Network Analysis Pcap Challenge

I have 5 pcap files containing network traces captured during the
dynamic analysis of malware or in a network where malicious activity was
occurring. The goal of the challenge is to:

1) Describe *briefly* the activity found in each pcap trace and, if possible,
identify the malicious activity. This includes identifying obfuscated
transfers, C&C activity, exploitation activity, phishing attempts etc. The
activity may be associated e.g. to known and documented malware families, or
to recent and prevalent vulnerabilities or web threats. Whenever possible,
attribute the activity to the relevant malware family, threat, or
vulnerability.

2) Identify patterns that would allow you to recognize the different activities
in an enterprise network environment. These patterns should be described in
the form of Suricata/Snort rules. Alternatively, you can also describe them
in natural language or in the form of PCREs. Care should be taken in
minimizing the risk of false positives and maximizing the robustness of the
rules/regular expressions.