Babylon RAT v1.7.0.0.7z
- SHA256 02654850ac0257aa15368e53c524792eb9ab9b8fcfc2c7c2cefb91d424552dac
Password
infected
Overview
overview
10Static
static
3Babylon RA...AT.exe
windows11-ltsc_2024-x64
10Babylon RA...ew.dll
windows11-ltsc_2024-x64
1Babylon RA...GI.dll
windows11-ltsc_2024-x64
1Babylon RA...D1.dll
windows11-ltsc_2024-x64
1Babylon RA...10.dll
windows11-ltsc_2024-x64
1Babylon RA...DX.dll
windows11-ltsc_2024-x64
1Babylon RA...me.dll
windows11-ltsc_2024-x64
1Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Babylon RAT v1.7.0.0/Babylon-RAT.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
Babylon RAT v1.7.0.0/ObjectListView.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral3
Sample
Babylon RAT v1.7.0.0/SharpDX.DXGI.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral4
Sample
Babylon RAT v1.7.0.0/SharpDX.Direct2D1.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral5
Sample
Babylon RAT v1.7.0.0/SharpDX.Direct3D10.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral6
Sample
Babylon RAT v1.7.0.0/SharpDX.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral7
Sample
Babylon RAT v1.7.0.0/Theme.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
General
- Target Babylon RAT v1.7.0.0.7z
- Size 3.9MB
- Sample261029-x545gaet8v
- SHA256 02654850ac0257aa15368e53c524792eb9ab9b8fcfc2c7c2cefb91d424552dac
- MD5 183240ab20090ef8b78d8219a2e5ac7c
- SHA1 38bd68b3d7a942fb93145070222fdee6926854a3
- SHA512 59a65fe94cc267f0e3ce6cde1a591a7a8eb0a3fdaf392169b8d1d032b307c619241b51f7a7d8c55610910c85dedd79182bdf5fd3e8646d9b1fcb978d724a14a8
- SSDEEP 98304:ucVH548KqXd0niwfRtPmAGYMmLEB/0VxlSlKD8sVzaRh9gR5kKADW+:u5uOi0/FG3mgx0jQYD1VzaRMiY+
- TLSH T1811633650A1CB30D17B5806F7B34993DB4A8A8E2AD228BBD173B3F74CED2194718572D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 7 IoCs
Checks for missing Authenticode signature.
resource unpack001/Babylon RAT v1.7.0.0/Babylon-RAT.exe unpack001/Babylon RAT v1.7.0.0/ObjectListView.dll unpack001/Babylon RAT v1.7.0.0/SharpDX.DXGI.dll unpack001/Babylon RAT v1.7.0.0/SharpDX.Direct2D1.dll unpack001/Babylon RAT v1.7.0.0/SharpDX.Direct3D10.dll unpack001/Babylon RAT v1.7.0.0/SharpDX.dll unpack001/Babylon RAT v1.7.0.0/Theme.dll
File Explorer
-
Babylon RAT v1.7.0.0.7z.7z 3.9MB
-
Babylon RAT v1.7.0.0/Babylon-RAT.exe.exe 4.6MB
-
Babylon RAT v1.7.0.0/Configs/default.brc1KB
-
Babylon RAT v1.7.0.0/ObjectListView.dll.dll 405KB
-
Babylon RAT v1.7.0.0/Profiles/default.brconfig793B
-
Babylon RAT v1.7.0.0/SharpDX.DXGI.dll.dll 87KB
-
Babylon RAT v1.7.0.0/SharpDX.Direct2D1.dll.dll 225KB
-
Babylon RAT v1.7.0.0/SharpDX.Direct3D10.dll.dll 174KB
-
Babylon RAT v1.7.0.0/SharpDX.dll.dll 538KB
-
Babylon RAT v1.7.0.0/Theme.dll.dll 87KB
Babylon RAT v1.7.0.0/Babylon-RAT.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 d3c2fc4b4c95b10edf25c7321e59ee0aa747432dc2cf7fd719d0046aa62103fe
- MD5 e2a98acbc9fad38b4e919fbd79c12b38
- SHA1 68564ddbe217f713cdf7a5c186c7d7cf6200680e
- SHA512 058b1acf064feed82bdcdb74f2049ec761a75ca8f0732866cab446b4fa96ac580c972642cd117747dea4c968b6eb6c16182a07e95092ff8d687003c8e63993ab
- SSDEEP 49152:H5jczOiYgLIAL5aLUqmsRQJ5oc36KVOrY8i3CE36Ocs0GUEI/dx:Ri7IA5Qfmboc366oi3Z3uhh/H
