Pattern N
13 samples (always Win2K-f)
Ports
Infection
Listen
Egg-download
always 445
135 (100%)
500 (100%)
1026 (100%)
445 (100%)
Snort IDs
1:1390 (100%)
1:2001944 (100%)
1:3000006 (100%)
1:99998 (100%)
1:3003 (92%)
Network chatter
FTP
pass=1 (62%)
server=StnyFtpd 0wns j0 (62%)
user=1 (62%)
Static analysis
MD5
always None