Analysis
-
max time kernel
120s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240708-en -
resource tags
-
submitted
18-08-2024 21:28
General
-
Target
Babylon-RAT.exe
-
Size
4.6MB
-
MD5
e2a98acbc9fad38b4e919fbd79c12b38
-
SHA1
68564ddbe217f713cdf7a5c186c7d7cf6200680e
-
SHA256
d3c2fc4b4c95b10edf25c7321e59ee0aa747432dc2cf7fd719d0046aa62103fe
-
SHA512
058b1acf064feed82bdcdb74f2049ec761a75ca8f0732866cab446b4fa96ac580c972642cd117747dea4c968b6eb6c16182a07e95092ff8d687003c8e63993ab
-
SSDEEP
49152:H5jczOiYgLIAL5aLUqmsRQJ5oc36KVOrY8i3CE36Ocs0GUEI/dx:Ri7IA5Qfmboc366oi3Z3uhh/H
Score
10/10
Malware Config
Signatures
-
Babylon RAT
Babylon RAT is remote access trojan written in C++.
-
Suspicious use of FindShellTrayWindow 1 IoCs
-
Suspicious use of SendNotifyMessage 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\Babylon-RAT.exe"C:\Users\Admin\AppData\Local\Temp\Babylon-RAT.exe"1⤵
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
392KB
-
Filesize
7.8MB
-
Filesize
9.9MB
-
Filesize
9.9MB