NUEVAS VARIANTES DE DOWNLOADER UPATRE QUE SE RECIBEN ANEXADAS A UN MAIL

Varias incidencias con esta familia pasamos a controlarlas (los downloaders y los descargados por ellos), a partir del ELISTARA 32.25 de hoy
Los preanalisis de virustotal ofrecen los siguientes informes:
MD5 a2a9bc45008613393a4651e53683564a
SHA1 82aa88baa8e34e9ec6c702af99d748d977ee2195
File size 68.0 KB ( 69632 bytes )
SHA256: 2fada2f7052489f072a31b15e569cd9a1c7dfba83b2de63910ad64b20b4c5919
File name: Img_pussy_732648732678462378462378467823648723.exe
Detection ratio: 33 / 57
Analysis date: 2015-05-08 08:19:11 UTC ( 12 minutes ago )

0 7
Antivirus Result Update
AVG Agent5.XVC 20150508
AVware Win32.Malware!Drop 20150508
Ad-Aware Trojan.GenericKD.2379437 20150508
Avast Win32:Trojan-gen 20150508
Avira TR/Soperu.A.38 20150508
Baidu-International Trojan.Win32.Agent.QKJ 20150507
BitDefender Trojan.GenericKD.2379437 20150508
Cyren W32/Trojan.VYPI-0433 20150508
DrWeb Trojan.Upatre.731 20150508
ESET-NOD32 Win32/Agent.QKJ 20150508
Emsisoft Trojan-Downloader.Win32.Agent (A) 20150508
F-Prot W32/Trojan3.PKK 20150508
F-Secure Trojan.GenericKD.2379437 20150508
Fortinet W32/Agent.QKJ!tr 20150508
GData Trojan.GenericKD.2379437 20150508
Ikarus Win32.Outbreak 20150508
K7AntiVirus Trojan ( 004b8ae61 ) 20150508
K7GW Trojan ( 004b8ae61 ) 20150508
Kaspersky Trojan.Win32.Agent.ifbd 20150508
Malwarebytes Trojan.Agent 20150508
McAfee Artemis!A2A9BC450086 20150508
MicroWorld-eScan Trojan.GenericKD.2379437 20150508
Microsoft TrojanDownloader:Win32/Recslurp.B 20150508
Panda Generic Suspicious 20150507
Qihoo-360 HEUR/QVM20.1.Malware.Gen 20150508
Sophos Troj/Zbot-JQE 20150508
Symantec Trojan.Smoaler 20150508
Tencent Trojan.Win32.Qudamah.Gen.4 20150508
TrendMicro TROJ_INJECTOR.YYWK 20150508
TrendMicro-HouseCall TROJ_INJECTOR.YYWK 20150508
VIPRE Win32.Malware!Drop 20150508
ViRobot Trojan.Win32.Agent.69632.EY[h] 20150508
nProtect Trojan/W32.Agent.69632.DTX 20150508
__________

y otra similar:
MD5 d4b010cc433d4e30ba5d5ba2688ce0c3
SHA1 9795e171ddd17a148d6eb50b0643bce3ccc2b6b2
File size 128.0 KB ( 131072 bytes )
SHA256: 7a08f2adf8cc9356f88a2ab145f11d6914ad80483d74087442759a0c48c74180
File name: notarized_rule_confirmed_copy.exe
Detection ratio: 27 / 56
Analysis date: 2015-05-08 08:43:22 UTC ( 4 minutes ago )

0 1
Antivirus Result Update
AVG Crypt4.ABIJ 20150508
AVware Trojan.Win32.Generic.pak!cobra 20150508
Ad-Aware Trojan.Downloader.JRSM 20150508
Avast Win32:Malware-gen 20150508
BitDefender Trojan.Downloader.JRSM 20150508
Cyren W32/Dalexis.KVYO-9117 20150508
DrWeb Trojan.Upatre.743 20150508
ESET-NOD32 a variant of Win32/Kryptik.DHNQ 20150508
Emsisoft Trojan.Downloader.JRSM (B) 20150508
F-Prot W32/Dalexis.AE 20150508
F-Secure Trojan.Downloader.JRSM 20150508
Fortinet W32/Kryptik.DHIG!tr 20150508
GData Trojan.Downloader.JRSM 20150508
K7AntiVirus Trojan ( 004c15091 ) 20150508
K7GW Trojan ( 004c15091 ) 20150508
Kaspersky Backdoor.Win32.Caphaw.ayq 20150508
McAfee Downloader-FATT!D4B010CC433D 20150508
MicroWorld-eScan Trojan.Downloader.JRSM 20150508
Panda Trj/Genetic.gen 20150507
Rising PE:Malware.Obscure!1.9C59 20150507
Sophos Troj/Wonton-RA 20150508
Tencent Trojan.Win32.Qudamah.Gen.24 20150508
TrendMicro TROJ_UPATRE.SMJY 20150508
TrendMicro-HouseCall TROJ_UPATRE.SMJY 20150508
VIPRE Trojan.Win32.Generic.pak!cobra 20150508
ViRobot Trojan.Win32.Agent.131072.CM[h] 20150508
nProtect Trojan.Downloader.JRSM 20150508

___________
Dicha version del ELISTARA 32.25 que los detecta y elimina, estará disponible en nuestra web a partir de las 15 h CEST de hoy.
saludos

ms, 8-5-2015