[Community-sigs] new sig Win.Trojan.Upatre

Douglas Goddard dgoddard at sourcefire.com
Fri Apr 3 10:06:17 EDT 2015


Added for FP check. Thank you!

On Fri, Apr 3, 2015 at 7:08 AM, <andreisaygo at live.ie> wrote:

> Signature:
>
> Win.Trojan.Upatre:1:*:5783C164518BF8B8FA0F0000BE????4000EB??*50BA????400052FFD7BE????4000480F84????0000*578B0D????4000890D????40005133C0E8????000068????4000C3*51AC8B0F33C8880F4B8BC3594785C0741AE2ED
>
> Hashes:
> MD5: 4c666564c1db6312b9f05b940c46fa9a
> SHA1: bdc03a1198d90a8e9028fbe05b6613ec13bf5e19
> SHA256: d7720a995dab294e18ad74b25432d6af088763cc3c5c9408d997bf950f6fb04f
>
> More details:
>
> http://blog.dynamoo.com/2015/04/malware-spam-invoicebanklineulsterbanki.html
>
>
> Regards,
> Andrei Saygo
> _______________________________________________
> Community-sigs mailing list
> Community-sigs at lists.clamav.net
> http://lists.clamav.net/cgi-bin/mailman/listinfo/community-sigs
>
> http://www.clamav.net/contact.html#ml
>



More information about the Community-sigs mailing list