Index of /publicDatasets/CTU-Malware-Capture-Botnet-145-1

	Name	Last modified	Size	Description
	Parent Directory		-
	fast-flux-dga-first-analysis.txt	2017-01-14 17:00	61K
	bro/	2017-08-31 09:45	-
	README.md	2015-10-23 12:21	965
	README.html	2017-01-14 17:00	1.2K
	2015-10-23_win4.weblogng	2016-06-15 19:03	13M
	2015-10-23_win4.tcpdstat	2016-10-11 20:09	2.5K
	2015-10-23_win4.rrd	2015-10-23 12:14	8.0M
	2015-10-23_win4.pcap	2015-10-23 12:14	273M
	2015-10-23_win4.passivedns	2015-10-23 12:15	423K
	2015-10-23_win4.netflow5	2016-11-04 19:08	67M
	2015-10-23_win4.json	2015-10-23 13:18	61M
	2015-10-23_win4.html	2015-10-23 13:18	37M
	2015-10-23_win4.dnstop	2015-10-23 12:15	15K
	2015-10-23_win4.capinfos	2015-10-23 12:17	758
	2015-10-23_win4.binetflow	2016-12-05 22:28	24M
	2015-10-23_win4.biargus	2016-12-05 22:28	49M
	0a207b28a5f4e1dead558f7bdb5b6c4a04b8cc3619b96889d806cf3cfd02e56b.utorrent.exe.zip	2015-12-16 10:26	1.6M

Description

• Probable Malware: Fake uTorrent program, also detected as Adware.OpenCandy.173
• MD5: 81da67d8b1d299230ddf9c8e0cecbb1e
  
• SHA1: 1ffd597f7afca17285b9760d40ee11b3a51ffae3
  
• SHA256: 0a207b28a5f4e1dead558f7bdb5b6c4a04b8cc3619b96889d806cf3cfd02e56b
  
• VirusTotal
• HybridAnalysis
• RobotHash

Timeline

Wed Sep 23 13:40:50 CEST 2015

start win4

Wed Sep 23 13:44:42 CEST 2015

infected

Some window was opened to install the soft

Wed Sep 23 13:50:31 CEST 2015

I clicked all the instalation of the software

Now it installed and started to do some P2P traffic. I'm not sure about the relationship between P2P and adware