[Community-sigs] Js.Trojan.Nemucod-1

[Samuel Lidén Borell]

Hi,

Here's a sig that matches some obfuscated JScript malware I got last 
week. Not sure if that's recent enough to be added, but here it is anyway:


Js.Trojan.Nemucod-1:7:*:2829207b206576616c28756e65736361706528222532302532302532302532302532302530642229293b


sha256 of samples:
0d78bdd3d67470459f20ed300d9f52dbadb9d9dbe403012c3bfc0fed353e4701
301e5a8b5beb739aabad1a9cf6d01585571c7b5fd59af6729fe95bdb0eb056dd
3da8f0d3a79ff727c5eacd0f1b223aa7fe9f1c32cd6813249cab85479d28d5d7
4f030323f9db8123a7bf4032d0dd1f665f09780608cd602204af3184d07c6707
d0921028c19e408fb9b393eb908f7eb2ceb32ac642079860d4db4f8a87f97b86
e52a2eb57cdc48a05b04e28342395080939bd310411395f9bd63d76f1288026b


Regards,
Samuel