NUEVA VARIANTE DE CAZAPASSWORDS BANCARIO SPY BANKER QUE PASAMOS A CONTROLAR

---

Recibidas tres muestras para analizar, han resultado ser variantes de SPYBANKER que pasaremos a controlar a partir de la proxima version del ELISTARA 32.23 de hoy.







Los preanalisis de virustotal ofrecen los siguientes informes







MD5 3bbb67b9c8234b1930614dcaa68e1ec5

SHA1 8c7d23cc4ad040f101b2ffd38eb1f0eead13d91c

File size 2.1 MB ( 2177024 bytes )



SHA256: 9f6ddf220a421619a266cbf5d52ff0451aeaf0e31c2d5173df4890e972413ed7

File name: 1I4T4g.exe

Detection ratio: 29 / 55

Analysis date: 2015-05-06 07:32:08 UTC ( 5 minutes ago )



0 1





Antivirus Result Update

ALYac Gen:Variant.Kazy.382938 20150506

AVG SHeur4.BVYJ 20150506

AVware Trojan.Win32.Generic!BT 20150506

Ad-Aware Gen:Variant.Kazy.382938 20150506

Agnitum TrojanSpy.Banker!Wq8bvV/zCLs 20150505

AhnLab-V3 Trojan/Win32.Gen 20150505

Antiy-AVL Trojan/Win32.SGeneric 20150506

Avast Win32:Malware-gen 20150506

Baidu-International Trojan.Win32.Banker.AANP 20150505

BitDefender Gen:Variant.Kazy.382938 20150506

Bkav HW32.Packed.F263 20150505

Comodo UnclassifiedMalware 20150506

ESET-NOD32 Win32/Spy.Banker.AANP 20150506

Emsisoft Gen:Variant.Kazy.382938 (B) 20150506

F-Secure Gen:Variant.Kazy.382938 20150506

Fortinet W32/Banker.AANP!tr.spy 20150506

GData Gen:Variant.Kazy.382938 20150506

Ikarus Kazy 20150506

Kingsoft Win32.Troj.Banker.(kcloud) 20150506

McAfee Artemis!3BBB67B9C823 20150506

MicroWorld-eScan Gen:Variant.Kazy.382938 20150506

NANO-Antivirus Trojan.Win32.Kazy.czqrvy 20150506

Norman Troj_Generic.UEROW 20150505

Panda Trj/Chgt.A 20150505

Qihoo-360 Win32/Trojan.19d 20150506

Symantec Trojan.Gen.2 20150506

TrendMicro TROJ_GEN.R047C0ED215 20150506

TrendMicro-HouseCall TROJ_GEN.R047C0ED215 20150506

VIPRE Trojan.Win32.Generic!BT 20150506





_______







MD5 e140acf6f90d4d4e2632dcd1c3860db8

SHA1 837457e8cf7d23f286c895ee8a41ef3b83eab007

File size 2.8 MB ( 2984960 bytes )

SHA256: a368a774a01a251bad9f2078ecd0fafda9eaf88396fca185a979cb9af12a1836

File name: 0G6Q1d.exe

Detection ratio: 32 / 54

Analysis date: 2014-09-03 12:22:51 UTC ( 8 months ago )



0 1





Antivirus Result Update

AVG SHeur4.BVYK 20140903

AVware Trojan.Win32.Generic!BT 20140902

Ad-Aware Gen:Variant.Kazy.385034 20140903

Agnitum TrojanSpy.Banker!87hAKRQszV4 20140903

AhnLab-V3 Downloader/Win32.Generic 20140903

Avast Win32:Dropper-gen 20140903

Avira TR/Kazy.385034 20140903

Baidu-International Trojan.Win32.Banker.BAAPA 20140903

BitDefender Gen:Variant.Kazy.385034 20140903

Bkav W32.HfsAutoA.3628 20140903

Comodo UnclassifiedMalware 20140903

ESET-NOD32 Win32/Spy.Banker.AAPA 20140903

Emsisoft Gen:Variant.Kazy.385034 (B) 20140903

F-Secure Gen:Variant.Kazy.385034 20140903

Fortinet W32/Banker.AAPA!tr.spy 20140903

GData Gen:Variant.Kazy.385034 20140903

Ikarus Kazy 20140903

K7AntiVirus Spyware ( 004957b21 ) 20140902

K7GW Spyware ( 004957b21 ) 20140902

Kingsoft Win32.Troj.Banker.(kcloud) 20140903

McAfee Artemis!E140ACF6F90D 20140903

McAfee-GW-Edition Artemis 20140902

MicroWorld-eScan Gen:Variant.Kazy.385034 20140903

NANO-Antivirus Trojan.Win32.Kazy.dbpvcf 20140903

Norman Troj_Generic.UEMGK 20140903

Panda Trj/Chgt.A 20140903

Qihoo-360 Win32/Trojan.Spy.aa9 20140903

Rising PE:Trojan.Win32.Generic.16CEC2BA!382649018 20140903

Symantec Trojan.Gen.2 20140903

TrendMicro TROJ_GEN.R0CBC0UFU14 20140903

TrendMicro-HouseCall TROJ_GEN.R0CBC0UFU14 20140903

VIPRE Trojan.Win32.Generic!BT 20140902





________





MD5 f641c75eb74e25fbe03225794c567322

SHA1 77667dfb33cda6f010453cc394a9c34c84acbbf4

File size 2.2 MB ( 2296320 bytes )

SHA256: f741fa623c06bb5fd4751be64e1b593bbb81734db8b08057602b70bc561499db

File name: 4q5b2L.exe

Detection ratio: 23 / 55

Analysis date: 2015-05-06 07:57:13 UTC ( 1 minute ago )



0 1





Antivirus Result Update

AVG PSW.Banker6.BKQW 20150506

AVware Trojan.Win32.Generic!BT 20150506

AhnLab-V3 Trojan/Win32.Xema 20150505

Avast Win32:Malware-gen 20150506

Baidu-International Trojan.Win32.Banker.AAOP 20150505

Bkav HW32.Packed.B767 20150505

Comodo UnclassifiedMalware 20150506

ESET-NOD32 a variant of Win32/Spy.Banker.AAOP 20150506

Fortinet W32/Banker.AAOP!tr.spy 20150506

GData Win32.Trojan.Agent.0EFYU1 20150506

Ikarus Trojan.Win32.Spy 20150506

K7AntiVirus Spyware ( 004957ae1 ) 20150506

K7GW Spyware ( 004957ae1 ) 20150506

McAfee Artemis!F641C75EB74E 20150506

Microsoft TrojanDownloader:Win32/Qulkonwi.B 20150506

NANO-Antivirus Trojan.Win32.Banker.cywnci 20150506

Norman Troj_Generic.UAKNT 20150506

Panda Trj/CI.A 20150505

Qihoo-360 Win32/Trojan.Multi.daf 20150506

Sophos Mal/Generic-S 20150506

Symantec Downloader 20150506

VIPRE Trojan.Win32.Generic!BT 20150506

Zillya Trojan.Banker.Win32.83695 20150505



Dicha version del ELISTARA 32.23 que los detecta y elimina, estará disponible en nuestra web a partir d elas 18 h CEST de hoy





saludos



ms, 6-5-2015