Static task
static1
Behavioral task
behavioral1
Sample
rxBot0.6.6d-priv+stable-CoKeHeAd/rxBot0.6.6d-priv+stable-CoKeHeAd/misc.vbs
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
rxBot0.6.6d-priv+stable-CoKeHeAd/rxBot0.6.6d-priv+stable-CoKeHeAd/misc.vbs
Resource
win10v2004-20230220-en
Behavioral task
behavioral3
Sample
rxBot0.6.6d-priv+stable-CoKeHeAd/rxBot0.6.6d-priv+stable-CoKeHeAd/rxbot.html
Resource
win7-20230220-en
Behavioral task
behavioral4
Sample
rxBot0.6.6d-priv+stable-CoKeHeAd/rxBot0.6.6d-priv+stable-CoKeHeAd/rxbot.html
Resource
win10v2004-20230220-en
General
-
Target
rxBot0.6.6b-priv-stable-CoKeHeAd.rar
-
Size
260KB
-
MD5
9a9e3aaf4ffd6de3a56cf71f614676c7
-
SHA1
0e76e13c5a2265f46e939c3748ff2f2e9609243c
-
SHA256
deff25eaa1d5f4e6b5c45f52e487972a57074fbd2508f2bf3c5f8f82ef0373a4
-
SHA512
a04638ea3003f7a6eded4d98ea20364001dfe7478bc8dceb82256aa2b8ba27a96200ffa0dc335f628f801183913c53dd3f1735a40073ba97aa15761437002028
-
SSDEEP
6144:x40MsIf4Rc5U2C9Y0r7jhrnoAw3xgpdgEM4epMuW5/OcMT:x40Mh4Rdh9YC7jhrnxixxpy5/OcS
Malware Config
Signatures
Files
-
rxBot0.6.6b-priv-stable-CoKeHeAd.rar.rar
Password: infected
-
rxBot0.6.6d-priv+stable-CoKeHeAd/rxBot0.6.6d-priv+stable-CoKeHeAd/advscan.cpp
-
rxBot0.6.6d-priv+stable-CoKeHeAd/rxBot0.6.6d-priv+stable-CoKeHeAd/advscan.h
-
rxBot0.6.6d-priv+stable-CoKeHeAd/rxBot0.6.6d-priv+stable-CoKeHeAd/aliaslog.cpp
-
rxBot0.6.6d-priv+stable-CoKeHeAd/rxBot0.6.6d-priv+stable-CoKeHeAd/aliaslog.h
-
rxBot0.6.6d-priv+stable-CoKeHeAd/rxBot0.6.6d-priv+stable-CoKeHeAd/autostart.cpp
-
rxBot0.6.6d-priv+stable-CoKeHeAd/rxBot0.6.6d-priv+stable-CoKeHeAd/autostart.h
-
rxBot0.6.6d-priv+stable-CoKeHeAd/rxBot0.6.6d-priv+stable-CoKeHeAd/beagle.cpp
-
rxBot0.6.6d-priv+stable-CoKeHeAd/rxBot0.6.6d-priv+stable-CoKeHeAd/beagle.h
-
rxBot0.6.6d-priv+stable-CoKeHeAd/rxBot0.6.6d-priv+stable-CoKeHeAd/capture.cpp
-
rxBot0.6.6d-priv+stable-CoKeHeAd/rxBot0.6.6d-priv+stable-CoKeHeAd/capture.h
-
rxBot0.6.6d-priv+stable-CoKeHeAd/rxBot0.6.6d-priv+stable-CoKeHeAd/cdkeys.cpp
-
rxBot0.6.6d-priv+stable-CoKeHeAd/rxBot0.6.6d-priv+stable-CoKeHeAd/cdkeys.h
-
rxBot0.6.6d-priv+stable-CoKeHeAd/rxBot0.6.6d-priv+stable-CoKeHeAd/commands.cpp
-
rxBot0.6.6d-priv+stable-CoKeHeAd/rxBot0.6.6d-priv+stable-CoKeHeAd/commands.h
-
rxBot0.6.6d-priv+stable-CoKeHeAd/rxBot0.6.6d-priv+stable-CoKeHeAd/configs.h
-
rxBot0.6.6d-priv+stable-CoKeHeAd/rxBot0.6.6d-priv+stable-CoKeHeAd/connect.cpp
