General

  • Target
    2026-08-19_f45674f3e529c71065f1958a5e919c96_elex_karagany_manuscrypt_maze_rhadamanthys_stealc_stop
  • Size 733KB
  • Sample260819-3p3jlabp5x
  • SHA256 303e0aaec0b8bc9dc177c667a36ac04e3f7fdab8cab5be794fcd1339ad185de2
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Extracted

Family
  • babylonrat

C2
  • 45.142.213.15

Targets

    • Target
      2026-08-19_f45674f3e529c71065f1958a5e919c96_elex_karagany_manuscrypt_maze_rhadamanthys_stealc_stop
    • Size 733KB
    • SHA256 303e0aaec0b8bc9dc177c667a36ac04e3f7fdab8cab5be794fcd1339ad185de2
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Babylon RAT payload

    • Family: Babylon RAT

      Babylon RAT is remote access trojan written in C++.

    • Detects executables containing SQL queries to confidential data stores. Observed in infostealers

MITRE ATT&CK Enterprise v16

Tasks