Index of /publicDatasets/CTU-Malware-Capture-Botnet-162-2

	Name	Last modified	Size	Description
	Parent Directory		-
	fast-flux-dga-first-analysis.txt	2017-01-15 16:20	3.8K
	bro/	2017-08-31 09:45	-
	README.md	2016-08-04 15:05	783
	README.html	2017-01-15 16:28	1.1K
	2016-05-29_capture-win5.weblogng	2016-08-04 14:59	2.1K
	2016-05-29_capture-win5.tcpdstat	2016-09-03 16:52	1.9K
	2016-05-29_capture-win5.rrd	2016-07-12 07:30	8.0M
	2016-05-29_capture-win5.pcap	2016-07-12 07:30	53M
	2016-05-29_capture-win5.passivedns	2016-08-04 14:58	5.7K
	2016-05-29_capture-win5.json	2016-08-04 15:00	147K
	2016-05-29_capture-win5.html	2016-08-04 15:00	422K
	2016-05-29_capture-win5.dnstop	2016-08-04 14:58	2.4K
	2016-05-29_capture-win5.capinfos	2016-08-04 14:59	757
	2016-05-29_capture-win5.binetflow	2016-12-06 08:06	12M
	2016-05-29_capture-win5.biargus	2016-12-06 08:06	31M
	8e45ab1536864c8a23591fffc0266e1dab1787845e75ba5f25e0383a9388ec36.exe.zip	2016-05-29 11:21	23K

Description

• Probable Name: Upatre
• MD5: b8fc436bab8c22cdfa2d4d137358ca93
• SHA1: fe545fd99a9f7b98483e57d3249706ede5e76d2d
  
• SHA256: 8e45ab1536864c8a23591fffc0266e1dab1787845e75ba5f25e0383a9388ec36
• Zip password: infected

• Duration 43.8 days

• Infected IP address: 10.0.2.105

• VirusTotal
• HybridAnalysis

• RobotHash

Timeline

Sun May 29 11:20:36 CEST 2016

started win5

Sun May 29 11:23:32 CEST 2016

infected

Jul 12 2016 approx

poweroff