Pattern JULYT

9 samples (WinXP (100%))

Ports
Infection Egg-download Upload
445 (100%) 445 (100%)
1031 (100%) 1031 (100%)

Filenames
Processes Executables
MSMSGS.EXE (100%) ftpupd.exe (100%)

Registry keys
...Microsoft\Wireless (100%)
full list

Snort IDs
1:2000032 (100%)
1:2000033 (100%)
1:2001569 (100%)
1:2001683 (100%)
1:2466 (100%)
1:3000000 (100%)
full list

Static analysis
MD5
None (33%)