Static task
static1
Behavioral task
behavioral1
Sample
rx-asn-2-re-worked v3/misc.vbs
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
rx-asn-2-re-worked v3/misc.vbs
Resource
win10v2004-20230220-en
Behavioral task
behavioral3
Sample
rx-asn-2-re-worked v3/rBot.html
Resource
win7-20230220-en
Behavioral task
behavioral4
Sample
rx-asn-2-re-worked v3/rBot.html
Resource
win10v2004-20230220-en
Behavioral task
behavioral5
Sample
rx-asn-2-re-worked v3/rBot.xml
Resource
win7-20230220-en
Behavioral task
behavioral6
Sample
rx-asn-2-re-worked v3/rBot.xml
Resource
win10v2004-20230220-en
General
-
Target
rx-asn-2-re-worked_v3.rar
-
Size
325KB
-
MD5
901c4b3f29a5cb17759bfab16834e57b
-
SHA1
9b729b4a8dab00acae803cb72598a637f75605d1
-
SHA256
9a0f35906dd7314b5981c5aea7b431da314418d71a4d10fddf3ec4e9663402a3
-
SHA512
e3f3b3b57996096cb32b30b89e1e087be08fa3b33a688e7442ce79498bba4677f176d26da8786ce3960df726eb6d3bceb24c77e8ca75343bf17b2f3626c999b8
-
SSDEEP
6144:IlZ3dhWBYOTmyj/caLcsG6kyVqnDKJEcLEVX27KDI8Q53g1/0qx5AxzxoLuGY8:IlZNcBYImyIaqTlDuzYVxDI8Q53g/0qn
Malware Config
Signatures
Files
-
rx-asn-2-re-worked_v3.rar.rar
Password: infected
-
rx-asn-2-re-worked v3/advscan.cpp
-
rx-asn-2-re-worked v3/advscan.h
-
rx-asn-2-re-worked v3/aliaslog.cpp
-
rx-asn-2-re-worked v3/aliaslog.h
-
rx-asn-2-re-worked v3/autostart.cpp
-
rx-asn-2-re-worked v3/autostart.h
-
rx-asn-2-re-worked v3/avirus.cpp
-
rx-asn-2-re-worked v3/avirus.h
-
rx-asn-2-re-worked v3/capture.cpp
-
rx-asn-2-re-worked v3/capture.h
-
rx-asn-2-re-worked v3/cdkeys.cpp
-
rx-asn-2-re-worked v3/cdkeys.h
-
rx-asn-2-re-worked v3/configs.h
-
rx-asn-2-re-worked v3/crc32.cpp
-
rx-asn-2-re-worked v3/crc32.h
-
rx-asn-2-re-worked v3/crypt.cpp
-
rx-asn-2-re-worked v3/crypt.h
-
rx-asn-2-re-worked v3/dcass.cpp
-
rx-asn-2-re-worked v3/dcass.h
-
rx-asn-2-re-worked v3/dcc.cpp
-
rx-asn-2-re-worked v3/dcc.h
-
rx-asn-2-re-worked v3/dcom.cpp
-
rx-asn-2-re-worked v3/dcom.h
-
rx-asn-2-re-worked v3/ddos.cpp
-
rx-asn-2-re-worked v3/ddos.h
-
rx-asn-2-re-worked v3/defines.h
-
rx-asn-2-re-worked v3/download.cpp
-
rx-asn-2-re-worked v3/download.h
-
rx-asn-2-re-worked v3/driveinfo.cpp
-
rx-asn-2-re-worked v3/driveinfo.h
-
rx-asn-2-re-worked v3/ehandler.cpp
-
rx-asn-2-re-worked v3/ehandler.h
-
rx-asn-2-re-worked v3/externs.h
-
rx-asn-2-re-worked v3/findfile.cpp
-
rx-asn-2-re-worked v3/findfile.h
-
rx-asn-2-re-worked v3/findpass.cpp
-
rx-asn-2-re-worked v3/findpass.h
-
rx-asn-2-re-worked v3/fphost.cpp
-
rx-asn-2-re-worked v3/fphost.h
-
rx-asn-2-re-worked v3/ftpd.cpp
-
rx-asn-2-re-worked v3/ftpd.h
-
rx-asn-2-re-worked v3/functions.h
-
rx-asn-2-re-worked v3/globals.h
-
rx-asn-2-re-worked v3/httpd.cpp
-
rx-asn-2-re-worked v3/httpd.h
-
rx-asn-2-re-worked v3/icmpflood.cpp
-
rx-asn-2-re-worked v3/icmpflood.h
-
rx-asn-2-re-worked v3/ident.cpp
-
rx-asn-2-re-worked v3/ident.h
-
rx-asn-2-re-worked v3/includes.h
-
rx-asn-2-re-worked v3/irc_send.cpp
-
rx-asn-2-re-worked v3/irc_send.h
-
rx-asn-2-re-worked v3/keylogger.cpp
