Loading...

Blog

26

Jan 2017

ClamAV Signatures for Trojan.JS.Locky

Hi, new clamav signatures for your collection:

files:
c9ef36cd01de1da145c287a77145065b Delivery-Receipt-04397717.doc.wsf
4efeb185fd81458d1d15e39638888104 Item-Delivery-Details-3136255.doc.wsf
7e1046171c2d480999d9ba404b60a598 Undelivered-Parcel-ID-7497849.doc.wsf

signatures:
JS.Trojan.Downloader:0:*:2e73706c697428726f78282929*2e6f70656e2822676574222c746f6728
JS.Trojan.Downloader:0:*:2e6f70656e2822676574222c22687474703a2f2f222b785b695d2b672b
JS.Trojan.Downloader:0:*:2e6a6f696e28*3d22687474703a2f*6c322e786d6c6874747022*2e6f70656e2822676574222c*2e73656e6428293b6966*6e7365746578742e73706c697428

Regards

Michael Cichosz (mcichosz _at_ clamav.net) ClamAV, a GPL anti-virus toolkit