Nueva variante de HACKTOOL SPYNET

Una muestra de este fichero pasa a ser controlado a partir de ELISTARA 30.65

El preanalisis de viristotal ofrece el siguiente informe:
MD5 98de7bcad1ba2caf74007bd97bc2b505
SHA1 8a79d06159a339313b810f23835b8417429dd356
Tamaño del fichero 2.0 MB ( 2132992 bytes )
SHA256: e4b3b3e72bd3bf4052a3136cb811ea54923bc2d7807709992e0345743d49ced8
Nombre: SpyNet.exe
Detecciones: 49 / 54
Fecha de análisis: 2014-09-23 07:06:04 UTC ( hace 3 horas, 17 minutos )

3 24

Antivirus Resultado Actualización
AVG Worm/Generic.AUYX 20140923
Ad-Aware Generic.Rebhip.30E38DAF 20140923
Agnitum Trojan.DR.Decay!xgmyKg77zLI 20140922
AhnLab-V3 Dropper/Win32.Decay 20140923
Antiy-AVL Worm/Win32.Bybz 20140923
Avast Win32:Malware-gen 20140923
Avira TR/Kazy.117949.1 20140923
Baidu-International Malware.Win32.HackTool.40 20140922
BitDefender Generic.Rebhip.30E38DAF 20140923
Bkav W32.Cloda75.Trojan.b3bc 20140922
CAT-QuickHeal Worm.Bybz.r3 20140923
CMC Trojan.Win32.GenK!O 20140922
Comodo TrojWare.Win32.TrojanDropper.Decay.ghv 20140923
Cyren W32/Risk.TGIX-7325 20140923
DrWeb BackDoor.Cybergate.1 20140923
ESET-NOD32 Win32/Spatet.C 20140923
Emsisoft Generic.Rebhip.30E38DAF (B) 20140923
F-Prot W32/Dropper.AVMY 20140923
F-Secure Generic.Rebhip.30E38DAF 20140923
Fortinet W32/Decay.BYS!tr 20140923
GData Generic.Rebhip.30E38DAF 20140923
Ikarus Worm.Win32.Bybz 20140923
Jiangmin TrojanDropper.Decay.yg 20140922
K7AntiVirus Riskware ( 0040eff71 ) 20140922
K7GW Riskware ( 0040eff71 ) 20140922
Kaspersky Trojan-Dropper.Win32.Decay.bys 20140923
Kingsoft Win32.Troj.Undef.(kcloud) 20140923
Malwarebytes Trojan.Agent 20140923
McAfee Artemis!98DE7BCAD1BA 20140923
McAfee-GW-Edition Generic PWS.di 20140923
MicroWorld-eScan Generic.Rebhip.30E38DAF 20140923
Microsoft Worm:Win32/Braim.A 20140923
NANO-Antivirus Trojan.Win32.Llac.crkzmz 20140923
Norman Suspicious_Gen2.AINUV 20140922
Panda Trj/Genetic.gen 20140922
Qihoo-360 HEUR/Malware.QVM01.Gen 20140923
Rising PE:Trojan.Win32.Generic.11EE63F5!300835829 20140922
Sophos Troj/Trufip-A 20140923
Symantec Infostealer 20140923
Tencent Suspicious.Trojan.Family.Gen 20140923
TheHacker Trojan/Dropper.Decay.bys 20140919
TotalDefense Win32/Spyrat.A!generic 20140922
TrendMicro TSPY_INFOSTE.III 20140923
TrendMicro-HouseCall TSPY_INFOSTE.III 20140923
VBA32 Worm.Bybz 20140922
VIPRE Trojan.Win32.Generic.pak!cobra 20140923
ViRobot Dropper.S.Decay.2132992 20140923
Zillya Dropper.Decay.Win32.4051 20140921
nProtect Trojan-Dropper/W32.Decay.2132992 20140922

Dicha version del ELISTARA 30.65 que lo detecta y elimina, estará disponible en nuestra web a partir de las 19 h CEST de hoy

saludos

ms, 23-9-2014