Index of /publicDatasets/CTU-Malware-Capture-Botnet-27-1

	Name	Last modified	Size	Description
	Parent Directory		-
	2013-10-25_capture-win11.biargus	2017-01-15 13:24	467M
	2013-10-25_capture-win11.binetflow	2017-01-15 13:25	208M
	2013-10-25_capture-win11.capinfos	2015-08-29 14:24	762
	2013-10-25_capture-win11.dnstop	2015-08-28 21:39	23K
	2013-10-25_capture-win11.passivedns	2015-08-28 21:40	1.2M
	2013-10-25_capture-win11.pcap	2013-11-25 07:01	11G
	2013-10-25_capture-win11.rrd	2013-11-11 09:38	181K
	2013-10-25_capture-win11.tcpdstat	2017-01-15 13:23	4.2K
	README.html	2017-01-15 14:13	1.2K
	README.md	2015-12-22 09:29	959
	Report_10252013.exe.zip	2015-12-16 10:26	9.5K
	bro/	2017-08-31 09:45	-
	fast-flux-dga-first-analysis.txt	2017-01-15 14:13	10M
	ra.conf.analysis	2013-10-26 21:58	2.1K
	win-11-monthly-2houravg.jpeg	2013-11-25 18:11	50K

Timeline

• Probable Upatre
• VirusTotal of zip
• VirusTotal of exe
• MD5 of exe: 8add936de663ba9cd5e0097beff8783d
• SHA1: df2b08bfb68a492f018afdffb9d0ed349c067f3c
• SHA256: 27dd3808d50bc690e155b2687fe0e67083882f1d9493437343e27255ccd95ad4
• The password of the zip is: infected

• Duration: 24.6 days

• VirusTotal
• HybridAnalysis

• RobotHash

Thu, 31 Oct 2013 13:41:08

infected

Approx Nov 24 2013

stopped