-
rxBot0.6.6d-priv+stable-CoKeHeAd/rxBot0.6.6d-priv+stable-CoKeHeAd/connect.h
-
rxBot0.6.6d-priv+stable-CoKeHeAd/rxBot0.6.6d-priv+stable-CoKeHeAd/crc32.cpp
-
rxBot0.6.6d-priv+stable-CoKeHeAd/rxBot0.6.6d-priv+stable-CoKeHeAd/crc32.h
-
rxBot0.6.6d-priv+stable-CoKeHeAd/rxBot0.6.6d-priv+stable-CoKeHeAd/crypt.cpp
-
rxBot0.6.6d-priv+stable-CoKeHeAd/rxBot0.6.6d-priv+stable-CoKeHeAd/crypt.h
-
rxBot0.6.6d-priv+stable-CoKeHeAd/rxBot0.6.6d-priv+stable-CoKeHeAd/dameware.cpp
-
rxBot0.6.6d-priv+stable-CoKeHeAd/rxBot0.6.6d-priv+stable-CoKeHeAd/dameware.h
-
rxBot0.6.6d-priv+stable-CoKeHeAd/rxBot0.6.6d-priv+stable-CoKeHeAd/dcc.cpp
-
rxBot0.6.6d-priv+stable-CoKeHeAd/rxBot0.6.6d-priv+stable-CoKeHeAd/dcc.h
-
rxBot0.6.6d-priv+stable-CoKeHeAd/rxBot0.6.6d-priv+stable-CoKeHeAd/dcom.cpp
-
rxBot0.6.6d-priv+stable-CoKeHeAd/rxBot0.6.6d-priv+stable-CoKeHeAd/dcom.h
-
rxBot0.6.6d-priv+stable-CoKeHeAd/rxBot0.6.6d-priv+stable-CoKeHeAd/defines.h
-
rxBot0.6.6d-priv+stable-CoKeHeAd/rxBot0.6.6d-priv+stable-CoKeHeAd/download.cpp
-
rxBot0.6.6d-priv+stable-CoKeHeAd/rxBot0.6.6d-priv+stable-CoKeHeAd/download.h
-
rxBot0.6.6d-priv+stable-CoKeHeAd/rxBot0.6.6d-priv+stable-CoKeHeAd/driveinfo.cpp
-
rxBot0.6.6d-priv+stable-CoKeHeAd/rxBot0.6.6d-priv+stable-CoKeHeAd/driveinfo.h
-
rxBot0.6.6d-priv+stable-CoKeHeAd/rxBot0.6.6d-priv+stable-CoKeHeAd/ehandler.cpp
-
rxBot0.6.6d-priv+stable-CoKeHeAd/rxBot0.6.6d-priv+stable-CoKeHeAd/ehandler.h
-
rxBot0.6.6d-priv+stable-CoKeHeAd/rxBot0.6.6d-priv+stable-CoKeHeAd/externs.h
-
rxBot0.6.6d-priv+stable-CoKeHeAd/rxBot0.6.6d-priv+stable-CoKeHeAd/findfile.cpp
-
rxBot0.6.6d-priv+stable-CoKeHeAd/rxBot0.6.6d-priv+stable-CoKeHeAd/findfile.h
-
rxBot0.6.6d-priv+stable-CoKeHeAd/rxBot0.6.6d-priv+stable-CoKeHeAd/findpass.cpp
-
rxBot0.6.6d-priv+stable-CoKeHeAd/rxBot0.6.6d-priv+stable-CoKeHeAd/findpass.h
-
rxBot0.6.6d-priv+stable-CoKeHeAd/rxBot0.6.6d-priv+stable-CoKeHeAd/fphost.cpp
-
rxBot0.6.6d-priv+stable-CoKeHeAd/rxBot0.6.6d-priv+stable-CoKeHeAd/fphost.h
-
rxBot0.6.6d-priv+stable-CoKeHeAd/rxBot0.6.6d-priv+stable-CoKeHeAd/ftptransfer.cpp
-
rxBot0.6.6d-priv+stable-CoKeHeAd/rxBot0.6.6d-priv+stable-CoKeHeAd/ftptransfer.h
-
rxBot0.6.6d-priv+stable-CoKeHeAd/rxBot0.6.6d-priv+stable-CoKeHeAd/functions.h
-
rxBot0.6.6d-priv+stable-CoKeHeAd/rxBot0.6.6d-priv+stable-CoKeHeAd/global.h
-
rxBot0.6.6d-priv+stable-CoKeHeAd/rxBot0.6.6d-priv+stable-CoKeHeAd/globals.h
-
