Timeline

• MD5: bf08e6b02e00d2bc6dd493e93e69872f
• Probable name: Neris

Sun Feb 16 19:19:19 CET 2014

started win13

Sun Feb 16 19:20:16 CET 2014

infected

Did not work. The CC was down. It keep trying to connect.

Mon Feb 17 09:14:49 CET 2014

stopped win13