General

  • Target

    aha.exe

  • Size

    777KB

  • MD5

    c4dd13e7b907a7c5042d408b992f337f

  • SHA1

    4c7777bd8a397d3f5b2935432f29099bbe88fa97

  • SHA256

    67d6209333e689623d8a2fa6b0f19cc84ae3d1eb3e78be446d9b5eee32c4ddcb

  • SHA512

    39761e0d89943298121e1fc7c330eaed13363fba2e304eaa2b882c681c54b11bafffc8e7c7f6a4d6167f80765003b040cd02c2169ca50ddf0fd5a8d79ef73e12

  • SSDEEP

    12288:mqzcpVgUXzL0TTUKZHTNloEkOpnKgofuIwV6eAj0wZxxXMcEe/3paPcgCX:mqzcpKIL0TvZzNlNky0wVW0wZxxVgCX

Score
10/10

Malware Config

Extracted

Family

babylonrat

C2

2.58.56.235

Signatures

  • Babylonrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • aha.exe
    .exe windows:5 windows x86 arch:x86

    2cbe6db2ec1d8a931b50336af1a7dc15


    Headers

    Imports

    Sections