Static task
static1
Behavioral task
behavioral1
Sample
rx-ASN/misc.vbs
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
rx-ASN/misc.vbs
Resource
win10v2004-20231215-en
Behavioral task
behavioral3
Sample
rx-ASN/rBot.js
Resource
win7-20231215-en
Behavioral task
behavioral4
Sample
rx-ASN/rBot.js
Resource
win10v2004-20231215-en
Behavioral task
behavioral5
Sample
rx-ASN/rBot.html
Resource
win7-20231215-en
Behavioral task
behavioral6
Sample
rx-ASN/rBot.html
Resource
win10v2004-20231215-en
General
-
Target
02b20942fc40c788dc3fe135b61a5632
-
Size
245KB
-
MD5
02b20942fc40c788dc3fe135b61a5632
-
SHA1
c65b71b076e49b00c2477833ed7bf2c0cb5a9e7b
-
SHA256
e1faae349483b41f0353647eb69a6d43cf33036b9b2473af5512dacb0441ac10
-
SHA512
f4499302b9a5c44463375ea11dc73a4ab0eac7fd3b2801423321af6831c46175c2157431025566d4335644c9a95d4f19c1e71e1d6a805950f3699cfac964c5b5
-
SSDEEP
6144:iuV/f8pQR4imsq0cW/zYTuAEgcaNLXytpE649sRnCO:iCf8+6iNq0P/siHILXOiyAO
Malware Config
Signatures
Files
-
02b20942fc40c788dc3fe135b61a5632.rar
-
rx-ASN/advscan.cpp
-
rx-ASN/advscan.h
-
rx-ASN/aliaslog.cpp
-
rx-ASN/aliaslog.h
-
rx-ASN/autostart.cpp
-
rx-ASN/autostart.h
-
rx-ASN/avirus.cpp
-
rx-ASN/avirus.h
-
rx-ASN/beagle.cpp
-
rx-ASN/beagle.h
-
rx-ASN/capture.cpp
-
rx-ASN/capture.h
-
rx-ASN/cdkeys.cpp
-
rx-ASN/cdkeys.h
-
rx-ASN/configs.h
-
rx-ASN/crc32.cpp
-
rx-ASN/crc32.h
-
rx-ASN/crypt.cpp
-
rx-ASN/crypt.h
-
rx-ASN/dameware.cpp
-
rx-ASN/dameware.h
-
rx-ASN/dcc.cpp
-
rx-ASN/dcc.h
-
rx-ASN/dcom.cpp
-
rx-ASN/dcom.h
-
rx-ASN/dcom2.cpp
-
rx-ASN/dcom2.h
-
rx-ASN/ddos.cpp
-
rx-ASN/ddos.h
-
rx-ASN/defines.h
-
rx-ASN/download.cpp
-
rx-ASN/download.h
-
rx-ASN/driveinfo.cpp
-
rx-ASN/driveinfo.h
-
rx-ASN/ehandler.cpp
-
rx-ASN/ehandler.h
-
rx-ASN/externs.h
-
rx-ASN/findfile.cpp
-
rx-ASN/findfile.h
-
rx-ASN/findpass.cpp
-
rx-ASN/findpass.h
-
rx-ASN/fphost.cpp
-
rx-ASN/fphost.h
-
rx-ASN/ftpd.cpp
-
rx-ASN/ftpd.h
-
rx-ASN/functions.h
-
rx-ASN/globals.h
-
rx-ASN/httpd.cpp
-
rx-ASN/httpd.h
-
rx-ASN/icmpflood.cpp
-
rx-ASN/icmpflood.h
-
rx-ASN/ident.cpp
-
rx-ASN/ident.h
