[Community-sigs] Js.Trojan.Nemucod-1

[Alain Zidouemba]

Thank you for your submission. Your signature will be go out in an upcoming
signature release.

- Alain

On Thu, Mar 24, 2016 at 8:11 PM, Samuel Lidén Borell <samuel at kodafritt.se>
wrote:

> Hi,
>
> Here's a sig that matches some obfuscated JScript malware I got last week.
> Not sure if that's recent enough to be added, but here it is anyway:
>
>
>
> Js.Trojan.Nemucod-1:7:*:2829207b206576616c28756e65736361706528222532302532302532302532302532302530642229293b
>
>
> sha256 of samples:
> 0d78bdd3d67470459f20ed300d9f52dbadb9d9dbe403012c3bfc0fed353e4701
> 301e5a8b5beb739aabad1a9cf6d01585571c7b5fd59af6729fe95bdb0eb056dd
> 3da8f0d3a79ff727c5eacd0f1b223aa7fe9f1c32cd6813249cab85479d28d5d7
> 4f030323f9db8123a7bf4032d0dd1f665f09780608cd602204af3184d07c6707
> d0921028c19e408fb9b393eb908f7eb2ceb32ac642079860d4db4f8a87f97b86
> e52a2eb57cdc48a05b04e28342395080939bd310411395f9bd63d76f1288026b
>
>
> Regards,
> Samuel
> _______________________________________________
> Community-sigs mailing list
> Community-sigs at lists.clamav.net
> http://lists.clamav.net/cgi-bin/mailman/listinfo/community-sigs
>
> http://www.clamav.net/contact.html#ml
>