NUEVA VARIANTE DE MALWARE DRIPKIx INSTALADO POR UN DOWMWARE AMONETIZE

A partir del ELISTARA 33.43 de hoy pasamos a controlar la nueva variuante de malware DRIPKIX, instalado por un downware.

El preanalisis de virustotal ofrece el siguiente informe:
MD5 790ac1beffbcc73a7add37cf7030e44c
SHA1 e1157b39de00bed732a83feb0e09b9c0a92d7ddb
File size 371.0 KB ( 379904 bytes )
SHA256: d88161eaf518a2d98a765b68a5ba51c0bee94e8228aa853dac8f970180760f7e
File name: Dripkix.exe
Detection ratio: 34 / 56
Analysis date: 2015-11-25 16:06:16 UTC ( 1 minute ago )

0 1

Antivirus Result Update
ALYac Trojan.GenericKD.2873547 20151125
AVware Trojan.Win32.Generic!BT 20151125
Ad-Aware Trojan.GenericKD.2873547 20151125
Antiy-AVL GrayWare[AdWare:not-a-virus]/Win32.Amonetize 20151125
Arcabit Trojan.Generic.D2BD8CB 20151125
Avast Win32:Rootkit-gen [Rtk] 20151125
Avira ADWARE/Amonetize.Gen7 20151125
Baidu-International PUA.MSIL.Amonetize.AA 20151125
BitDefender Trojan.GenericKD.2873547 20151125
Cyren W32/Adware.IDBE-2844 20151125
ESET-NOD32 a variant of MSIL/Amonetize.AA potentially unwanted 20151125
Emsisoft Trojan.GenericKD.2873547 (B) 20151125
F-Secure Trojan.GenericKD.2873547 20151125
Fortinet Adware/Amonetize 20151125
GData Trojan.GenericKD.2873547 20151125
Ikarus PUA.MSIL.Amonetize 20151125
K7AntiVirus Adware ( 004c75631 ) 20151125
K7GW Adware ( 004c75631 ) 20151125
Kaspersky not-a-virus:AdWare.Win32.Amonetize.bwhl 20151125
Malwarebytes PUP.Optional.Amonetize 20151125
McAfee Artemis!790AC1BEFFBC 20151125
McAfee-GW-Edition BehavesLike.Win32.Backdoor.fc 20151125
MicroWorld-eScan Trojan.GenericKD.2873547 20151125
NANO-Antivirus Riskware.Win32.Amonetize.dyuphv 20151125
Panda Trj/GdSda.A 20151125
Qihoo-360 HEUR/QVM03.0.Malware.Gen 20151125
Sophos Generic PUA OB (PUA) 20151125
Symantec Trojan.Gen.2 20151124
Tencent Win32.Adware.Amonetize.Agbi 20151125
TrendMicro ADW_Amonetize 20151125
TrendMicro-HouseCall ADW_Amonetize 20151125
VIPRE Trojan.Win32.Generic!BT 20151125
Zillya Adware.BrowseFox.Win32.161732 20151123
nProtect Trojan.GenericKD.2873547 2015112

Dicha version del ELISTARA 33.43 que lo detecta y elimina, estará disponible en nuestra web a partir de las 18 h CEST de hoy

saludos

ms, 25-11-2015