NUEVA VARIANTE DE DOWNLOADER UPATRE CAZADA POR LA HEURISTICA DEL ELISTARA

Otra muestra pedida por el ELISTARA pasa a ser controlada especificamente a parti del ELISTARA 33.18 de hoy

El preanalisis de virustotal ofrece el siguiente informe:

MD5 7aab5772d88d1209e6f0bcff8b0a2df7
SHA1 54a943f3d16ff48bc6b076d00384f9e820bc16e3
File size 73.5 KB ( 75264 bytes )
SHA256: 8c6b948a0d002e1991717ae8d90e9042e3ce31bfdca75616a67f011e5a53c36d
File name: OPIKNDSS.EXE.Muestra EliStartPage v33.11
Detection ratio: 36 / 57
Analysis date: 2015-10-21 13:52:05 UTC ( 11 minutes ago )

0 1

Antivirus Result Update
ALYac Trojan.GenericKD.2793865 20151021
AVG Crypt5.CWQ 20151021
AVware Trojan.Win32.Generic!BT 20151021
Ad-Aware Trojan.GenericKD.2793865 20151021
Agnitum Backdoor.Androm!4f3KlR15vFs 20151020
AhnLab-V3 Trojan/Win32.Wigon 20151021
Antiy-AVL Trojan[Backdoor]/Win32.Androm 20151021
Avast Win32:Malware-gen 20151021
Avira TR/AD.Wigon.Y.3 20151021
Baidu-International Adware.Win32.iBryte.EAIK 20151021
BitDefender Trojan.GenericKD.2793865 20151021
Cyren W32/Downloader.TXBL-6402 20151021
DrWeb Trojan.Siggen6.50704 20151021
ESET-NOD32 a variant of Win32/Kryptik.EBJJ 20151021
Emsisoft Trojan.GenericKD.2793865 (B) 20151021
F-Secure Trojan.GenericKD.2793865 20151021
Fortinet W32/Kryptik.EAIK!tr 20151021
GData Trojan.GenericKD.2793865 20151021
Ikarus Trojan.Win32.Crypt 20151021
K7AntiVirus Trojan ( 004d3f8e1 ) 20151021
K7GW Trojan ( 004d3f8e1 ) 20151021
Kaspersky Backdoor.Win32.Androm.ildk 20151021
McAfee Artemis!7AAB5772D88D 20151021
McAfee-GW-Edition BehavesLike.Win32.Upatre.lh 20151021
MicroWorld-eScan Trojan.GenericKD.2793865 20151021
Microsoft Trojan:Win32/Skeeyah.A!rfn 20151021
NANO-Antivirus Trojan.Win32.Androm.dxxzsa 20151021
Panda Generic Suspicious 20151021
Qihoo-360 HEUR/QVM09.0.Malware.Gen 20151021
Sophos Mal/Upatre-V 20151021
Symantec Downloader.Upatre 20151020
Tencent Win32.Backdoor.Androm.Akfr 20151021
TrendMicro TROJ_DYER.BMC 20151021
TrendMicro-HouseCall TROJ_DYER.BMC 20151021
VIPRE Trojan.Win32.Generic!BT 20151021
nProtect Trojan.GenericKD.2793865 20151021

Dicha versión del ELISTARA 33.18 que lo detecta y elimina, estará disponible en nuestra web a partir de las 18 h CEST de hoy

saludos

ms, 21-10-2015