Overview
overview
1Static
static
1ForBot [06...t.html
windows7-x64
1ForBot [06...t.html
windows10-2004-x64
1ForBot [06...ot.vbs
windows7-x64
1ForBot [06...ot.vbs
windows10-2004-x64
1ForBot [06...ead.js
windows7-x64
1ForBot [06...ead.js
windows10-2004-x64
1ForBot [06...t.html
windows7-x64
1ForBot [06...t.html
windows10-2004-x64
1ForBot [06...er.vbs
windows7-x64
1ForBot [06...er.vbs
windows10-2004-x64
1ForBot [06...09.vbs
windows7-x64
1ForBot [06...09.vbs
windows10-2004-x64
1Static task
static1
Behavioral task
behavioral1
Sample
ForBot [06-02-04-05]/ForBot.html
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
ForBot [06-02-04-05]/ForBot.html
Resource
win10v2004-20230220-en
Behavioral task
behavioral3
Sample
ForBot [06-02-04-05]/bot.vbs
Resource
win7-20230220-en
Behavioral task
behavioral4
Sample
ForBot [06-02-04-05]/bot.vbs
Resource
win10v2004-20230220-en
Behavioral task
behavioral5
Sample
ForBot [06-02-04-05]/cthread.js
Resource
win7-20230220-en
Behavioral task
behavioral6
Sample
ForBot [06-02-04-05]/cthread.js
Resource
win10v2004-20230220-en
Behavioral task
behavioral7
Sample
ForBot [06-02-04-05]/docs/StringEdit.html
Resource
win7-20230220-en
Behavioral task
behavioral8
Sample
ForBot [06-02-04-05]/docs/StringEdit.html
Resource
win10v2004-20230221-en
Behavioral task
behavioral9
Sample
ForBot [06-02-04-05]/installer.vbs
Resource
win7-20230220-en
Behavioral task
behavioral10
Sample
ForBot [06-02-04-05]/installer.vbs
Resource
win10v2004-20230220-en
Behavioral task
behavioral11
Sample
ForBot [06-02-04-05]/lib/openssl/win32/include/openssl/x509.vbs
Resource
win7-20230220-en
Behavioral task
behavioral12
Sample
ForBot [06-02-04-05]/lib/openssl/win32/include/openssl/x509.vbs
Resource
win10v2004-20230220-en
General
-
Target
ForBot____sniffer__other_mods-_ch405_.rar
-
Size
675KB
-
MD5
1a5a554cf0d51a946bb39b41afb127d7
-
SHA1
29ed383c837d6d3dd975da4dc0f55cf4d2e6bcc2
-
SHA256
26ec1e7ca1c662afd63420ca9ff65fc1a4b898f5893f2ce351350e287083a5a6
-
SHA512
16792ad8defce61422e4af2ac8e701498227c1e5436a46c2a9c689dbdbad942241808d90ad2770d966a11ec6bde4e4067da4852bded04c2e5a281672a96d0201
-
SSDEEP
12288:sbgTJFWoguBgtUMgayzJSIESZWYCcUUT1aWigiV4qIc0fDiJEGr/kOfx9xAB5poX:LFhcUayzJGzY1adgiWq2fDiaGrzgod28
Malware Config
Signatures
Files
-
ForBot____sniffer__other_mods-_ch405_.rar.rar
Password: infected
-
ForBot [06-02-04-05]/3dnow.h
-
ForBot [06-02-04-05]/ForBot.dsp
-
ForBot [06-02-04-05]/ForBot.dsw
-
ForBot [06-02-04-05]/ForBot.ncb
-
ForBot [06-02-04-05]/ForBot.opt
-
ForBot [06-02-04-05]/ForBot.plg.html
-
ForBot [06-02-04-05]/advscan/advscan.cpp
-
ForBot [06-02-04-05]/advscan/advscan.h
-
ForBot [06-02-04-05]/advscan/defines.h
-
ForBot [06-02-04-05]/advscan/lsass.cpp
-
ForBot [06-02-04-05]/advscan/lsass.h
-
ForBot [06-02-04-05]/advscan/optix.cpp
-
ForBot [06-02-04-05]/advscan/optix.h
-
