Index of /publicDatasets/CTU-Malware-Capture-Botnet-167-1

	Name	Last modified	Size	Description
	Parent Directory		-
	fast-flux-dga-first-analysis.txt	2017-01-13 20:48	7.8K
	bro/	2017-08-31 09:45	-
	ZeuS_binary_b73aa307e8c2328f6a7dfde1a1f024fc.exe.zip	2016-12-05 21:23	536K
	README.md	2016-10-11 19:55	830
	README.html	2017-01-13 20:48	1.1K
	2016-05-27_win-4.weblogng	2016-08-01 22:39	63M
	2016-05-27_win-4.tcpdstat	2016-09-03 16:48	1.8K
	2016-05-27_win-4.rrd	2016-07-12 07:30	8.0M
	2016-05-27_win-4.pcap	2016-07-12 07:31	756M
	2016-05-27_win-4.passivedns	2016-08-01 22:37	4.1K
	2016-05-27_win-4.netflow5	2016-11-04 15:30	32M
	2016-05-27_win-4.dnstop	2016-08-01 22:37	2.4K
	2016-05-27_win-4.capinfos	2016-08-01 22:39	758
	2016-05-27_win-4.binetflow	2016-12-05 22:17	19M
	2016-05-27_win-4.biargus	2016-12-05 22:17	57M

Description

• Probable Name: Storm Botnet
• MD5: b73aa307e8c2328f6a7dfde1a1f024fc
  
• SHA1: b22dcd3a6925d2ec5c1ecf09bb979e5c745d32a6
  

• SHA256: bbf953c8d3a775cc3a91818db3043eec319fa17f1f350de0c272958e99e22941

• VirusTotal
• HybridAnalysis

• RobotHash

Timeline

Fri May 27 19:02:25 CEST 2016

start win4

Fri May 27 19:06:25 CEST 2016

infected with ZeuS_binary_b73aa307e8c2328f6a7dfde1a1f024fc.exe

Binary taken from here https://zeustracker.abuse.ch/monitor.php?host=neorandom.dothome.co.kr