[Community-sigs] Win.Trojan.Downloader
Xabier Ugarte-Pedrero
xpedrero at sourcefire.com
Tue Sep 22 04:52:09 EDT 2015
Hello Arnaud,
Thank you very much for your submission! Your signature is now under FP
testing, so it will likely be published shortly.
Regards
-- Xabier
On Mon, Sep 21, 2015 at 11:23 AM, Arnaud Jacques / SecuriteInfo.com
<webmaster at securiteinfo.com> wrote:
> Hello sigmakers,
>
> Win.Trojan.Downloader:1:EP+0:558bec83ec105356576a00ff15081049008bf833d28bcf8b5f3c03df2b051c1040008945f41bd2f7d88955f80fb7731483d200f7da8975f0528b93a0000000508b441e2403052810400050ffb3a4000000e888fdffff8b541e2883c410a1281040002bd083fa01760d8b4c1e2403c803cfe8f2feffffa12010400083c64003f383f80176268b56102b152c10400083fa0176158b4e0c030d2c10400003cfe8c5feffffa12010400083c62883f80276268b56102b153010400083fa0176158b4e0c030d3010400003
>
> Number of samples detected by the signature : 205
>
> MD5 of detected samples :
> f3e9745a6905de645e2d07e6e1cabeb3
> c501176117b452b4736dc970f8c57ba8
> fe043154559b42af27088f17fd435c4e
> 248ef041de14ffbcf8eb686a1a234f8d
> 57ef57b0a31b94b69e64fe82723fc6d0
> 0266432387562f3cafcd2b196dc605e3
> 22f3bfec20529c264e45fdb8428b5881
> b075ea7ed81c925b15b0e2749abb4791
> 7a6c4e9222bbefdd6aede47b33fc0fb6
> 3f2b3896e8698907161f023a1bffa919
> 28f22a1b7e4a712b80ac55b50c7cd232
> b0465fa80e8e3c10251a3b6a2cdf6dfa
> 9ab3e082bb0cdeaca5578f9ed92ada14
> f98d1c51017ce2ee764ce290daecb6dd
> 7b32e4aa24645858c9271b60d14f42d9
> 2d463501d61d798acc336652f6381223
> 3193db038b99f6bf98f375c6d1596104
> 6521f7f42a8ebfb52bf2f9159ba35b02
> 3fc931f8c53f73eaa251b79b0cebc8af
> 1b70fd00aeb6896dd130ea26f0fe219d
> 39df4f1721e034aec4b2033995bf4eac
> 03949a22a2fdc98f588f1a6633c71d93
> d0f5da8d6ff859e4375411f34c3119e6
> e37f0b34b5f689bef1da53a78a9320f9
> ba4480d25e3544cd483dafeab49bee0c
> 97ae94a1fcccc72f7366e456c7fcbfe4
> 0e312e0e1101aeb6291967b5e57a19c5
> 361631e80801bf6dac68a9f52e23a275
> ca6c39522565d678d8a9e5878656eedc
> 40cba253f1424adc5d38255811931cfc
> c856b61c28588dde397f246ff120f4c5
> 37c9cc049bb738ca0d106bda3c1ee62d
> fbb3c058cfde7b9fdc9f40c73d7d3bef
> 096b2c65cbf1a5ff00b1582e4892c694
> 370fb5141bc7baccfa5062a0b830e803
> cfe8ae7216b0e21dcc34797e30bbab6d
> 682f12540e5076cbe4925e9c94d577fc
> 4284f2e079039d317dfad575c46a088d
> dd8b190078f8fafdddfc2550fa19f65c
> 6d6507e4a8b7c3a96c4606e196f8d8f8
> d0392f57d5fcb36b2cf1a8b54d5c07be
> 651594a07c03389c7e5907059559fb87
> b90eb46aa219799660b21450033dc78a
> 7b280ff214d0a924ff2bc7d3af35a4d9
> ae6d71c159ce1be8caf2119477ea07b1
> 44145643a09deb06661a59694d6b1588
> a6d716422162471898d8c187baeaaf8f
> d6f991c4280c21d14809611c3f9a38f2
> 4f1a67c45e2dee53465a9452817fc85a
> e125ac3f780b5fa5969eb4f0d2e4e19a
> f0a69299f545cb52da229e4701be715b
> 46782dc0e7c55254b39543e9d09534fd
> 9f518c1c3977a9ce1ba6ccd0703906cd
> 10d5b2a14a5cc29b1f93bee37c3a9cff
> 931e85116e83028f09a4da6fc2642f33
