Overview

overview

10

Static

static

10

0x00060000...80.exe

windows7-x64

10

0x00060000...80.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0x0006000000015d20-80.dat

  • Size

    733KB

  • Sample

    240806-xq4v6axejm

  • MD5

    e071c8ee33d217c10b415c30365e608b

  • SHA1

    91e6cecaa37634d500db49536876cbc9ecb09683

  • SHA256

    835c2a9f31f166d13dd4db17b76a4731194214566e7a39df674afa292feef6b8

  • SHA512

    17b5f6229a74fb85af3aec28768f1be072ae99e5f2596fca7737e91e525bdf67865caa906f3c4c6eadfaa4df9a1aee7a1adc3effa72fa1cc68bbc8e41daba960

  • SSDEEP

    12288:8qzcpVgUXzL0TTUKZHTNloEkOpnKgofuIwV6eAj0wZxxXMcEe/3paPcgSX6:8qzcpKIL0TvZzNlNky0wVW0wZxxVgSX6

Score
10/10
babylonratdiscoverypersistencetrojan

Malware Config

Targets

    • Target

      0x0006000000015d20-80.dat

    • Size

      733KB

    • MD5

      e071c8ee33d217c10b415c30365e608b

    • SHA1

      91e6cecaa37634d500db49536876cbc9ecb09683

    • SHA256

      835c2a9f31f166d13dd4db17b76a4731194214566e7a39df674afa292feef6b8

    • SHA512

      17b5f6229a74fb85af3aec28768f1be072ae99e5f2596fca7737e91e525bdf67865caa906f3c4c6eadfaa4df9a1aee7a1adc3effa72fa1cc68bbc8e41daba960

    • SSDEEP

      12288:8qzcpVgUXzL0TTUKZHTNloEkOpnKgofuIwV6eAj0wZxxXMcEe/3paPcgSX6:8qzcpKIL0TvZzNlNky0wVW0wZxxVgSX6

    Score
    10/10
    babylonratdiscoverypersistencetrojan

    • Babylon RAT

      Babylon RAT is remote access trojan written in C++.

      trojanbabylonrat

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks