Static task
static1
Behavioral task
behavioral1
Sample
bBot-Version 0.6/CleanUp.bat
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
bBot-Version 0.6/CleanUp.bat
Resource
win10v2004-20230220-en
Behavioral task
behavioral3
Sample
bBot-Version 0.6/misc.vbs
Resource
win7-20230220-en
Behavioral task
behavioral4
Sample
bBot-Version 0.6/misc.vbs
Resource
win10v2004-20230220-en
Behavioral task
behavioral5
Sample
bBot-Version 0.6/rBot.html
Resource
win7-20230220-en
Behavioral task
behavioral6
Sample
bBot-Version 0.6/rBot.html
Resource
win10v2004-20230220-en
General
-
Target
bBot-Version_0.6.rar
-
Size
393KB
-
MD5
9030d27bf842ff8233752724e10c7c81
-
SHA1
7d5b5e587c933b976abd895322e23c7d4d2d5642
-
SHA256
21ec31a2c255b19a65d3734b0a5e8a56586603f95b57b939a34c255cf8fa8481
-
SHA512
83e2f59c67cb6e365cdd9ce4725d7ce5bab02ec27989c11c8cbc1ebbddd54817f943c2707f78d1855c1c5a7aab8a5ddea4c650c1a3901cec40ebde60dd0a6c55
-
SSDEEP
6144:eYqBuA5bNmaXZs+C5aicLmQ/mLSoqAB0JYcULBlSkfMab0G1akT0tYv:enBuA5bEaHCGmEwByGBlkHG1HwYv
Malware Config
Signatures
Files
-
bBot-Version_0.6.rar.rar
Password: infected
-
bBot-Version 0.6/CleanUp.bat
-
bBot-Version 0.6/DOCS/Changes.txt
-
bBot-Version 0.6/DOCS/HowToCompile.txt
-
bBot-Version 0.6/DOCS/README.txt
-
bBot-Version 0.6/WKS.CPP
-
bBot-Version 0.6/WKS.H
-
bBot-Version 0.6/advscan.cpp
-
bBot-Version 0.6/advscan.h
-
bBot-Version 0.6/aliaslog.cpp
-
bBot-Version 0.6/aliaslog.h
-
bBot-Version 0.6/autostart.cpp
-
bBot-Version 0.6/autostart.h
-
bBot-Version 0.6/avirus.cpp
-
bBot-Version 0.6/avirus.h
-
bBot-Version 0.6/capture.cpp
-
bBot-Version 0.6/capture.h
-
bBot-Version 0.6/cdkeys.cpp
-
bBot-Version 0.6/cdkeys.h
-
bBot-Version 0.6/configs.h
-
bBot-Version 0.6/crc32.cpp
-
bBot-Version 0.6/crc32.h
-
bBot-Version 0.6/crypt.cpp
-
bBot-Version 0.6/crypt.h
-
bBot-Version 0.6/dcc.cpp
-
bBot-Version 0.6/dcc.h
-
bBot-Version 0.6/dcom.cpp
-
bBot-Version 0.6/dcom.h
-
bBot-Version 0.6/dcom2.cpp
-
bBot-Version 0.6/dcom2.h
-
bBot-Version 0.6/defines.h
-
bBot-Version 0.6/download.cpp
-
bBot-Version 0.6/download.h
-
bBot-Version 0.6/driveinfo.cpp
-
bBot-Version 0.6/driveinfo.h
-
bBot-Version 0.6/ehandler.cpp
-
bBot-Version 0.6/ehandler.h
-
bBot-Version 0.6/externs.h
-
bBot-Version 0.6/findfile.cpp
-
bBot-Version 0.6/findfile.h
-
bBot-Version 0.6/findpass.cpp
-
bBot-Version 0.6/findpass.h
-
bBot-Version 0.6/fphost.cpp
-
bBot-Version 0.6/fphost.h
-
bBot-Version 0.6/ftpd.cpp
-
bBot-Version 0.6/ftpd.h
-
bBot-Version 0.6/functions.h
-
bBot-Version 0.6/globals.h
-
bBot-Version 0.6/httpd.cpp
-
bBot-Version 0.6/httpd.h
-
bBot-Version 0.6/icmpflood.cpp
-
