Pattern JULYI

88 samples (Win2K-f (100%))


Ports
InfectionListenEgg-download
445 (84%)
139 (16%)		135 (100%)
500 (100%)
1026 (100%)
1027 (100%)
1028 (100%)		445 (84%)
Filenames
Processes
ftp.exe (100%)
Snort IDs
1:1390 (100%)
1:99998 (100%)
1:2001944 (84%)
1:3000006 (84%)
1:3003 (82%)
Network chatter
FTP
pass=1 (100%)
user=1 (100%)
destport=1028 (88%)
server=StnyFtpd 0wns j0 (81%)
destIP=10.2.32.201 (51%)
exec=Windows (42%)
Static analysis
MD5
None (100%)