Index of /publicDatasets/CTU-Malware-Capture-Botnet-119-1

	Name	Last modified	Size	Description
	Parent Directory		-
	2015-04-22_capture-win3.biargus	2016-01-13 13:56	2.6M
	2015-04-22_capture-win3.binetflow	2016-01-13 13:56	1.1M
	2015-04-22_capture-win3.capinfos	2016-05-28 11:14	761
	2015-04-22_capture-win3.dnstop	2016-05-28 11:14	1.6K
	2015-04-22_capture-win3.html	2015-04-22 10:56	432K
	2015-04-22_capture-win3.json	2015-04-22 10:56	168K
	2015-04-22_capture-win3.passivedns	2016-05-28 11:14	1.3K
	2015-04-22_capture-win3.pcap	2015-04-22 09:23	4.2M
	2015-04-22_capture-win3.rrd	2015-04-22 09:29	8.0M
	2015-04-22_capture-win3.tcpdstat	2016-12-05 22:30	1.7K
	2015-04-22_capture-win3.weblogng	2016-06-15 18:49	2.5K
	306573e52008779a0801a25fafb18101.exe.zip	2015-12-16 10:26	67K
	README.html	2017-01-15 13:04	1.0K
	README.md	2016-05-28 11:17	762
	bro/	2017-08-31 09:45	-
	fast-flux-dga-first-analysis.txt	2017-01-15 13:04	1.6K

Timeline

• Infected with 306573e52008779a0801a25fafb18101
• Probably Geodo Malware
• MD5: 306573e52008779a0801a25fafb18101
• SHA1: 6b4ed125462b01a9ddd406b5c6489c5e990fc383
  

• SHA256: 1e7d8af398855da657e36435cb6502b43fab6d4023a7de7378142b652bbbcc60

• VirusTotal
• HybridAnalysis

• RobotHash

Wed Apr 15 14:23:56 CEST 2015

started win3

Wed Apr 15 14:24:45 CEST 2015

Infected.

It worked

Wed Apr 22 09:24:51 CEST 2015

poweroff