Cluster AF

28 samples (WinXP (100%))


Ports
InfectionListenEgg-downloadUpload
445 (100%)1032 (100%)
1028 (29%)		1032 (71%)1032 (89%)
Filenames
Processes
MSMSGS.EXE (100%)
Snort IDs
1:2000032 (100%)
1:2000033 (100%)
1:2466 (100%)
1:99913 (100%)
1:3000003 (89%)
1:3000000 (71%)

full list

Static analysis
MD5

diversity: N/A