[Community-sigs] Win.Adware.Somoto

[Arnaud Jacques / SecuriteInfo.com]

Hello sigmakers,

Win.Adware.Somoto:0:*:5c496e7374616c6c00fd9a80005b52414e444f4d5f535452494e475d2e377a00377a612e65786500fd9a805c6e73457865632e646c6c00377a612e6578652065202d79202d7022{32}22205b52414e444f4d5f535452494e475d2e377a0045786563546f537461636b00fda0800022fd9a805c696e7374616c6c(30|
31|32|33|34|35|36|37|38|39)(30|31|32|33|34|35|36|37|38|39)(30|31|32|33|34|35|
36|37|38|39)(30|31|32|33|34|35|36|37|38|39)(30|31|32|33|34|35|36|37|38|
39)2e6578652220fda08000637370726f64756374005555494400574d494320fd81802047657420fd8280202f464f524d41543a7465787476616c75656c6973742e78736c002f4f454d0020000d000a00090031303234

File type *is* 0, not 1. Please do not change or detection will be lost.

Number of samples detected by the signature : 2986

MD5 of detected samples (just a few) :
34dede74944fe4fea05cd4f416c286d4
d1719f5010e06ae7cc5f92bac2d4f433
e50d902260ad15022dea3a135a342d1d
45ba775a939f9cc25034923b0cc4d84b
ab7b2d177dc326e41741ef85b223984c
74b7e0565ad8fbe4f1445cec75fa880a
7b4802f538cf6c1f9274b77695ff18a7
adc8ac6dc0d5559d23ca493739c5d7b1
37140a61b80bb1f2220b9a06a44e3e13
52b0cd78a5dd8f470fce1af56f3c9287
04f2c118df3f2ff176d77c8beae9d278
eaf318d488b826887461590fc7c6fbcd
bfa4d4d9563c542294d1a1a598c82288
4c252b8d05a48410ed615ee4c36aa670
8bf2de7e46de39a70491b13eceec9df0
9fdc08daffc8daa6f4416203418d3c17
33bd9a984959dd467ea2e3d0fc1a330c
f32ed3f06e514946b2f8acb8781eb8c6
69f72ea3e8c7fa0cb75ca75898187a0c
638f996db75ea6c418d78f9c96e07b28
a99197b410a2736bd642285362db426c
faad28dab0a9e1d65985be398956e3eb
91b500b2754f0e5ea0be483d3f4d7943
109542ce25a12af56f5f599c4f3c26d6
f34c78d0f6ca8e6cfff42593a48337c2
6816b4d1e5754290de4a1735db4d27a1
a010471e8e655650d746d7530808d12d
dd492604b3a1a8283f8cd77f2b5079ea
98a360b1100c9d4526809a7bea423d1e
20bc5da9eeacabb80e1c49dfd83c0828
6c506454042af425b697bbb8ba582cd9
1263b54b8337cce85a46a7c87b7eafc8
85f465cadf5e2535ad75fe2f8cadbfaf
4d90fed286179b6525fee71d82758c6c
cd05607f17e2b389bddc4839291c1a1a
b3501f2234f482c3c0fed3e59563359f
e64e75aa4f04bf81d102498b77b7ff52
292187785f366e1bcf7119ee9863459c
e72c33ec91f7c658a518b7a5913e5b17
2bf8a6bbad0acc725e61551af9d68fbf
967f86e0de55a77153136ac1c05e29f2
cf7ca0d7a35768f017f1c60b9946beb0
01370f85b11dc7885166eeb3f5707a72
8432b6d4401e9f6765d62e2740f2f299
5911fc160f85b11596c71d367c57ad4d
1e9f749fd3e826362b2ec8cb2bdcbab7
4fa3b6fb8daca349165a3a13ab87f449
4b13015ed27d252cd458c585228557e0
bd6cc5066f35cc52cd5b79e4af0155fd
146d9a56dd5959f1b18e296ca53b2187
56c55a78777cccc880edb1d866a59daa
a30ce7e7b8036d75b7b75a4ac017ad50
54b31b56ea14421f7dbb23d5b4d4ea61
8926fa038936e1bc46837a449122c758
010b6f0c5dec8cf449ae0a4ebba00fff
671c175a98981ed0088244aa12405cf7
e7c3f67c6cd16fda928ee7b2b5d9ea14
b6ea6fa6e3d84e21aa8eece442278df7
990bb1a51ad399715a61c2ae5c2f8d28
dc62b199bd7e78df0d1ec5d19caaaf3f
27a094ce22d3ca1f4104292a44247d64
a89ee425404a516d8709098c3ba43e8f
4731e555a60274df032fad9043012476
f20f0090a5a43778eafc547bbbb110af
aa984f134f71766611e29ccd8b0ed5bb
422f0a87d7acc495c05a91ca30c6a7fe
d39701f9cd4171f647c38f513a7adfa4
f54236f8ae364392c26af28769d55631
4dfb5833fd1898d6ae63476897b1ce38
5475344476218ead5bcce233f6c6f7ab
63421e5162faa03f0c6c3f6d9dded8aa
9b15cf0d72b2c0637a5dbe87a6510568
0dff2250591b08f7a2914b8a80c54e78
9d4a90cd2cc9056199f9fb09f3aac44d
5fd158bababa5df0e801f68dbac98748
9097aa548b7fe7eb6ba68f33d691d673
0631ea86d8609fa89403e4d61d660de9
603b9242c486d3899e7f505c513915de
042f29e89e8e2905aacd8a521fe05063
12b2dbd3836d4721bcd78ad1ddcf9c72
f0a9ede24050a0dd1b36ea350b9b837e
9a946f9c52e8e1164679f3afc7d27b1f
0c2dcc96d2b95328cb0d51212c8efb1d
dbef2161379579c9c56f1b459b347cee
17e2a1da58282df798a469e744061073
3a91ccf37ad3dfcaf7bf1b95b0781964
7e0f6ee64eaa0f418916d3d848526030
a455ed62ad99cf33737dc0b43de71a16
d56244a3752d4efac3f27c92152e4971
c2c0b802a7478e40d51a6f73af30aded
49f358b265e751f6fdc124831eb6bb33
73db938de77b778e3c5e05e30670e097
499c3f331bc1808ba99c9c0045c383af
6fdecbfb479d725bb899d10f8b0eef28
89d5b0fcd905e38b040f163bb23677ff
ac316f3e501ff503111f860d19d30641
65dfdea5b8e15448fa6c64a0dec1388a
80534b9b1b1d6da5976618e4e7defd09
cae8222965b9278ca15f0e5b7844ee63
41f452d86626cf7c4a14554e438efb74
4f90b4662dc5a6a75e7b211ae78f8ba9
cf3b2fc0096fea505daad09d9a09e4a3
fda0f9dbf1f836e662e7c6fb75b0edf9
a3c5be83a2c685bf52cbfae231f6e466

-- 
Best regards,

Arnaud Jacques
SecuriteInfo.com

Facebook : https://www.facebook.com/pages/SecuriteInfocom/132872523492286
Twitter : https://twitter.com/SecuriteInfoCom