Pattern JULYD

Ports	Infection Listen Egg-download Upload 445 (100%) 113 (95%) 3067 (95%) 1031 (100%) 445 (97%) 1031 (81%)
Filenames	Processes Executables MSMSGS.EXE (100%) random 5/6/7/8 character filename ftpupd.exe (100%) random 7/8 character filename
Registry keys	...Microsoft\Wireless (100%) full list
Snort IDs	1:2000032 (100%) 1:2000033 (100%) 1:2466 (100%) 1:99913 (100%) 1:2001683 (99%) 555:5555005 (98%) full list
Static analysis	MD5 Antivirus labels Domain 7f6016... (68%) 042774... (7%) full list korgo (100%) padobot (100%) ircbot (68%) sdbot (68%) lsabot (28%) brussels.be.eu.undernet.o... (100%) caen.fr.eu.undernet.org (100%) flanders.be.eu.undernet.o... (100%) gaspode.zanet.org.za (100%) graz.at.eu.undernet.org (100%) lia.zanet.net (100%) full list