> e4117f960e3c6bb23876bf73f5f52f2d
> 99bb1c4415f50ffac73bf345988891ed
> 6c5535a97954487e8ec5e0fcb9ecb8d8
> 87103404217f3747dec2814401b2fd8a
> 31110ef3e55683ee6e3340703729bf0d
> c2bbbc80d99b8ea42652bc2318943f4a
> 98bb0bd191c307ec8a598c284547e753
> 9450bc0c73906a0d5d6170641a45d54c
> ae03a2c3a4b00b4150f17a42a493e763
> 00af4df1caf95ab8ebe4ed3408db337d
> 1029b2a4c652b36626326c6ef74e7509
> c2fb6aa75b0a10a57c574bf7c131e257
> 3a169baf6b0e0b0f6de4ff7c095389db
> ee860822fa90e22f9e3d577bf2869563
> 570d9208de15d9fe2a000b16b0a3a6e8
> 2f3e6a68422e42ba20aa5efa5ed7786b
> c8e6892c47f5360a89d8e96397b16058
> 7fb42985789e832941b95495867c0306
> d578bea15c3849d878041c74b1fc622a
> 7d84b909dcf4fd86963cc4337fa43b20
> f7e1ff01f0480d48ff14553a9f2d42af
> 89496c2d93cf432eec223030ec485b6d
> d7d8edf47b48da25fc2741c89efdfb37
> 2cf286e3974b7de179a021e256c3496b
> adcf4467ee14862dd52af8594d40e1c5
> bbd44bec6271417e66734a29970696a4
> 2a70967121301b4e0156c7092592c654
> 7b5f9893d052dac3404011a58084cd32
> 6e7524e065c48ea8ef91cc9a85a59c79
> 619281c490523ae58388e66d8ea48426
> 2744963782011cca534081efb72fbd97
> 6e4aee9978b3beff55ba8992f9b96de1
> 3876c9dd80498773bb321515c865cf82
> 0ab6563ae0bd873f84a179d3de649022
> 4e0f038e14489eb00b30047d3bb89ed2
> 11e927abb167d2d1fe0b2d617a5ed585
> d45d624a67cc66cc5ce86801a9045c20
> 637b1900fbe494f2bc2700d1f077b91a
> daf6f69427c69bbc12c59805aeaed4e2
> 0c9db30b378929af2d074e3c4f6818a6
> 9e35b66b5860c5142c7ffaffa31615f3
> d20109d40f4656ba264496e4d6490855
> dc49943ec61f0cbacdaf74cdcae49352
> 8cbc2598592ee7c81c9e1bfa0236baa1
> 85119bfd65f7bfd0bbcdb568477b6fb3
> e9b925a2751cc714f936ab894398bccd
> 608dbb369f4e82055057880395971b12
> 3978577dfb4f7aef7bee6f5c171a7ef0
> d3a0b01509c5b38bd2a9321be686243d
> 792129d23d440bc78b43208feec2373f
> b0cc8d9c3548433427aaa08b73a617cc
> 550d3706ab48533cf3723aee891c92c5
> be862665f95f92224dc9eb3cef56bba7
> 551960c4f4d5bd70b2ec0c57a2bdb204
> 2b413ae79e3b69e35dc3ee4ee4a984f5
> 35f4cf6543c119cf29a0dc46a6b0c16c
> 60bc5021a077487fc20a77c4ff6dd203
> 2124836288a976a6c17702bbad091b8d
> bfd14dd8cb490e6413b7ec37dc8861e6
> 8ef452e8fecc6db8ee1193250aead1b9
> 7556785b577a14737c0cb4803c23d31b
> 5fc9cd0299cc03e6dd836afb17ba9931
> 006085207a87c0c2f668d664fcc9e473
> 3da7a37526ef4f890388e4bfeccd6a0d
> cfa9fed925f4d860f7a73c3a38c6f55a
> 7828ece60f8946a643179eb9f7f692db
> ce511b92b319a6462763ac5925bb0692
> 2e5f20a11bf091516a2464b57516bda7
> 178c9a7606b4a997c25d1b4561dd1433
> c25585a10f4de7d768a66a580dc10951
> 5a8301648924c58b36953527592b8469
> 0e53feddf620dc39d9c2fcef21a58184
> 3b40a623e7b46c0b0a4e7aae6cf95c97
> 9bf415d699f395bebdf00ca478e0bfef
> 0f068dd4a32b10c0ddb1f03d16586f96
> d10171fa90ad6074939f6d8ed78cadfd
> 030107dcab05e1c65558faa65391157a
> b56be758e425a27cbc6f7924a0329ab6
> 4f55b401bd1fa62521d432a9a12915f9
> 158bc0d92f4102f28cdccf67980d3d2c
> 5c0cb51b5654ca924e9d4aa52f5096de
> c6335c5f8ee70af0be33d926e2efb7aa
