About contagio exchange

CONTAGIO EXCHANGE Contagio exchange was created to absorb malware samples shared by readers of Contagio. This is meant to be a community driven malware collection.
Edit Aug 2013 - The community is busy and Mila too so this was not a very active site (my fault probably) so I will be just dumping malware strings here - it often helps in malware identification and googling is the best way.
With just strings, not exactly a fun blog to read but might become s useful resource over time.
I will not be posting samples here, just md5. You can find the corresponding samples on contagio or ping me if you can't find
M
P.S. Robot pictures delivered by Robohash.com (generated from file hashes)

Wednesday, April 4, 2012

017 Crime Dozmot.D trojan web Feb-Mar 2012

MD5 2190db2c50c6cebffdb13ddeeec23186

  Download (pass infected)




SHA256:     bf97be25c653d648dd27ef76b9fc4b82484940e257c7eaf94f76bfe7561fe137
SHA1:     cc9466b57bc1992bc1ed31eb963df3662e287886
MD5:     2190db2c50c6cebffdb13ddeeec23186
File size:     29.5 KB ( 30208 bytes )
File name:     2190db2c50c6cebffdb13ddeeec23186
File type:     Win32 DLL
Detection ratio:     36 / 42
Analysis date:     2012-03-31 20:52:08 UTC ( 4 days, 5 hours ago )
0
0
Antivirus     Result     Update
AhnLab-V3     Win-Trojan/Onlinegamehack15.Gen     20120331
AntiVir     TR/PSW.OnlineGames.wsrk     20120330
Antiy-AVL     -     20120331
Avast     Win32:Lolyda-B [Trj]     20120331
AVG     PSW.OnlineGames3.BIQR     20120331
BitDefender     Gen:Variant.Graftor.197     20120331
ByteHero     -     20120328
CAT-QuickHeal     TrojanPWS.Dozmot.D4     20120331
ClamAV     Trojan.Spy-73885     20120331
Commtouch     W32/MalwareF.NAFO     20120331
Comodo     TrojWare.Win32.GameThief.Wow.A     20120331
DrWeb     Trojan.PWS.Gamania.origin     20120331
Emsisoft     Trojan-GameThief.Win32.OnLineGames!IK     20120331
eSafe     -     20120328
eTrust-Vet     Win32/Gamepass.PNO     20120331
F-Prot     W32/MalwareF.NAFO     20120331
F-Secure     Gen:Variant.Graftor.197     20120331
Fortinet     W32/Onlinegames.OST!tr.pws     20120331
GData     Gen:Variant.Graftor.197     20120331
Ikarus     Trojan-GameThief.Win32.OnLineGames     20120331
Jiangmin     Trojan/PSW.Magania.axdu     20120331
K7AntiVirus     Riskware     20120331
Kaspersky     Trojan-GameThief.Win32.Magania.eqve     20120331
McAfee     Generic PWS.ff     20120331
McAfee-GW-Edition     Generic PWS.ff     20120331
Microsoft     PWS:Win32/Dozmot.D     20120331
NOD32     a variant of Win32/PSW.WOW.NSF     20120331
Norman     W32/Magania.GZ     20120331
nProtect     -     20120331
Panda     Suspicious file     20120331
PCTools     Trojan-PSW.Generic     20120326
Rising     Trojan.PSW.Win32.GameOL.tje     20120331
Sophos     Troj/PWS-BLS     20120331
SUPERAntiSpyware     -     20120329
Symantec     Infostealer     20120331
TheHacker     Trojan/Magania.eqvb     20120331
TrendMicro     TSPY_GAMETHI.SML     20120331
TrendMicro-HouseCall     TSPY_GAMETHI.SML     20120331
VBA32     BScope.Trojan.OnlineGames.0825     20120330
VIPRE     Trojan.Win32.Generic!BT     20120331
ViRobot     -     20120331
VirusBuster     Trojan.PWS.Magania!3ZNm0Z/N/Rs     20120331
Labels: , , ,