Cluster AQ

Ports	Infection Egg-download Upload 445 (100%) 1031 (50%) 1032 (50%) 1031 (50%) 1032 (50%)
Filenames	Processes Executables MSMSGS.EXE (100%) random 5/8 character filename ftpupd.exe (100%) random 5/8 character filename
Registry keys	...Microsoft\Wireless (100%) full list
Snort IDs	1:2000032 (100%) 1:2000033 (100%) 1:2466 (100%) 1:3000000 (100%) 1:3000003 (100%) 1:99913 (100%) full list
Static analysis	MD5 68e270... (19%) diversity: 75.0% full list