Cluster T

74 samples (Win2K-f (100%))

Ports
Listen
135 (100%)
500 (100%)
1026 (100%)
44445 (100%)

Network chatter
FTP
pass=a (100%)
user=a (100%)
server=WinFtpd 1.2 (94%)
exec=resource32w.exe (92%)

Static analysis
MD5
diversity: N/A