NUEVA VARIANTE DE RANSOMWARE CRYPTOWALL, cazado pro la heuristica del ELISTARA

---

OTra muestra pedida por el ELISTARA, QUE RESULTA SER DE UNA FAMILIA DE ransomwareS, pasa a ser controlado a partir del ELISTARA 32.21 de hoy





El preanalisis de virustotal, ofrece el siguiente informe:



MD5 c82bb9919d322a11fdb5fc63e26bf15f

SHA1 2830fbfa85dc88b5d012da6d3719b14df72a67b3

File size 235.0 KB ( 240640 bytes )

SHA256: 7b6965afd7e57dc2e36240407ee90c44f2715779e679796add4e82f066848277

File name: 8F39588D.EXE.Muestra EliStartPage v32.20

Detection ratio: 34 / 55

Analysis date: 2015-05-04 10:06:24 UTC ( 11 minutes ago )



0 1





Antivirus Result Update

ALYac Trojan.GenericKD.2337525 20150504

AVG Inject2.CATW 20150504

AVware Trojan.Win32.Generic!BT 20150504

Ad-Aware Trojan.GenericKD.2337525 20150504

Agnitum Trojan.Blocker!vjYbpsHLm/4 20150504

AhnLab-V3 Trojan/Win32.Teslacrypt 20150504

Antiy-AVL Trojan/Win32.Blocker 20150504

Avast Win32:Malware-gen 20150504

Baidu-International Trojan.Win32.Ransomlock.gzlv 20150504

BitDefender Trojan.GenericKD.2337525 20150504

Bkav HW32.Packed.2006 20150504

ESET-NOD32 a variant of Win32/Kryptik.DGUP 20150504

Emsisoft Trojan.GenericKD.2337525 (B) 20150504

F-Secure Trojan.GenericKD.2337525 20150504

Fortinet W32/Kryptik.DGSF!tr 20150504

GData Trojan.GenericKD.2337525 20150504

Ikarus Trojan.Win32.Crypt 20150504

Jiangmin Trojan/Blocker.ails 20150504

K7AntiVirus Trojan ( 004bf57b1 ) 20150504

K7GW Trojan ( 004bf57b1 ) 20150504

Kaspersky Trojan-Ransom.Win32.Blocker.gzlv 20150504

McAfee RDN/Generic.grp!ii 20150504

McAfee-GW-Edition RDN/Generic.grp!ii 20150504

MicroWorld-eScan Trojan.GenericKD.2337525 20150504

Microsoft Ransom:Win32/Crowti 20150504

NANO-Antivirus Trojan.Win32.Blocker.drdcdi 20150504

Panda Trj/Chgt.O 20150504

Qihoo-360 HEUR/QVM10.1.Malware.Gen 20150504

Sophos Mal/Generic-L 20150504

Symantec WS.Reputation.1 20150504

Tencent Trojan.Win32.Qudamah.Gen.7 20150504

TrendMicro-HouseCall Suspicious_GEN.F47V0429 20150504

VIPRE Trojan.Win32.Generic!BT 20150504

nProtect Trojan.GenericKD.2337525 20150504





Dicha version del ELISTARA 32.21 que lo detecta y elimina, estará disponible en nuestra web a partir del ELISTARA 32.21 de hoy





saludos



ms, 4-5-2015