NUEVA VARIANTE DE BACKDOOR NANOBOT QUE PASAMOS A CONTROLAR CON EL ELISTARA

A partir del ELISTARA 35.83 de hoy pasamos a controlar esta nueva variante de backdoor, que quedar residente hasta que se reinicia el ordenador, o se ejecute manualmente de nuevo

El preanalisis de virustotal ofrece el siguiente informe:

MD5 e932ab121b335964e032dd360793399e
SHA1 5607b1f8b7afc416aae6a34a1ccdb5b5d247cf94
File size 623.5 KB ( 638464 bytes )
SHA256: 45daf23b20fc4585c6c8d754dc4d0a822471c176bc07a3f50c549db8ec6ea673
File name: appd.exe
Detection ratio: 37 / 55
Analysis date: 2016-12-19 10:26:26 UTC ( 31 minutes ago )
0
2

Antivirus Result Update
ALYac Trojan.GenericKD.3910414 20161219
AVG MSIL11.AIJ 20161219
AVware Trojan.Win32.Generic!BT 20161219
Ad-Aware Trojan.GenericKD.3910414 20161219
AegisLab Troj.Dropper.Msil!c 20161219
Arcabit Trojan.Generic.D3BAB0E 20161219
Avast Win32:Malware-gen 20161219
Avira (no cloud) TR/Dropper.MSIL.iqpha 20161219
Baidu Win32.Trojan.WisdomEyes.16070401.9500.9999 20161207
BitDefender Trojan.GenericKD.3910414 20161219
ClamAV Win.Trojan.Agent-5311759-0 20161219
Comodo TrojWare.MSIL.GenKryptik.~OBI 20161219
DrWeb Trojan.DownLoader12.29878 20161219
ESET-NOD32 a variant of MSIL/GenKryptik.OBI 20161219
Emsisoft Trojan.GenericKD.3910414 (B) 20161219
F-Secure Trojan.GenericKD.3910414 20161219
Fortinet MSIL/GenKryptik.OBI!tr 20161219
GData Trojan.GenericKD.3910414 20161219
Ikarus Trojan.MSIL.Krypt 20161219
Invincea trojan.win32.skeeyah.a!rfn 20161216
K7GW Trojan ( 0050076a1 ) 20161219
Kaspersky Backdoor.MSIL.Nanobot.rhw 20161219
Malwarebytes Backdoor.Bot 20161219
McAfee RDN/Generic.grp 20161219
McAfee-GW-Edition BehavesLike.Win32.Backdoor.jc 20161219
eScan Trojan.GenericKD.3910414 20161219
Microsoft VirTool:MSIL/Subti.N 20161219
NANO-Antivirus Trojan.Win32.GenKryptik.ejrpsx 20161219
Qihoo-360 Win32/Trojan.Dropper.ad7 20161219
Rising Backdoor.Nanobot!8.28C-vVqzR58CkEG (cloud) 20161219
Sophos Mal/Generic-S 20161219
Symantec Trojan.Gen 20161219
Tencent Msil.Backdoor.Nanobot.Ajuw 20161219
TrendMicro TROJ_GEN.R08NC0DLI16 20161219
TrendMicro-HouseCall TROJ_GEN.R08NC0DLI16 20161219
VIPRE Trojan.Win32.Generic!BT 20161219
ViRobot Trojan.Win32.Agent.638464.G[h] 20161219

Dicha versión del ELISTARA 35.83 que lo detecta y elimina, estará disponible en nuestra web a partir del 20-12-2016

saludos

ms, 19-12-2016