[Community-sigs] Win.Trojan.Downloader

Arnaud Jacques / SecuriteInfo.com webmaster at securiteinfo.com
Mon Sep 21 11:23:10 EDT 2015


Hello sigmakers,

Win.Trojan.Downloader:1:EP+0:558bec83ec105356576a00ff15081049008bf833d28bcf8b5f3c03df2b051c1040008945f41bd2f7d88955f80fb7731483d200f7da8975f0528b93a0000000508b441e2403052810400050ffb3a4000000e888fdffff8b541e2883c410a1281040002bd083fa01760d8b4c1e2403c803cfe8f2feffffa12010400083c64003f383f80176268b56102b152c10400083fa0176158b4e0c030d2c10400003cfe8c5feffffa12010400083c62883f80276268b56102b153010400083fa0176158b4e0c030d3010400003

Number of samples detected by the signature : 205

MD5 of detected samples :
f3e9745a6905de645e2d07e6e1cabeb3
c501176117b452b4736dc970f8c57ba8
fe043154559b42af27088f17fd435c4e
248ef041de14ffbcf8eb686a1a234f8d
57ef57b0a31b94b69e64fe82723fc6d0
0266432387562f3cafcd2b196dc605e3
22f3bfec20529c264e45fdb8428b5881
b075ea7ed81c925b15b0e2749abb4791
7a6c4e9222bbefdd6aede47b33fc0fb6
3f2b3896e8698907161f023a1bffa919
28f22a1b7e4a712b80ac55b50c7cd232
b0465fa80e8e3c10251a3b6a2cdf6dfa
9ab3e082bb0cdeaca5578f9ed92ada14
f98d1c51017ce2ee764ce290daecb6dd
7b32e4aa24645858c9271b60d14f42d9
2d463501d61d798acc336652f6381223
3193db038b99f6bf98f375c6d1596104
6521f7f42a8ebfb52bf2f9159ba35b02
3fc931f8c53f73eaa251b79b0cebc8af
1b70fd00aeb6896dd130ea26f0fe219d
39df4f1721e034aec4b2033995bf4eac
03949a22a2fdc98f588f1a6633c71d93
d0f5da8d6ff859e4375411f34c3119e6
e37f0b34b5f689bef1da53a78a9320f9
ba4480d25e3544cd483dafeab49bee0c
97ae94a1fcccc72f7366e456c7fcbfe4
0e312e0e1101aeb6291967b5e57a19c5
361631e80801bf6dac68a9f52e23a275
ca6c39522565d678d8a9e5878656eedc
40cba253f1424adc5d38255811931cfc
c856b61c28588dde397f246ff120f4c5
37c9cc049bb738ca0d106bda3c1ee62d
fbb3c058cfde7b9fdc9f40c73d7d3bef
096b2c65cbf1a5ff00b1582e4892c694
370fb5141bc7baccfa5062a0b830e803
cfe8ae7216b0e21dcc34797e30bbab6d
682f12540e5076cbe4925e9c94d577fc
4284f2e079039d317dfad575c46a088d
dd8b190078f8fafdddfc2550fa19f65c
6d6507e4a8b7c3a96c4606e196f8d8f8
d0392f57d5fcb36b2cf1a8b54d5c07be
651594a07c03389c7e5907059559fb87
b90eb46aa219799660b21450033dc78a
7b280ff214d0a924ff2bc7d3af35a4d9
ae6d71c159ce1be8caf2119477ea07b1
44145643a09deb06661a59694d6b1588
a6d716422162471898d8c187baeaaf8f
d6f991c4280c21d14809611c3f9a38f2
4f1a67c45e2dee53465a9452817fc85a
e125ac3f780b5fa5969eb4f0d2e4e19a
f0a69299f545cb52da229e4701be715b
46782dc0e7c55254b39543e9d09534fd
9f518c1c3977a9ce1ba6ccd0703906cd
10d5b2a14a5cc29b1f93bee37c3a9cff
931e85116e83028f09a4da6fc2642f33
e4117f960e3c6bb23876bf73f5f52f2d
99bb1c4415f50ffac73bf345988891ed
