Static task
static1
Behavioral task
behavioral1
Sample
rx-asn-2-re-worked v3/misc.vbs
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
rx-asn-2-re-worked v3/misc.vbs
Resource
win10v2004-20230220-en
Behavioral task
behavioral3
Sample
rx-asn-2-re-worked v3/rBot.html
Resource
win7-20230220-en
Behavioral task
behavioral4
Sample
rx-asn-2-re-worked v3/rBot.html
Resource
win10v2004-20230220-en
Behavioral task
behavioral5
Sample
rx-asn-2-re-worked v3/rBot.xml
Resource
win7-20230220-en
Behavioral task
behavioral6
Sample
rx-asn-2-re-worked v3/rBot.xml
Resource
win10v2004-20230220-en
General
-
Target
rx-asn-2-re-worked v3.rar
-
Size
312KB
-
MD5
ec2561b44a61d041c398574086785e0c
-
SHA1
ee2afbfa99e41f41800e27310cfefcc0b68d75b1
-
SHA256
d6ba80d25c7f31759ef5003ff07b0edb333123ecf70ef347ab2c9eaa0338ebed
-
SHA512
5fad6e69187788678a9d5139acdd16727f1cc724cfda0c37760252e2924fb29f0e95fd232c3a26d418317cbb5e9697cae2af7250eb9cf24455d0a53f609fdb50
-
SSDEEP
6144:Jj3jiBO5vxb5f/dcY/zXUIRa7EswKri52SCJlZsuZ6BN/jwWLD1Yuupy:NzKuvxbHR/AWswrgOnBJjNuuupy
Malware Config
Signatures
Files
-
rx-asn-2-re-worked v3.rar.rar
Password: infected
-
rx-asn-2-re-worked v3/advscan.cpp
-
rx-asn-2-re-worked v3/advscan.h
-
rx-asn-2-re-worked v3/aliaslog.cpp
-
rx-asn-2-re-worked v3/aliaslog.h
-
rx-asn-2-re-worked v3/autostart.cpp
-
rx-asn-2-re-worked v3/autostart.h
-
rx-asn-2-re-worked v3/avirus.cpp
-
rx-asn-2-re-worked v3/avirus.h
-
rx-asn-2-re-worked v3/capture.cpp
-
rx-asn-2-re-worked v3/capture.h
-
rx-asn-2-re-worked v3/cdkeys.cpp
-
rx-asn-2-re-worked v3/cdkeys.h
-
rx-asn-2-re-worked v3/configs.h
-
rx-asn-2-re-worked v3/crc32.cpp
-
rx-asn-2-re-worked v3/crc32.h
-
rx-asn-2-re-worked v3/crypt.cpp
-
rx-asn-2-re-worked v3/crypt.h
-
rx-asn-2-re-worked v3/dcass.cpp
-
rx-asn-2-re-worked v3/dcass.h
-
rx-asn-2-re-worked v3/dcc.cpp
-
rx-asn-2-re-worked v3/dcc.h
-
rx-asn-2-re-worked v3/dcom.cpp
-
rx-asn-2-re-worked v3/dcom.h
-
rx-asn-2-re-worked v3/ddos.cpp
-
rx-asn-2-re-worked v3/ddos.h
-
rx-asn-2-re-worked v3/defines.h
-
rx-asn-2-re-worked v3/download.cpp
-
rx-asn-2-re-worked v3/download.h
-
rx-asn-2-re-worked v3/driveinfo.cpp
-
rx-asn-2-re-worked v3/driveinfo.h
-
rx-asn-2-re-worked v3/ehandler.cpp
-
rx-asn-2-re-worked v3/ehandler.h
-
rx-asn-2-re-worked v3/externs.h
-
rx-asn-2-re-worked v3/findfile.cpp
-
rx-asn-2-re-worked v3/findfile.h
-
rx-asn-2-re-worked v3/findpass.cpp
-
rx-asn-2-re-worked v3/findpass.h
-
rx-asn-2-re-worked v3/fphost.cpp
-
rx-asn-2-re-worked v3/fphost.h
-
rx-asn-2-re-worked v3/ftpd.cpp
-
rx-asn-2-re-worked v3/ftpd.h
-
rx-asn-2-re-worked v3/functions.h
-
rx-asn-2-re-worked v3/globals.h
-
rx-asn-2-re-worked v3/httpd.cpp
-
rx-asn-2-re-worked v3/httpd.h
-
rx-asn-2-re-worked v3/icmpflood.cpp
-
rx-asn-2-re-worked v3/icmpflood.h
-
rx-asn-2-re-worked v3/ident.cpp
-
rx-asn-2-re-worked v3/ident.h
-
rx-asn-2-re-worked v3/includes.h
-
rx-asn-2-re-worked v3/irc_send.cpp
-
rx-asn-2-re-worked v3/irc_send.h
-
rx-asn-2-re-worked v3/keylogger.cpp