-
rx-asn-2-re-worked v3/keylogger.h
-
rx-asn-2-re-worked v3/loaddlls.cpp
-
rx-asn-2-re-worked v3/loaddlls.h
-
rx-asn-2-re-worked v3/lsass.cpp
-
rx-asn-2-re-worked v3/lsass.h
-
rx-asn-2-re-worked v3/lsass2.cpp
-
rx-asn-2-re-worked v3/lsass2.h
-
rx-asn-2-re-worked v3/massasn.cpp
-
rx-asn-2-re-worked v3/massasn.h
-
rx-asn-2-re-worked v3/misc.cpp.vbs
-
rx-asn-2-re-worked v3/misc.h
-
rx-asn-2-re-worked v3/ms04_007_asn1.cpp
-
rx-asn-2-re-worked v3/ms04_007_asn1.h
-
rx-asn-2-re-worked v3/net.cpp
-
rx-asn-2-re-worked v3/net.h
-
rx-asn-2-re-worked v3/netapi.cpp
-
rx-asn-2-re-worked v3/netapi.h
-
rx-asn-2-re-worked v3/netutils.cpp
-
rx-asn-2-re-worked v3/netutils.h
-
rx-asn-2-re-worked v3/nicklist.h
-
rx-asn-2-re-worked v3/passwd.h
-
rx-asn-2-re-worked v3/pingudp.cpp
-
rx-asn-2-re-worked v3/pingudp.h
-
rx-asn-2-re-worked v3/pnp.cpp
-
rx-asn-2-re-worked v3/pnp.h
-
rx-asn-2-re-worked v3/processes.cpp
-
rx-asn-2-re-worked v3/processes.h
-
rx-asn-2-re-worked v3/psniff.cpp
-
rx-asn-2-re-worked v3/psniff.h
-
rx-asn-2-re-worked v3/rBot.cpp
-
rx-asn-2-re-worked v3/rBot.dsp
-
rx-asn-2-re-worked v3/rBot.dsw
-
rx-asn-2-re-worked v3/rBot.h
-
rx-asn-2-re-worked v3/rBot.ncb
-
rx-asn-2-re-worked v3/rBot.opt
-
rx-asn-2-re-worked v3/rBot.plg.html
-
rx-asn-2-re-worked v3/rBot.sln
-
rx-asn-2-re-worked v3/rBot.suo
-
rx-asn-2-re-worked v3/rBot.vcproj.xml
-
rx-asn-2-re-worked v3/random.cpp
-
rx-asn-2-re-worked v3/random.h
-
rx-asn-2-re-worked v3/redirect.cpp
-
rx-asn-2-re-worked v3/redirect.h
-
rx-asn-2-re-worked v3/remotecmd.cpp
-
rx-asn-2-re-worked v3/remotecmd.h
-
rx-asn-2-re-worked v3/reqbuf.bin
-
rx-asn-2-re-worked v3/rlogind.cpp
-
rx-asn-2-re-worked v3/rlogind.h
-
rx-asn-2-re-worked v3/rndnick.cpp
-
rx-asn-2-re-worked v3/rndnick.h
-
rx-asn-2-re-worked v3/sasser.cpp
-
rx-asn-2-re-worked v3/scan.cpp
-
rx-asn-2-re-worked v3/scan.h
-
rx-asn-2-re-worked v3/secure.cpp
-
rx-asn-2-re-worked v3/secure.h
-
rx-asn-2-re-worked v3/session.cpp
-
rx-asn-2-re-worked v3/session.h
-
rx-asn-2-re-worked v3/shellcode.cpp
-
rx-asn-2-re-worked v3/shellcode.h
-
rx-asn-2-re-worked v3/socks4.cpp
-
rx-asn-2-re-worked v3/socks4.h
-
rx-asn-2-re-worked v3/sym06_010.cpp
-
rx-asn-2-re-worked v3/sym06_010.h
-
rx-asn-2-re-worked v3/synflood.cpp
-
rx-asn-2-re-worked v3/synflood.h
-
rx-asn-2-re-worked v3/sysinfo.cpp
-
rx-asn-2-re-worked v3/sysinfo.h
-
rx-asn-2-re-worked v3/tcpflood.cpp
-
rx-asn-2-re-worked v3/tcpflood.h
-
rx-asn-2-re-worked v3/tcpflood2.cpp
-
rx-asn-2-re-worked v3/tcpflood2.h
-
rx-asn-2-re-worked v3/tcpip.h
-
rx-asn-2-re-worked v3/tftpd.cpp
-
rx-asn-2-re-worked v3/tftpd.h
-
rx-asn-2-re-worked v3/threads.cpp
-
rx-asn-2-re-worked v3/threads.h
-
rx-asn-2-re-worked v3/visit.cpp
-
rx-asn-2-re-worked v3/visit.h
-
rx-asn-2-re-worked v3/vncrooter.cpp
-
rx-asn-2-re-worked v3/vncrooter.h
-
rx-asn-2-re-worked v3/wildcard.cpp
-
rx-asn-2-re-worked v3/wildcard.h
-
rx-asn-2-re-worked v3/workstation.cpp
-
rx-asn-2-re-worked v3/workstation.h