Index of /publicDatasets/CTU-Malware-Capture-Botnet-116-3

	Name	Last modified	Size	Description
	Parent Directory		-
	2012-05-30-capture-3.capinfos	2015-04-09 21:23	721
	2012-05-30-capture-3.html	2015-04-09 21:27	1.5M
	2012-05-30-capture-3.json	2015-04-09 21:27	639K
	2012-05-30-capture-3.pcap	2012-05-30 15:33	186M
	2012-05-30-capture-3.weblogng	2016-06-15 18:04	169K
	948549816.111111.exe.zip	2015-12-16 10:26	285K
	README.html	2015-04-09 21:30	748
	README.md	2015-04-09 21:26	596

Analysis of probable Kazy

• Two Win7 (tiny7) infected at a home connection
  • tiny71 192.168.0.250
  • tiny72 192.168.0.251
• 948549816.111111.exe. MD5: 8df6603d7cbc2fd5862b14377582d46a
• Home Connection
• File size: 195 MB
• Data size: 165 MB
• Capture duration: 31819 seconds (8.83 hs)
• Start time: Wed May 30 02:39:42 2012
• End time: Wed May 30 11:30:01 2012
• VirusTotal link

Timeline

Wed May 30 ART 2012

Win7 started