-
rx-asn-2-re-worked v3/keylogger.h
-
rx-asn-2-re-worked v3/loaddlls.cpp
-
rx-asn-2-re-worked v3/loaddlls.h
-
rx-asn-2-re-worked v3/lsass.cpp
-
rx-asn-2-re-worked v3/lsass.h
-
rx-asn-2-re-worked v3/lsass2.cpp
-
rx-asn-2-re-worked v3/lsass2.h
-
rx-asn-2-re-worked v3/massasn.cpp
-
rx-asn-2-re-worked v3/massasn.h
-
rx-asn-2-re-worked v3/misc.cpp.vbs
-
rx-asn-2-re-worked v3/misc.h
-
rx-asn-2-re-worked v3/ms04_007_asn1.cpp
-
rx-asn-2-re-worked v3/ms04_007_asn1.h
-
rx-asn-2-re-worked v3/net.cpp
-
rx-asn-2-re-worked v3/net.h
-
rx-asn-2-re-worked v3/netapi.cpp
-
rx-asn-2-re-worked v3/netapi.h
-
rx-asn-2-re-worked v3/netutils.cpp
-
rx-asn-2-re-worked v3/netutils.h
-
rx-asn-2-re-worked v3/nicklist.h
-
rx-asn-2-re-worked v3/passwd.h
-
rx-asn-2-re-worked v3/pingudp.cpp
-
rx-asn-2-re-worked v3/pingudp.h
-
rx-asn-2-re-worked v3/pnp.cpp
-
rx-asn-2-re-worked v3/pnp.h
-
rx-asn-2-re-worked v3/processes.cpp
-
rx-asn-2-re-worked v3/processes.h
-
rx-asn-2-re-worked v3/psniff.cpp
-
rx-asn-2-re-worked v3/psniff.h
-
rx-asn-2-re-worked v3/rBot.cpp
-
rx-asn-2-re-worked v3/rBot.dsp
-
rx-asn-2-re-worked v3/rBot.dsw
-
rx-asn-2-re-worked v3/rBot.h
-
rx-asn-2-re-worked v3/rBot.ncb
-
rx-asn-2-re-worked v3/rBot.opt
-
rx-asn-2-re-worked v3/rBot.plg.html
-
rx-asn-2-re-worked v3/rBot.sln
-
rx-asn-2-re-worked v3/rBot.suo
-
rx-asn-2-re-worked v3/rBot.vcproj.xml
-
rx-asn-2-re-worked v3/random.cpp
-
rx-asn-2-re-worked v3/random.h
-
rx-asn-2-re-worked v3/redirect.cpp
-
rx-asn-2-re-worked v3/redirect.h
-
rx-asn-2-re-worked v3/remotecmd.cpp
-
rx-asn-2-re-worked v3/remotecmd.h
-
rx-asn-2-re-worked v3/reqbuf.bin
-
rx-asn-2-re-worked v3/rlogind.cpp
-
rx-asn-2-re-worked v3/rlogind.h
-
rx-asn-2-re-worked v3/rndnick.cpp
-
rx-asn-2-re-worked v3/rndnick.h
-
rx-asn-2-re-worked v3/sasser.cpp
-
rx-asn-2-re-worked v3/scan.cpp
-
rx-asn-2-re-worked v3/scan.h
-
rx-asn-2-re-worked v3/secure.cpp
-
rx-asn-2-re-worked v3/secure.h
-
rx-asn-2-re-worked v3/session.cpp
-
rx-asn-2-re-worked v3/session.h
-
rx-asn-2-re-worked v3/shellcode.cpp
-
rx-asn-2-re-worked v3/shellcode.h
-
rx-asn-2-re-worked v3/socks4.cpp
-
rx-asn-2-re-worked v3/socks4.h
-
rx-asn-2-re-worked v3/sym06_010.cpp
-
rx-asn-2-re-worked v3/sym06_010.h
-
rx-asn-2-re-worked v3/synflood.cpp
-
rx-asn-2-re-worked v3/synflood.h
-
rx-asn-2-re-worked v3/sysinfo.cpp
-
rx-asn-2-re-worked v3/sysinfo.h
-
rx-asn-2-re-worked v3/tcpflood.cpp
-
rx-asn-2-re-worked v3/tcpflood.h
-
rx-asn-2-re-worked v3/tcpflood2.cpp
-
rx-asn-2-re-worked v3/tcpflood2.h
-
rx-asn-2-re-worked v3/tcpip.h
-
rx-asn-2-re-worked v3/tftpd.cpp
-
rx-asn-2-re-worked v3/tftpd.h
-
rx-asn-2-re-worked v3/threads.cpp
-
rx-asn-2-re-worked v3/threads.h
-
rx-asn-2-re-worked v3/visit.cpp
-
rx-asn-2-re-worked v3/visit.h
-
rx-asn-2-re-worked v3/vncrooter.cpp
-
rx-asn-2-re-worked v3/vncrooter.h
-
rx-asn-2-re-worked v3/wildcard.cpp
-
rx-asn-2-re-worked v3/wildcard.h
-
rx-asn-2-re-worked v3/workstation.cpp
-
rx-asn-2-re-worked v3/workstation.h