ForBot [06-02-04-05]/advscan/rshellcode.cpp
-
ForBot [06-02-04-05]/advscan/rshellcode.h
-
ForBot [06-02-04-05]/advscan/rthread.cpp
-
ForBot [06-02-04-05]/advscan/rthread.h
-
ForBot [06-02-04-05]/autocmd.cpp
-
ForBot [06-02-04-05]/autocmd.h
-
ForBot [06-02-04-05]/bot.cpp.vbs
-
ForBot [06-02-04-05]/bot.h
-
ForBot [06-02-04-05]/ch405.cpp
-
ForBot [06-02-04-05]/cmdbase.h
-
ForBot [06-02-04-05]/cmdline.cpp
-
ForBot [06-02-04-05]/cmdline.h
-
ForBot [06-02-04-05]/cmdopt.h
-
ForBot [06-02-04-05]/commands.cpp
-
ForBot [06-02-04-05]/commands.h
-
ForBot [06-02-04-05]/config.cpp
-
ForBot [06-02-04-05]/consdbg.cpp
-
ForBot [06-02-04-05]/consdbg.h
-
ForBot [06-02-04-05]/crypter.cpp
-
ForBot [06-02-04-05]/crypter.h
-
ForBot [06-02-04-05]/cstring.cpp
-
ForBot [06-02-04-05]/cstring.h
-
ForBot [06-02-04-05]/cthread.cpp.js
-
ForBot [06-02-04-05]/cthread.h
-
ForBot [06-02-04-05]/cvar.cpp
-
ForBot [06-02-04-05]/cvar.h
-
ForBot [06-02-04-05]/dcc.cpp
-
ForBot [06-02-04-05]/dcc.h
-
ForBot [06-02-04-05]/dcom.cpp
-
ForBot [06-02-04-05]/dcom.h
-
ForBot [06-02-04-05]/dcom2.cpp
-
ForBot [06-02-04-05]/dcom2.h
-
ForBot [06-02-04-05]/ddos.cpp
-
ForBot [06-02-04-05]/ddos.h
-
ForBot [06-02-04-05]/docs/Commands.txt
-
ForBot [06-02-04-05]/docs/ForBot.txt
-
ForBot [06-02-04-05]/docs/StringEdit.html.html
-
ForBot [06-02-04-05]/findfile.cpp
-
ForBot [06-02-04-05]/findfile.h
-
ForBot [06-02-04-05]/ftplib/ftplib.c
-
ForBot [06-02-04-05]/ftplib/ftplib.h
-
ForBot [06-02-04-05]/harvest_cdkeys.cpp
-
ForBot [06-02-04-05]/harvest_cdkeys.h
-
ForBot [06-02-04-05]/harvest_emails.cpp
-
ForBot [06-02-04-05]/harvest_emails.h
-
ForBot [06-02-04-05]/harvest_registry.cpp
-
ForBot [06-02-04-05]/harvest_registry.h
-
ForBot [06-02-04-05]/httpd.cpp
-
ForBot [06-02-04-05]/httpd.h
-
ForBot [06-02-04-05]/httpflood.cpp
-
ForBot [06-02-04-05]/httpflood.h
-
ForBot [06-02-04-05]/installer.cpp.vbs
-
ForBot [06-02-04-05]/installer.h
-
ForBot [06-02-04-05]/irc.cpp
-
ForBot [06-02-04-05]/irc.h
-
ForBot [06-02-04-05]/lib/CVS/Entries
-
ForBot [06-02-04-05]/lib/CVS/Entries.Log
-
ForBot [06-02-04-05]/lib/CVS/Repository
-
ForBot [06-02-04-05]/lib/CVS/Root
-
ForBot [06-02-04-05]/lib/adns/CVS/Entries
-
ForBot [06-02-04-05]/lib/adns/CVS/Entries.Log
-
ForBot [06-02-04-05]/lib/adns/CVS/Repository
-
ForBot [06-02-04-05]/lib/adns/CVS/Root
-
ForBot [06-02-04-05]/lib/adns/win32/CVS/Entries
-
ForBot [06-02-04-05]/lib/adns/win32/CVS/Entries.Log
-
ForBot [06-02-04-05]/lib/adns/win32/CVS/Repository
-
ForBot [06-02-04-05]/lib/adns/win32/CVS/Root
-
ForBot [06-02-04-05]/lib/adns/win32/adns_win32/CVS/Entries
-
ForBot [06-02-04-05]/lib/adns/win32/adns_win32/CVS/Repository
-
ForBot [06-02-04-05]/lib/adns/win32/adns_win32/CVS/Root
-
ForBot [06-02-04-05]/lib/adns/win32/adns_win32/adns_dll.cpp
-
ForBot [06-02-04-05]/lib/adns/win32/adns_win32/adns_unix_calls.c
-
