Nueva variante de malware Win32/Skeeyah que pasamos a controlar con ELISTARA

A partir del ELISTARA 35.53 de hoy pasamos a controlar esta nueva variante de malware

El preanalisis de viriustotal ofrece el siguiente informe:

SHA256:  eadb54536fbe0630bfc0f80933d82f63a96c7708c5fb77c4f8aad08da1583610
File name:  Audio Emulation System.exe
Detection ratio:  41 / 55
Analysis date:  2016-11-02 10:30:39 UTC ( 1 hour, 57 minutes ago )
1
4

Antivirus  Result  Update
ALYac  Trojan.GenericKD.3634093  20161102
AVG  MSIL10.BYIB  20161102
AVware  Trojan.Win32.Generic!BT  20161102
Ad-Aware  Trojan.GenericKD.3634093  20161102
AegisLab  Troj.Ransom.W32.Blocker!c  20161102
AhnLab-V3  Trojan/Win32.Blocker.N2139172041  20161102
Antiy-AVL  Trojan[Ransom]/Win32.Blocker  20161102
Arcabit  Trojan.Generic.D3773AD  20161102
Avast  Win32:Malware-gen  20161102
Avira (no cloud)  TR/Agent.tconk  20161102
Baidu  Win32.Trojan.WisdomEyes.16070401.9500.9902  20161101
BitDefender  Trojan.GenericKD.3634093  20161102
CrowdStrike Falcon (ML)  malicious_confidence_98% (W)  20161024
Cyren  W32/Trojan.BAHK-6933  20161102
DrWeb  Trojan.DownLoader23.4038  20161102
ESET-NOD32  a variant of MSIL/Agent.ANH  20161102
Emsisoft  Trojan.GenericKD.3634093 (B)  20161102
F-Secure  Trojan.GenericKD.3634093  20161102
Fortinet  W32/Blocker.ANH!tr  20161102
GData  Trojan.GenericKD.3634093  20161102
Ikarus  Trojan.MSIL.Agent  20161102
Invincea  trojan.win32.skeeyah.a!rfn  20161018
K7AntiVirus  Trojan ( 004f97a41 )  20161102
K7GW  Trojan ( 004f97a41 )  20161102
Kaspersky  Trojan-Ransom.Win32.Blocker.jrbm  20161102
Malwarebytes  Backdoor.Bot  20161102
McAfee  Generic.aod  20161102
McAfee-GW-Edition  RDN/Ransom  20161102
eScan  Trojan.GenericKD.3634093  20161102
Microsoft  Trojan:Win32/Skeeyah.A!rfn  20161102
NANO-Antivirus  Trojan.Win32.Blocker.ehtofb  20161102
Panda  Trj/GdSda.A  20161101
Qihoo-360  HEUR/QVM03.0.B59E.Malware.Gen  20161102
Sophos  Mal/Generic-S  20161102
Symantec  Infostealer.Limitail  20161102
Tencent  Win32.Trojan.Blocker.Plkq  20161102
TrendMicro-HouseCall  Ransom_Blocker.R0C1C0VJQ16  20161102
VIPRE  Trojan.Win32.Generic!BT  20161102
ViRobot  Trojan.Win32.Z.Blocker.190464.C[h]  20161102
Yandex  Trojan.Blocker!5QI5l5bQaXQ  20161101
nProtect  Ransom/W32.Blocker.190464  20161101
MD5 bfe8ee6f77b17a86dcaeaa2037138ed2
SHA1 aa39f0ebcb739899060a052741fd9765d8875f83
File size 186.0 KB ( 190464 bytes )

Dicha version del ELISTARA 35.53 estará disponible en nuestra web a partir del 3-11-2016

saludos

ms, 2-11-2016