> ead0808f943494e096bb276479996039
> a0bd176ec05df9fbc8720ee863bf128f
> 3b4943230af891f094d91caf447a8c00
> 5a63d7851a26d5844a4d3b000dff6db8
> 6f70420c9185b19105d2c3dbe795a98c
> 0e2fc03fb65e82041d72c4f9ddd72e6e
> 95afb4a714099304f4f82b8f6721348c
> 18d9166cc6221383213db8d302c983c5
> 3515a831998b8c8189a4a3d187b5c0cf
> 6f4d2298843d2b812bb2355c4ed7683a
> b6b10032bd7a6523447c0bac1a662320
> f926fd9f4328b98ef7272c99042122bb
> 501b1e2bf8a4042179e3041f2fabccef
> 56b031ed729a85c5e65c11596899efa5
> 63aca30fdf233c4d06a14dc830b93a81
> 972c3a3cfe946653795118560879c9dc
> 7217fcdde6428c8fc5dee5ddeacb58fa
> 639a65b4ad5f109dbf32cb3be61009e7
> 40a4efc99724b98807d55e7d8a3ca44e
> d9b54ca571166e81a8e2bb60c2dde6f7
> 4a6aad221ceb455352d98e1efc58b9a3
> 0acf2608d313d1118d1e4b8e5bf3f9e9
> cd72e7c7ba2b11d19829f7371cf4eb0f
> 14b36de1f611e2612735150c8fe4a773
> d198a5d7393a1364c33276b8309307cb
> 542c8cbe88106b87380441ed6b122878
> a340a2d0455bf12c3daf33904cdb1cf7
> c4efaced0c952cc73432cba35f518a16
> f169140f77322613b89f407b3754ea83
> ed746ce7471ab9a190d85c3b73e1a44d
> 87859873f61505c3883c78db9d832dcb
> c1959406e96bee86462b75e637d6b3a8
> 41e12024042059dd800fea6d856cc8b1
> 27da9614c3e35b32cacf4710f1fd0ba8
> 4eed78d12cba1be03f91507f5fcd530c
> 5a41700c564c0ee5c6fd9c16f8601d1e
> 7c06c43ee7cdb022db45fed4d2d7d7fc
> 916dadea8412329e7b04128b99a1367a
> 220acc5496674bf9e986762a0e18f861
> 0bdd7c717766b4efc0084db13466c291
> 1f5062ddabbb5e043ae42a9e45e6b41e
> 6bbf55e2b62152bfd008b8c993b0d062
> a5f329d742f3ce2d0eb6d88b3ed246ae
> 7ca71b5cc8dec0e16ae11b604aa66e93
> b6d50f733777af648121e3b8475170eb
> 5f1a79a0c22f712c79d49e0b51e56a35
> 889ff8f7de7034484693c54647385627
> a36955b38ac14c67d59d3de02e7fedcc
> 6117e6356882ee982a8b9a66b9b4c80e
> c67c086e574bd47659c89eaaa25c9e11
> 08e6f71c54161c338087f52e1b8ea6dc
> 610551f18213e468de728c2c84ed4875
> d5db3e5788ad8a9142f0493c3d5fa294
> be69902c824c918284821ae0f8e6aa36
> 4571408b86a0d05a9552e3c1355e6221
> df931b8ae432c9401a674aea9ae5a084
> 5e1baad7a76331b62adf5e479cb45390
> 4a36465ee63a7a4874cd9ecebdf39730
> 233f29ed49f207e0097f394ca949d9b8
> 7a344e1502b03f76de775844b75f1dba
> b160f72f06dbe4aa147f7167ce68ecb3
> 04bb5e69543418fcba9fe37e460bd607
> 9e17092ecb31498f7a0b65af889ec27d
> 2d4571d6a94d1df4869391c74fbece4b
> e52cc7f792831b07e4848f84041db1eb
> 9b417c72890d44a81195d71f7f0923b4
> 867d5e9ed142fc9a44e91d343ca58cd7
> 27bcbaba8e9c19a63298b41a517659fe
>
> --
> Best regards,
>
> Arnaud Jacques
> SecuriteInfo.com
>
> Facebook : https://www.facebook.com/pages/SecuriteInfocom/132872523492286
> Twitter : https://twitter.com/SecuriteInfoCom
> _______________________________________________
> Community-sigs mailing list
> Community-sigs at lists.clamav.net
> http://lists.clamav.net/cgi-bin/mailman/listinfo/community-sigs
>
> http://www.clamav.net/contact.html#ml
More information about the Community-sigs
mailing list