General

  • Target

    18719219954.zip

  • Size

    300.9MB

  • Sample

    240828-g2txbszclk

  • MD5

    33ade39983d9f85741bfeaac62354e7d

  • SHA1

    9e2d8c961b4e89c118c3cd85b528b1336eb36ee7

  • SHA256

    140101499e08b28f0a33c26da45086e72a35a23576dfbbb5d63f445755893903

  • SHA512

    7df7c9bb96e5144fc65d393ec70449320ed6f2bfed9995f6e80ac563589b17acfc2c834a09eb200fa2fab60712f43f358a67915428abbbea3de3e4a1857c2dfc

  • SSDEEP

    6291456:itn2EdiBm0aZ0TiLsUz16O29eifFBsqIvelmAXCsFxI7S8d:otdiYSeD49Dw3YXLFKDd

Malware Config

Extracted

Family

babylonrat

C2

149.28.19.207

fund.sekretariatparti.org

Targets

    • Target

      f21ae37cb39658a62c9aaa945eb4dc2b33aebe4afeb5374d36328589a53e0982

    • Size

      300.8MB

    • MD5

      a17a1666f47953d6e505182909c74170

    • SHA1

      b1054b4702ff9b112dfdf8ce40f0fdf399ba8a95

    • SHA256

      f21ae37cb39658a62c9aaa945eb4dc2b33aebe4afeb5374d36328589a53e0982

    • SHA512

      406734af8e7feb8a0736740295a25734cf12e89fb0e8785d33199debe2ce49a6d33bf8f4a7d6bc73b9ae1f91d288a77af41e204c8e61be59c64d153b0e7642db

    • SSDEEP

      6291456:etfHLnhapc6UQ5cBe4raaM7N+2i35r6pLOfEL44iC:Qfdapc6FEWk5rei8L43C

    • Babylon RAT

      Babylon RAT is remote access trojan written in C++.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks