[Community-sigs] Win.Adware.Somoto
Angel Villegas
anvilleg at sourcefire.com
Thu May 21 09:03:12 EDT 2015
Thank you Arnaud for your signature! I will queue it for FP testing and
publish it once it passes.
Thanks,
Maker of Sigs
On Thu, May 21, 2015 at 4:26 AM, Arnaud Jacques / SecuriteInfo.com <
webmaster at securiteinfo.com> wrote:
> Hello sigmakers,
>
>
> Win.Adware.Somoto:0:*:5c496e7374616c6c00fd9a80005b52414e444f4d5f535452494e475d2e377a00377a612e65786500fd9a805c6e73457865632e646c6c00377a612e6578652065202d79202d7022{32}22205b52414e444f4d5f535452494e475d2e377a0045786563546f537461636b00fda0800022fd9a805c696e7374616c6c(30|
>
> 31|32|33|34|35|36|37|38|39)(30|31|32|33|34|35|36|37|38|39)(30|31|32|33|34|35|
> 36|37|38|39)(30|31|32|33|34|35|36|37|38|39)(30|31|32|33|34|35|36|37|38|
>
> 39)2e6578652220fda08000637370726f64756374005555494400574d494320fd81802047657420fd8280202f464f524d41543a7465787476616c75656c6973742e78736c002f4f454d0020000d000a00090031303234
>
> File type *is* 0, not 1. Please do not change or detection will be lost.
>
> Number of samples detected by the signature : 2986
>
> MD5 of detected samples (just a few) :
> 34dede74944fe4fea05cd4f416c286d4
> d1719f5010e06ae7cc5f92bac2d4f433
> e50d902260ad15022dea3a135a342d1d
> 45ba775a939f9cc25034923b0cc4d84b
> ab7b2d177dc326e41741ef85b223984c
> 74b7e0565ad8fbe4f1445cec75fa880a
> 7b4802f538cf6c1f9274b77695ff18a7
> adc8ac6dc0d5559d23ca493739c5d7b1
> 37140a61b80bb1f2220b9a06a44e3e13
> 52b0cd78a5dd8f470fce1af56f3c9287
> 04f2c118df3f2ff176d77c8beae9d278
> eaf318d488b826887461590fc7c6fbcd
> bfa4d4d9563c542294d1a1a598c82288
> 4c252b8d05a48410ed615ee4c36aa670
> 8bf2de7e46de39a70491b13eceec9df0
> 9fdc08daffc8daa6f4416203418d3c17
> 33bd9a984959dd467ea2e3d0fc1a330c
> f32ed3f06e514946b2f8acb8781eb8c6
> 69f72ea3e8c7fa0cb75ca75898187a0c
> 638f996db75ea6c418d78f9c96e07b28
> a99197b410a2736bd642285362db426c
> faad28dab0a9e1d65985be398956e3eb
> 91b500b2754f0e5ea0be483d3f4d7943
> 109542ce25a12af56f5f599c4f3c26d6
> f34c78d0f6ca8e6cfff42593a48337c2
> 6816b4d1e5754290de4a1735db4d27a1
> a010471e8e655650d746d7530808d12d
> dd492604b3a1a8283f8cd77f2b5079ea
> 98a360b1100c9d4526809a7bea423d1e
> 20bc5da9eeacabb80e1c49dfd83c0828
> 6c506454042af425b697bbb8ba582cd9
> 1263b54b8337cce85a46a7c87b7eafc8
> 85f465cadf5e2535ad75fe2f8cadbfaf
> 4d90fed286179b6525fee71d82758c6c
> cd05607f17e2b389bddc4839291c1a1a
> b3501f2234f482c3c0fed3e59563359f
> e64e75aa4f04bf81d102498b77b7ff52
> 292187785f366e1bcf7119ee9863459c
> e72c33ec91f7c658a518b7a5913e5b17
> 2bf8a6bbad0acc725e61551af9d68fbf
> 967f86e0de55a77153136ac1c05e29f2
> cf7ca0d7a35768f017f1c60b9946beb0
