Static task
static1
Behavioral task
behavioral1
Sample
Rxbot 7.6/misc.vbs
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
Rxbot 7.6/misc.vbs
Resource
win10v2004-20230220-en
Behavioral task
behavioral3
Sample
Rxbot 7.6/rBot.html
Resource
win7-20230220-en
Behavioral task
behavioral4
Sample
Rxbot 7.6/rBot.html
Resource
win10v2004-20230220-en
Behavioral task
behavioral5
Sample
Rxbot 7.6/rBot.xml
Resource
win7-20230220-en
Behavioral task
behavioral6
Sample
Rxbot 7.6/rBot.xml
Resource
win10v2004-20230220-en
General
-
Target
Rxbot_7.6-Modded-Tr0gdor.rar
-
Size
212KB
-
MD5
a9ba6ca3eb4f040c3c7fca1ace9515a2
-
SHA1
4ee8bb2b42f56e182858d5e9e4ca448b24111a81
-
SHA256
ee1abf2c2aced5f25c5f7beccb3820ef32d4cc1adaec1f618ef12744e63a05d6
-
SHA512
c1bf7261c655da1afa44b94edffadea9e8ca1423c4bc1f57c93a0f10764d18f0fbe9393d98e04e6a82f3ffdde417854baf2c840f93a8de20e8aeb93c8e90aba6
-
SSDEEP
3072:8/sm9r6vpxhBs87P07L+oImRNrxa/JgO6ssrbVBhbBehGBYzG6BcSzup/PWeIliQ:S927hBs8jO7NaxRsHfhtehOYMBWeGh6O
Malware Config
Signatures
Files
-
Rxbot_7.6-Modded-Tr0gdor.rar.rar
Password: infected
-
Rxbot 7.6/advscan.cpp
-
Rxbot 7.6/advscan.h
-
Rxbot 7.6/aliaslog.cpp
-
Rxbot 7.6/aliaslog.h
-
Rxbot 7.6/autostart.cpp
-
Rxbot 7.6/autostart.h
-
Rxbot 7.6/avirus.cpp
-
Rxbot 7.6/avirus.h
-
Rxbot 7.6/capture.cpp
-
Rxbot 7.6/capture.h
-
Rxbot 7.6/cdkeys.cpp
-
Rxbot 7.6/cdkeys.h
-
Rxbot 7.6/changes.txt
-
Rxbot 7.6/configs.h
-
Rxbot 7.6/crc32.cpp
-
Rxbot 7.6/crc32.h
-
Rxbot 7.6/crypt.cpp
-
Rxbot 7.6/crypt.h
-
Rxbot 7.6/dcc.cpp
-
Rxbot 7.6/dcc.h
-
Rxbot 7.6/dcom.cpp
-
Rxbot 7.6/dcom.h
-
Rxbot 7.6/dcom2.cpp
-
Rxbot 7.6/dcom2.h
-
Rxbot 7.6/ddos.cpp
-
Rxbot 7.6/ddos.h
-
Rxbot 7.6/defines.h
-
Rxbot 7.6/download.cpp
-
Rxbot 7.6/download.h
-
Rxbot 7.6/driveinfo.cpp
-
Rxbot 7.6/driveinfo.h
-
Rxbot 7.6/ehandler.cpp
-
Rxbot 7.6/ehandler.h
-
Rxbot 7.6/externs.h
-
Rxbot 7.6/findfile.cpp
-
Rxbot 7.6/findfile.h
-
Rxbot 7.6/findpass.cpp
-
Rxbot 7.6/findpass.h
-
Rxbot 7.6/fphost.cpp
-
