Index of /publicDatasets/CTU-Malware-Capture-Botnet-143-1

	Name	Last modified	Size	Description
	Parent Directory		-
	9e9158870e6566c06da166313501c41a06a463ed495ce01a37b83087e0db6777.exe.zip	2015-12-16 10:26	35K
	2015-10-23_win6.biargus	2016-07-11 17:13	407K
	2015-10-23_win6.binetflow	2016-07-11 17:13	471K
	2015-10-23_win6.capinfos	2015-10-23 10:35	755
	2015-10-23_win6.dnstop	2015-10-23 10:35	2.4K
	2015-10-23_win6.html	2015-10-23 10:36	428K
	2015-10-23_win6.json	2015-10-23 10:36	150K
	2015-10-23_win6.passivedns	2015-10-23 10:35	2.3K
	2015-10-23_win6.pcap	2015-10-23 10:17	6.6M
	2015-10-23_win6.rrd	2015-10-23 10:27	8.0M
	2015-10-23_win6.tcpdstat	2016-12-05 22:28	1.9K
	2015-10-23_win6.weblogng	2016-06-15 17:38	793
	README.html	2017-01-14 17:01	1.0K
	README.md	2015-10-23 10:37	688
	bro/	2017-08-31 09:45	-
	fast-flux-dga-first-analysis.txt	2017-01-14 17:01	3.8K

Description

• Probable Name: Upatre
• MD5: d7ae20e8a6fc3c8bfb558a119d88c6e7
  
• SHA1: e8e9f91705ae60b5d29e48c8dcbb9f75e3c3db2e
• VirusTotal
• HybridAnalysis
• RobotHash

Timeline

Fri Sep 25 18:28:20 CEST 2015

started win6

Fri Sep 25 18:30:26 CEST 2015

infected

successfull contacted icanhazip.com

Thu Oct 22 18:50:00 CEST 2015 approx

Machine stopped