About contagio exchange

CONTAGIO EXCHANGE Contagio exchange was created to absorb malware samples shared by readers of Contagio. This is meant to be a community driven malware collection.
Edit Aug 2013 - The community is busy and Mila too so this was not a very active site (my fault probably) so I will be just dumping malware strings here - it often helps in malware identification and googling is the best way.
With just strings, not exactly a fun blog to read but might become s useful resource over time.
I will not be posting samples here, just md5. You can find the corresponding samples on contagio or ping me if you can't find
M
P.S. Robot pictures delivered by Robohash.com (generated from file hashes)

Monday, June 25, 2012

023 Crime OSX DNS Changer / OSX.RSPlug.A - web -2007


SHA256: 2bdcdab0a5d41f4b6aa48e2ab55177552c8419c3f8ce140c4850a0616d7a2f3e
SHA1: f620af9a43d6e46e6b028dc8b109ff5d4cced911
MD5: 5291beb71cba2c5779119bff7a10abdb
File size: 16.6 KB ( 17034 bytes )
File name: ultracodec1237.dmg



 Download (pass infected)


  https://www.virustotal.com/file/2bdcdab0a5d41f4b6aa48e2ab55177552c8419c3f8ce140c4850a0616d7a2f3e/analysis/
SHA256: 2bdcdab0a5d41f4b6aa48e2ab55177552c8419c3f8ce140c4850a0616d7a2f3e
SHA1: f620af9a43d6e46e6b028dc8b109ff5d4cced911
MD5: 5291beb71cba2c5779119bff7a10abdb
File size: 16.6 KB ( 17034 bytes )
File name: ultracodec1237.dmg
File type: unknown
Detection ratio: 21 / 42
Analysis date: 2012-06-18 00:32:46 UTC ( 1 week, 1 day ago ) 
AntiVir MACOS/Puper.A 20120617
Avast Other:Malware-gen [Trj] 20120617
DrWeb Mac.DnsChange 20120618
Emsisoft Trojan.Mac.Dnscha.dmg!IK 20120618
Fortinet Malware_fam.B 20120617
GData Other:Malware-gen 20120618
Ikarus Trojan.Mac.Dnscha.dmg 20120617
K7AntiVirus Trojan 20120615
Kaspersky Trojan.Mac.Dnscha.dmg 20120618
McAfee OSX/Puper 20120618
McAfee-GW-Edition OSX/Puper 20120617
Microsoft Trojan:MacOS/RSPlug.A 20120617
NOD32 probably a variant of Win32/Agent.MSSTEQQ 20120617
Norman RSPlug.A 20120617
PCTools Malware.OSX-RSPlug 20120618
Rising Trojan.Mac.Dnscha.c 20120614
Sophos OSX/RSPlug-A 20120617
SUPERAntiSpyware - 20120617
Symantec OSX.RSPlug.A 20120617
TrendMicro OSX_DNSCHAN.A 20120618
TrendMicro-HouseCall OSX_DNSCHAN.A 20120617
VBA32 Trojan.Mac.Dnscha.dmg 20120615

Additional information
No comments