rxBot0.6.6d-priv+stable-CoKeHeAd/rxBot0.6.6d-priv+stable-CoKeHeAd/httpd.cpp
-
rxBot0.6.6d-priv+stable-CoKeHeAd/rxBot0.6.6d-priv+stable-CoKeHeAd/httpd.h
-
rxBot0.6.6d-priv+stable-CoKeHeAd/rxBot0.6.6d-priv+stable-CoKeHeAd/icmpflood.cpp
-
rxBot0.6.6d-priv+stable-CoKeHeAd/rxBot0.6.6d-priv+stable-CoKeHeAd/icmpflood.h
-
rxBot0.6.6d-priv+stable-CoKeHeAd/rxBot0.6.6d-priv+stable-CoKeHeAd/ident.cpp
-
rxBot0.6.6d-priv+stable-CoKeHeAd/rxBot0.6.6d-priv+stable-CoKeHeAd/ident.h
-
rxBot0.6.6d-priv+stable-CoKeHeAd/rxBot0.6.6d-priv+stable-CoKeHeAd/iis5ssl.cpp
-
rxBot0.6.6d-priv+stable-CoKeHeAd/rxBot0.6.6d-priv+stable-CoKeHeAd/iis5ssl.h
-
rxBot0.6.6d-priv+stable-CoKeHeAd/rxBot0.6.6d-priv+stable-CoKeHeAd/includes.h
-
rxBot0.6.6d-priv+stable-CoKeHeAd/rxBot0.6.6d-priv+stable-CoKeHeAd/irc_send.cpp
-
rxBot0.6.6d-priv+stable-CoKeHeAd/rxBot0.6.6d-priv+stable-CoKeHeAd/irc_send.h
-
rxBot0.6.6d-priv+stable-CoKeHeAd/rxBot0.6.6d-priv+stable-CoKeHeAd/keylogger.cpp
-
rxBot0.6.6d-priv+stable-CoKeHeAd/rxBot0.6.6d-priv+stable-CoKeHeAd/keylogger.h
-
rxBot0.6.6d-priv+stable-CoKeHeAd/rxBot0.6.6d-priv+stable-CoKeHeAd/kuang2.cpp
-
rxBot0.6.6d-priv+stable-CoKeHeAd/rxBot0.6.6d-priv+stable-CoKeHeAd/kuang2.h
-
rxBot0.6.6d-priv+stable-CoKeHeAd/rxBot0.6.6d-priv+stable-CoKeHeAd/license.txt
-
rxBot0.6.6d-priv+stable-CoKeHeAd/rxBot0.6.6d-priv+stable-CoKeHeAd/list.txt
-
rxBot0.6.6d-priv+stable-CoKeHeAd/rxBot0.6.6d-priv+stable-CoKeHeAd/loaddlls.cpp
-
rxBot0.6.6d-priv+stable-CoKeHeAd/rxBot0.6.6d-priv+stable-CoKeHeAd/loaddlls.h
-
rxBot0.6.6d-priv+stable-CoKeHeAd/rxBot0.6.6d-priv+stable-CoKeHeAd/lsarestrict.cpp
-
rxBot0.6.6d-priv+stable-CoKeHeAd/rxBot0.6.6d-priv+stable-CoKeHeAd/lsarestrict.h
-
rxBot0.6.6d-priv+stable-CoKeHeAd/rxBot0.6.6d-priv+stable-CoKeHeAd/misc.cpp.vbs
-
rxBot0.6.6d-priv+stable-CoKeHeAd/rxBot0.6.6d-priv+stable-CoKeHeAd/misc.h
-
rxBot0.6.6d-priv+stable-CoKeHeAd/rxBot0.6.6d-priv+stable-CoKeHeAd/mssql.cpp
-
rxBot0.6.6d-priv+stable-CoKeHeAd/rxBot0.6.6d-priv+stable-CoKeHeAd/mssql.h
-
rxBot0.6.6d-priv+stable-CoKeHeAd/rxBot0.6.6d-priv+stable-CoKeHeAd/mydoom.cpp
-
rxBot0.6.6d-priv+stable-CoKeHeAd/rxBot0.6.6d-priv+stable-CoKeHeAd/mydoom.h
-
rxBot0.6.6d-priv+stable-CoKeHeAd/rxBot0.6.6d-priv+stable-CoKeHeAd/net.cpp
-
rxBot0.6.6d-priv+stable-CoKeHeAd/rxBot0.6.6d-priv+stable-CoKeHeAd/net.h
-
rxBot0.6.6d-priv+stable-CoKeHeAd/rxBot0.6.6d-priv+stable-CoKeHeAd/netbios.cpp
-