Rxbot 7.6/fphost.h
-
Rxbot 7.6/functions.h
-
Rxbot 7.6/globals.h
-
Rxbot 7.6/httpd.cpp
-
Rxbot 7.6/httpd.h
-
Rxbot 7.6/icmpflood.cpp
-
Rxbot 7.6/icmpflood.h
-
Rxbot 7.6/ident.cpp
-
Rxbot 7.6/ident.h
-
Rxbot 7.6/includes.h
-
Rxbot 7.6/irc_send.cpp
-
Rxbot 7.6/irc_send.h
-
Rxbot 7.6/keylogger.cpp
-
Rxbot 7.6/keylogger.h
-
Rxbot 7.6/list.txt
-
Rxbot 7.6/loaddlls.cpp
-
Rxbot 7.6/loaddlls.h
-
Rxbot 7.6/lsass.cpp
-
Rxbot 7.6/lsass.h
-
Rxbot 7.6/misc.cpp.vbs
-
Rxbot 7.6/misc.h
-
Rxbot 7.6/mssql.cpp
-
Rxbot 7.6/mssql.h
-
Rxbot 7.6/myshellcode.asm
-
Rxbot 7.6/net.cpp
-
Rxbot 7.6/net.h
-
Rxbot 7.6/netbios.cpp
-
Rxbot 7.6/netbios.h
-
Rxbot 7.6/netutils.cpp
-
Rxbot 7.6/netutils.h
-
Rxbot 7.6/nicklist.h
-
Rxbot 7.6/passwd.h
-
Rxbot 7.6/peer2peer.cpp
-
Rxbot 7.6/peer2peer.h
-
Rxbot 7.6/pingudp.cpp
-
Rxbot 7.6/pingudp.h
-
Rxbot 7.6/processes.cpp
-
Rxbot 7.6/processes.h
-
Rxbot 7.6/psniff.cpp
-
Rxbot 7.6/psniff.h
-
Rxbot 7.6/rBot.cpp
-
Rxbot 7.6/rBot.dsp
-
Rxbot 7.6/rBot.dsw
-
Rxbot 7.6/rBot.h
-
Rxbot 7.6/rBot.ncb
-
Rxbot 7.6/rBot.opt
-
Rxbot 7.6/rBot.plg.html
-
Rxbot 7.6/rBot.sln
-
Rxbot 7.6/rBot.suo
-
Rxbot 7.6/rBot.vcproj.xml
-
Rxbot 7.6/redirect.cpp
-
Rxbot 7.6/redirect.h
-
Rxbot 7.6/remotecmd.cpp
-
Rxbot 7.6/remotecmd.h
-
Rxbot 7.6/reqbuf.bin
-
Rxbot 7.6/rlogind.cpp
-
Rxbot 7.6/rlogind.h
-
Rxbot 7.6/rndnick.cpp
-
Rxbot 7.6/rndnick.h
-
Rxbot 7.6/scan.cpp
-
Rxbot 7.6/scan.h
-
Rxbot 7.6/secure.cpp
-
Rxbot 7.6/secure.h
-
Rxbot 7.6/session.cpp
-
Rxbot 7.6/session.h
-
Rxbot 7.6/shellcode.cpp
-
Rxbot 7.6/shellcode.h
-
Rxbot 7.6/socks4.cpp
-
Rxbot 7.6/socks4.h
-
Rxbot 7.6/synflood.cpp
-
Rxbot 7.6/synflood.h
-
Rxbot 7.6/sysinfo.cpp
-
Rxbot 7.6/sysinfo.h
-
Rxbot 7.6/tcpflood.cpp
-
Rxbot 7.6/tcpflood.h
-
Rxbot 7.6/tcpflood2.cpp
-
Rxbot 7.6/tcpflood2.h
-
Rxbot 7.6/tcpip.h
-
Rxbot 7.6/tftpd.cpp
-
Rxbot 7.6/tftpd.h
-
Rxbot 7.6/threads.cpp
-
Rxbot 7.6/threads.h
-
Rxbot 7.6/visit.cpp
-
Rxbot 7.6/visit.h
-
Rxbot 7.6/wildcard.cpp
-
Rxbot 7.6/wildcard.h