Overview

overview

1

Static

static

1

misc.vbs

windows7-x64

1

misc.vbs

windows10-2004-x64

1

rBot.html

windows7-x64

1

rBot.html

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    rxbot_0.65.zip

  • Size

    226KB

  • MD5

    90e086817c78266f9009e53085b126c6

  • SHA1

    eadfc62416ff2fe162570d277f27f479a1e62b9b

  • SHA256

    ad2329df6c530bc7e14dc7456531f74f94fa0e0bd1613209ce7321b254c1d5a5

  • SHA512

    8009205dc05c420914755b2f549ae1ca9fe728dbfdbfa30b4b68fadcd8b13e550bfb5462b9e17644741b5005cb903b24a54e9cb67a00c3dc3541701705f88988

  • SSDEEP

    6144:q6S9JEVPiikpQLfseYOkQ7SdIpcc7nkpLUcfYkncsKIcAiGJ+B:qxq6oseYOk2SgcwkpLUc1csKI/9+B

Score
1/10

Malware Config

Signatures

Files

  • rxbot_0.65.zip
    .zip

    Password: infected

  • advscan.cpp
  • advscan.h
  • aliaslog.cpp
  • aliaslog.h
  • authors.txt
  • autostart.cpp
  • autostart.h
  • avirus.cpp
  • avirus.h
  • beagle.cpp
  • beagle.h
  • capture.cpp
  • capture.h
  • cdkeys.cpp
  • cdkeys.h
  • configs.h
  • crc32.cpp
  • crc32.h
  • crypt.cpp
  • crypt.h
  • dameware.cpp
  • dameware.h
  • dcc.cpp
  • dcc.h
  • dcom.cpp
  • dcom.h
  • dcom2.cpp
  • dcom2.h
  • ddos.cpp
  • ddos.h
  • defines.h
  • download.cpp
  • download.h
  • driveinfo.cpp
  • driveinfo.h
  • ehandler.cpp
  • ehandler.h
  • externs.h
  • findfile.cpp
  • findfile.h
  • findpass.cpp
  • findpass.h
  • fphost.cpp
  • fphost.h
  • functions.h
  • globals.h
  • httpd.cpp
  • httpd.h
  • icmpflood.cpp
  • icmpflood.h
  • ident.cpp
  • ident.h
  • includes.h
  • irc_send.cpp
  • irc_send.h
  • keylogger.cpp
  • keylogger.h
  • kuang2.cpp
  • kuang2.h
  • list.txt
  • loaddlls.cpp
  • loaddlls.h
  • misc.cpp
    .vbs
  • misc.h
  • mssql.cpp
  • mssql.h
  • mydoom.cpp
  • mydoom.h
  • net.cpp
  • net.h
  • netbios.cpp
  • netbios.h
  • netdevil.cpp
  • netdevil.h
  • netutils.cpp
  • netutils.h
  • nicklist.h
  • optix.cpp
  • optix.h
  • passwd.h
  • peer2peer.cpp
  • peer2peer.h
  • pingudp.cpp
  • pingudp.h
  • processes.cpp
  • processes.h
  • psniff.cpp
  • psniff.h
  • rBot.cpp
  • rBot.dsp
  • rBot.dsw
  • rBot.h
  • rBot.ncb
  • rBot.opt
  • rBot.plg
    .html
  • redirect.cpp
  • redirect.h
  • remotecmd.cpp
  • remotecmd.h
  • rlogind.cpp
  • rlogind.h
  • rndnick.cpp
  • rndnick.h
  • scan.cpp
  • scan.h
  • secure.cpp
  • secure.h
  • session.cpp
  • session.h
  • shellcode.cpp
  • shellcode.h
  • socks4.cpp
  • socks4.h
  • sub7.cpp
  • sub7.h
  • synflood.cpp
  • synflood.h
  • sysinfo.cpp
  • sysinfo.h
  • tcpflood.cpp
  • tcpflood.h
  • tcpflood2.cpp
  • tcpflood2.h
  • tcpip.h
  • tftpd.cpp
  • tftpd.h
  • threads.cpp
  • threads.h
  • upnp.cpp
  • upnp.h
  • visit.cpp
  • visit.h
  • webdav.cpp
  • webdav.h
  • wildcard.cpp
  • wildcard.h
  • workstation.cpp
  • workstation.h