[Community-sigs] new sig Win.Trojan.Inject
Douglas Goddard
dgoddard at sourcefire.com
Mon Feb 23 11:23:40 EST 2015
Thanks Andrei. Signature added for FP check and should be published today
or tomorrow.
Cheers!
On Mon, Feb 23, 2015 at 10:34 AM, <andreisaygo at live.ie> wrote:
> Sig:
>
> Win.Trojan.Inject;Target:1;(0&1)&(6|((2|3)&4&5));433a5c55736572735c4d5c4465736b746f705c4e657720666f6c6465722028??295c6d6963726f6366742e706462;53797374656d2e5265666c656374696f6e;773377702e657865;6173706e65745f77702e657865;3d003d002c005b007a005d007b00;437265617465446563727970746f72;1F5B334B11041F5D6F??00000A1309110417110917596F??00000A130A110A1F7A6F??00000A16FE0416FE011305110A1F746F??00000A
> Hashes:
> MD5 3e6b203932e0a288a61cebe0c509e03e
> SHA1 c8f23cc40b9c51c4e6a556b1f62eed53dfa70751
> SHA256 51e2b79808740afffd9e00840adeca6aa91109d0d4b0917be7c4a433094e2e9d
>
> Regards,
> Andrei Saygo
> _______________________________________________
> Community-sigs mailing list
> Community-sigs at lists.clamav.net
> http://lists.clamav.net/cgi-bin/mailman/listinfo/community-sigs
>
> http://www.clamav.net/contact.html#ml
>
More information about the Community-sigs
mailing list