ForBot [06-02-04-05]/lib/adns/win32/adns_win32/adns_win32.h
-
ForBot [06-02-04-05]/lib/adns/win32/src/CVS/Entries
-
ForBot [06-02-04-05]/lib/adns/win32/src/CVS/Repository
-
ForBot [06-02-04-05]/lib/adns/win32/src/CVS/Root
-
ForBot [06-02-04-05]/lib/adns/win32/src/adns.h
-
ForBot [06-02-04-05]/lib/adns/win32/src/check.c
-
ForBot [06-02-04-05]/lib/adns/win32/src/config.h
-
ForBot [06-02-04-05]/lib/adns/win32/src/dlist.h
-
ForBot [06-02-04-05]/lib/adns/win32/src/event.c
-
ForBot [06-02-04-05]/lib/adns/win32/src/general.c
-
ForBot [06-02-04-05]/lib/adns/win32/src/internal.h
-
ForBot [06-02-04-05]/lib/adns/win32/src/parse.c
-
ForBot [06-02-04-05]/lib/adns/win32/src/query.c
-
ForBot [06-02-04-05]/lib/adns/win32/src/reply.c
-
ForBot [06-02-04-05]/lib/adns/win32/src/setup.c
-
ForBot [06-02-04-05]/lib/adns/win32/src/transmit.c
-
ForBot [06-02-04-05]/lib/adns/win32/src/tvarith.h
-
ForBot [06-02-04-05]/lib/adns/win32/src/types.c
-
ForBot [06-02-04-05]/lib/openssl/CVS/Entries
-
ForBot [06-02-04-05]/lib/openssl/CVS/Entries.Log
-
ForBot [06-02-04-05]/lib/openssl/CVS/Repository
-
ForBot [06-02-04-05]/lib/openssl/CVS/Root
-
ForBot [06-02-04-05]/lib/openssl/win32/CVS/Entries
-
ForBot [06-02-04-05]/lib/openssl/win32/CVS/Entries.Log
-
ForBot [06-02-04-05]/lib/openssl/win32/CVS/Repository
-
ForBot [06-02-04-05]/lib/openssl/win32/CVS/Root
-
ForBot [06-02-04-05]/lib/openssl/win32/include/CVS/Entries
-
ForBot [06-02-04-05]/lib/openssl/win32/include/CVS/Entries.Log
-
ForBot [06-02-04-05]/lib/openssl/win32/include/CVS/Repository
-
ForBot [06-02-04-05]/lib/openssl/win32/include/CVS/Root
-
ForBot [06-02-04-05]/lib/openssl/win32/include/openssl/CVS/Entries
-
ForBot [06-02-04-05]/lib/openssl/win32/include/openssl/CVS/Repository
-
ForBot [06-02-04-05]/lib/openssl/win32/include/openssl/CVS/Root
-
ForBot [06-02-04-05]/lib/openssl/win32/include/openssl/asn1.h
-
ForBot [06-02-04-05]/lib/openssl/win32/include/openssl/asn1_mac.h
-
ForBot [06-02-04-05]/lib/openssl/win32/include/openssl/bio.h
-
ForBot [06-02-04-05]/lib/openssl/win32/include/openssl/blowfish.h
-
ForBot [06-02-04-05]/lib/openssl/win32/include/openssl/bn.h
-
ForBot [06-02-04-05]/lib/openssl/win32/include/openssl/buffer.h
-
ForBot [06-02-04-05]/lib/openssl/win32/include/openssl/cast.h
-
ForBot [06-02-04-05]/lib/openssl/win32/include/openssl/comp.h
-
ForBot [06-02-04-05]/lib/openssl/win32/include/openssl/conf.h
-
ForBot [06-02-04-05]/lib/openssl/win32/include/openssl/conf_api.h
-
ForBot [06-02-04-05]/lib/openssl/win32/include/openssl/crypto.h
-
ForBot [06-02-04-05]/lib/openssl/win32/include/openssl/des.h
-
ForBot [06-02-04-05]/lib/openssl/win32/include/openssl/dh.h
-
ForBot [06-02-04-05]/lib/openssl/win32/include/openssl/dsa.h
-
ForBot [06-02-04-05]/lib/openssl/win32/include/openssl/dso.h
-
ForBot [06-02-04-05]/lib/openssl/win32/include/openssl/e_os.h
-
