Overview

overview

1

Static

static

1

rxbot_unde...sc.vbs

windows7-x64

1

rxbot_unde...sc.vbs

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    rxbot_undertow-6-10-05.rar

  • Size

    127KB

  • MD5

    f907e1af2bb422836f3302f4dcf23304

  • SHA1

    3ac92e172b7097377aaa5d5a524c5bad0f7158a4

  • SHA256

    b3862882ffa6654106a6ff8ec1d91766c43a0c13443a5fcd10181279b065a45a

  • SHA512

    d5b5cb91898fbb74aae12f85d10361a58509092276bd22fb1bd7f993c4ac5e3bec7167c284c40bac01d95492edcfe1470d8fb0593a3efdaa0e67612ea07d5f7f

  • SSDEEP

    3072:o+jsQCY14nmqL4hWI5Dsxy3HpprtFdwrW+hJUIPerO/K1U:o+oQV4mQcVky3pjwS+hJBmah

Score
1/10

Malware Config

Signatures

Files

  • rxbot_undertow-6-10-05.rar
    .rar

    Password: infected

  • rxbot_undertow-6-10-05/code/advscan.cpp
  • rxbot_undertow-6-10-05/code/aim.cpp
  • rxbot_undertow-6-10-05/code/aliaslog.cpp
  • rxbot_undertow-6-10-05/code/autostart.cpp
  • rxbot_undertow-6-10-05/code/clsass.cpp
  • rxbot_undertow-6-10-05/code/crc32.cpp
  • rxbot_undertow-6-10-05/code/dcass.cpp
  • rxbot_undertow-6-10-05/code/dcom.cpp
  • rxbot_undertow-6-10-05/code/ddos.cpp
  • rxbot_undertow-6-10-05/code/download.cpp
  • rxbot_undertow-6-10-05/code/driveinfo.cpp
  • rxbot_undertow-6-10-05/code/ehandler.cpp
  • rxbot_undertow-6-10-05/code/findfile.cpp
  • rxbot_undertow-6-10-05/code/fphost.cpp
  • rxbot_undertow-6-10-05/code/ftpd.cpp
  • rxbot_undertow-6-10-05/code/icmpflood.cpp
  • rxbot_undertow-6-10-05/code/ident.cpp
  • rxbot_undertow-6-10-05/code/irc_send.cpp
  • rxbot_undertow-6-10-05/code/loaddlls.cpp
  • rxbot_undertow-6-10-05/code/lsass.cpp
  • rxbot_undertow-6-10-05/code/lsass1lsass.cpp
  • rxbot_undertow-6-10-05/code/misc.cpp
    .vbs
  • rxbot_undertow-6-10-05/code/ms04_007_asn1.cpp
  • rxbot_undertow-6-10-05/code/mssql.cpp
  • rxbot_undertow-6-10-05/code/mssqllsass.cpp
  • rxbot_undertow-6-10-05/code/ndcass.cpp
  • rxbot_undertow-6-10-05/code/net.cpp
  • rxbot_undertow-6-10-05/code/netbios.cpp
  • rxbot_undertow-6-10-05/code/netutils.cpp
  • rxbot_undertow-6-10-05/code/ntlsa.cpp
  • rxbot_undertow-6-10-05/code/pingudp.cpp
  • rxbot_undertow-6-10-05/code/processes.cpp
  • rxbot_undertow-6-10-05/code/psniff.cpp
  • rxbot_undertow-6-10-05/code/random.cpp
  • rxbot_undertow-6-10-05/code/redirect.cpp
  • rxbot_undertow-6-10-05/code/rndnick.cpp
  • rxbot_undertow-6-10-05/code/rxbot.cpp
  • rxbot_undertow-6-10-05/code/sas.cpp
  • rxbot_undertow-6-10-05/code/scan.cpp
  • rxbot_undertow-6-10-05/code/secure.cpp
  • rxbot_undertow-6-10-05/code/session.cpp
  • rxbot_undertow-6-10-05/code/shellcode.cpp
  • rxbot_undertow-6-10-05/code/synflood.cpp
  • rxbot_undertow-6-10-05/code/sysinfo.cpp
  • rxbot_undertow-6-10-05/code/tcpflood.cpp
  • rxbot_undertow-6-10-05/code/tcpflood2.cpp
  • rxbot_undertow-6-10-05/code/tftpd.cpp
  • rxbot_undertow-6-10-05/code/threads.cpp