6c5535a97954487e8ec5e0fcb9ecb8d8
87103404217f3747dec2814401b2fd8a
31110ef3e55683ee6e3340703729bf0d
c2bbbc80d99b8ea42652bc2318943f4a
98bb0bd191c307ec8a598c284547e753
9450bc0c73906a0d5d6170641a45d54c
ae03a2c3a4b00b4150f17a42a493e763
00af4df1caf95ab8ebe4ed3408db337d
1029b2a4c652b36626326c6ef74e7509
c2fb6aa75b0a10a57c574bf7c131e257
3a169baf6b0e0b0f6de4ff7c095389db
ee860822fa90e22f9e3d577bf2869563
570d9208de15d9fe2a000b16b0a3a6e8
2f3e6a68422e42ba20aa5efa5ed7786b
c8e6892c47f5360a89d8e96397b16058
7fb42985789e832941b95495867c0306
d578bea15c3849d878041c74b1fc622a
7d84b909dcf4fd86963cc4337fa43b20
f7e1ff01f0480d48ff14553a9f2d42af
89496c2d93cf432eec223030ec485b6d
d7d8edf47b48da25fc2741c89efdfb37
2cf286e3974b7de179a021e256c3496b
adcf4467ee14862dd52af8594d40e1c5
bbd44bec6271417e66734a29970696a4
2a70967121301b4e0156c7092592c654
7b5f9893d052dac3404011a58084cd32
6e7524e065c48ea8ef91cc9a85a59c79
619281c490523ae58388e66d8ea48426
2744963782011cca534081efb72fbd97
6e4aee9978b3beff55ba8992f9b96de1
3876c9dd80498773bb321515c865cf82
0ab6563ae0bd873f84a179d3de649022
4e0f038e14489eb00b30047d3bb89ed2
11e927abb167d2d1fe0b2d617a5ed585
d45d624a67cc66cc5ce86801a9045c20
637b1900fbe494f2bc2700d1f077b91a
daf6f69427c69bbc12c59805aeaed4e2
0c9db30b378929af2d074e3c4f6818a6
9e35b66b5860c5142c7ffaffa31615f3
d20109d40f4656ba264496e4d6490855
dc49943ec61f0cbacdaf74cdcae49352
8cbc2598592ee7c81c9e1bfa0236baa1
85119bfd65f7bfd0bbcdb568477b6fb3
e9b925a2751cc714f936ab894398bccd
608dbb369f4e82055057880395971b12
3978577dfb4f7aef7bee6f5c171a7ef0
d3a0b01509c5b38bd2a9321be686243d
792129d23d440bc78b43208feec2373f
b0cc8d9c3548433427aaa08b73a617cc
550d3706ab48533cf3723aee891c92c5
be862665f95f92224dc9eb3cef56bba7
551960c4f4d5bd70b2ec0c57a2bdb204
2b413ae79e3b69e35dc3ee4ee4a984f5
35f4cf6543c119cf29a0dc46a6b0c16c
60bc5021a077487fc20a77c4ff6dd203
2124836288a976a6c17702bbad091b8d
bfd14dd8cb490e6413b7ec37dc8861e6
8ef452e8fecc6db8ee1193250aead1b9
7556785b577a14737c0cb4803c23d31b
5fc9cd0299cc03e6dd836afb17ba9931
006085207a87c0c2f668d664fcc9e473
3da7a37526ef4f890388e4bfeccd6a0d
cfa9fed925f4d860f7a73c3a38c6f55a
7828ece60f8946a643179eb9f7f692db
ce511b92b319a6462763ac5925bb0692
2e5f20a11bf091516a2464b57516bda7
178c9a7606b4a997c25d1b4561dd1433
c25585a10f4de7d768a66a580dc10951
5a8301648924c58b36953527592b8469
0e53feddf620dc39d9c2fcef21a58184
3b40a623e7b46c0b0a4e7aae6cf95c97
9bf415d699f395bebdf00ca478e0bfef
0f068dd4a32b10c0ddb1f03d16586f96
d10171fa90ad6074939f6d8ed78cadfd
030107dcab05e1c65558faa65391157a
b56be758e425a27cbc6f7924a0329ab6
4f55b401bd1fa62521d432a9a12915f9
158bc0d92f4102f28cdccf67980d3d2c
