Nueva variante de malware genesis cazado por la heuristica del elistara

Otra muestra pedida por el ElistarA pasa a ser controlada especificamente a partir del ElistarA 30.15 de hoy

el preanalisis de virscanofrece el siguiente informe:

File Name : GENESIS_06100530.EXE.Muestra EliStartPage v30.12 (File not down)
File Size :2875392 byte
File Type :application/x-dosexec
MD5:e7ceba8048b9abee7a8d3db0ba5fcfd1
SHA1:4cb9a4dd7ac04f7961339a93a931ac71477c9e61
Scanner results
Scanner results:24%Scanner(s) (9/37)found malware!
Time: 2014-06-12 16:40:05 (CST)

Scanner Engine Ver Sig Ver Sig Date Scan result Time
ahnlab 9.9.9 9.9.9 2013-05-28 Found nothing 8
antivir 1.9.2.0 1.9.159.0 7.11.154.130 ADWARE/Lollipop.Gen7 13
antiy 182933 AVL140610 2014-06-11 Found nothing 5
arcavir 1.0 2011 2014-05-30 Found nothing 8
asquared 5.1.0.4 5.1.0.4 2013-11-25 Found nothing 11
avast 140611-0 4.7.4 2014-06-11 Win32:Kryptik-NSR 17
avg 2109/7103 10.0.1405 2014-06-01 Found nothing 1
baidu 2.0.1.0 4.1.3.52192 2.0.1.0 Adware.Win32.Lollipop.40 4
baidusd 1.0 1.0 2014-04-02 Found nothing 3
bitdefender 7.55259 7.90123 2014-06-11 Gen:Variant.Symmi.42891 9
ClamAV 19082 0.97.5 2014-06-10 Found nothing 4
comodo 15023 5.1 2014-06-11 Found nothing 3
ctch 4.6.5 5.3.14 2013-12-01 Found nothing 1
drweb 5.0.2.3300 5.0.1.1 2014-06-09 Found nothing 28
fprot 4.6.2.117 6.5.1.5418 2014-06-11 Found nothing 1
fsecure 2014-04-02-01 9.13 2014-04-02 Gen:Variant.Symmi.41755 1
gdata 24.2602 24.2602 2014-06-12 Gen:Variant.Symmi.42891 12
hauri 2.73 2.73 2014-06-11 Found nothing 1
ikarus 1.01.90 1.32.15.0 2013-05-31 Found nothing 5
jiangmin 16.0.100 1.0.0.0 2014-06-10 Found nothing 52
kaspersky 5.5.33 5.5.33 2014-04-01 Found nothing 20
kingsoft 2.1 2.1 2013-09-22 Found nothing 3
mcafee 5805 5400.1158 2009-11-17 Found nothing 5
nod32 9809 3.0.21 2014-05-16 a variant of Win32/Skintrim.MM trojan 1
panda 9.05.01 9.05.01 2014-06-11 Found nothing 6
pcc 10.374.09 9.500-1005 2013-10-30 Found nothing 2
qh360 1.0.1 1.0.1 1.0.1 Win32/Trojan.578 13
quickheal 14.00 14.00 2014-06-11 Found nothing 4
rising 25.17.00.04 25.17.00.04 2014-06-02 Found nothing 5
sophos 4.98 3.50.2 2014-04-02 Found nothing 6
sunbelt 3.9.2589.2 3.9.2589.2 2014-06-11 Trojan.Win32.Generic!BT 2
symantec 20030814.017 1.3.0.24 2003-08-14 Found nothing 1
tachyon 9.9.9 9.9.9 2013-12-27 Found nothing 7
thehacker 6.8.0.5 6.8.0.5 2014-06-10 Found nothing 2
tws 17.47.17308 1.0.2.2108 2014-06-11 Found nothing 4
vba 3.12.26.0 3.12.26.0 2014-06-10 Found nothing 4
virusbuster 15.0.816.0 5.5.2.13 2014-06-09 Found nothing 12
¦


Dicha version 30.15 del ElistarA, estará disponible en nuestra web, a partir de las 19 h CEST de hoy

saludos

ms, 12-6-2014