Index of /publicDatasets/CTU-Malware-Capture-Botnet-116-2

	Name	Last modified	Size	Description

	Parent Directory		-
	fast-flux-dga-first-analysis.txt	2017-01-15 16:34	196
	bro/	2017-04-25 09:30	-
	README.md	2015-04-09 21:09	725
	README.html	2017-04-25 09:30	1.0K
	948549816.111111.exe.zip	2015-12-16 10:26	285K
	2012-05-25-captura-2.weblogng	2016-06-15 17:38	145K
	2012-05-25-captura-2.tcpdstat	2016-12-06 08:08	2.1K
	2012-05-25-captura-2.pcap	2017-04-25 09:30	13M
	2012-05-25-captura-2.passivedns	2016-12-06 08:08	18K
	2012-05-25-captura-2.json	2015-04-09 20:51	12M
	2012-05-25-captura-2.html	2015-04-09 20:51	6.2M
	2012-05-25-captura-2.dnstop	2016-12-06 08:08	13K
	2012-05-25-captura-2.capinfos	2015-04-09 20:50	720
	2012-05-25-captura-2.binetflow	2016-12-06 08:08	1.1M
	2012-05-25-captura-2.biargus	2016-12-06 08:08	2.6M

Two Win7 (tiny7) infected at a home connection
- tiny71 192.168.0.250
- tiny72 192.168.0.251
948549816.111111.exe MD5: 8df6603d7cbc2fd5862b14377582d46a
File size: 14 MB
Capture duration: 32598 seconds
Start time: Tue May 29 06:19:31 2012
End time: Tue May 29 15:22:50 2012
VirusTotal link

Timeline

Tue May 29 01:14:57 ART 2012

Tue May 29 01:19:21 ART 2012

Start win7 vms

Tue May 29 01:20:12 ART 2012

tiny71 infected

Tue May 29 01:22:06 ART 2012

tiny72 infected

Tue May 29 10:22:43 ART 2012?

Power off