NUEVA VARIANTE DE TROJAN RANAPAMA

A partir del ELISTARA 32.46 de hoy pasamos a controlar esta nueva variante de malware
El preanalisis de virustotal ofrece el siguiente informe:
MD5 55f93b13d36e77c455c6477e5612500d
SHA1 30e1ea407976e281ede29d8483e183a935adfe4d
File size 114.7 KB ( 117434 bytes )
SHA256: 64d43ff79abc38faa4a92a053fa83b23d037de6b718e479ede7eb64037e6e26d
File name: suba002.exe
Detection ratio: 37 / 57
Analysis date: 2015-06-09 14:57:19 UTC ( 37 minutes ago )

0 1
Antivirus Result Update
ALYac Trojan.Ranapama.EF 20150609
AVG Inject2.CHII 20150609
AVware Trojan.Win32.Generic!BT 20150609
Ad-Aware Trojan.Ranapama.EF 20150609
Agnitum Trojan.Injector!SRRZXVNnT80 20150609
AhnLab-V3 Trojan/Win32.Ransomlock 20150609
Antiy-AVL Trojan/Win32.TSGeneric 20150609
Arcabit Trojan.Ranapama.EF 20150609
Avast Win32:Malware-gen 20150609
Avira TR/Kryptik.qgmpq 20150609
Baidu-International Trojan.Win32.Injector.CCIA 20150609
BitDefender Trojan.Ranapama.EF 20150609
Bkav W32.YaiomiF.Trojan 20150609
DrWeb Trojan.MulDrop5.54972 20150609
ESET-NOD32 a variant of Win32/Injector.CCIA 20150609
Emsisoft Trojan.Ranapama.EF (B) 20150609
F-Secure Trojan.Ranapama.EF 20150609
Fortinet W32/Injector.CCKH!tr 20150609
GData Trojan.Ranapama.EF 20150609
Ikarus Trojan.Win32.Glupteba 20150609
K7GW Trojan ( 700001211 ) 20150609
Kaspersky UDS:DangerousObject.Multi.Generic 20150609
Malwarebytes Trojan.Glupteba 20150609
McAfee Packed-ET!55F93B13D36E 20150609
McAfee-GW-Edition BehavesLike.Win32.Downloader.ch 20150609
MicroWorld-eScan Trojan.Ranapama.EF 20150609
Microsoft VirTool:Win32/CeeInject!KK 20150609
NANO-Antivirus Trojan.Win32.MulDrop5.dspcme 20150609
Qihoo-360 HEUR/QVM19.1.Malware.Gen 20150609
Rising PE:Malware.Obscure!1.9C59 20150609
Sophos Mal/Zbot-TV 20150609
Symantec WS.Reputation.1 20150609
Tencent Trojan.Win32.Qudamah.Gen.24 20150609
TrendMicro-HouseCall Suspicious_GEN.F47V0608 20150609
VBA32 OScope.Malware-Cryptor.Hlux 20150609
VIPRE Trojan.Win32.Generic!BT 20150609
nProtect Trojan.Ranapama.EF 20150609

Dicha version del ELISTARA 32.46 que lo detecta y elimina, estará disponible en nuestra web a partir de las 19 h CEST de hoy

saludos

ms, 9-6-2015