NUEVA VARIANTE DE RANSOMWARE CERBER

---

Recibido en un ZIP anexado a un e-mail, en cuyo interior existe un .JS que al ejecutarlo descarga e instala esta variante del RANSOMWARE CERBER.



Lo pasamos a controlar a partir del ELISTARA 35.32 de hoy



El preanalisis de virustotal ofrece el siguiente informe:





MD5 6ddc9a25992139de95673239860156f1

SHA1 a9b819f8a30dfa3ba49dfb9d49b8a3ae4370a8c1

File size 250.0 KB ( 256000 bytes )

SHA256: 8bd0b947375509d12bcc645107fdfeab862e8e21e40d0415b714a9afe081dcae

File name: 6ddc9a25.exe

Detection ratio: 49 / 57

Analysis date: 2016-09-29 14:27:26 UTC ( 2 minutes ago )

0

3



Antivirus Result Update

Avast Win32:Malware-gen 20160929

Qihoo-360 Win32/Trojan.2e4 20160929

ESET-NOD32 Win32/Filecoder.Cerber.B 20160929

Baidu Win32.Trojan.Kryptik.alb 20160929

Tencent Win32.Trojan.Filecoder.Wtoe 20160929

F-Prot W32/Trojan3.VLU 20160926

Cyren W32/Trojan.GNHH-4030 20160929

Fortinet W32/Kryptik.23300!tr 20160929

Comodo TrojWare.Win32.Kryptik.FBWM 20160929

Invincea trojandownloader.win32.kuluoz.d 20160928

Antiy-AVL Trojan/Win32.Zerber 20160929

AhnLab-V3 Trojan/Win32.Cerber.N2005609807 20160929

nProtect Trojan/W32.Agent.256000.JK 20160929

Zillya Trojan.Zerber.Win32.49 20160929

Jiangmin Trojan.Zerber.bn 20160929

Yandex Trojan.Zerber! 20160928

ViRobot Trojan.Win32.U.Agent.256000 20160929

AVware Trojan.Win32.Generic!BT 20160929

VIPRE Trojan.Win32.Generic!BT 20160929

NANO-Antivirus Trojan.Win32.Encoder.ecotrz 20160927

Emsisoft Trojan.GenericKD.3230549 (B) 20160929

ALYac Trojan.GenericKD.3230549 20160929

Ad-Aware Trojan.GenericKD.3230549 20160929

BitDefender Trojan.GenericKD.3230549 20160929

F-Secure Trojan.GenericKD.3230549 20160929

GData Trojan.GenericKD.3230549 20160929

eScan Trojan.GenericKD.3230549 20160929

Arcabit Trojan.Generic.D314B55 20160929

DrWeb Trojan.Encoder.4395 20160929

Malwarebytes Trojan.Crypt 20160929

Zoner Trojan.Cerber 20160929

SUPERAntiSpyware Trojan.Agent/Gen-Crypt 20160929

Ikarus Trojan-Ransom.Cerber 20160929

K7AntiVirus Trojan ( 004e16c11 ) 20160929

K7GW Trojan ( 004e16c11 ) 20160929

AegisLab Troj.Ransom.W32!c 20160929

Panda Trj/CI.A 20160929

Avira (no cloud) TR/Crypt.ZPACK.rgeg 20160929

McAfee Ransomware-FOL!6DDC9A259921 20160929

TrendMicro-HouseCall Ransom_CERBER.SMR1 20160929

Microsoft Ransom:Win32/Cerber 20160929

CAT-QuickHeal Ransom.Crowti.G4 20160929

Symantec Ransom.Cerber 20160929

Rising Malware.Generic!i22TlxETPAR@2 (thunder) 20160929

CrowdStrike Falcon (ML) malicious_confidence_100% (W) 20160725

Sophos Mal/Ransom-EJ 20160929

Kaspersky HEUR:Trojan.Win32.Generic 20160929

AVG Generic37.BPIN 20160929

McAfee-GW-Edition BehavesLike.Win32.Downloader.dh 20160929



Dicha versión del ELISTARA 35.32 que lo detecta y elimina, estará disponible en nuestra web a partir del 30-9-2016





saludos



ms, 29-9-2016