Static task
static1
Behavioral task
behavioral1
Sample
misc.vbs
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
misc.vbs
Resource
win10v2004-20230220-en
Behavioral task
behavioral3
Sample
rBot.html
Resource
win7-20230220-en
Behavioral task
behavioral4
Sample
rBot.html
Resource
win10v2004-20230220-en
General
-
Target
Stripped-RXV8.rar
-
Size
376KB
-
MD5
8dcdeb211ed5077d5dfd85168992ae5b
-
SHA1
56d81cbd2e841406e27df7bfd1abc58f7e992162
-
SHA256
177c894be3acf268a0b4d8d7b17189805ed7fb54e70b69609b12a98766c601c3
-
SHA512
1f988075e98573fdba8d513f2e85a0e84e49b2dcb82465f7eada3220c60baa809c5b87d79ddf32eb0e6763f854b8103beff96a797bf95a41b5a82994cec8cf19
-
SSDEEP
6144:2oiC2synMH9m+Eu88qwOuPjzVsoHLSHALljGuixqW3fPjvbQ8S7zl7Gblh0d:tdlmCqxisoH+HGlNy3ng8Vlh0d
Malware Config
Signatures
Files
-
Stripped-RXV8.rar.rar
Password: infected
-
1Readme.txt
-
advscan.cpp
-
advscan.h
-
aliaslog.cpp
-
aliaslog.h
-
asn1.cpp
-
asn1.h
-
autostart.cpp
-
autostart.h
-
avirus.cpp
-
avirus.h
-
configs.h
-
crc32.cpp
-
crc32.h
-
crypt.cpp
-
crypt.h
-
defines.h
-
download.cpp
-
download.h
-
driveinfo.cpp
-
driveinfo.h
-
ehandler.cpp
-
ehandler.h
-
externs.h
-
fphost.cpp
-
fphost.h
-
ftpd.cpp
-
ftpd.h
-
functions.h
-
globals.h
-
httpd.cpp
-
httpd.h
-
ident.cpp
-
ident.h
-
includes.h
-
irc_send.cpp
-
irc_send.h
-
loaddlls.cpp
-
loaddlls.h
-
misc.cpp.vbs
-
misc.h
-
mssql.cpp
-
mssql.h
-
myshellcode.asm
-
net.cpp
-
net.h
-
netutils.cpp
-
netutils.h
-
nicklist.h
-
passwd.h
-
processes.cpp
-
processes.h
-
rBot.cpp
-
rBot.dsp
-
rBot.dsw
-
rBot.h
-
rBot.ncb
-
rBot.opt
-
rBot.plg.html
-
redirect.cpp
-
redirect.h
-
remotecmd.cpp
-
remotecmd.h
-
reqbuf.bin
-
rlogind.cpp
-
rlogind.h
-
rndnick.cpp
-
rndnick.h
-
scan.cpp
-
scan.h
-
session.cpp
-
session.h
-
shellcode.cpp
-
shellcode.h
-
socks4.cpp
-
socks4.h
-
sysinfo.cpp
-
sysinfo.h
-
tcpip.h
-
tftpd.cpp
-
tftpd.h
-
threads.cpp
-
threads.h
-
vncrooter.cpp
-
vncrooter.h
-
wildcard.cpp
-
wildcard.h
-
workstation.cpp
-
workstation.h