General
- Target BabkaLoader-1.exe
- Size 6.2MB
- Sample260905-d4ba8abf77
- SHA256 5ade59dbcd352958ea5a7685811f973f6196e180bb62fad4f62a560795d245b9
- MD5 703643f3ce6506cc3b38752646505129
- SHA1 a469fa08d605783f2ec6ab45d6ed567cdf055d8a
- SHA512 273149f2262bfe2fbbac6c9473765357b5d5ba82bf973bf432e63de62367fa8a45ebfc422f00941fa1d5708e9d887cade8f4fb9745d2bb2916017b03234ac902
- SSDEEP 49152:pyr5J/svpKxE6d7jxSXDk7UdcySmJ567WATgXeofclHoUIfZl2BDJZo7h51ij4BC:S5J/O0bd0XoIdcyPJM7Ceb1DexiMEV
- TLSH T183664A02FE8BA4F5E907093151A7727F27345D068B35CBDBEB407B6AF8B76919832205
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
BabkaLoader-1.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
BabkaLoader-1.exe
Resource
win11ltsc2024-20260710-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target BabkaLoader-1.exe
- Size 6.2MB
- SHA256 5ade59dbcd352958ea5a7685811f973f6196e180bb62fad4f62a560795d245b9
- MD5 703643f3ce6506cc3b38752646505129
- SHA1 a469fa08d605783f2ec6ab45d6ed567cdf055d8a
- SHA512 273149f2262bfe2fbbac6c9473765357b5d5ba82bf973bf432e63de62367fa8a45ebfc422f00941fa1d5708e9d887cade8f4fb9745d2bb2916017b03234ac902
- SSDEEP 49152:pyr5J/svpKxE6d7jxSXDk7UdcySmJ567WATgXeofclHoUIfZl2BDJZo7h51ij4BC:S5J/O0bd0XoIdcyPJM7Ceb1DexiMEV
- TLSH T183664A02FE8BA4F5E907093151A7727F27345D068B35CBDBEB407B6AF8B76919832205
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.