053b50bc22709111d572

    • SHA512

      8bb5ad64f1b2e75e47c4671396a713018c74c44e84803887c6b4a200ea85f4c020ccfe15211af3899cdcf9d0f46ef994bfd939e462f61062044874f7a64d7a35

    • SSDEEP

      98304:KbldsCQTcsBL54TRRTk3w0ZIWoPzSSosDlh7OLifNLxu2UVaCS2e7Csb6j9cgl36:GnPsHqRwvoPzSSosDlhCKzi9/2BO4T

    Score
    10/10
    babylonrattrojanupx

    • Babylon RAT

      Babylon RAT is remote access trojan written in C++.

      trojanbabylonrat

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1

    • Target

      Babylon/ObjectListView.dll

    • Size

      405KB

    • MD5

      de9f71635fb8532bd5202086097c2083

    • SHA1

      6fafef29e6964209122555745a89ba3d1237f762

    • SHA256

      1fa030cdd98f653fcaa109af5c48f3d58f624aa671a980628397c6c6bc6433be

    • SHA512

      c82c7d79af86826fbf9f6519fd37c456017af9f77a6b05afa81a823f7a1be8a04bf2fc5ee32175a92803e9d0a34277b655571428cf655dd07abfd9d87f78568d

    • SSDEEP

      6144:thiBxWw1YQ0K4/INLROMAYnMj108hIrH4puTHgaNe7lVG7UGO0UOP95QvMrLi:thCx11LsI/DtnQ1YrH4puTHgOrL

    Score
    1/10
    behavioral2

    • Target

      Babylon/SHARED_BY_EX0DU$.url

    • Size

      122B

    • MD5

      45e196c9cd4b31ff54da34c2a85b048d

    • SHA1

      4452d6198e4686a48051ebfc4d3b43dbfd297cac

    • SHA256

      4397640c30eeb22f42de973a35fb025c30781074b4a0e5d4b4d78db3e2e3fb15

    • SHA512

      6e39b0eb0d769e3463fc5fdd06a8b4e7dde151cbc9ae63e04f47dde60ff5533012604ab0f381c995f4bfca709e81fbcd47579ba039e607a2aa11de3e5314266e

    Score
    3/10
    behavioral3

    • Target

      Babylon/SharpDX.DXGI.dll

    • Size

      87KB

    • MD5

      ce9d63a67dc2d2e23b92136c43baa02b

    • SHA1

      1ea7dc92963778e44f3c045dac707958082179e5

    • SHA256

      46ee8cc2375cb009c8d85948cfbd0b82e378c756f1eeef95427c45e0ce5b015d

    • SHA512

      6e169f0d0839532c33495cbb0441801cc31ae3a7e6b5a3236dc8187c8566abeb744a784cf974319caf1820e972b3d00f1bf51e6fa5a608dcaa2c5ac0e7751ff7

    • SSDEEP

      1536:dgd4T6pv//Ak/taAgZ2Owg28ShSCivO5Ib6VU3x8yFa0H:dgdV3/AdHZRT+ig0H

    Score
    1/10
    behavioral4

    • Target

      Babylon/SharpDX.Direct2D1.dll

    • Size

      225KB

    • MD5

      ae45e105c17ccf8cd41df6235a7096a7

    • SHA1

      c5b53247b83ce4ee60e0c6ee724e4bd6beb0f996

    • SHA256

      c45dd7155f828b9491dc2befd092f7be8d6d43bc37616fd1c9bfd5d8875206be

    • SHA512

      174784ea15cf6cae8db08bce529fffaf005d94338cff540869214f68ac4e80fb1d4a441a18a57586f7db2a7197347df89df2629f1e3765aebfad47beedc9e7e6

    • SSDEEP

      3072:h1PS247ZU+Jbs+pVOuR2FJT1OXeIfkfRCgOpsCUYpCUYwOSUg/t2z1A2HxdA0E33:hkC+pKrT1qeIfkME7EhSe5

    Score
    1/10
    behavioral5

    • Target

      Babylon/SharpDX.Direct3D10.dll

    • Size

      174KB

    • MD5

      93ea6468faf23ad7017e5f1885cf85e9

    • SHA1

      c25f58172d25c7cdc622355e6db38722760bb9e5

    • SHA256

      c03a671bbf25a4cca0030aedd352be04e1b75ecc4d88f590057252735322974f

    • SHA512

      d1c05ae043f90665f9e741c4c1dead821c65004fed5ca0ffd5c557b2245ab5577ce48728a46f56cc66b401f6878e217e6fbdf7f1a0c77d4b333ff9b1256f9a64

    • SSDEEP

      3072:a8HZkOrSS+EpH/OPSXev8xskvFxvD6IXiVNsGaF/daKa7Zj:lkTMpfOP50xskvFxvD6IXiVNqdaK6

    Score
    1/10
    behavioral6

    • Target

      Babylon/SharpDX.dll

    • Size

      538KB

    • MD5

      1ede43c66b29696c7c6664b9faf7e5aa

    • SHA1

      55c1e0a5d0995e7dce2bb07a1ccdfca67c8b9fea

    • SHA256

      f1f7da12c754215d8ad2a4b987f772722fa575bb34b33856adf5b39b28e3d5ee

    • SHA512

      0d4da4bd00f54a2a7dc1f2d985f2d65755fd6df0a40f74a312b7c8f9ccf64156b97ce4a36646a4fc373e0fadd42355dedd5ad9177cfc20a636e23cb452e315aa

    • SSDEEP

      6144:+Ibd7KIBofkCPfAVdX4e0RrSgTFW4rg6KSyhlEaoksQiyqFKW0mhuPPZ:dblEPfAVd1OG4csOeabE0mQ

    Score
    1/10
    behavioral7

    • Target

      Babylon/Theme.dll

    • Size

      87KB

    • MD5

      2b61363f4f52a821908efb18d7a9bcb4

    • SHA1

      7ea57f6afb82a003289ee2461121c347e8362ecc

    • SHA256

      5138867aa5100c833faddba8ff8f0e5c61a535b8c34ef367cb3f095f56cd6521

    • SHA512

      7ee8c751afab022e0e0de480838274ee2f4bfd637e45dbd9998ff6e9aca582a9ac14e86ebc96a913e321bd674a77234e90b747d43755deafaadc6bcb894cacfc

    • SSDEEP

      1536:s8O+YIDwzYKtrhOFCzj6MqAqHCGLAMhng70L6eTsDmL:zG6MqpHPLPh1DzL

    Score
    1/10
    behavioral8

MITRE ATT&CK Enterprise v15

Tasks