babylonrat | f4a2e0b3fc325ffb40d33e797e1f538cdb514a94e6f3bc7ffa6530e21d459c6f

General

Target
Babylon 1.5.1.0.zip
Size 5.1MB
Sample260706-ejr9nshv61
SHA256 f4a2e0b3fc325ffb40d33e797e1f538cdb514a94e6f3bc7ffa6530e21d459c6f
MD5 abdc1b00469ef7b2d84d8aa9d02f968d
SHA1 bab1b3ff99eba73a0a703fccee0d89854d2f5aa1
SHA512 e19254a85f30ebb2eccdc2a8a4a92ceb9282631a32f6afae66594627c79658b52ddabcaabdea1c4cdfac61d03d89ffaa152b803c8917d21edfb29f988ffadbbc
SSDEEP 98304:to0j7aKY/M+PFSOwsP+7gAtsqGktA7bx56ldRscz5L6m97wb0elMxv:to0qK7+PFSOwsPiSktA/Wt59MwelM5
TLSH
T14E4633D9B56205B809C2DB30241F396F857068CDB66DE1AC5B6909E6D6EFC6BD3F3002
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Malware Config

Targets

- Target
  Babylon 1.5.1.0/Babylon.exe
- Size 6.2MB
- SHA256 4569687f2dd096f8559b0b2a3710ffe1f6a7374f6439e2d8559a29f33289ef62
- MD5 dda4781148b7af5ba4892c05303f5d20
- SHA1 23114ba9e30b5b39897854283f98e9c25bac2344
- SHA512 cc33a7a3fd6f5e0d4394d2cb0189b088d2c64818994d7a6758539f9d152366ca4f2debcb4dc3a68c55615764c4c3771f04c1ccbfe81f03970d5630294271ae3c
- SSDEEP 98304:Buy9sXhsWoPzSSosDlJcS2e7Csb6j9cgl3bKBKLR4R9xk7OLifNLxu2UVa:Bd+oPzSSosDlXi9/2B24TWCK
- TLSH
  T1B8563902FA42A4DEC1363AF974B90FCE0D318D186D5986E127397B5850B5BA3EC9D1CE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral1
- Target
  Babylon 1.5.1.0/ObjectListView.dll
- Size 405KB
- SHA256 1fa030cdd98f653fcaa109af5c48f3d58f624aa671a980628397c6c6bc6433be
- MD5 de9f71635fb8532bd5202086097c2083
- SHA1 6fafef29e6964209122555745a89ba3d1237f762
- SHA512 c82c7d79af86826fbf9f6519fd37c456017af9f77a6b05afa81a823f7a1be8a04bf2fc5ee32175a92803e9d0a34277b655571428cf655dd07abfd9d87f78568d
- SSDEEP 6144:thiBxWw1YQ0K4/INLROMAYnMj108hIrH4puTHgaNe7lVG7UGO0UOP95QvMrLi:thCx11LsI/DtnQ1YrH4puTHgOrL
- TLSH
  T14F944C1223D8D72EC09F0375E0654969C3F0C189B78BE7AB6E95D6BD3C43B02AD91267
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral2
- Target
  Babylon 1.5.1.0/Theme.dll
- Size 86KB
- SHA256 49400f97281d4d3f084333db0e976520f95ef2b2d797e1f8fe3e795617b1ffd3
- MD5 44c4fff764e71051faed99ba7a18f608
- SHA1 cff407ce59bb37aef3b2f4569650064f71af97b6
- SHA512 c0ed97a6fa2f9e2f8d1b541dd344171907eebbfefd59345d4b59b9df32d1725c022f8671eb880bc10dbd5c4c28489361c408659ecfcca075c7c599121340f9cf
- SSDEEP 1536:k8O+YIDwzYKtrhOFCzj6MqAqHCGLAMhng70L6eTsDmW:bG6MqpHPLPh1DzW
- TLSH
  T1E183A5122AD8BF53D67E1174B3B30294D3B58D258123EB9D1ED474B49CBA7133A622CB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3
- Target
  Babylon 1.5.1.0/server.exe
- Size 727KB
- SHA256 cb1c1dec2980acb674da9b9cb077fda38cfc035a600f65c6fdc84cb8636eddb0
- MD5 a1bc035e1f5f50adc523b4042177ac5f
- SHA1 3357e4b8564ea30bf0731446f1828a1687d91ffb
- SHA512 67cab593dad9ca0e6775cba51aa271dba10e0742f5519f2e3aefe2642debd5c5ec74ad5753915a5dfa95c24e5be2ebfd9d069e40edb86d33c7d6baf14bf5f441
- SSDEEP 12288:fibwDknqjbeJb/fesPO3nG0j2RYVtmm2NrWax0VbNZxxXMILNh3paPcg:fibw4yeZ/2sP+ntjlANrWa4ZxtVg
- TLSH
  T1F7F4AD2275D2D036C0B301B25769AB626EBFFD310A369997A7C8194D0E345C0EF3A767
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

10^/10

discovery babylonrat trojan
- Babylon RAT payload
- Family: Babylon RAT
  Babylon RAT is remote access trojan written in C++.
  trojan babylonrat
behavioral4
- Target
  Babylon 1.5.1.0/server.ex~
- Size 353KB
- SHA256 053237eac05b08f032e47f64329c21e1b2c736a943ca2c14cf6925273eb4bdfe
- MD5 84bc9aa7d065b0079de880f2089cab5d
- SHA1 e74d56f605738e6833115a2f471670c33c483d3f
- SHA512 a662e23490af5489663804cf7fd8079918c4b21ab8ac2d703f976ba283845131ecdd6d80e9309aa67d119dde8e0a342700ce5622b5182395af1ec5a9353d1359
- SSDEEP 6144:QrxNmoV75uj0cpuzBWOswhfRN3KUYMLW7F5YYPT8G1VzdXuGcT531YDrK84vurbV:QfmoV78jRp0Zbh7PYYW7FRPTnD+OKurJ
- TLSH
  T1DD742381009FE643DD795C3DE2E4FB75CA8A509445C2AE3AD1B830F7C5672E68CDD0AA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

10^/10

discovery babylonrat trojan upx
- Babylon RAT payload
- Family: Babylon RAT
  Babylon RAT is remote access trojan written in C++.
  trojan babylonrat
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral5

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

1

T1614

System Language Discovery

1

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Babylon RAT payload

Family: Babylon RAT

Babylon RAT payload

Family: Babylon RAT

UPX packed file

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5