[Community-sigs] new vbs sig

[Christopher Marczewski]

Hello Jean-Baptiste,

Thank you for your submission. We're currently reviewing the signature &
will keep you posted.

On Fri, Aug 18, 2017 at 8:23 AM, Jean-Baptiste Lanel <jb at lanel.eu> wrote:

> Hello,
>
> Just made a new sig :
>
> VBS.Dwnl:7:*:6d61726b6574706c616365203d20726466676f28
>
> It seems rather odd but so far catched a lot (see samples, for decrypting
> with openssl : openssl enc -d -aes256 -in sample.tar.gz.enc -out
> sample.tar.gz)
>
> Regards,
>
> JB
> _______________________________________________
> Community-sigs mailing list
> Community-sigs at lists.clamav.net
> http://lists.clamav.net/cgi-bin/mailman/listinfo/community-sigs
>
> http://www.clamav.net/contact.html#ml
>



-- 
--
Christopher Marczewski
Research Engineer
Talos Group
cmarczewski at sourcefire.com
Phone: 443.832.2975