[Community-sigs] new vbs sig

[Christopher Marczewski]

Jean-Baptiste,

We have published your signature as Vbs.Downloader.Agent-6335783-1. It
should be available within the next few daily updates.

Thanks again for your contribution.

On Fri, Aug 18, 2017 at 11:28 AM, Christopher Marczewski <
cmarczewski at sourcefire.com> wrote:

> Hello Jean-Baptiste,
>
> Thank you for your submission. We're currently reviewing the signature &
> will keep you posted.
>
> On Fri, Aug 18, 2017 at 8:23 AM, Jean-Baptiste Lanel <jb at lanel.eu> wrote:
>
>> Hello,
>>
>> Just made a new sig :
>>
>> VBS.Dwnl:7:*:6d61726b6574706c616365203d20726466676f28
>>
>> It seems rather odd but so far catched a lot (see samples, for decrypting
>> with openssl : openssl enc -d -aes256 -in sample.tar.gz.enc -out
>> sample.tar.gz)
>>
>> Regards,
>>
>> JB
>> _______________________________________________
>> Community-sigs mailing list
>> Community-sigs at lists.clamav.net
>> http://lists.clamav.net/cgi-bin/mailman/listinfo/community-sigs
>>
>> http://www.clamav.net/contact.html#ml
>>
>
>
>
> --
> --
> Christopher Marczewski
> Research Engineer
> Talos Group
> cmarczewski at sourcefire.com
> Phone: 443.832.2975 <(443)%20832-2975>
>



-- 
--
Christopher Marczewski
Research Engineer
Talos Group
cmarczewski at sourcefire.com
Phone: 443.832.2975