NUEVA VARIANTE DE BACKDOOR BLADABINDI QUE PASAMOS A CONTROLAR

A partir del ELISTARA 32.29 de hoy pasamos a controlar esta nueva variante de malware.

El preanalisis de virustotal ofrece el siguiente informe:
MD5 1672e3519c47aa30a811311e0198b8b9
SHA1 843d701920760f228278b4e19d3f2cd298bb04d4
File size 141.0 KB ( 144384 bytes )
SHA256: 785a6bf400089dcfab43b17adfe9aa42c377160a1252711f4e3023be0648255b
File name: windows.exe
Detection ratio: 42 / 57
Analysis date: 2015-05-14 12:58:15 UTC ( 1 minute ago )

0 1
Antivirus Result Update
ALYac Trojan.GenericKD.2357283 20150514
AVG Atros.AAVC 20150514
AVware Trojan.Win32.Generic!BT 20150514
Ad-Aware Trojan.GenericKD.2357283 20150514
Agnitum Trojan.Disfa!zLmZaLZOnek 20150513
Antiy-AVL Trojan/MSIL.Disfa 20150514
Avast Win32:Malware-gen 20150514
Avira TR/Krypt.144384.21 20150514
Baidu-International Trojan.MSIL.Disfa.fwrm 20150513
BitDefender Trojan.GenericKD.2357283 20150514
CAT-QuickHeal Trojan.MSI.r4 20150514
Comodo UnclassifiedMalware 20150514
Cyren W32/Trojan.BWAL-9385 20150514
DrWeb Trojan.DownLoader13.6643 20150514
ESET-NOD32 a variant of MSIL/Kryptik.BIJ 20150514
Emsisoft Trojan.GenericKD.2357283 (B) 20150514
F-Secure Trojan.GenericKD.2357283 20150514
Fortinet MSIL/Kryptik.BIJ!tr 20150514
GData Trojan.GenericKD.2357283 20150514
Ikarus Trojan.MSIL.Crypt 20150514
Jiangmin Trojan/MSIL.gszx 20150513
K7AntiVirus Trojan ( 004b7c081 ) 20150514
K7GW Trojan ( 004b7c081 ) 20150514
Kaspersky Trojan.MSIL.Disfa.fwrm 20150514
Malwarebytes Backdoor.Agent.SVRGen 20150514
McAfee Artemis!1672E3519C47 20150514
McAfee-GW-Edition Artemis 20150514
MicroWorld-eScan Trojan.GenericKD.2357283 20150514
Microsoft Backdoor:MSIL/Bladabindi 20150514
NANO-Antivirus Trojan.Win32.Disfa.drhqfc 20150514
Norman Suspicious_Gen4.IHUAL 20150514
Panda Trj/CI.A 20150514
Qihoo-360 HEUR/QVM03.0.Malware.Gen 20150514
Sophos Mal/Generic-S 20150514
Symantec Infostealer.Limitail 20150514
Tencent Trojan.Win32.YY.Gen.18 20150514
TotalDefense Heur/Infostealer.ZAAO!suspicious 20150514
TrendMicro BKDR_BDABINDI.P 20150514
TrendMicro-HouseCall BKDR_BDABINDI.P 20150514
VBA32 TScope.Trojan.MSIL 20150514
VIPRE Trojan.Win32.Generic!BT 20150514
nProtect Trojan.GenericKD.2357283 20150514

Dicha version del ELISTARA 32.29 que lo detecta y elimina, estará disponible en nuestra web a partir de las 19 h CEST de hoy

saludos

ms, 14-5-2015