rxBot0.6.6d-priv+stable-CoKeHeAd/rxBot0.6.6d-priv+stable-CoKeHeAd/netbios.h
-
rxBot0.6.6d-priv+stable-CoKeHeAd/rxBot0.6.6d-priv+stable-CoKeHeAd/netdevil.cpp
-
rxBot0.6.6d-priv+stable-CoKeHeAd/rxBot0.6.6d-priv+stable-CoKeHeAd/netdevil.h
-
rxBot0.6.6d-priv+stable-CoKeHeAd/rxBot0.6.6d-priv+stable-CoKeHeAd/netutils.cpp
-
rxBot0.6.6d-priv+stable-CoKeHeAd/rxBot0.6.6d-priv+stable-CoKeHeAd/netutils.h
-
rxBot0.6.6d-priv+stable-CoKeHeAd/rxBot0.6.6d-priv+stable-CoKeHeAd/nicklist.h
-
rxBot0.6.6d-priv+stable-CoKeHeAd/rxBot0.6.6d-priv+stable-CoKeHeAd/optix.cpp
-
rxBot0.6.6d-priv+stable-CoKeHeAd/rxBot0.6.6d-priv+stable-CoKeHeAd/optix.h
-
rxBot0.6.6d-priv+stable-CoKeHeAd/rxBot0.6.6d-priv+stable-CoKeHeAd/passwd.h
-
rxBot0.6.6d-priv+stable-CoKeHeAd/rxBot0.6.6d-priv+stable-CoKeHeAd/pingudp.cpp
-
rxBot0.6.6d-priv+stable-CoKeHeAd/rxBot0.6.6d-priv+stable-CoKeHeAd/pingudp.h
-
rxBot0.6.6d-priv+stable-CoKeHeAd/rxBot0.6.6d-priv+stable-CoKeHeAd/processes.cpp
-
rxBot0.6.6d-priv+stable-CoKeHeAd/rxBot0.6.6d-priv+stable-CoKeHeAd/processes.h
-
rxBot0.6.6d-priv+stable-CoKeHeAd/rxBot0.6.6d-priv+stable-CoKeHeAd/protocol.cpp
-
rxBot0.6.6d-priv+stable-CoKeHeAd/rxBot0.6.6d-priv+stable-CoKeHeAd/protocol.h
-
rxBot0.6.6d-priv+stable-CoKeHeAd/rxBot0.6.6d-priv+stable-CoKeHeAd/psniff.cpp
-
rxBot0.6.6d-priv+stable-CoKeHeAd/rxBot0.6.6d-priv+stable-CoKeHeAd/psniff.h
-
rxBot0.6.6d-priv+stable-CoKeHeAd/rxBot0.6.6d-priv+stable-CoKeHeAd/redirect.cpp
-
rxBot0.6.6d-priv+stable-CoKeHeAd/rxBot0.6.6d-priv+stable-CoKeHeAd/redirect.h
-
rxBot0.6.6d-priv+stable-CoKeHeAd/rxBot0.6.6d-priv+stable-CoKeHeAd/remotecmd.cpp
-
rxBot0.6.6d-priv+stable-CoKeHeAd/rxBot0.6.6d-priv+stable-CoKeHeAd/remotecmd.h
-
rxBot0.6.6d-priv+stable-CoKeHeAd/rxBot0.6.6d-priv+stable-CoKeHeAd/rlogind.cpp
-
rxBot0.6.6d-priv+stable-CoKeHeAd/rxBot0.6.6d-priv+stable-CoKeHeAd/rlogind.h
-
rxBot0.6.6d-priv+stable-CoKeHeAd/rxBot0.6.6d-priv+stable-CoKeHeAd/rndnick.cpp
-
rxBot0.6.6d-priv+stable-CoKeHeAd/rxBot0.6.6d-priv+stable-CoKeHeAd/rndnick.h
-
rxBot0.6.6d-priv+stable-CoKeHeAd/rxBot0.6.6d-priv+stable-CoKeHeAd/rxbot.cpp
-
rxBot0.6.6d-priv+stable-CoKeHeAd/rxBot0.6.6d-priv+stable-CoKeHeAd/rxbot.dsp
-
rxBot0.6.6d-priv+stable-CoKeHeAd/rxBot0.6.6d-priv+stable-CoKeHeAd/rxbot.dsw
-
rxBot0.6.6d-priv+stable-CoKeHeAd/rxBot0.6.6d-priv+stable-CoKeHeAd/rxbot.h
-
rxBot0.6.6d-priv+stable-CoKeHeAd/rxBot0.6.6d-priv+stable-CoKeHeAd/rxbot.ncb
-
rxBot0.6.6d-priv+stable-CoKeHeAd/rxBot0.6.6d-priv+stable-CoKeHeAd/rxbot.opt
