Description

• Probable Name: Htbot
• MD5: 919a8a6d873bb2a7263d8309249726fd
• SHA1: 71afc2f37455c06a473224a863e1a65cdf74cd60
  

• SHA256: a74b19b76c0a76d95e48c2c4d230afa7ac490b2aca3f581d6505f227897df7c2

• VirusTotal
• HybridAnalysis

• RobotHash

Timeline

Wed Mar 4 15:22:52 CET 2015

started win11

Wed Mar 4 15:23:57 CET 2015

infected

Fri Mar 6 10:26:10 CET 2015

I rebooted because it stop doing stuff for several days.

It looks its working again. And the pcap is the same.

Mon Mar 9 15:12:53 CET 2015

The server froze and the capture stopped.