Pattern AUG-SEP-E

Ports	Infection Listen Egg-download Upload 445 (99%) 113 (95%) 3067 (95%) 445 (94%) 1032 (76%) 1032 (62%)
Filenames	Processes Executables MSMSGS.EXE (100%) random 5/6/7/8 character filename ftpupd.exe (100%) random 5/6/7/8 character filename
Registry keys	...Microsoft\Wireless (100%) full list
Snort IDs	1:2000032 (100%) 1:2000033 (100%) 1:2466 (100%) 1:99913 (100%) 1:2001683 (97%) 1:5001684 (97%) full list
Static analysis	MD5 Antivirus labels Domain 7f6016... (68%) 042774... (6%) 32a0d7... (6%) full list korgo (100%) padobot (100%) ircbot (72%) sdbot (72%) lsabot (26%) brussels.be.eu.undernet.o... (100%) caen.fr.eu.undernet.org (100%) flanders.be.eu.undernet.o... (100%) gaspode.zanet.org.za (100%) graz.at.eu.undernet.org (100%) lia.zanet.net (100%) full list