Static task
static1
Behavioral task
behavioral1
Sample
rxbot-EcLiPsE1.1.priv/misc.vbs
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
rxbot-EcLiPsE1.1.priv/misc.vbs
Resource
win10v2004-20230220-en
Behavioral task
behavioral3
Sample
rxbot-EcLiPsE1.1.priv/rBot.html
Resource
win7-20230220-en
Behavioral task
behavioral4
Sample
rxbot-EcLiPsE1.1.priv/rBot.html
Resource
win10v2004-20230220-en
General
-
Target
rxbot-EcLiPsE-cReW-1.1.priv.rar
-
Size
251KB
-
MD5
69b427aa15549ecfe51279f7b4469cb7
-
SHA1
dab8da24c5bc6799fa04c64c138254b0811d963b
-
SHA256
b497424e080ca36f80bb18c51d6402da033341947317983cb47cd4e10ba0324a
-
SHA512
ec26d15bc75ac5f63fd7a28f6c992ffaf080bbe1d44b6f332d06857b698321f5fb179ff96347216bd3c1cb2e559d26c3139086226c4997de7a14319fb5352079
-
SSDEEP
6144:tnj0eBr8Zzp3aGosyK0yG3LjSrh0CmHNtnmc:tfBr8tp3a/rTer2/D
Malware Config
Signatures
Files
-
rxbot-EcLiPsE-cReW-1.1.priv.rar.rar
Password: infected
-
rxbot-EcLiPsE1.1.priv/Read Me.txt
-
rxbot-EcLiPsE1.1.priv/advscan.cpp
-
rxbot-EcLiPsE1.1.priv/advscan.h
-
rxbot-EcLiPsE1.1.priv/aliaslog.cpp
-
rxbot-EcLiPsE1.1.priv/aliaslog.h
-
rxbot-EcLiPsE1.1.priv/autostart.cpp
-
rxbot-EcLiPsE1.1.priv/autostart.h
-
rxbot-EcLiPsE1.1.priv/avirus.cpp
-
rxbot-EcLiPsE1.1.priv/avirus.h
-
rxbot-EcLiPsE1.1.priv/beagle.cpp
-
rxbot-EcLiPsE1.1.priv/beagle.h
-
rxbot-EcLiPsE1.1.priv/capture.cpp
-
rxbot-EcLiPsE1.1.priv/capture.h
-
rxbot-EcLiPsE1.1.priv/cdkeys.cpp
-
rxbot-EcLiPsE1.1.priv/cdkeys.h
-
rxbot-EcLiPsE1.1.priv/configs.h
-
rxbot-EcLiPsE1.1.priv/crc32.cpp
-
rxbot-EcLiPsE1.1.priv/crc32.h
-
rxbot-EcLiPsE1.1.priv/crypt.cpp
-
rxbot-EcLiPsE1.1.priv/crypt.h
-
rxbot-EcLiPsE1.1.priv/dameware.cpp
-
rxbot-EcLiPsE1.1.priv/dameware.h
-
rxbot-EcLiPsE1.1.priv/dcc.cpp
-
rxbot-EcLiPsE1.1.priv/dcc.h
-
rxbot-EcLiPsE1.1.priv/dcom.cpp
-
rxbot-EcLiPsE1.1.priv/dcom.h
-
rxbot-EcLiPsE1.1.priv/dcom2.cpp
-
rxbot-EcLiPsE1.1.priv/dcom2.h
-
rxbot-EcLiPsE1.1.priv/ddos.cpp
-
rxbot-EcLiPsE1.1.priv/ddos.h
-
rxbot-EcLiPsE1.1.priv/defines.h
-
rxbot-EcLiPsE1.1.priv/download.cpp
-
rxbot-EcLiPsE1.1.priv/download.h
-
rxbot-EcLiPsE1.1.priv/driveinfo.cpp
-
rxbot-EcLiPsE1.1.priv/driveinfo.h
-
rxbot-EcLiPsE1.1.priv/ehandler.cpp
-
rxbot-EcLiPsE1.1.priv/ehandler.h
-
rxbot-EcLiPsE1.1.priv/externs.h
-
rxbot-EcLiPsE1.1.priv/findfile.cpp
-
rxbot-EcLiPsE1.1.priv/findfile.h
-
rxbot-EcLiPsE1.1.priv/findpass.cpp
-
rxbot-EcLiPsE1.1.priv/findpass.h
-
rxbot-EcLiPsE1.1.priv/fphost.cpp
-
rxbot-EcLiPsE1.1.priv/fphost.h
-
rxbot-EcLiPsE1.1.priv/functions.h
-
rxbot-EcLiPsE1.1.priv/globals.h
-
rxbot-EcLiPsE1.1.priv/httpd.cpp
-
rxbot-EcLiPsE1.1.priv/httpd.h
-
rxbot-EcLiPsE1.1.priv/icmpflood.cpp
-
rxbot-EcLiPsE1.1.priv/icmpflood.h
-
rxbot-EcLiPsE1.1.priv/ident.cpp
-
rxbot-EcLiPsE1.1.priv/ident.h
-
rxbot-EcLiPsE1.1.priv/includes.h
-
rxbot-EcLiPsE1.1.priv/irc_send.cpp
-
rxbot-EcLiPsE1.1.priv/irc_send.h
-
rxbot-EcLiPsE1.1.priv/keylogger.cpp
-
