Static task
static1
Behavioral task
behavioral1
Sample
rBot-sxt-harro/misc.vbs
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
rBot-sxt-harro/misc.vbs
Resource
win10v2004-20230220-en
Behavioral task
behavioral3
Sample
rBot-sxt-harro/rBot.html
Resource
win7-20230220-en
Behavioral task
behavioral4
Sample
rBot-sxt-harro/rBot.html
Resource
win10v2004-20230220-en
General
-
Target
rBot-sxt-harro.rar
-
Size
281KB
-
MD5
36d130cbfd1fccb685ad42f303997a04
-
SHA1
2d119c621d0777b05ca31933a5c05759f97d1dcc
-
SHA256
e886c118a566c55254cbcb7708a5d1cfab8cd17ca65dcd581b86bb7a972205d5
-
SHA512
1f7becf652239c453a7551640b7133727ff50d30507b2a3dbb4390425735d7a568220dbe999f54091c42c6a7b69c983cc3f3c9cab9eb5649e9f1ccf59a7f95e6
-
SSDEEP
6144:uhdWbx6cXYDY6bKZkx7smpT4ucuFV2KbK2+43p:UWl/oDY5Zkx7pV4ucW252+I
Malware Config
Signatures
Files
-
rBot-sxt-harro.rar.rar
Password: infected
-
rBot-sxt-harro/advscan.cpp
-
rBot-sxt-harro/advscan.h
-
rBot-sxt-harro/aliaslog.cpp
-
rBot-sxt-harro/aliaslog.h
-
rBot-sxt-harro/autostart.cpp
-
rBot-sxt-harro/autostart.h
-
rBot-sxt-harro/beagle.cpp
-
rBot-sxt-harro/beagle.h
-
rBot-sxt-harro/capture.cpp
-
rBot-sxt-harro/capture.h
-
rBot-sxt-harro/cdkeys.cpp
-
rBot-sxt-harro/cdkeys.h
-
rBot-sxt-harro/changes.txt
-
rBot-sxt-harro/configs.h
-
rBot-sxt-harro/crc32.cpp
-
rBot-sxt-harro/crc32.h
-
rBot-sxt-harro/crypt.cpp
-
rBot-sxt-harro/crypt.h
-
rBot-sxt-harro/dameware.cpp
-
rBot-sxt-harro/dameware.h
-
rBot-sxt-harro/dcc.cpp
-
rBot-sxt-harro/dcc.h
-
rBot-sxt-harro/dcom.cpp
-
rBot-sxt-harro/dcom.h
-
rBot-sxt-harro/dcom2.cpp
-
rBot-sxt-harro/dcom2.h
-
rBot-sxt-harro/ddos.cpp
-
rBot-sxt-harro/ddos.h
-
rBot-sxt-harro/defines.h
-
rBot-sxt-harro/download.cpp
-
rBot-sxt-harro/download.h
-
rBot-sxt-harro/driveinfo.cpp
-
rBot-sxt-harro/driveinfo.h
-
rBot-sxt-harro/externs.h
-
rBot-sxt-harro/findfile.cpp
-
rBot-sxt-harro/findfile.h
-
rBot-sxt-harro/flood.cpp
-
rBot-sxt-harro/flood.h
-
rBot-sxt-harro/fphost.cpp
-
rBot-sxt-harro/fphost.h
-
rBot-sxt-harro/functions.h
-
rBot-sxt-harro/globals.h
-
rBot-sxt-harro/httpd.cpp
-
rBot-sxt-harro/httpd.h
-
rBot-sxt-harro/ident.cpp
-
rBot-sxt-harro/ident.h
-
rBot-sxt-harro/includes.h
-
rBot-sxt-harro/irc_send.cpp
-
rBot-sxt-harro/irc_send.h
-
rBot-sxt-harro/keylogger.cpp
-
rBot-sxt-harro/keylogger.h