-
rx-ASN/iis5ssl.cpp
-
rx-ASN/iis5ssl.h
-
rx-ASN/includes.h
-
rx-ASN/irc_send.cpp
-
rx-ASN/irc_send.h
-
rx-ASN/keylogger.cpp
-
rx-ASN/keylogger.h
-
rx-ASN/kuang2.cpp
-
rx-ASN/kuang2.h
-
rx-ASN/loaddlls.cpp
-
rx-ASN/loaddlls.h
-
rx-ASN/lsass.cpp
-
rx-ASN/lsass.h
-
rx-ASN/lsass2.cpp
-
rx-ASN/lsass2.h
-
rx-ASN/misc.cpp.vbs
-
rx-ASN/misc.h
-
rx-ASN/ms04_007_asn1.cpp
-
rx-ASN/ms04_007_asn1.h
-
rx-ASN/mssql.cpp
-
rx-ASN/mssql.h
-
rx-ASN/mydoom.cpp
-
rx-ASN/mydoom.h
-
rx-ASN/net.cpp
-
rx-ASN/net.h
-
rx-ASN/netbios.cpp
-
rx-ASN/netbios.h
-
rx-ASN/netdevil.cpp
-
rx-ASN/netdevil.h
-
rx-ASN/netutils.cpp
-
rx-ASN/netutils.h
-
rx-ASN/nicklist.h
-
rx-ASN/optix.cpp
-
rx-ASN/optix.h
-
rx-ASN/passwd.h
-
rx-ASN/peer2peer.cpp
-
rx-ASN/peer2peer.h
-
rx-ASN/pingudp.cpp
-
rx-ASN/pingudp.h
-
rx-ASN/processes.cpp
-
rx-ASN/processes.h
-
rx-ASN/psniff.cpp
-
rx-ASN/psniff.h
-
rx-ASN/rBot.cpp
-
rx-ASN/rBot.dsp
-
rx-ASN/rBot.dsw
-
rx-ASN/rBot.h
-
rx-ASN/rBot.ncb
-
rx-ASN/rBot.opt.js
-
rx-ASN/rBot.plg.html
-
rx-ASN/rBot.sln
-
rx-ASN/rBot.suo
-
rx-ASN/rBot.vcproj.xml
-
rx-ASN/redirect.cpp
-
rx-ASN/redirect.h
-
rx-ASN/remotecmd.cpp
-
rx-ASN/remotecmd.h
-
rx-ASN/reqbuf.bin
-
rx-ASN/rlogind.cpp
-
rx-ASN/rlogind.h
-
rx-ASN/rndnick.cpp
-
rx-ASN/rndnick.h
-
rx-ASN/sasser.cpp
-
rx-ASN/scan.cpp
-
rx-ASN/scan.h
-
rx-ASN/secure.cpp
-
rx-ASN/secure.h
-
rx-ASN/session.cpp
-
rx-ASN/session.h
-
rx-ASN/shellcode.cpp
-
rx-ASN/shellcode.h
-
rx-ASN/socks4.cpp
-
rx-ASN/socks4.h
-
rx-ASN/sub7.cpp
-
rx-ASN/sub7.h
-
rx-ASN/synflood.cpp
-
rx-ASN/synflood.h
-
rx-ASN/sysinfo.cpp
-
rx-ASN/sysinfo.h
-
rx-ASN/tcpflood.cpp
-
rx-ASN/tcpflood.h
-
rx-ASN/tcpflood2.cpp
-
rx-ASN/tcpflood2.h
-
rx-ASN/tcpip.h
-
rx-ASN/tftpd.cpp
-
rx-ASN/tftpd.h
-
rx-ASN/threads.cpp
-
rx-ASN/threads.h
-
rx-ASN/upnp.cpp
-
rx-ASN/upnp.h
-
rx-ASN/veritas.cpp
-
rx-ASN/veritas.h
-
rx-ASN/visit.cpp
-
rx-ASN/visit.h
-
rx-ASN/webdav.cpp
-
rx-ASN/webdav.h
-
rx-ASN/wildcard.cpp
-
rx-ASN/wildcard.h
-
rx-ASN/wkssvc.cpp
-
rx-ASN/wkssvc.h
-
rx-ASN/workstation.cpp
-
rx-ASN/workstation.h