General

  • Target
    Moka.exe
  • Size 357KB
  • Sample260620-qj76nsfs3p
  • SHA256 2f8b6ff170d5c231fc25d0ecc9b907448a5cdea6513bef52a10856fd1b814479
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      Moka.exe
    • Size 357KB
    • SHA256 2f8b6ff170d5c231fc25d0ecc9b907448a5cdea6513bef52a10856fd1b814479
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Babylon RAT payload

    • Family: Babylon RAT

      Babylon RAT is remote access trojan written in C++.

    • Executes dropped EXE

    • Adds Run key to start application

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Target
      out.upx
    • Size 734KB
    • SHA256 d779e527de4bbbfebd05174b320b909aecb4746f65035026a13e7ac52e01816c
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10

MITRE ATT&CK Enterprise v16

Tasks