Banamex phishing malware
CastleCops
-> Unknown Files
Author: AlphaCentauri,
Posted: Sun Jun 29, 2008 3:18 am Post subject: Banamex phishing malware
This is clearly trying to be malware, though it's either corrupted or really poorly detected. (I mean, ClamAV found something Kaspersky and AntiVir missed?) It was a spam in Spanish claiming to be from a bank called Banamex and asking me to download an update by clicking on a link http://64.22.122.31/AhnLab.php?funcion=Instalar_Software
VirusTotal:
Result: 3/32 (9.38%)
AhnLab-V3 2008.6.27.1 2008.06.27 -
AntiVir 7.8.0.59 2008.06.28 -
Authentium 5.1.0.4 2008.06.29 -
Avast 4.8.1195.0 2008.06.28 -
AVG 7.5.0.516 2008.06.29 -
BitDefender 7.2 2008.06.29 -
CAT-QuickHeal 9.50 2008.06.28 -
ClamAV 0.93.1 2008.06.28 Trojan.Qhost-49
DrWeb 4.44.0.09170 2008.06.28 -
eSafe 7.0.17.0 2008.06.26 -
eTrust-Vet 31.6.5911 2008.06.27 -
Ewido 4.0 2008.06.27 -
F-Prot 4.4.4.56 2008.06.29 -
F-Secure 7.60.13501.0 2008.06.26 -
Fortinet 3.14.0.0 2008.06.28 -
GData 2.0.7306.1023 2008.06.29 -
Ikarus T3.1.1.26.0 2008.06.29 -
Kaspersky 7.0.0.125 2008.06.29 -
McAfee 5327 2008.06.27 Generic VB.b
Microsoft 1.3704 2008.06.29 -
NOD32v2 3225 2008.06.29 a variant of Win32/Qhost.NCK
Norman 5.80.02 2008.06.27 -
Panda 9.0.0.4 2008.06.28 -
Prevx1 V2 2008.06.29 -
Rising 20.50.52.00 2008.06.28 -
Sophos 4.30.0 2008.06.29 -
Sunbelt 3.0.1176.1 2008.06.26 -
TheHacker 6.2.96.364 2008.06.28 -
TrendMicro 8.700.0.1004 2008.06.27 -
VBA32 3.12.6.8 2008.06.28 -
VirusBuster 4.5.11.0 2008.06.23 -
Webwasher-Gateway 6.6.2 2008.06.28 -
Jotti:
A-Squared
Found nothing
AntiVir
Found nothing
ArcaVir
Found nothing
Avast
Found nothing
AVG Antivirus
Found nothing
BitDefender
Found nothing
ClamAV
Found Trojan.Qhost-49
CPsecure
Found W32.IM.W.Banker.F
Dr.Web
Found nothing
F-Prot Antivirus
Found nothing
F-Secure Anti-Virus
Found nothing
Fortinet
Found nothing
Ikarus
Found nothing
Kaspersky Anti-Virus
Found nothing
NOD32
Found a variant of Win32/Qhost.NCK
Norman Virus Control
Found nothing
Panda Antivirus
Found nothing
Sophos Antivirus
Found nothing
VirusBuster
Found nothing
VBA32
Found nothing
Author: tetak,
Posted: Sun Jun 29, 2008 11:22 am Post subject:
It's malware and I've added it to the malware listserv.
/p1101874-MD5_50e947642fee560c3c83f818a188c22f_AhnLab_exe.html
CastleCops
-> Unknown Files
All times are GMT
Page 1 of 1
Powered by phpBB © 2001 phpBB Group