See: https://www.virustotal.com/nl/url/9fef0f8afa10fe3e2432a1ef3356857c212c6452c2d7083fce20e8a82e7ea6ad/analysis/1385586458/ and https://www.virustotal.com/nl/file/7a184790535a38d21dc2d70373e80f32801a791ac487f500cde12385ee14851b/analysis/1385586462/ IDS alerts: http://urlquery.net/report.php?id=8033153
IP also with Snort Alert [1:27242:2]
polonus