-
rBot-sxt-harro/kuang2.cpp
-
rBot-sxt-harro/kuang2.h
-
rBot-sxt-harro/list.txt
-
rBot-sxt-harro/loaddlls.cpp
-
rBot-sxt-harro/loaddlls.h
-
rBot-sxt-harro/lsass without batfile.cpp
-
rBot-sxt-harro/lsass.cpp
-
rBot-sxt-harro/lsass.h
-
rBot-sxt-harro/misc.cpp.vbs
-
rBot-sxt-harro/misc.h
-
rBot-sxt-harro/mssql.cpp
-
rBot-sxt-harro/mssql.h
-
rBot-sxt-harro/mydoom.cpp
-
rBot-sxt-harro/mydoom.h
-
rBot-sxt-harro/myshellcode.asm
-
rBot-sxt-harro/net.cpp
-
rBot-sxt-harro/net.h
-
rBot-sxt-harro/netbios.cpp
-
rBot-sxt-harro/netbios.h
-
rBot-sxt-harro/netdevil.cpp
-
rBot-sxt-harro/netdevil.h
-
rBot-sxt-harro/netutils.cpp
-
rBot-sxt-harro/netutils.h
-
rBot-sxt-harro/ntpass.cpp
-
rBot-sxt-harro/ntpass.h
-
rBot-sxt-harro/optix.cpp
-
rBot-sxt-harro/optix.h
-
rBot-sxt-harro/passwd.h
-
rBot-sxt-harro/pingudp.cpp
-
rBot-sxt-harro/pingudp.h
-
rBot-sxt-harro/processes.cpp
-
rBot-sxt-harro/processes.h
-
rBot-sxt-harro/psniff.cpp
-
rBot-sxt-harro/psniff.h
-
rBot-sxt-harro/rBot.cpp
-
rBot-sxt-harro/rBot.dsp
-
rBot-sxt-harro/rBot.dsw
-
rBot-sxt-harro/rBot.h
-
rBot-sxt-harro/rBot.ncb
-
rBot-sxt-harro/rBot.opt
-
rBot-sxt-harro/rBot.plg.html
-
rBot-sxt-harro/redirect.cpp
-
rBot-sxt-harro/redirect.h
-
rBot-sxt-harro/remotecmd.cpp
-
rBot-sxt-harro/remotecmd.h
-
rBot-sxt-harro/rndnick.cpp
-
rBot-sxt-harro/rndnick.h
-
rBot-sxt-harro/scan.cpp
-
rBot-sxt-harro/scan.h
-
rBot-sxt-harro/secure.cpp
-
rBot-sxt-harro/secure.h
-
rBot-sxt-harro/shellcode.cpp
-
rBot-sxt-harro/shellcode.h
-
rBot-sxt-harro/socks4.cpp
-
rBot-sxt-harro/socks4.h
-
rBot-sxt-harro/sub7.cpp
-
rBot-sxt-harro/sub7.h
-
rBot-sxt-harro/synflood.cpp
-
rBot-sxt-harro/synflood.h
-
rBot-sxt-harro/sysinfo.cpp
-
rBot-sxt-harro/sysinfo.h
-
rBot-sxt-harro/tcpflood.cpp
-
rBot-sxt-harro/tcpflood.h
-
rBot-sxt-harro/tcpip.h
-
rBot-sxt-harro/tftpd.cpp
-
rBot-sxt-harro/tftpd.h
-
rBot-sxt-harro/threads.cpp
-
rBot-sxt-harro/threads.h
-
rBot-sxt-harro/upnp.cpp
-
rBot-sxt-harro/upnp.h
-
rBot-sxt-harro/useless/kuang2.cpp
-
rBot-sxt-harro/useless/kuang2.h
-
rBot-sxt-harro/useless/scanner.cpp
-
rBot-sxt-harro/visit.cpp
-
rBot-sxt-harro/visit.h
-
rBot-sxt-harro/webdav.cpp
-
rBot-sxt-harro/webdav.h
-
rBot-sxt-harro/wildcard.cpp
-
rBot-sxt-harro/wildcard.h
-
rBot-sxt-harro/workstation.cpp
-
rBot-sxt-harro/workstation.h