Index of /publicDatasets/CTU-Malware-Capture-Botnet-150-1

	Name	Last modified	Size	Description
	Parent Directory		-
	fast-flux-dga-first-analysis.txt	2017-01-13 22:20	299K
	e9718e38e35ca31c6bc0281cb4ecfae8.exe.zip	2016-01-07 14:50	152K
	bro/	2017-08-31 09:45	-
	README.html	2016-01-11 16:06	1.0K
	2015-12-05_capture-win3.weblogng.pipe.short	2016-06-16 12:06	185K
	2015-12-05_capture-win3.weblogng	2016-06-15 18:05	6.6M
	2015-12-05_capture-win3.tcpdstat	2016-09-03 16:54	1.7K
	2015-12-05_capture-win3.rrd	2015-12-09 11:23	8.0M
	2015-12-05_capture-win3.pcap	2016-01-11 16:10	1.1G
	2015-12-05_capture-win3.passivedns	2016-01-11 16:12	48K
	2015-12-05_capture-win3.dnstop	2016-01-11 16:12	16K
	2015-12-05_capture-win3.capinfos	2016-01-11 16:23	769
	2015-12-05_capture-win3.binetflow	2016-01-07 14:54	457M
	2015-12-05_capture-win3.biargus	2016-01-07 14:53	451M

Description

• Probable Name: Trojan Banker Tinba
• MD5: e9718e38e35ca31c6bc0281cb4ecfae8
  
• SHA1: a284566a6c85bb560d678c97f3fbf0f1b627cc94
  

• SHA256: eedd24bc7b41d6c25de35644f630ffa92546601b2c58691debfb3ba3efa2bc33

• VirusTotal
• HybridAnalysis

• RobotHash

Timeline

Sat Dec 5 12:26:24 CET 2015

started win3

Sat Dec 5 12:27:53 CET 2015

Infected

Some of the domains are sinkholed.