Sent the sample detected as UIWIX by @TrendLabs to VT (at 7/60): https://www.virustotal.com/en/file/146581f0b3fbe00026ee3ebe68797b0e57f39d1d8aecc99fdc3290e9cfadc4fc/analysis/1495039952/ …
Let's dig people.
@BleepinComputer @demonslay335
-
-
Thanks. Twitter will use this to make your timeline better. UndoUndo
-
-
-
added detection to Sanesecurity sigs.
Thanks. Twitter will use this to make your timeline better. UndoUndo
-
-
-
-
another variant of uiwix, sha 256: 3860c2526fc8acf5366573cdeb0a292036398d3ee9e7d9764a60ec5d0812582a
End of conversation
New conversation -
-
-
TimeDateStamp, Mon May 01 03:28:18 2017. Any reported infections ?
-
Several submissions to IDR, can get numbers later.
End of conversation
New conversation -
-
-
Doesn't share code with any other malware in our db. Amount of unique code for the sample is very highpic.twitter.com/34Zlne8sPt
-
It is not acting as a traditional ransomware at all. Our Yara VT retrohunt returned only this one sample.
#Uiwix - Show replies
New conversation -
-
-
Do we know that threat actors also look at VT and have paid version for monitoring. You shud never upload to VT if you are being attacked.
Thanks. Twitter will use this to make your timeline better. UndoUndo
-
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.