NUEVA VARIANTE DE RANSOMWARE CRYPTOWALL

A partir del ELISTARA 32.54 de hoy, pasamos a controlar esta nueva variante de ransomware CRYPTOWALL
El preanalisis de virustotal ofrece el siguiente informe:
MD5 824726f2fa86cbcefac5da302f2291c1
SHA1 ac603dbc4c0170abb29ce51a2e8e98304f362be2
File size 264.0 KB ( 270336 bytes )
SHA256: 9c2657945444a8a949cf7102ba785bad8546c4f78214e443591f079961098d0e
File name: my_resume_pdf_id_1851-7311.scr
Detection ratio: 35 / 57
Analysis date: 2015-06-19 09:33:27 UTC ( 1 hour, 12 minutes ago )

0 1
Antivirus Result Update
Avast Win32:Malware-gen 20150619
ESET-NOD32 Win32/Filecoder.CO 20150619
Fortinet W32/Filecoder.CO!tr 20150619
F-Prot W32/Crowti.B 20150619
AhnLab-V3 Trojan/Win32.MDA 20150618
Tencent Trojan.Win32.YY.Gen.24 20150619
Baidu-International Trojan.Win32.Ransom.ip 20150619
AVware Trojan.Win32.Generic!BT 20150619
VIPRE Trojan.Win32.Generic!BT 20150619
ViRobot Trojan.Win32.CryptoLocker.331776[h] 20150619
Emsisoft Trojan.GenericKD.2497152 (B) 20150619
ALYac Trojan.GenericKD.2497152 20150619
Ad-Aware Trojan.GenericKD.2497152 20150619
BitDefender Trojan.GenericKD.2497152 20150619
F-Secure Trojan.GenericKD.2497152 20150619
GData Trojan.GenericKD.2497152 20150619
MicroWorld-eScan Trojan.GenericKD.2497152 20150619
nProtect Trojan.GenericKD.2497152 20150619
Arcabit Trojan.Generic.D261A80 20150619
DrWeb Trojan.Encoder.514 20150619
Malwarebytes Trojan.Dropper 20150619
Symantec Trojan.Cryptodefense 20150619
Kaspersky Trojan-Ransom.Win32.Snocry.ip 20150619
K7AntiVirus Trojan ( 004c62211 ) 20150619
K7GW Trojan ( 004c62211 ) 20150619
TrendMicro TROJ_CROWTI.UIT 20150619
TrendMicro-HouseCall TROJ_CROWTI.UIT 20150619
Panda Trj/Genetic.gen 20150619
Avira TR/Crypt.Xpack.45988 20150619
McAfee RDN/Generic.bfr!in 20150619
McAfee-GW-Edition RDN/Generic.bfr!in 20150618
Microsoft Ransom:Win32/Crowti 20150618
Sophos Mal/Zbot-TW 20150619
Qihoo-360 HEUR/QVM07.1.Malware.Gen 20150619
AVG FileCryptor.CFW 20150619

Dicha versión del ELISTARA 32.54 que lo detecta y elimina, estará disponible en nuestra web a partir de las 15 h CEST de hoy
saludos

ms, 19-6-2015