NUEVA VARIANTE DE CAZAPASSWORDS BANCARIO SPY BANKER QUE PASAMOS A CONTROLAR

Recibidas tres muestras para analizar, han resultado ser variantes de SPYBANKER que pasaremos a controlar a partir de la proxima version del ELISTARA 32.23 de hoy.

Los preanalisis de virustotal ofrecen los siguientes informes

MD5 3bbb67b9c8234b1930614dcaa68e1ec5
SHA1 8c7d23cc4ad040f101b2ffd38eb1f0eead13d91c
File size 2.1 MB ( 2177024 bytes )

SHA256: 9f6ddf220a421619a266cbf5d52ff0451aeaf0e31c2d5173df4890e972413ed7
File name: 1I4T4g.exe
Detection ratio: 29 / 55
Analysis date: 2015-05-06 07:32:08 UTC ( 5 minutes ago )

0 1
Antivirus Result Update
ALYac Gen:Variant.Kazy.382938 20150506
AVG SHeur4.BVYJ 20150506
AVware Trojan.Win32.Generic!BT 20150506
Ad-Aware Gen:Variant.Kazy.382938 20150506
Agnitum TrojanSpy.Banker!Wq8bvV/zCLs 20150505
AhnLab-V3 Trojan/Win32.Gen 20150505
Antiy-AVL Trojan/Win32.SGeneric 20150506
Avast Win32:Malware-gen 20150506
Baidu-International Trojan.Win32.Banker.AANP 20150505
BitDefender Gen:Variant.Kazy.382938 20150506
Bkav HW32.Packed.F263 20150505
Comodo UnclassifiedMalware 20150506
ESET-NOD32 Win32/Spy.Banker.AANP 20150506
Emsisoft Gen:Variant.Kazy.382938 (B) 20150506
F-Secure Gen:Variant.Kazy.382938 20150506
Fortinet W32/Banker.AANP!tr.spy 20150506
GData Gen:Variant.Kazy.382938 20150506
Ikarus Kazy 20150506
Kingsoft Win32.Troj.Banker.(kcloud) 20150506
McAfee Artemis!3BBB67B9C823 20150506
MicroWorld-eScan Gen:Variant.Kazy.382938 20150506
NANO-Antivirus Trojan.Win32.Kazy.czqrvy 20150506
Norman Troj_Generic.UEROW 20150505
Panda Trj/Chgt.A 20150505
Qihoo-360 Win32/Trojan.19d 20150506
Symantec Trojan.Gen.2 20150506
TrendMicro TROJ_GEN.R047C0ED215 20150506
TrendMicro-HouseCall TROJ_GEN.R047C0ED215 20150506
VIPRE Trojan.Win32.Generic!BT 20150506
_______

MD5 e140acf6f90d4d4e2632dcd1c3860db8
SHA1 837457e8cf7d23f286c895ee8a41ef3b83eab007
File size 2.8 MB ( 2984960 bytes )
SHA256: a368a774a01a251bad9f2078ecd0fafda9eaf88396fca185a979cb9af12a1836
File name: 0G6Q1d.exe
Detection ratio: 32 / 54
Analysis date: 2014-09-03 12:22:51 UTC ( 8 months ago )

0 1
Antivirus Result Update
AVG SHeur4.BVYK 20140903
AVware Trojan.Win32.Generic!BT 20140902
Ad-Aware Gen:Variant.Kazy.385034 20140903
Agnitum TrojanSpy.Banker!87hAKRQszV4 20140903
AhnLab-V3 Downloader/Win32.Generic 20140903
Avast Win32:Dropper-gen [Drp] 20140903
Avira TR/Kazy.385034 20140903
Baidu-International Trojan.Win32.Banker.BAAPA 20140903
BitDefender Gen:Variant.Kazy.385034 20140903
Bkav W32.HfsAutoA.3628 20140903
Comodo UnclassifiedMalware 20140903
ESET-NOD32 Win32/Spy.Banker.AAPA 20140903
Emsisoft Gen:Variant.Kazy.385034 (B) 20140903
F-Secure Gen:Variant.Kazy.385034 20140903
Fortinet W32/Banker.AAPA!tr.spy 20140903
GData Gen:Variant.Kazy.385034 20140903
Ikarus Kazy 20140903
K7AntiVirus Spyware ( 004957b21 ) 20140902
K7GW Spyware ( 004957b21 ) 20140902
Kingsoft Win32.Troj.Banker.(kcloud) 20140903
McAfee Artemis!E140ACF6F90D 20140903
McAfee-GW-Edition Artemis 20140902
MicroWorld-eScan Gen:Variant.Kazy.385034 20140903
NANO-Antivirus Trojan.Win32.Kazy.dbpvcf 20140903
Norman Troj_Generic.UEMGK 20140903
Panda Trj/Chgt.A 20140903
Qihoo-360 Win32/Trojan.Spy.aa9 20140903
Rising PE:Trojan.Win32.Generic.16CEC2BA!382649018 20140903
Symantec Trojan.Gen.2 20140903
TrendMicro TROJ_GEN.R0CBC0UFU14 20140903
TrendMicro-HouseCall TROJ_GEN.R0CBC0UFU14 20140903
VIPRE Trojan.Win32.Generic!BT 20140902
________
MD5 f641c75eb74e25fbe03225794c567322
SHA1 77667dfb33cda6f010453cc394a9c34c84acbbf4
File size 2.2 MB ( 2296320 bytes )
SHA256: f741fa623c06bb5fd4751be64e1b593bbb81734db8b08057602b70bc561499db
File name: 4q5b2L.exe
Detection ratio: 23 / 55
Analysis date: 2015-05-06 07:57:13 UTC ( 1 minute ago )

0 1
Antivirus Result Update
AVG PSW.Banker6.BKQW 20150506
AVware Trojan.Win32.Generic!BT 20150506
AhnLab-V3 Trojan/Win32.Xema 20150505
Avast Win32:Malware-gen 20150506
Baidu-International Trojan.Win32.Banker.AAOP 20150505
Bkav HW32.Packed.B767 20150505
Comodo UnclassifiedMalware 20150506
ESET-NOD32 a variant of Win32/Spy.Banker.AAOP 20150506
Fortinet W32/Banker.AAOP!tr.spy 20150506
GData Win32.Trojan.Agent.0EFYU1 20150506
Ikarus Trojan.Win32.Spy 20150506
K7AntiVirus Spyware ( 004957ae1 ) 20150506
K7GW Spyware ( 004957ae1 ) 20150506
McAfee Artemis!F641C75EB74E 20150506
Microsoft TrojanDownloader:Win32/Qulkonwi.B 20150506
NANO-Antivirus Trojan.Win32.Banker.cywnci 20150506
Norman Troj_Generic.UAKNT 20150506
Panda Trj/CI.A 20150505
Qihoo-360 Win32/Trojan.Multi.daf 20150506
Sophos Mal/Generic-S 20150506
Symantec Downloader 20150506
VIPRE Trojan.Win32.Generic!BT 20150506
Zillya Trojan.Banker.Win32.83695 20150505

Dicha version del ELISTARA 32.23 que los detecta y elimina, estará disponible en nuestra web a partir d elas 18 h CEST de hoy

saludos

ms, 6-5-2015