General

  • Target

    reptile-small.rar

  • Size

    309KB

  • MD5

    2f4327515aff4a16196e460d55658382

  • SHA1

    d0642d2888cbd9c9c19315464ce0e3ad2bfc8edc

  • SHA256

    9546a267a67cd8b58ae11171f0c0238b3a828262f96ab2c682b99e2c1bdab05a

  • SHA512

    abd6cb18e7140708157fedda3ae66a85105384a3e60e61f95aa8605c6128087a22440bdec504cbd9cd3ec64be90961f0923fdd3c6ecbd3f1e2842bd252aeaa98

  • SSDEEP

    6144:4JnHKnPlaIeupO45akAHGC7cOW86KCtokOM03CMMRBBcIHn9OmBpP:4JHIPlaGukuGC7XW86KCXn0wuODBpP

Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • reptile-small.rar
    .rar

    Password: infected

  • Driver/Driver.cpp
  • Driver/Driver.dsp
  • Driver/Driver.dsw
  • Driver/Driver.h
  • Driver/Driver.ncb
  • Driver/Jiurl_PortHide.cpp
  • Driver/Jiurl_PortHide.h
  • Driver/Jiurl_tcpioctl.h
  • Driver/ProcessName.c
  • Driver/ProcessName.h
  • Driver/Rootkit.cpp
  • Driver/Rootkit.h
  • Driver/ioctlcmd.h
  • Extras/encrypt.exe
    .exe windows x86

    Password: infected

    d37c06b7a012aae518363f1da9c49f07


    Headers

    Imports

    Sections

  • Extras/reptile.txt
  • Remove/remove.cpp
  • Remove/remove.dsp
  • Remove/remove.dsw
  • Remove/remove.ncb
  • advscan.cpp
  • advscan.h
  • banner.cpp
  • banner.h
  • commands.cpp
  • commands.h
  • configs.h
  • crypt.cpp
  • crypt.h
  • dcom.cpp
  • dcom.h
  • defines.h
  • download.cpp
  • download.h
  • driveinfo.cpp
  • driveinfo.h
  • externs.h
  • fphost.cpp
  • fphost.h
  • ftpd.cpp
  • ftpd.h
  • fu.cpp
    .js
  • fu.h
  • fudll.h
  • functions.h
  • includes.h
  • info.cpp
  • info.h
  • ioctlcmd.h
  • irc.cpp
  • irc.h
  • keylog.cpp
  • loaddlls.cpp
  • loaddlls.h
  • lsass.cpp
  • lsass.h
  • ms04-007.cpp
  • ms04-007.h
  • ms05-039.cpp
  • ms05-039.h
  • mssql.cpp
  • mssql.h
  • netbios.cpp
  • netbios.h
  • netdde.cpp
  • netdde.h
  • netstatp.cpp
  • netstatp.h
  • netutils.cpp
  • netutils.h
  • passwd.h
  • pnp.cpp
  • pnp.h
  • processes.cpp
  • processes.h
  • protocol.cpp
  • protocol.h
  • pstore.cpp
  • pstore.h
  • pstorec.tlh
  • pstorec.tli
  • redirect.cpp
  • redirect.h
  • regcontrol.cpp
  • regcontrol.h
  • reptile.cpp
    .vbs
  • reptile.dsp
  • reptile.dsw
  • reptile.h
  • reptile.ncb
  • reptile.opt
  • reptile.plg
    .html
  • reptile.sln
  • reptile.suo
  • reptile.vcproj
    .xml
  • reptilepass.txt
  • secure.cpp
  • secure.h
  • service.cpp
  • service.h
  • sniffer.cpp
  • sniffer.h
  • socks4.cpp
  • socks4.h
  • speedtest.cpp
  • speedtest.h
  • strings.h
  • stub.exe
  • svchost.cpp
  • svchost.h
  • tcpip.h
  • thcsql.cpp
  • thcsql.h
  • threads.cpp
  • threads.h
  • utility.cpp
    .js
  • utility.h
  • vscan.cpp
  • vscan.h
  • vscandef.h
  • wins.cpp
  • wins.h
  • wkssvc.cpp
  • wkssvc.h