-
rxBot0.6.6d-priv+stable-CoKeHeAd/rxBot0.6.6d-priv+stable-CoKeHeAd/rxbot.plg.html
-
rxBot0.6.6d-priv+stable-CoKeHeAd/rxBot0.6.6d-priv+stable-CoKeHeAd/secure.cpp
-
rxBot0.6.6d-priv+stable-CoKeHeAd/rxBot0.6.6d-priv+stable-CoKeHeAd/secure.h
-
rxBot0.6.6d-priv+stable-CoKeHeAd/rxBot0.6.6d-priv+stable-CoKeHeAd/session.cpp
-
rxBot0.6.6d-priv+stable-CoKeHeAd/rxBot0.6.6d-priv+stable-CoKeHeAd/session.h
-
rxBot0.6.6d-priv+stable-CoKeHeAd/rxBot0.6.6d-priv+stable-CoKeHeAd/shellcode.cpp
-
rxBot0.6.6d-priv+stable-CoKeHeAd/rxBot0.6.6d-priv+stable-CoKeHeAd/shellcode.h
-
rxBot0.6.6d-priv+stable-CoKeHeAd/rxBot0.6.6d-priv+stable-CoKeHeAd/socks4.cpp
-
rxBot0.6.6d-priv+stable-CoKeHeAd/rxBot0.6.6d-priv+stable-CoKeHeAd/socks4.h
-
rxBot0.6.6d-priv+stable-CoKeHeAd/rxBot0.6.6d-priv+stable-CoKeHeAd/startup.cpp
-
rxBot0.6.6d-priv+stable-CoKeHeAd/rxBot0.6.6d-priv+stable-CoKeHeAd/startup.h
-
rxBot0.6.6d-priv+stable-CoKeHeAd/rxBot0.6.6d-priv+stable-CoKeHeAd/sub7.cpp
-
rxBot0.6.6d-priv+stable-CoKeHeAd/rxBot0.6.6d-priv+stable-CoKeHeAd/sub7.h
-
rxBot0.6.6d-priv+stable-CoKeHeAd/rxBot0.6.6d-priv+stable-CoKeHeAd/synflood.cpp
-
rxBot0.6.6d-priv+stable-CoKeHeAd/rxBot0.6.6d-priv+stable-CoKeHeAd/synflood.h
-
rxBot0.6.6d-priv+stable-CoKeHeAd/rxBot0.6.6d-priv+stable-CoKeHeAd/sysinfo.cpp
-
rxBot0.6.6d-priv+stable-CoKeHeAd/rxBot0.6.6d-priv+stable-CoKeHeAd/sysinfo.h
-
rxBot0.6.6d-priv+stable-CoKeHeAd/rxBot0.6.6d-priv+stable-CoKeHeAd/tcpflood.cpp
-
rxBot0.6.6d-priv+stable-CoKeHeAd/rxBot0.6.6d-priv+stable-CoKeHeAd/tcpflood.h
-
rxBot0.6.6d-priv+stable-CoKeHeAd/rxBot0.6.6d-priv+stable-CoKeHeAd/tcpip.h
-
rxBot0.6.6d-priv+stable-CoKeHeAd/rxBot0.6.6d-priv+stable-CoKeHeAd/tftpd.cpp
-
rxBot0.6.6d-priv+stable-CoKeHeAd/rxBot0.6.6d-priv+stable-CoKeHeAd/tftpd.h
-
rxBot0.6.6d-priv+stable-CoKeHeAd/rxBot0.6.6d-priv+stable-CoKeHeAd/threads.cpp
-
rxBot0.6.6d-priv+stable-CoKeHeAd/rxBot0.6.6d-priv+stable-CoKeHeAd/threads.h
-
rxBot0.6.6d-priv+stable-CoKeHeAd/rxBot0.6.6d-priv+stable-CoKeHeAd/upnp.cpp
-
rxBot0.6.6d-priv+stable-CoKeHeAd/rxBot0.6.6d-priv+stable-CoKeHeAd/upnp.h
-
rxBot0.6.6d-priv+stable-CoKeHeAd/rxBot0.6.6d-priv+stable-CoKeHeAd/visit.cpp
-
rxBot0.6.6d-priv+stable-CoKeHeAd/rxBot0.6.6d-priv+stable-CoKeHeAd/visit.h
-
rxBot0.6.6d-priv+stable-CoKeHeAd/rxBot0.6.6d-priv+stable-CoKeHeAd/wildcard.cpp
-
rxBot0.6.6d-priv+stable-CoKeHeAd/rxBot0.6.6d-priv+stable-CoKeHeAd/wildcard.h