Index of /publicDatasets/CTU-Malware-Capture-Botnet-125-1

	Name	Last modified	Size	Description
	Parent Directory		-
	fast-flux-dga-first-analysis.txt	2017-01-15 13:04	7.4M
	bro/	2017-08-31 09:45	-
	README.md	2015-06-07 20:08	332
	README.html	2017-01-15 13:04	520
	2015-06-07_capture-win5.weblogng	2016-06-15 17:44	1.7M
	2015-06-07_capture-win5.tcpdstat	2016-12-05 22:30	2.1K
	2015-06-07_capture-win5.rrd	2015-06-07 20:09	8.0M
	2015-06-07_capture-win5.pcap	2015-06-07 20:05	1.7G
	2015-06-07_capture-win5.passivedns	2015-08-28 21:12	917K
	2015-06-07_capture-win5.json	2015-06-10 10:41	1.1G
	2015-06-07_capture-win5.html	2015-06-10 10:41	533M
	2015-06-07_capture-win5.dnstop	2015-08-28 21:12	22K
	2015-06-07_capture-win5.capinfos	2016-12-05 22:30	1.1K
	2015-06-07_capture-win5.binetflow	2016-12-05 22:30	9.4M
	2015-06-07_capture-win5.biargus	2016-12-05 22:30	21M
	35cf982449765a4f163bcf822e663f03.exe.zip	2015-12-16 10:26	68K

Timeline

• Geodo
• MD5 35cf982449765a4f163bcf822e663f03

Wed May 6 09:19:40 CEST 2015

started win5

Wed May 6 09:22:00 CEST 2015 infected successfully

sent 1 spam

Tue May 26 11:07:18 CEST 2015

At some point it stop sending packets. I will restart it now. I keep the same pcap.

Sun Jun 7 20:08:50 CEST 2015

Poweroff