Static task
static1
Behavioral task
behavioral1
Sample
misc.vbs
Resource
win7-20230220-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
misc.vbs
Resource
win10v2004-20230220-en
windows10-2004-x64
0 signatures
150 seconds
General
-
Target
irbot0.15.rar
-
Size
103KB
-
MD5
2968af1c1a9ca3c1b8258f5902ec91c6
-
SHA1
ed78be37b781b28f5de03baa05774d4bf44e20c2
-
SHA256
551621b5b16042a5774f7a9ebf2d324b208c8cc072530d2a9b3f03ca8ca347b6
-
SHA512
00e2749e39a5137c914e8e0da660e39e7c637938ab00670757d94284f4f522c7de79df35352bbb2765a48acb980dd1c03ff368abf58e2c6a444c97b1fcdb0d82
-
SSDEEP
3072:FguCu7Vaqmkelrhg3MCfiYjPAVwA0vshUJAkldUmkjf:Fgb+aqjG6LfiYjPAyTJRUFf
Score
1/10
Malware Config
Signatures
Files
-
irbot0.15.rar.rar
Password: infected
-
advscan.cpp
-
advscan.h
-
aliaslog.cpp
-
aliaslog.h
-
autostart.cpp
-
autostart.h
-
clsass.cpp
-
clsass.h
-
configs.h
-
crc32.cpp
-
crc32.h
-
crypt.cpp
-
crypt.h
-
dcass.cpp
-
dcass.h
-
dcom.cpp
-
dcom.h
-
dcom2.cpp
-
dcom2.h
-
defines.h
-
download.cpp
-
download.h
-
driveinfo.cpp
-
driveinfo.h
-
ehandler.cpp
-
ehandler.h
-
externs.h
-
fphost.cpp
-
fphost.h
-
ftpd.cpp
-
ftpd.h
-
functions.h
-
globals.h
-
httpd.cpp
-
httpd.h
-
ident.cpp
-
ident.h
-
includes.h
-
irb.cpp
-
irb.dsp
-
irb.dsw
-
irb.h
-
irc_send.cpp
-
irc_send.h
-
loaddlls.cpp
-
loaddlls.h
-
lsass.cpp
-
lsass.h
-
lsass1lsass.cpp
-
lsass1lsass.h
-
misc.cpp.vbs
-
misc.h
-
mssql.cpp
-
mssql.h
-
mssqllsass.cpp
-
mssqllsass.h
-
ndcass.cpp
-
ndcass.h
-
net.cpp
-
net.h
-
netbios.cpp
-
netbios.h
-
netutils.cpp
-
netutils.h
-
passwd.h
-
processes.cpp
-
processes.h
-
random.cpp
-
random.h
-
redirect.cpp
-
redirect.h
-
rndnick.cpp
-
rndnick.h
-
scan.cpp
-
scan.h
-
secure.cpp
-
secure.h
-
session.cpp
-
session.h
-
shellcode.cpp
-
shellcode.h
-
synflood.cpp
-
synflood.h
-
sysinfo.cpp
-
sysinfo.h
-
tcpip.h
-
tftpd.cpp
-
tftpd.h
-
threads.cpp
-
threads.h
-
visit.cpp
-
visit.h
-
wildcard.cpp
-
wildcard.h
-
wksmass.cpp
-
wksmass.h
-
wkssvc.cpp
-
wkssvc.h