Index of /publicDatasets/CTU-Malware-Capture-Botnet-112-1

	Name	Last modified	Size	Description
	Parent Directory		-
	fast-flux-dga-first-analysis.txt	2017-01-15 13:04	196
	bro/	2017-04-25 09:29	-
	README.md	2016-04-28 09:56	892
	README.html	2017-04-25 09:29	1.2K
	2015-03-09_capture-win11.weblogng	2016-06-15 17:38	1.0M
	2015-03-09_capture-win11.tcpdstat	2016-12-05 22:30	2.0K
	2015-03-09_capture-win11.pcap	2017-04-25 09:28	68M
	2015-03-09_capture-win11.passivedns	2016-12-05 22:30	62K
	2015-03-09_capture-win11.json	2015-04-10 10:39	72M
	2015-03-09_capture-win11.html	2015-04-10 10:37	43M
	2015-03-09_capture-win11.dnstop	2016-12-05 22:30	18K
	2015-03-09_capture-win11.capinfos	2016-12-05 22:30	1.1K
	2015-03-09_capture-win11.binetflow	2016-01-11 16:21	6.4M
	2015-03-09_capture-win11.biargus	2016-01-11 16:21	7.2M
	2015-03-09_capture-win11.2.html	2015-04-10 10:57	14M
	919a8a6d873bb2a7263d8309249726fd.exe.zip	2015-12-16 10:26	149K

Description

• Probable Name: Htbot
• MD5: 919a8a6d873bb2a7263d8309249726fd
• SHA1: 71afc2f37455c06a473224a863e1a65cdf74cd60
  

• SHA256: a74b19b76c0a76d95e48c2c4d230afa7ac490b2aca3f581d6505f227897df7c2

• VirusTotal
• HybridAnalysis

• RobotHash

Timeline

Wed Mar 4 15:22:52 CET 2015

started win11

Wed Mar 4 15:23:57 CET 2015

infected

Fri Mar 6 10:26:10 CET 2015

I rebooted because it stop doing stuff for several days.

It looks its working again. And the pcap is the same.

Mon Mar 9 15:12:53 CET 2015

The server froze and the capture stopped.