Index of /publicDatasets/CTU-Malware-Capture-Botnet-60

	Name	Last modified	Size	Description
	Parent Directory		-
	2014-03-12_win20.pcap	2014-03-12 09:46	29M
	2014-03-12_win20.rrd	2014-03-12 09:51	8.0M
	2014-03-12_win20.json	2015-04-09 15:16	1.3M
	2014-03-12_win20.html	2015-04-09 15:16	1.0M
	README.md	2015-08-28 22:38	499
	2014-03-12_win20.dnstop	2015-08-28 22:38	4.0K
	2014-03-12_win20.passivedns	2015-08-28 22:38	4.3K
	README.html	2015-08-28 22:38	735
	4e96daddbd1ac1bebc124b090263ae49.exe.zip	2015-12-16 10:26	596K
	2014-03-12_win20.weblogng	2016-06-15 17:55	13K
	bro/	2017-08-31 09:45	-

Adware

• MD5: 4e96daddbd1ac1bebc124b090263ae49

Analysis

VirusTotal Link

Timeline

Sun Feb 23 12:25:27 CET 2014

started win20

Sun Feb 23 12:32:22 CET 2014

infected

wanted to install a fake 'vlc media player' click on ok click on download click on ok

uses IE

Wed Mar 12 09:51:38 CET 2014

poweroff win20. It did nothing appart of ipv6 on the last weeks.