> 01370f85b11dc7885166eeb3f5707a72
> 8432b6d4401e9f6765d62e2740f2f299
> 5911fc160f85b11596c71d367c57ad4d
> 1e9f749fd3e826362b2ec8cb2bdcbab7
> 4fa3b6fb8daca349165a3a13ab87f449
> 4b13015ed27d252cd458c585228557e0
> bd6cc5066f35cc52cd5b79e4af0155fd
> 146d9a56dd5959f1b18e296ca53b2187
> 56c55a78777cccc880edb1d866a59daa
> a30ce7e7b8036d75b7b75a4ac017ad50
> 54b31b56ea14421f7dbb23d5b4d4ea61
> 8926fa038936e1bc46837a449122c758
> 010b6f0c5dec8cf449ae0a4ebba00fff
> 671c175a98981ed0088244aa12405cf7
> e7c3f67c6cd16fda928ee7b2b5d9ea14
> b6ea6fa6e3d84e21aa8eece442278df7
> 990bb1a51ad399715a61c2ae5c2f8d28
> dc62b199bd7e78df0d1ec5d19caaaf3f
> 27a094ce22d3ca1f4104292a44247d64
> a89ee425404a516d8709098c3ba43e8f
> 4731e555a60274df032fad9043012476
> f20f0090a5a43778eafc547bbbb110af
> aa984f134f71766611e29ccd8b0ed5bb
> 422f0a87d7acc495c05a91ca30c6a7fe
> d39701f9cd4171f647c38f513a7adfa4
> f54236f8ae364392c26af28769d55631
> 4dfb5833fd1898d6ae63476897b1ce38
> 5475344476218ead5bcce233f6c6f7ab
> 63421e5162faa03f0c6c3f6d9dded8aa
> 9b15cf0d72b2c0637a5dbe87a6510568
> 0dff2250591b08f7a2914b8a80c54e78
> 9d4a90cd2cc9056199f9fb09f3aac44d
> 5fd158bababa5df0e801f68dbac98748
> 9097aa548b7fe7eb6ba68f33d691d673
> 0631ea86d8609fa89403e4d61d660de9
> 603b9242c486d3899e7f505c513915de
> 042f29e89e8e2905aacd8a521fe05063
> 12b2dbd3836d4721bcd78ad1ddcf9c72
> f0a9ede24050a0dd1b36ea350b9b837e
> 9a946f9c52e8e1164679f3afc7d27b1f
> 0c2dcc96d2b95328cb0d51212c8efb1d
> dbef2161379579c9c56f1b459b347cee
> 17e2a1da58282df798a469e744061073
> 3a91ccf37ad3dfcaf7bf1b95b0781964
> 7e0f6ee64eaa0f418916d3d848526030
> a455ed62ad99cf33737dc0b43de71a16
> d56244a3752d4efac3f27c92152e4971
> c2c0b802a7478e40d51a6f73af30aded
> 49f358b265e751f6fdc124831eb6bb33
> 73db938de77b778e3c5e05e30670e097
> 499c3f331bc1808ba99c9c0045c383af
> 6fdecbfb479d725bb899d10f8b0eef28
> 89d5b0fcd905e38b040f163bb23677ff
> ac316f3e501ff503111f860d19d30641
> 65dfdea5b8e15448fa6c64a0dec1388a
> 80534b9b1b1d6da5976618e4e7defd09
> cae8222965b9278ca15f0e5b7844ee63
> 41f452d86626cf7c4a14554e438efb74
> 4f90b4662dc5a6a75e7b211ae78f8ba9
> cf3b2fc0096fea505daad09d9a09e4a3
> fda0f9dbf1f836e662e7c6fb75b0edf9
> a3c5be83a2c685bf52cbfae231f6e466
>
> --
> Best regards,
>
> Arnaud Jacques
> SecuriteInfo.com
>
> Facebook : https://www.facebook.com/pages/SecuriteInfocom/132872523492286
> Twitter : https://twitter.com/SecuriteInfoCom
> _______________________________________________
> Community-sigs mailing list
> Community-sigs at lists.clamav.net
> http://lists.clamav.net/cgi-bin/mailman/listinfo/community-sigs
>
> http://www.clamav.net/contact.html#ml
>
More information about the Community-sigs
mailing list