5c0cb51b5654ca924e9d4aa52f5096de
c6335c5f8ee70af0be33d926e2efb7aa
ead0808f943494e096bb276479996039
a0bd176ec05df9fbc8720ee863bf128f
3b4943230af891f094d91caf447a8c00
5a63d7851a26d5844a4d3b000dff6db8
6f70420c9185b19105d2c3dbe795a98c
0e2fc03fb65e82041d72c4f9ddd72e6e
95afb4a714099304f4f82b8f6721348c
18d9166cc6221383213db8d302c983c5
3515a831998b8c8189a4a3d187b5c0cf
6f4d2298843d2b812bb2355c4ed7683a
b6b10032bd7a6523447c0bac1a662320
f926fd9f4328b98ef7272c99042122bb
501b1e2bf8a4042179e3041f2fabccef
56b031ed729a85c5e65c11596899efa5
63aca30fdf233c4d06a14dc830b93a81
972c3a3cfe946653795118560879c9dc
7217fcdde6428c8fc5dee5ddeacb58fa
639a65b4ad5f109dbf32cb3be61009e7
40a4efc99724b98807d55e7d8a3ca44e
d9b54ca571166e81a8e2bb60c2dde6f7
4a6aad221ceb455352d98e1efc58b9a3
0acf2608d313d1118d1e4b8e5bf3f9e9
cd72e7c7ba2b11d19829f7371cf4eb0f
14b36de1f611e2612735150c8fe4a773
d198a5d7393a1364c33276b8309307cb
542c8cbe88106b87380441ed6b122878
a340a2d0455bf12c3daf33904cdb1cf7
c4efaced0c952cc73432cba35f518a16
f169140f77322613b89f407b3754ea83
ed746ce7471ab9a190d85c3b73e1a44d
87859873f61505c3883c78db9d832dcb
c1959406e96bee86462b75e637d6b3a8
41e12024042059dd800fea6d856cc8b1
27da9614c3e35b32cacf4710f1fd0ba8
4eed78d12cba1be03f91507f5fcd530c
5a41700c564c0ee5c6fd9c16f8601d1e
7c06c43ee7cdb022db45fed4d2d7d7fc
916dadea8412329e7b04128b99a1367a
220acc5496674bf9e986762a0e18f861
0bdd7c717766b4efc0084db13466c291
1f5062ddabbb5e043ae42a9e45e6b41e
6bbf55e2b62152bfd008b8c993b0d062
a5f329d742f3ce2d0eb6d88b3ed246ae
7ca71b5cc8dec0e16ae11b604aa66e93
b6d50f733777af648121e3b8475170eb
5f1a79a0c22f712c79d49e0b51e56a35
889ff8f7de7034484693c54647385627
a36955b38ac14c67d59d3de02e7fedcc
6117e6356882ee982a8b9a66b9b4c80e
c67c086e574bd47659c89eaaa25c9e11
08e6f71c54161c338087f52e1b8ea6dc
610551f18213e468de728c2c84ed4875
d5db3e5788ad8a9142f0493c3d5fa294
be69902c824c918284821ae0f8e6aa36
4571408b86a0d05a9552e3c1355e6221
df931b8ae432c9401a674aea9ae5a084
5e1baad7a76331b62adf5e479cb45390
4a36465ee63a7a4874cd9ecebdf39730
233f29ed49f207e0097f394ca949d9b8
7a344e1502b03f76de775844b75f1dba
b160f72f06dbe4aa147f7167ce68ecb3
04bb5e69543418fcba9fe37e460bd607
9e17092ecb31498f7a0b65af889ec27d
2d4571d6a94d1df4869391c74fbece4b
e52cc7f792831b07e4848f84041db1eb
9b417c72890d44a81195d71f7f0923b4
867d5e9ed142fc9a44e91d343ca58cd7
27bcbaba8e9c19a63298b41a517659fe

-- 
Best regards,

Arnaud Jacques
SecuriteInfo.com

Facebook : https://www.facebook.com/pages/SecuriteInfocom/132872523492286
Twitter : https://twitter.com/SecuriteInfoCom



More information about the Community-sigs mailing list