Analysis of probable Kazy

• Two Win7 (tiny7) infected at a home connection
  • tiny71 192.168.0.250
  • tiny72 192.168.0.251
• 948549816.111111.exe. MD5: 8df6603d7cbc2fd5862b14377582d46a
• Home Connection
• File size: 195 MB
• Data size: 165 MB
• Capture duration: 31819 seconds (8.83 hs)
• Start time: Wed May 30 02:39:42 2012
• End time: Wed May 30 11:30:01 2012
• VirusTotal link

Timeline

Wed May 30 ART 2012

Win7 started