Pattern JUL-AUGA

Ports	Infection Egg-download Upload 445 (100%) 445 (98%) 1031 (58%) 1032 (42%) 1031 (58%) 1032 (42%)
Filenames	Processes Executables MSMSGS.EXE (100%) random 5/6/7/8 character filename ftpupd.exe (100%) random 5/6/7/8 character filename
Registry keys	...Microsoft\Wireless (100%) full list
Snort IDs	1:2000032 (100%) 1:2000033 (100%) 1:2466 (100%) 1:3000000 (100%) 1:3000003 (100%) 1:99913 (100%) full list
Static analysis	MD5 Antivirus labels 7d99b0... (45%) 3ae357... (8%) a0139d... (8%) 986b59... (6%) d42c1c... (6%) full list korgo (100%) padobot (100%) lsabot (99%)