Index of /publicDatasets/CTU-Malware-Capture-Botnet-107-1

	Name	Last modified	Size	Description
	Parent Directory		-
	2015-03-09_capture-win6.pcap	2015-03-09 14:20	11M
	README.md	2015-06-13 14:47	330
	2015-03-09_capture-win6.biargus	2015-06-13 14:54	7.9M
	2015-03-09_capture-win6.binetflow	2015-09-17 17:10	3.2M
	0cc9906c7bfcff6276910ac8fa48c280.exe.zip	2015-12-16 10:26	38K
	2015-03-09_capture-win6.weblogng	2016-06-15 17:43	232
	2015-03-09_capture-win6.dnstop	2016-12-05 22:31	1.6K
	2015-03-09_capture-win6.passivedns	2016-12-05 22:31	1.3K
	2015-03-09_capture-win6.capinfos	2016-12-05 22:31	1.1K
	2015-03-09_capture-win6.tcpdstat	2016-12-05 22:31	1.3K
	fast-flux-dga-first-analysis.txt	2017-01-15 13:04	1.6K
	README.html	2017-01-15 13:04	508
	bro/	2017-08-31 09:45	-

Timeline

• Infected with Yakes/Dridex
• MD5: 0cc9906c7bfcff6276910ac8fa48c280

Sun Mar 1 12:00:06 CET 2015

started win6

Sun Mar 1 12:01:55 CET 2015

infected

infected perfectly, start sending packets to port 8080.

Mon Mar 9 14:53:54 CET 2015

The server froze and I have to stop this capture. A new one was started