  • rxbot_undertow-6-10-05/code/visit.cpp
  • rxbot_undertow-6-10-05/code/wildcard.cpp
  • rxbot_undertow-6-10-05/code/wkssvc.cpp
  • rxbot_undertow-6-10-05/doc.txt
  • rxbot_undertow-6-10-05/header/advscan.h
  • rxbot_undertow-6-10-05/header/aim.h
  • rxbot_undertow-6-10-05/header/aliaslog.h
  • rxbot_undertow-6-10-05/header/autostart.h
  • rxbot_undertow-6-10-05/header/clsass.h
  • rxbot_undertow-6-10-05/header/configs.h
  • rxbot_undertow-6-10-05/header/crc32.h
  • rxbot_undertow-6-10-05/header/dcass.h
  • rxbot_undertow-6-10-05/header/dcom.h
  • rxbot_undertow-6-10-05/header/ddos.h
  • rxbot_undertow-6-10-05/header/defines.h
  • rxbot_undertow-6-10-05/header/download.h
  • rxbot_undertow-6-10-05/header/driveinfo.h
  • rxbot_undertow-6-10-05/header/ehandler.h
  • rxbot_undertow-6-10-05/header/externs.h
  • rxbot_undertow-6-10-05/header/findfile.h
  • rxbot_undertow-6-10-05/header/fphost.h
  • rxbot_undertow-6-10-05/header/ftpd.h
  • rxbot_undertow-6-10-05/header/functions.h
  • rxbot_undertow-6-10-05/header/globals.h
  • rxbot_undertow-6-10-05/header/icmpflood.h
  • rxbot_undertow-6-10-05/header/ident.h
  • rxbot_undertow-6-10-05/header/includes.h
  • rxbot_undertow-6-10-05/header/irc_send.h
  • rxbot_undertow-6-10-05/header/loaddlls.h
  • rxbot_undertow-6-10-05/header/lsass.h
  • rxbot_undertow-6-10-05/header/lsass1lsass.h
  • rxbot_undertow-6-10-05/header/misc.h
  • rxbot_undertow-6-10-05/header/ms04_007_asn1.h
  • rxbot_undertow-6-10-05/header/mssql.h
  • rxbot_undertow-6-10-05/header/mssqllsass.h
  • rxbot_undertow-6-10-05/header/ndcass.h
  • rxbot_undertow-6-10-05/header/net.h
  • rxbot_undertow-6-10-05/header/netbios.h
  • rxbot_undertow-6-10-05/header/netutils.h
  • rxbot_undertow-6-10-05/header/ntlsa.h
  • rxbot_undertow-6-10-05/header/passwd.h
  • rxbot_undertow-6-10-05/header/pingudp.h
  • rxbot_undertow-6-10-05/header/processes.h
  • rxbot_undertow-6-10-05/header/psniff.h
  • rxbot_undertow-6-10-05/header/random.h
  • rxbot_undertow-6-10-05/header/redirect.h
  • rxbot_undertow-6-10-05/header/rndnick.h
  • rxbot_undertow-6-10-05/header/rxbot.h
  • rxbot_undertow-6-10-05/header/sas.h
  • rxbot_undertow-6-10-05/header/scan.h
  • rxbot_undertow-6-10-05/header/secure.h
  • rxbot_undertow-6-10-05/header/session.h
  • rxbot_undertow-6-10-05/header/shellcode.h
  • rxbot_undertow-6-10-05/header/synflood.h
  • rxbot_undertow-6-10-05/header/sysinfo.h
  • rxbot_undertow-6-10-05/header/tcpflood.h
  • rxbot_undertow-6-10-05/header/tcpflood2.h
  • rxbot_undertow-6-10-05/header/tcpip.h
  • rxbot_undertow-6-10-05/header/tftpd.h
  • rxbot_undertow-6-10-05/header/threads.h
  • rxbot_undertow-6-10-05/header/visit.h
  • rxbot_undertow-6-10-05/header/wildcard.h
  • rxbot_undertow-6-10-05/header/wkssvc.h
  • rxbot_undertow-6-10-05/rxbot.dsp
  • rxbot_undertow-6-10-05/rxbot.dsw