NUEVA VARIANTE DE RANSOMWARE CRYPTOWALL

A partir del ELISTARA 32.63 de hoy, pasamos a controlar esta nueva variante del Cryptowall
El preanalisis de virustotal ofrece el siguiente informe:
MD5 f52679c115377e42943b0427d968f891
SHA1 e8b6f714409b0ac3bc5cda513b6dd2392fa373ba
File size 240.0 KB ( 245760 bytes )
SHA256: 2dfd43d6776b5712e5fd9d82d3a6b5d0097d2b9371915539ed0b88f4097224a8
File name: 2015-07-01-Angler-EK-malware-payload-CryptoWall-3.0.exe
Detection ratio: 34 / 56
Analysis date: 2015-07-03 07:53:22 UTC ( 8 minutes ago )

0 4
Antivirus Result Update
ALYac Trojan.GenericKD.2531209 20150703
AVG Crypt4.BDEN 20150703
Ad-Aware Trojan.GenericKD.2531209 20150703
AhnLab-V3 Trojan/Win32.Kryptik 20150702
Antiy-AVL Trojan[Ransom]/Win32.Cryptodef 20150703
Avast Win32:Dropper-gen [Drp] 20150703
Avira TR/Crypt.ZPACK.3011 20150703
Baidu-International Adware.Win32.iBryte.DOGK 20150702
BitDefender Trojan.GenericKD.2531209 20150703
Cyren W32/Trojan.VJLQ-7140 20150703
DrWeb Trojan.Encoder.514 20150703
ESET-NOD32 a variant of Win32/Kryptik.DOIZ 20150703
Emsisoft Trojan.GenericKD.2531209 (B) 20150703
F-Prot W32/Trojan3.QPL 20150703
F-Secure Trojan.GenericKD.2531209 20150703
Fortinet W32/Suspicious_bfr.BK!tr 20150703
GData Trojan.GenericKD.2531209 20150702
Ikarus Trojan.Win32.Crypt 20150703
K7AntiVirus Trojan ( 004c76b51 ) 20150703
K7GW Trojan ( 004c76b51 ) 20150703
Kaspersky Trojan-Ransom.Win32.Cryptodef.vut 20150703
Malwarebytes Trojan.CryptoLocker.gen 20150703
McAfee RDN/Suspicious.bfr!bk 20150703
McAfee-GW-Edition RDN/Suspicious.bfr!bk 20150702
MicroWorld-eScan Trojan.GenericKD.2531209 20150703
Microsoft Ransom:Win32/Crowti.A 20150703
Panda Trj/Chgt.O 20150702
Sophos Mal/Generic-S 20150703
Symantec Trojan.Cryptodefense 20150702
Tencent Win32.Trojan.Bp-generic.Wpav 20150703
TrendMicro TROJ_CRYPWALL.BTM 20150703
TrendMicro-HouseCall TROJ_CRYPWALL.BTM 20150703
ViRobot Trojan.Win32.R.Agent.245760.A[h] 20150703
nProtect Trojan/W32.CryptoLocker.245760 20150703
Dicha versión del ELISTARA 32.63 que lo detecta y elimina, estará disponible en nuestra web a partir de las 15 h CEST de hoy

saludos

ms, 3-7-2015