Static task
static1
Behavioral task
behavioral1
Sample
rx_dev/rBot_041504/Release/rBot.bat
Resource
win7-20230220-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
rx_dev/rBot_041504/Release/rBot.bat
Resource
win10v2004-20230220-en
0 signatures
150 seconds
General
-
Target
rx_dev+service+working_lsass+sasser+ftpd.rar
-
Size
63KB
-
MD5
5aa288d2a1692673803d723ad59706e0
-
SHA1
bdc024096236d4ec06b3e44a4ac6f19c801c321c
-
SHA256
bc5f77c1eef25e8a1b9380c82a6a802757f2aece405949796c5ff98ab8d9eaf1
-
SHA512
f282466bee92db15a6731e34364045f052e9096086bde66f3acde9949c79021dc5f0492f7a940524ccca72f3b3b98b179c3b7975958b3f117af7fe2fe8423c3b
-
SSDEEP
1536:+zlxY0vpC0k12Bk2rueGPYoFFFLNJp6FOG5pl0CHVmeqmb:oxYYpfOyk2i7pFLNMbpl0yVXqmb
Score
1/10
Malware Config
Signatures
Files
-
rx_dev+service+working_lsass+sasser+ftpd.rar.rar
Password: infected
-
rx_dev/rBot_041504/Release/rBot.bat