- TLSH T13A2612E4D012488ED63A71F26E7AE7E64FB74CA685B701E0577078546E3702BDE2C68C
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
11758
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
363KB
Virtual Size
362KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Babylon RAT v1.7.0.0/Configs/default.brc
- SHA256 158a1778a5f5aef49bf62d589bfb52cadb0d60f91667ad7f60dbb3d7b55afa8a
- MD5 52b72ef4ad7809163d9cb64202c3192f
- SHA1 76fc451837628dca5f3d98187c4a93b042c58a40
- SHA512 c5c33b87ac05ba7a9ffedc6c6054b602d9561cce743f23e82b3675d5da756cb15fa55274bf89a0702c5d269d4347b7fcb497c13d4332860d3671e1d302497397
- TLSH T189116A327940D760D30D8931284BE3E12231BA48BD224ED7F452332E5C3D5675F63A46
- MD5 SHA1 SHA512 TLSH
Babylon RAT v1.7.0.0/ObjectListView.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 1fa030cdd98f653fcaa109af5c48f3d58f624aa671a980628397c6c6bc6433be
- MD5 de9f71635fb8532bd5202086097c2083
- SHA1 6fafef29e6964209122555745a89ba3d1237f762
- SHA512 c82c7d79af86826fbf9f6519fd37c456017af9f77a6b05afa81a823f7a1be8a04bf2fc5ee32175a92803e9d0a34277b655571428cf655dd07abfd9d87f78568d
- SSDEEP 6144:thiBxWw1YQ0K4/INLROMAYnMj108hIrH4puTHgaNe7lVG7UGO0UOP95QvMrLi:thCx11LsI/DtnQ1YrH4puTHgOrL
- TLSH T14F944C1223D8D72EC09F0375E0654969C3F0C189B78BE7AB6E95D6BD3C43B02AD91267
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
420510
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
c:\Users\Nathan\Documents\Development\Extensions\ObjectListViewDemo\ObjectListView\obj\Release\ObjectListView.pdb
mscoree
_CorDllMain
Name
.text
Size
403KB
Virtual Size
402KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Babylon RAT v1.7.0.0/Profiles/default.brconfig
- SHA256 cb11d50dc4c919fcc79b7354f3a07cab1f8c72dec917008f83f258bbf114c19e
- MD5 e3e5fcf2806411c59a74000d5d1157a2
- SHA1 ba1a39946ae8b1b56e0c995b2dcc6d84cdd782a0
- SHA512 9737e40c17b7403763af9c4874d0430ed3ed7375ae7ddf0fe0a59979185d61305d8951334fb89e73858fd95528e3316b8c6386cc02f757de1ed090f0b095964e
- TLSH T1E701713A7A54CB60D3088436191BD7F45630B6647C214AD3F493337EAD7A566CE23546
- MD5 SHA1 SHA512 TLSH
Babylon RAT v1.7.0.0/SharpDX.DXGI.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 46ee8cc2375cb009c8d85948cfbd0b82e378c756f1eeef95427c45e0ce5b015d
- MD5 ce9d63a67dc2d2e23b92136c43baa02b
- SHA1 1ea7dc92963778e44f3c045dac707958082179e5
- SHA512 6e169f0d0839532c33495cbb0441801cc31ae3a7e6b5a3236dc8187c8566abeb744a784cf974319caf1820e972b3d00f1bf51e6fa5a608dcaa2c5ac0e7751ff7
- SSDEEP 1536:dgd4T6pv//Ak/taAgZ2Owg28ShSCivO5Ib6VU3x8yFa0H:dgdV3/AdHZRT+ig0H
- TLSH T12F9376826E7183F1E56F6BBD6732F92E6413B6114181716606E238118B89243CFDFBDB
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
94894
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
C:\Code\SharpDX\Bin\DirectX11-net20\SharpDX.DXGI.pdb
mscoree
_CorDllMain
Name
.text
Size
85KB
Virtual Size
84KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Babylon RAT v1.7.0.0/SharpDX.Direct2D1.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 c45dd7155f828b9491dc2befd092f7be8d6d43bc37616fd1c9bfd5d8875206be
- MD5 ae45e105c17ccf8cd41df6235a7096a7
- SHA1 c5b53247b83ce4ee60e0c6ee724e4bd6beb0f996
- SHA512 174784ea15cf6cae8db08bce529fffaf005d94338cff540869214f68ac4e80fb1d4a441a18a57586f7db2a7197347df89df2629f1e3765aebfad47beedc9e7e6
