Index of /publicDatasets/CTU-Malware-Capture-Botnet-109-1

	Name	Last modified	Size	Description
	Parent Directory		-
	README.md	2015-06-12 14:37	324
	2015-03-09_capture-win8.json	2015-06-12 14:54	124M
	2015-03-09_capture-win8.html	2015-06-12 14:54	131M
	2015-03-09_capture-win8.biargus	2015-06-12 15:38	44M
	2015-03-09_capture-win8.binetflow	2015-09-17 17:09	43M
	5fce64eb222aa41e4fb967e9d8fb6a22.exe.zip	2015-12-16 10:26	38K
	2015-03-09_capture-win8.weblogng	2016-06-15 17:38	8.5M
	2015-03-09_capture-win8.dnstop	2016-12-05 22:31	1.6K
	2015-03-09_capture-win8.passivedns	2016-12-05 22:31	1.3K
	2015-03-09_capture-win8.capinfos	2016-12-05 22:31	1.1K
	2015-03-09_capture-win8.tcpdstat	2016-12-05 22:31	1.4K
	fast-flux-dga-first-analysis.txt	2017-01-15 13:04	196
	2015-03-09_capture-win8.pcap	2017-04-25 09:27	93M
	bro/	2017-04-25 09:28	-
	README.html	2017-04-25 09:28	501

Timeline

• Infected with Cridex
• MD5: 5fce64eb222aa41e4fb967e9d8fb6a22

Sun Mar 1 12:05:32 CET 2015

started win8

Sun Mar 1 12:07:03 CET 2015

Infected

perfectly infected. Started to send packets to port 8080

Mon Mar 9 15:00:11 CET 2015

The server froze and I have to stop the capture. I started a new one.