Timeline

• Probably Emotet
• MD5 8baa9b809b591a11af423824f4d9726a
• VirusTotal
• RoboHash

Wed Apr 22 10:49:55 CEST 2015

Started win2 already infected

Sun Jun 7 19:41:37 CEST 2015

poweroff win2