- SSDEEP 3072:h1PS247ZU+Jbs+pVOuR2FJT1OXeIfkfRCgOpsCUYpCUYwOSUg/t2z1A2HxdA0E33:hkC+pKrT1qeIfkME7EhSe5
- TLSH T12C34E8049B944E17EA8D67B7F13257188B38E19BE447E75A38CC90F51C837950E0ABFA
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
235758
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
C:\Code\SharpDX\Bin\DirectX11-net20\SharpDX.Direct2D1.pdb
mscoree
_CorDllMain
Name
.text
Size
222KB
Virtual Size
222KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Babylon RAT v1.7.0.0/SharpDX.Direct3D10.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 c03a671bbf25a4cca0030aedd352be04e1b75ecc4d88f590057252735322974f
- MD5 93ea6468faf23ad7017e5f1885cf85e9
- SHA1 c25f58172d25c7cdc622355e6db38722760bb9e5
- SHA512 d1c05ae043f90665f9e741c4c1dead821c65004fed5ca0ffd5c557b2245ab5577ce48728a46f56cc66b401f6878e217e6fbdf7f1a0c77d4b333ff9b1256f9a64
- SSDEEP 3072:a8HZkOrSS+EpH/OPSXev8xskvFxvD6IXiVNsGaF/daKa7Zj:lkTMpfOP50xskvFxvD6IXiVNqdaK6
- TLSH T1E1042A12DB888B5BCE8F09BBE8725F098374C247844AF7495CC8D07569C7391AD1EBCA
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
183326
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
C:\Code\SharpDX\Source\SharpDX.Direct3D10\bin\Net20Release\SharpDX.Direct3D10.pdb
mscoree
_CorDllMain
Name
.text
Size
171KB
Virtual Size
171KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Babylon RAT v1.7.0.0/SharpDX.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 f1f7da12c754215d8ad2a4b987f772722fa575bb34b33856adf5b39b28e3d5ee
- MD5 1ede43c66b29696c7c6664b9faf7e5aa
- SHA1 55c1e0a5d0995e7dce2bb07a1ccdfca67c8b9fea
- SHA512 0d4da4bd00f54a2a7dc1f2d985f2d65755fd6df0a40f74a312b7c8f9ccf64156b97ce4a36646a4fc373e0fadd42355dedd5ad9177cfc20a636e23cb452e315aa
- SSDEEP 6144:+Ibd7KIBofkCPfAVdX4e0RrSgTFW4rg6KSyhlEaoksQiyqFKW0mhuPPZ:dblEPfAVd1OG4csOeabE0mQ
- TLSH T180C44B12A7984E3BC9AD63BADC224D2B6770D119521BE78F329454F9E8C7354CD223E3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
556686
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
C:\Code\SharpDX\Bin\DirectX11-net20\SharpDX.pdb
mscoree
_CorDllMain
Name
.text
Size
536KB
Virtual Size
535KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1024B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Babylon RAT v1.7.0.0/Theme.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 5138867aa5100c833faddba8ff8f0e5c61a535b8c34ef367cb3f095f56cd6521
- MD5 2b61363f4f52a821908efb18d7a9bcb4
- SHA1 7ea57f6afb82a003289ee2461121c347e8362ecc
- SHA512 7ee8c751afab022e0e0de480838274ee2f4bfd637e45dbd9998ff6e9aca582a9ac14e86ebc96a913e321bd674a77234e90b747d43755deafaadc6bcb894cacfc
- SSDEEP 1536:s8O+YIDwzYKtrhOFCzj6MqAqHCGLAMhng70L6eTsDmL:zG6MqpHPLPh1DzL
- TLSH T17493A5122AD8BF53D67E0174B7B30294D3B58D258123EB9D1ED474B498BA7133A622CB
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
82782
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
C:\Users\Stefan\Desktop\Workspace\BabylonRAT\Theme\obj\Release\Theme.pdb
mscoree
_CorDllMain
Name
.text
Size
73KB
Virtual Size
72KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.sdata
Size
512B
Virtual Size
312B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
12KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