General
- Target 2026-08-19_f45674f3e529c71065f1958a5e919c96_elex_karagany_manuscrypt_maze_rhadamanthys_stealc_stop
- Size 733KB
- Sample260819-3p3jlabp5x
- SHA256 303e0aaec0b8bc9dc177c667a36ac04e3f7fdab8cab5be794fcd1339ad185de2
- MD5 f45674f3e529c71065f1958a5e919c96
- SHA1 592ab76f85cf2d7cefdcb7155c4992967a2138b3
- SHA512 bdb5d40bf051d2c51b3b7ddc50022e79162398bcbc157e4ab8a2ed2b74d9e224e07c77d86173332b818755d3f8ece2ed6a4b7ca77795b03378cd022b1df4c881
- SSDEEP 12288:0qzcpVgUXzL0TTUKZHTNloEkOpnKgofuIwV6eAj0SZxxXMcEen3paPcgVX:0qzcpKIL0TvZzNlNky0wVW0SZxJVgVX
- TLSH T1EAF4BF2375D2C036D4B301B25679AB625EBFFE314A359997A7C8194D0E384C0EF2A727
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-19_f45674f3e529c71065f1958a5e919c96_elex_karagany_manuscrypt_maze_rhadamanthys_stealc_stop.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-19_f45674f3e529c71065f1958a5e919c96_elex_karagany_manuscrypt_maze_rhadamanthys_stealc_stop.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Extracted
Family
-
babylonrat
C2
-
45.142.213.15
Targets
-
- Target 2026-08-19_f45674f3e529c71065f1958a5e919c96_elex_karagany_manuscrypt_maze_rhadamanthys_stealc_stop
- Size 733KB
- SHA256 303e0aaec0b8bc9dc177c667a36ac04e3f7fdab8cab5be794fcd1339ad185de2
- MD5 f45674f3e529c71065f1958a5e919c96
- SHA1 592ab76f85cf2d7cefdcb7155c4992967a2138b3
- SHA512 bdb5d40bf051d2c51b3b7ddc50022e79162398bcbc157e4ab8a2ed2b74d9e224e07c77d86173332b818755d3f8ece2ed6a4b7ca77795b03378cd022b1df4c881
- SSDEEP 12288:0qzcpVgUXzL0TTUKZHTNloEkOpnKgofuIwV6eAj0SZxxXMcEen3paPcgVX:0qzcpKIL0TvZzNlNky0wVW0SZxJVgVX
- TLSH T1EAF4BF2375D2C036D4B301B25679AB625EBFFE314A359997A7C8194D0E384C0EF2A727
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Babylon RAT payload
-
Detects executables containing SQL queries to confidential data stores. Observed in infostealers