OTRA NUEVA VARIANTE DE DOWNLOADER GAMARUE

Otra variante de este downloader pasa a ser controlado a partir del ELISTARA 31.33 de hoy

El preanalisis de virustotal ofrece el siguiente informe:

MD5 3ef33f9aebef20a2d2e9d0dbf91f8842
SHA1 ee78da89f42a10d9e55307b49355f7543275a1b6
Tamaño del fichero 141.0 KB ( 144384 bytes )
SHA256: e95f1a74cfad3bba30ce5c760bac31d124a88cf810e36d5035224d012146d8e1
Nombre: loa.exe
Detecciones: 44 / 56
Fecha de análisis: 2014-12-29 10:10:44 UTC ( hace 8 minutos )

0 4
Antivirus Resultado Actualización
ALYac Backdoor.Agent.ppih 20141229
AVG MSIL6.JKW 20141229
AVware Trojan.Win32.Generic!BT 20141229
Ad-Aware Trojan.GenericKD.2037169 20141229
Agnitum Backdoor.Androm!6Lsr/+VrLew 20141228
AhnLab-V3 Trojan/Win32.MDA 20141228
Antiy-AVL Trojan[Backdoor]/Win32.Androm 20141229
Avast Win32:Trojan-gen 20141229
Avira TR/Crypt.Xpack.56293 20141229
Baidu-International Backdoor.Win32.Androm.aYVv 20141229
BitDefender Trojan.GenericKD.2037169 20141229
Bkav W32.PitofgusLTD.Trojan 20141229
CAT-QuickHeal Backdoor.Androm.r3 20141229
ClamAV Win.Trojan.Agent-827973 20141229
Cyren W32/Trojan.ATJF-3600 20141229
DrWeb BackDoor.Andromeda.404 20141229
ESET-NOD32 Win32/TrojanDownloader.Wauchos.AF 20141229
Emsisoft Trojan.GenericKD.2037169 (B) 20141229
F-Prot W32/Trojan3.MYB 20141229
F-Secure Trojan.GenericKD.2037169 20141228
Fortinet W32/Androm.AF!tr.bdr 20141228
GData Trojan.GenericKD.2037169 20141229
Ikarus Trojan.MSIL.Inject 20141229
K7AntiVirus Trojan-Downloader ( 0049c6041 ) 20141226
K7GW Trojan ( 050000001 ) 20141226
Kaspersky Backdoor.Win32.Androm.fsve 20141229
Malwarebytes Trojan.MSIL.ED 20141229
McAfee Generic BackDoor.s 20141229
McAfee-GW-Edition Generic BackDoor.s 20141228
MicroWorld-eScan Trojan.GenericKD.2037169 20141229
Microsoft Worm:Win32/Gamarue 20141229
NANO-Antivirus Trojan.Win32.Androm.dkznop 20141229
Norman Troj_Generic.XTPIX 20141229
Panda Trj/CI.A 20141229
Qihoo-360 HEUR/QVM03.0.Malware.Gen 20141229
Sophos Troj/dunk-C 20141229
Symantec Backdoor.Trojan 20141229
TrendMicro BKDR_ANDROM.YYLE 20141229
TrendMicro-HouseCall BKDR_ANDROM.YYLE 20141229
VBA32 TScope.Trojan.MSIL 20141228
VIPRE Trojan.Win32.Generic!BT 20141229
ViRobot Trojan.Win32.Agent.144384.N[h] 20141229
Zillya Backdoor.Androm.Win32.13285 20141228
nProtect Backdoor/W32.Androm.144384.E 20141229

DIcha version del ELISTARA 31.33 que lo detecta y elimina, estará disponible en nuestra web a partir de las 19 h CEST de hoyu

saludos

ms, 29-12-2014