ForBot [06-02-04-05]/lib/openssl/win32/include/openssl/e_os2.h
-
ForBot [06-02-04-05]/lib/openssl/win32/include/openssl/ebcdic.h
-
ForBot [06-02-04-05]/lib/openssl/win32/include/openssl/engine.h
-
ForBot [06-02-04-05]/lib/openssl/win32/include/openssl/err.h
-
ForBot [06-02-04-05]/lib/openssl/win32/include/openssl/evp.h
-
ForBot [06-02-04-05]/lib/openssl/win32/include/openssl/hmac.h
-
ForBot [06-02-04-05]/lib/openssl/win32/include/openssl/idea.h
-
ForBot [06-02-04-05]/lib/openssl/win32/include/openssl/lhash.h
-
ForBot [06-02-04-05]/lib/openssl/win32/include/openssl/md2.h
-
ForBot [06-02-04-05]/lib/openssl/win32/include/openssl/md4.h
-
ForBot [06-02-04-05]/lib/openssl/win32/include/openssl/md5.h
-
ForBot [06-02-04-05]/lib/openssl/win32/include/openssl/mdc2.h
-
ForBot [06-02-04-05]/lib/openssl/win32/include/openssl/obj_mac.h
-
ForBot [06-02-04-05]/lib/openssl/win32/include/openssl/objects.h
-
ForBot [06-02-04-05]/lib/openssl/win32/include/openssl/opensslconf.h
-
ForBot [06-02-04-05]/lib/openssl/win32/include/openssl/opensslv.h
-
ForBot [06-02-04-05]/lib/openssl/win32/include/openssl/pem.h
-
ForBot [06-02-04-05]/lib/openssl/win32/include/openssl/pem2.h
-
ForBot [06-02-04-05]/lib/openssl/win32/include/openssl/pkcs12.h
-
ForBot [06-02-04-05]/lib/openssl/win32/include/openssl/pkcs7.h
-
ForBot [06-02-04-05]/lib/openssl/win32/include/openssl/rand.h
-
ForBot [06-02-04-05]/lib/openssl/win32/include/openssl/rc2.h
-
ForBot [06-02-04-05]/lib/openssl/win32/include/openssl/rc4.h
-
ForBot [06-02-04-05]/lib/openssl/win32/include/openssl/rc5.h
-
ForBot [06-02-04-05]/lib/openssl/win32/include/openssl/ripemd.h
-
ForBot [06-02-04-05]/lib/openssl/win32/include/openssl/rsa.h
-
ForBot [06-02-04-05]/lib/openssl/win32/include/openssl/rsaref.h
-
ForBot [06-02-04-05]/lib/openssl/win32/include/openssl/safestack.h
-
ForBot [06-02-04-05]/lib/openssl/win32/include/openssl/sha.h
-
ForBot [06-02-04-05]/lib/openssl/win32/include/openssl/ssl.h
-
ForBot [06-02-04-05]/lib/openssl/win32/include/openssl/ssl2.h
-
ForBot [06-02-04-05]/lib/openssl/win32/include/openssl/ssl23.h
-
ForBot [06-02-04-05]/lib/openssl/win32/include/openssl/ssl3.h
-
ForBot [06-02-04-05]/lib/openssl/win32/include/openssl/stack.h
-
ForBot [06-02-04-05]/lib/openssl/win32/include/openssl/symhacks.h
-
ForBot [06-02-04-05]/lib/openssl/win32/include/openssl/tls1.h
-
ForBot [06-02-04-05]/lib/openssl/win32/include/openssl/tmdiff.h
-
ForBot [06-02-04-05]/lib/openssl/win32/include/openssl/txt_db.h
-
ForBot [06-02-04-05]/lib/openssl/win32/include/openssl/x509.h.vbs
-
ForBot [06-02-04-05]/lib/openssl/win32/include/openssl/x509_vfy.h
-
ForBot [06-02-04-05]/lib/openssl/win32/include/openssl/x509v3.h
-
ForBot [06-02-04-05]/lib/openssl/win32/lib/CVS/Entries
-
ForBot [06-02-04-05]/lib/openssl/win32/lib/CVS/Repository
-
ForBot [06-02-04-05]/lib/openssl/win32/lib/CVS/Root