rxbot-EcLiPsE1.1.priv/keylogger.h
-
rxbot-EcLiPsE1.1.priv/kuang2.cpp
-
rxbot-EcLiPsE1.1.priv/kuang2.h
-
rxbot-EcLiPsE1.1.priv/loaddlls.cpp
-
rxbot-EcLiPsE1.1.priv/loaddlls.h
-
rxbot-EcLiPsE1.1.priv/lsass.cpp
-
rxbot-EcLiPsE1.1.priv/lsass.h
-
rxbot-EcLiPsE1.1.priv/misc.cpp.vbs
-
rxbot-EcLiPsE1.1.priv/misc.h
-
rxbot-EcLiPsE1.1.priv/mssql.cpp
-
rxbot-EcLiPsE1.1.priv/mssql.h
-
rxbot-EcLiPsE1.1.priv/mydoom.cpp
-
rxbot-EcLiPsE1.1.priv/mydoom.h
-
rxbot-EcLiPsE1.1.priv/net.cpp
-
rxbot-EcLiPsE1.1.priv/net.h
-
rxbot-EcLiPsE1.1.priv/netbios.cpp
-
rxbot-EcLiPsE1.1.priv/netbios.h
-
rxbot-EcLiPsE1.1.priv/netdevil.cpp
-
rxbot-EcLiPsE1.1.priv/netdevil.h
-
rxbot-EcLiPsE1.1.priv/netutils.cpp
-
rxbot-EcLiPsE1.1.priv/netutils.h
-
rxbot-EcLiPsE1.1.priv/nicklist.h
-
rxbot-EcLiPsE1.1.priv/optix.cpp
-
rxbot-EcLiPsE1.1.priv/optix.h
-
rxbot-EcLiPsE1.1.priv/passwd.h
-
rxbot-EcLiPsE1.1.priv/peer2peer.cpp
-
rxbot-EcLiPsE1.1.priv/peer2peer.h
-
rxbot-EcLiPsE1.1.priv/pingudp.cpp
-
rxbot-EcLiPsE1.1.priv/pingudp.h
-
rxbot-EcLiPsE1.1.priv/processes.cpp
-
rxbot-EcLiPsE1.1.priv/processes.h
-
rxbot-EcLiPsE1.1.priv/psniff.cpp
-
rxbot-EcLiPsE1.1.priv/psniff.h
-
rxbot-EcLiPsE1.1.priv/rBot.cpp
-
rxbot-EcLiPsE1.1.priv/rBot.dsp
-
rxbot-EcLiPsE1.1.priv/rBot.dsw
-
rxbot-EcLiPsE1.1.priv/rBot.h
-
rxbot-EcLiPsE1.1.priv/rBot.ncb
-
rxbot-EcLiPsE1.1.priv/rBot.opt
-
rxbot-EcLiPsE1.1.priv/rBot.plg.html
-
rxbot-EcLiPsE1.1.priv/redirect.cpp
-
rxbot-EcLiPsE1.1.priv/redirect.h
-
rxbot-EcLiPsE1.1.priv/remotecmd.cpp
-
rxbot-EcLiPsE1.1.priv/remotecmd.h
-
rxbot-EcLiPsE1.1.priv/rlogind.cpp
-
rxbot-EcLiPsE1.1.priv/rlogind.h
-
rxbot-EcLiPsE1.1.priv/rndnick.cpp
-
rxbot-EcLiPsE1.1.priv/rndnick.h
-
rxbot-EcLiPsE1.1.priv/scan.cpp
-
rxbot-EcLiPsE1.1.priv/scan.h
-
rxbot-EcLiPsE1.1.priv/secure.cpp
-
rxbot-EcLiPsE1.1.priv/secure.h
-
rxbot-EcLiPsE1.1.priv/session.cpp
-
rxbot-EcLiPsE1.1.priv/session.h
-
rxbot-EcLiPsE1.1.priv/shellcode.cpp
-
rxbot-EcLiPsE1.1.priv/shellcode.h
-
rxbot-EcLiPsE1.1.priv/socks4.cpp
-
rxbot-EcLiPsE1.1.priv/socks4.h
-
rxbot-EcLiPsE1.1.priv/sub7.cpp
-
rxbot-EcLiPsE1.1.priv/sub7.h
-
rxbot-EcLiPsE1.1.priv/synflood.cpp
-
rxbot-EcLiPsE1.1.priv/synflood.h
-
rxbot-EcLiPsE1.1.priv/sysinfo.cpp
-
rxbot-EcLiPsE1.1.priv/sysinfo.h
-
rxbot-EcLiPsE1.1.priv/tcpflood.cpp
-
rxbot-EcLiPsE1.1.priv/tcpflood.h
-
rxbot-EcLiPsE1.1.priv/tcpflood2.cpp
-
rxbot-EcLiPsE1.1.priv/tcpflood2.h
-
rxbot-EcLiPsE1.1.priv/tcpip.h
-
rxbot-EcLiPsE1.1.priv/tftpd.cpp
-
rxbot-EcLiPsE1.1.priv/tftpd.h
-
rxbot-EcLiPsE1.1.priv/threads.cpp
-
rxbot-EcLiPsE1.1.priv/threads.h
-
rxbot-EcLiPsE1.1.priv/upnp.cpp
-
rxbot-EcLiPsE1.1.priv/upnp.h
-
rxbot-EcLiPsE1.1.priv/visit.cpp
-
rxbot-EcLiPsE1.1.priv/visit.h
-
rxbot-EcLiPsE1.1.priv/webdav.cpp
-
rxbot-EcLiPsE1.1.priv/webdav.h
-
rxbot-EcLiPsE1.1.priv/wildcard.cpp
-
rxbot-EcLiPsE1.1.priv/wildcard.h
-
rxbot-EcLiPsE1.1.priv/workstation.cpp
-
rxbot-EcLiPsE1.1.priv/workstation.h