[Community-sigs] signature of JS downloader

Jean-Baptiste Lanel jb at lanel.eu
Thu Nov 24 16:27:51 EST 2016


Hello sigmakers,

In case it may help, just received 3 mails caught by this :

jb at newaude:~$ echo 
"JS.HILLARY.Downloader:7:*:28295d2822722c752c6e2c642c6c2c6c2c332c3222" 
|sigtool --decode-sigs
VIRUS NAME: JS.HILLARY.Downloader
TARGET TYPE: NORMALIZED ASCII TEXT
OFFSET: *
DECODED SIGNATURE:
()]("r,u,n,d,l,l,3,2."

Regards,

JB




More information about the Community-sigs mailing list