[Community-sigs] Js.Trojan.Obfus

Mariano Graziano magrazia at sourcefire.com
Fri Jul 15 08:18:04 EDT 2016


Hi Arnaud,

On Fri, Jul 15, 2016 at 11:22 AM, Arnaud Jacques / SecuriteInfo.com <
webmaster at securiteinfo.com> wrote:
>
> MD5 of submitted sample is : b69678f1bb69ede055f7c43b13e090a0
>

I modified a little bit the signature, now it looks like:

Js.Trojan.Obfus-634;Target:7;0&(1=3);77696e646f775b225c7836345c7836665c7836335c7837355c7836645c7836355c7836655c783734;77696e646f77

in this way it should be stronger. It passed the FP tests and it will be
published soon.


Thanks.



More information about the Community-sigs mailing list