Index of /publicDatasets/CTU-Malware-Capture-Botnet-27-2

	Name	Last modified	Size	Description
	Parent Directory		-
	9f620b924910764bc5d3fa8fa0f1aab9.zip	2015-08-29 14:15	9.4K
	2013-10-25_capture-win4.biargus	2015-08-29 15:22	9.9M
	2013-10-25_capture-win4.binetflow	2015-08-29 15:22	8.4M
	2013-10-25_capture-win4.capinfos	2015-08-29 14:22	765
	2013-10-25_capture-win4.dnstop	2015-08-28 22:46	22K
	2013-10-25_capture-win4.html	2015-08-28 23:05	27M
	2013-10-25_capture-win4.json	2015-08-28 23:05	41M
	2013-10-25_capture-win4.passivedns	2015-08-28 22:46	168K
	2013-10-25_capture-win4.pcap	2013-11-25 07:01	3.1G
	2013-10-25_capture-win4.rrd	2013-11-11 09:37	181K
	2013-10-25_capture-win4.tcpdstat	2017-01-15 16:39	2.8K
	2013-10-25_capture-win4.weblogng	2016-06-15 17:40	338K
	README.html	2017-01-15 16:53	683
	README.md	2015-08-29 15:29	510
	Report_10252013.exe.zip	2015-12-16 10:26	9.5K
	bro/	2017-08-31 09:45	-
	fast-flux-dga-first-analysis.txt	2017-01-15 16:53	2.1M

Timeline

• Probable Upatre
• VirusTotal of zip
• VirusTotal of exe
• MD5 of zip: 9f620b924910764bc5d3fa8fa0f1aab9
• MD5 of exe: 8add936de663ba9cd5e0097beff8783d
• Duration: 17.4 days
• IP of infected host: 10.0.2.104

Approx 07 Nov 2013

infected

Approx 24 Nov 2013

stopped