[clamav-users] Fwd: [clamav-virusdb] Signatures Published daily - 24446

[Al Varnell]

> Begin forwarded message:
> 
> From: noreply at sourcefire.com
> Subject: [clamav-virusdb] Signatures Published daily - 24446
> Date: April 3, 2018 at 6:08:03 AM PDT
> To: clamav-virusdb at lists.clamav.net
> 
> Dropped Detection Signatures:
> 
> 
>    * Osx.Malware.Agent-6453877-0

Not sure why you would drop this as it's clearly part of the OSX.Coldroot RAT

VT: <https://www.virustotal.com/en/file/d7cd18d3e6929dd1e5c12613f9a937fd45f75aa6e0ecee70908d2638f6b3ce7c/analysis/ <https://www.virustotal.com/en/file/d7cd18d3e6929dd1e5c12613f9a937fd45f75aa6e0ecee70908d2638f6b3ce7c/analysis/>>

<https://objective-see.com/blog/blog_0x2A.html <https://objective-see.com/blog/blog_0x2A.html>>


-Al-
-- 
Al Varnell
Mountain View, CA




-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 3860 bytes
Desc: not available
URL: <https://lists.clamav.net/pipermail/clamav-users/attachments/20180403/4bd262f7/attachment.bin>