Index of /publicDatasets/CTU-Malware-Capture-Botnet-172-1

	Name	Last modified	Size	Description
	Parent Directory		-
	bro/	2017-08-31 09:45	-
	README.md	2016-08-05 13:28	756
	2016-01-06_capture-win8.capinfos	2016-08-05 13:12	761
	2016-01-06_capture-win8.weblogng	2016-08-05 13:12	924
	README.html	2017-01-13 14:20	1.0K
	2016-01-06_capture-win8.passivedns	2016-08-05 13:12	1.4K
	fast-flux-dga-first-analysis.txt	2017-01-13 14:20	1.7K
	2016-01-06_capture-win8.tcpdstat	2016-09-03 16:44	1.7K
	2016-01-06_capture-win8.dnstop	2016-08-05 13:12	2.3K
	2016-01-06_capture-win8.json	2016-08-05 13:25	6.5K
	4b9fad04f768ce5ab550d12a7dfbc49cce977be7f6e2813d5a9d32ace68207ff.exe.zip	2016-06-01 14:00	201K
	2016-01-06_capture-win8.html	2016-08-05 13:25	359K
	2016-01-06_capture-win8.biargus	2016-08-05 13:25	594K
	2016-01-06_capture-win8.binetflow	2016-08-05 13:25	689K
	2016-01-06_capture-win8.rrd	2016-07-12 07:30	8.0M
	2016-01-06_capture-win8.pcap	2016-07-12 07:31	8.9M

Description

• Probable name: InstallMonetizer? Bundle.
• MD5: 41a4e99d5eaede748033bde94fbd4dad
  
• SHA1: 5fba3f988272dcea9713f1dcd4fb1632950fd391
  
• SHA256: e3a4d452e14f2452f587e058940aa52257574999f63947731e94e5da
  
• Zip password: infected

• IP of the infected host: 10.0.2.108

• VirusTotal
• HybridAnalysis

• RobotHash

Timeline

Wed Jun 1 13:55:02 CEST 2016

started win8

Wed Jun 1 13:57:54 CEST 2016

infected

Jul 8 2016

poweroff