Made in Brazil

more versions

Server:
dropped file:
C:\WINDOWS\norton.exe 

size: 277 KB

port: 1568 TCP

startup:
HKLM\Software\Microsoft\Windows\CurrentVersion\Run