See: https://www.virustotal.com/nl/url/5c084a19026fed1141a479e9bf2c15749c3f3b1bcb724c3ecb82e9028faf547f/analysis/1370018080/
and https://www.virustotal.com/nl/file/a8660690e090289557e8710f763af031b6a3f160ea9e94dd59d321be331beb7c/analysis/1370018086/
Consider IDS alerts here: http://urlquery.net/report.php?id=1979259
polonus