Index of /publicDatasets/CTU-Malware-Capture-Botnet-134-1

	Name	Last modified	Size	Description
	Parent Directory		-
	2015-10-11_win3.pcap	2015-09-11 14:49	302K
	2015-10-11_win3.rrd	2015-09-11 14:57	8.0M
	2015-10-11_win3.dnstop	2015-09-11 16:49	2.3K
	2015-10-11_win3.passivedns	2015-09-11 16:49	1.2K
	2015-10-11_win3.capinfos	2015-09-11 16:49	752
	2015-10-11_win3.json	2015-09-11 16:49	162K
	2015-10-11_win3.html	2015-09-11 16:49	453K
	README.md	2015-09-11 22:11	776
	2015-10-11_win3.biargus	2015-10-15 16:23	33K
	2015-10-11_win3.binetflow	2015-10-15 16:23	35K
	37e7f6598126096eaa9beea19377f936f94756fd4b584441c24fa7e60d7785f4.exe.zip	2015-12-16 10:26	143K
	2015-10-11_win3.weblogng	2016-06-15 18:05	5.1K
	2015-10-11_win3.tcpdstat	2016-12-05 22:29	1.7K
	fast-flux-dga-first-analysis.txt	2017-01-14 17:09	4.2K
	README.html	2017-01-14 17:09	1.0K
	bro/	2017-08-31 09:45	-

Timeline

• Probable name: Neutrino-EK-payload-CryptoWall-3.0
• MD5: 6daff56b1c5429b7460dcf836803bea3
• SHA1: 9734719b95774a7d472f87b050e584ee0537994b
  
• SHA256: 37e7f6598126096eaa9beea19377f936f94756fd4b584441c24fa7e60d7785f4
  
• VirusTotal
• Hybrid-Analysis

Thu Sep 10 14:50:45 CEST 2015

start win3

Thu Sep 10 14:58:40 CEST 2015

infected

The machine was successfully infected with POST requests.

Fri Sep 11 14:54:46 CEST 2015

poweroff