NUEVA VARIANTE DE BACKDOOR BLACK SHADE QUE PASAMOS A CONTROLAR

A partir del ELISTARA 32.29 pasamos a controlar esta nueva variante de malware

EL preanalisis de virustotal ofrece el siguiente informe:

MD5 1835e0cb2304503d585342b9780802c7
SHA1 28c801afaafad3990e3f0d946d901f9ab9dd58e1
File size 996.0 KB ( 1019904 bytes )
SHA256: 31743aef58daf8dc36a09f609e92db72f6b5f699957df843c7cf3be077e2e130
File name: Order-pdf.exe_
Detection ratio: 43 / 57
Analysis date: 2015-05-14 12:58:06 UTC ( 27 minutes ago )

0 1

Antivirus Result Update
ALYac Trojan.GenericKD.2166849 20150514
AVG MSIL6.CNIS 20150514
AVware Trojan.Win32.Generic!BT 20150514
Ad-Aware Trojan.GenericKD.2166849 20150514
Agnitum Trojan.Inject!JD6eRA4N84M 20150513
AhnLab-V3 Trojan/Win32.Limitail 20150514
Antiy-AVL Trojan/MSIL.Inject 20150514
Avast MSIL:GenMalicious-DYX [Trj] 20150514
Avira TR/Injector.1019904.2 20150514
Baidu-International Trojan.MSIL.Inject.bive 20150513
BitDefender Trojan.GenericKD.2166849 20150514
CAT-QuickHeal Trojan.Inject.r3 20150514
Comodo UnclassifiedMalware 20150514
Cyren W32/Trojan.OKWU-6939 20150514
DrWeb Tool.PassView.969 20150514
ESET-NOD32 a variant of MSIL/Injector.HWX 20150514
Emsisoft Trojan.GenericKD.2166849 (B) 20150514
F-Secure Trojan.GenericKD.2166849 20150514
Fortinet MSIL/HWX!tr 20150514
GData Trojan.GenericKD.2166849 20150514
Ikarus Trojan.MSIL.Injector 20150514
Jiangmin Trojan/MSIL.gbyf 20150513
K7AntiVirus Trojan ( 004b61e91 ) 20150514
K7GW Trojan ( 004b61e91 ) 20150514
Kaspersky Trojan.MSIL.Inject.bive 20150514
Malwarebytes Trojan.MSIL.Agent 20150514
McAfee Trojan-FFRZ!1835E0CB2304 20150514
McAfee-GW-Edition Trojan-FFRZ!1835E0CB2304 20150514
MicroWorld-eScan Trojan.GenericKD.2166849 20150514
Microsoft TrojanSpy:MSIL/Golroted.B 20150514
NANO-Antivirus Trojan.Win32.Inject.dnxqab 20150514
Norman Troj_Generic.YRDTX 20150514
Panda Trj/Injector.AV 20150514
Qihoo-360 HEUR/QVM03.0.Malware.Gen 20150514
Sophos Mal/MSIL-MQ 20150514
Symantec Trojan.Gen.2 20150514
Tencent Trojan.Win32.YY.Gen.18 20150514
TheHacker Trojan/Generic.hwx 20150514
TrendMicro TROJ_FRS.BMA000BH15 20150514
TrendMicro-HouseCall TROJ_FRS.BMA000BH15 20150514
VIPRE Trojan.Win32.Generic!BT 20150514
ViRobot Trojan.Win32.S.Agent.1019904.BL[h] 20150514
nProtect Trojan.GenericKD.2166849 20150514

Dicha version del ELISTARA 32.29 que lo detecta y elimina, estará disponible en nuestra web a partir de las 19 h CEST de hoy
saludos

ms, 14-5-2015