bBot-Version 0.6/icmpflood.h
-
bBot-Version 0.6/ident.cpp
-
bBot-Version 0.6/ident.h
-
bBot-Version 0.6/includes.h
-
bBot-Version 0.6/irc_send.cpp
-
bBot-Version 0.6/irc_send.h
-
bBot-Version 0.6/keylogger.cpp
-
bBot-Version 0.6/keylogger.h
-
bBot-Version 0.6/loaddlls.cpp
-
bBot-Version 0.6/loaddlls.h
-
bBot-Version 0.6/lsass.cpp
-
bBot-Version 0.6/lsass.h
-
bBot-Version 0.6/lsass2.cpp
-
bBot-Version 0.6/lsass2.h
-
bBot-Version 0.6/misc.cpp.vbs
-
bBot-Version 0.6/misc.h
-
bBot-Version 0.6/net.cpp
-
bBot-Version 0.6/net.h
-
bBot-Version 0.6/netbios.cpp
-
bBot-Version 0.6/netbios.h
-
bBot-Version 0.6/netutils.cpp
-
bBot-Version 0.6/netutils.h
-
bBot-Version 0.6/nicklist.h
-
bBot-Version 0.6/ntdcass.cpp
-
bBot-Version 0.6/ntdcass.h
-
bBot-Version 0.6/passwd.h
-
bBot-Version 0.6/peer2peer.cpp
-
bBot-Version 0.6/peer2peer.h
-
bBot-Version 0.6/pingudp.cpp
-
bBot-Version 0.6/pingudp.h
-
bBot-Version 0.6/processes.cpp
-
bBot-Version 0.6/processes.h
-
bBot-Version 0.6/psniff.cpp
-
bBot-Version 0.6/psniff.h
-
bBot-Version 0.6/rBot.cpp
-
bBot-Version 0.6/rBot.dsp
-
bBot-Version 0.6/rBot.dsw
-
bBot-Version 0.6/rBot.h
-
bBot-Version 0.6/rBot.ncb
-
bBot-Version 0.6/rBot.opt
-
bBot-Version 0.6/rBot.plg.html
-
bBot-Version 0.6/redirect.cpp
-
bBot-Version 0.6/redirect.h
-
bBot-Version 0.6/remotecmd.cpp
-
bBot-Version 0.6/remotecmd.h
-
bBot-Version 0.6/reqbuf.bin
-
bBot-Version 0.6/rlogind.cpp
-
bBot-Version 0.6/rlogind.h
-
bBot-Version 0.6/rndnick.cpp
-
bBot-Version 0.6/rndnick.h
-
bBot-Version 0.6/scan.cpp
-
bBot-Version 0.6/scan.h
-
bBot-Version 0.6/secure.cpp
-
bBot-Version 0.6/secure.h
-
bBot-Version 0.6/session.cpp
-
bBot-Version 0.6/session.h
-
bBot-Version 0.6/shellcode.cpp
-
bBot-Version 0.6/shellcode.h
-
bBot-Version 0.6/socks4.cpp
-
bBot-Version 0.6/socks4.h
-
bBot-Version 0.6/synflood.cpp
-
bBot-Version 0.6/synflood.h
-
bBot-Version 0.6/sysinfo.cpp
-
bBot-Version 0.6/sysinfo.h
-
bBot-Version 0.6/tcpflood.cpp
-
bBot-Version 0.6/tcpflood.h
-
bBot-Version 0.6/tcpflood2.cpp
-
bBot-Version 0.6/tcpflood2.h
-
bBot-Version 0.6/tcpip.h
-
bBot-Version 0.6/tftpd.cpp
-
bBot-Version 0.6/tftpd.h
-
bBot-Version 0.6/threads.cpp
-
bBot-Version 0.6/threads.h
-
bBot-Version 0.6/upnp.cpp
-
bBot-Version 0.6/upnp.h
-
bBot-Version 0.6/visit.cpp
-
bBot-Version 0.6/visit.h
-
bBot-Version 0.6/wildcard.cpp
-
bBot-Version 0.6/wildcard.h
-
bBot-Version 0.6/wksdcasseng.cpp
-
bBot-Version 0.6/wksdcasseng.h
-
bBot-Version 0.6/wksdcassother.cpp
-
bBot-Version 0.6/wksdcassother.h
-
bBot-Version 0.6/wkssvc.cpp
-
bBot-Version 0.6/wkssvc.h
-
bBot-Version 0.6/workstation.cpp
-
bBot-Version 0.6/workstation.h