Index of /publicDatasets/CTU-Malware-Capture-Botnet-153-1

	Name	Last modified	Size	Description
	Parent Directory		-
	2016-02-12-capture_win4.biargus	2016-12-05 22:26	1.1M
	2016-02-12-capture_win4.binetflow	2016-12-05 22:26	409K
	2016-02-12-capture_win4.capinfos	2016-02-12 02:33	759
	2016-02-12-capture_win4.dnstop	2016-02-12 02:33	2.5K
	2016-02-12-capture_win4.html	2016-02-12 02:35	422K
	2016-02-12-capture_win4.json	2016-02-12 02:35	146K
	2016-02-12-capture_win4.passivedns	2016-02-12 02:33	3.4K
	2016-02-12-capture_win4.pcap	2016-02-12 02:27	16M
	2016-02-12-capture_win4.rrd	2016-02-12 02:30	8.0M
	2016-02-12-capture_win4.tcpdstat	2016-09-03 16:53	1.9K
	2016-02-12-capture_win4.weblogng	2016-06-15 18:05	1.0K
	README.html	2017-01-13 22:18	1.0K
	README.md	2016-02-12 02:29	746
	aaf2070192032e4e4cde5e16d0d7fcce.exe.zip	2016-05-28 12:49	145K
	bro/	2017-08-31 09:45	-
	fast-flux-dga-first-analysis.txt	2017-01-13 22:18	2.6K

Description

• Probable name: Dridex
• MD5: aaf2070192032e4e4cde5e16d0d7fcce
  
• SHA1: bc57ca30e882608ead6555fc801ea10dc50083d0

• SHA256: 82b68a1f83ed6adc753d9c9823ff8ce86c90293b4d914b830a6bb917

• VirusTotal
• HybridAnalysis

• RobotHash

Timeline

Thu Jan 14 22:53:54 CET 2016

Started win4

Thu Jan 14 22:55:30 CET 2016

Infected

After approximately two weeks the malware stop working.

Fri Feb 12 02:29:05 CET 2016

poweroff