Extracted

• • Target

    Babylon/Babylon RAT.exe

  • Size

    6.7MB

  • MD5

    aecdce1d7e2a637d1dcacd2b4580487b

  • SHA1

    d5cd12f7a18d6777c9ec8458694aa3a74fd23701

  • SHA256

    9157a48c53ca7a4543bac5b771886c87ea407bab6bbb053b50bc22709111d572

  • SHA512

    8bb5ad64f1b2e75e47c4671396a713018c74c44e84803887c6b4a200ea85f4c020ccfe15211af3899cdcf9d0f46ef994bfd939e462f61062044874f7a64d7a35

  • SSDEEP

    98304:KbldsCQTcsBL54TRRTk3w0ZIWoPzSSosDlh7OLifNLxu2UVaCS2e7Csb6j9cgl36:GnPsHqRwvoPzSSosDlhCKzi9/2BO4T

  Score

  10^/10

  babylonrattrojanupx

  • Babylon RAT

    Babylon RAT is remote access trojan written in C++.

    trojanbabylonrat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2

• • Target

    Babylon/ObjectListView.dll

  • Size

    405KB

  • MD5

    de9f71635fb8532bd5202086097c2083

  • SHA1

    6fafef29e6964209122555745a89ba3d1237f762

  • SHA256

    1fa030cdd98f653fcaa109af5c48f3d58f624aa671a980628397c6c6bc6433be

  • SHA512

    c82c7d79af86826fbf9f6519fd37c456017af9f77a6b05afa81a823f7a1be8a04bf2fc5ee32175a92803e9d0a34277b655571428cf655dd07abfd9d87f78568d

  • SSDEEP

    6144:thiBxWw1YQ0K4/INLROMAYnMj108hIrH4puTHgaNe7lVG7UGO0UOP95QvMrLi:thCx11LsI/DtnQ1YrH4puTHgOrL

  Score

  1^/10
  behavioral3behavioral4

• • Target

    Babylon/SHARED_BY_EX0DU$.url

  • Size

    122B

  • MD5

    45e196c9cd4b31ff54da34c2a85b048d

  • SHA1

    4452d6198e4686a48051ebfc4d3b43dbfd297cac

  • SHA256

    4397640c30eeb22f42de973a35fb025c30781074b4a0e5d4b4d78db3e2e3fb15

  • SHA512

    6e39b0eb0d769e3463fc5fdd06a8b4e7dde151cbc9ae63e04f47dde60ff5533012604ab0f381c995f4bfca709e81fbcd47579ba039e607a2aa11de3e5314266e

  Score

  6^/10

  evasiontrojan

  • Checks whether UAC is enabled

    evasiontrojan
  behavioral5behavioral6

• • Target

    Babylon/SharpDX.DXGI.dll

  • Size

    87KB

  • MD5

    ce9d63a67dc2d2e23b92136c43baa02b

  • SHA1

    1ea7dc92963778e44f3c045dac707958082179e5

  • SHA256

    46ee8cc2375cb009c8d85948cfbd0b82e378c756f1eeef95427c45e0ce5b015d

  • SHA512

    6e169f0d0839532c33495cbb0441801cc31ae3a7e6b5a3236dc8187c8566abeb744a784cf974319caf1820e972b3d00f1bf51e6fa5a608dcaa2c5ac0e7751ff7

  • SSDEEP

    1536:dgd4T6pv//Ak/taAgZ2Owg28ShSCivO5Ib6VU3x8yFa0H:dgdV3/AdHZRT+ig0H

  Score

  1^/10
  behavioral7behavioral8

• • Target

    Babylon/SharpDX.Direct2D1.dll

  • Size

    225KB

  • MD5

    ae45e105c17ccf8cd41df6235a7096a7

  • SHA1

    c5b53247b83ce4ee60e0c6ee724e4bd6beb0f996

  • SHA256

    c45dd7155f828b9491dc2befd092f7be8d6d43bc37616fd1c9bfd5d8875206be

  • SHA512

    174784ea15cf6cae8db08bce529fffaf005d94338cff540869214f68ac4e80fb1d4a441a18a57586f7db2a7197347df89df2629f1e3765aebfad47beedc9e7e6

  • SSDEEP

    3072:h1PS247ZU+Jbs+pVOuR2FJT1OXeIfkfRCgOpsCUYpCUYwOSUg/t2z1A2HxdA0E33:hkC+pKrT1qeIfkME7EhSe5

  Score

  1^/10
  behavioral10behavioral9

• • Target

    Babylon/SharpDX.Direct3D10.dll

  • Size

    174KB

  • MD5

    93ea6468faf23ad7017e5f1885cf85e9

  • SHA1

    c25f58172d25c7cdc622355e6db38722760bb9e5

  • SHA256

    c03a671bbf25a4cca0030aedd352be04e1b75ecc4d88f590057252735322974f

  • SHA512

    d1c05ae043f90665f9e741c4c1dead821c65004fed5ca0ffd5c557b2245ab5577ce48728a46f56cc66b401f6878e217e6fbdf7f1a0c77d4b333ff9b1256f9a64

  • SSDEEP

    3072:a8HZkOrSS+EpH/OPSXev8xskvFxvD6IXiVNsGaF/daKa7Zj:lkTMpfOP50xskvFxvD6IXiVNqdaK6

  Score

  1^/10
  behavioral11behavioral12

• • Target

    Babylon/SharpDX.dll

  • Size

    538KB

  • MD5

    1ede43c66b29696c7c6664b9faf7e5aa

  • SHA1

    55c1e0a5d0995e7dce2bb07a1ccdfca67c8b9fea

  • SHA256

    f1f7da12c754215d8ad2a4b987f772722fa575bb34b33856adf5b39b28e3d5ee

  • SHA512

    0d4da4bd00f54a2a7dc1f2d985f2d65755fd6df0a40f74a312b7c8f9ccf64156b97ce4a36646a4fc373e0fadd42355dedd5ad9177cfc20a636e23cb452e315aa

  • SSDEEP

    6144:+Ibd7KIBofkCPfAVdX4e0RrSgTFW4rg6KSyhlEaoksQiyqFKW0mhuPPZ:dblEPfAVd1OG4csOeabE0mQ

  Score

  1^/10
  behavioral13behavioral14

• • Target

    Babylon/Theme.dll

  • Size

    87KB

  • MD5

    2b61363f4f52a821908efb18d7a9bcb4

  • SHA1

    7ea57f6afb82a003289ee2461121c347e8362ecc

  • SHA256

    5138867aa5100c833faddba8ff8f0e5c61a535b8c34ef367cb3f095f56cd6521

  • SHA512

    7ee8c751afab022e0e0de480838274ee2f4bfd637e45dbd9998ff6e9aca582a9ac14e86ebc96a913e321bd674a77234e90b747d43755deafaadc6bcb894cacfc

  • SSDEEP

    1536:s8O+YIDwzYKtrhOFCzj6MqAqHCGLAMhng70L6eTsDmL:zG6MqpHPLPh1DzL

  Score

  1^/10
  behavioral15behavioral16