Index of /publicDatasets/CTU-Malware-Capture-Botnet-124-1

	Name	Last modified	Size	Description
	Parent Directory		-
	bro/	2017-08-31 09:45	-
	2015-04-30_capture-win5.capinfos	2015-10-15 16:35	764
	README.md	2015-10-15 16:36	802
	README.html	2017-01-15 13:04	1.1K
	2015-04-30_capture-win5.tcpdstat	2016-12-05 22:30	1.8K
	2015-04-30_capture-win5.weblogng	2016-06-15 19:07	3.0K
	2015-04-30_capture-win5.passivedns	2015-10-15 16:35	3.3K
	2015-04-30_capture-win5.dnstop	2015-10-15 16:35	5.2K
	2015-04-30_capture-win5.json	2015-04-30 09:59	8.4K
	fast-flux-dga-first-analysis.txt	2017-01-15 13:04	15K
	2015-04-30_capture-win5.biargus	2015-10-15 16:37	161K
	2015-04-30_capture-win5.binetflow	2015-10-15 16:37	164K
	2015-04-30_capture-win5.html	2015-04-30 09:59	355K
	2015-04-30_capture-win5.pcap	2015-04-30 09:52	1.2M
	84b96b96f60284a21addb1b2873d6aaa.exe.zip	2015-12-16 10:26	1.3M
	2015-04-30_capture-win5.rrd	2015-04-30 09:56	8.0M

Timeline

• MD5 84b96b96f60284a21addb1b2873d6aaa (original name mss3.exe)
• SHA1: 43d874e2fbe6f0435c7d97f61bc652c949ad9f1e
  
• SHA256: d0e9cc13717d794a0579352bfce04fe4a95903c35143bdcb44682cfc660f7360
  

• This file was downloaded and is a module of 8baa9b809b591a11af423824f4d9726a

• VirusTotal
• HybridAnalysis

• RobotHash

Wed Apr 29 13:30:27 CEST 2015

started win5

Wed Apr 29 13:35:02 CEST 2015

Sucesfully infected. Sent SPAM

Thu Apr 30 09:52:27 CEST 2015

Power off