New malware posting at Yahoo Answers

[YardDog1]

A new malware showing 15 of 42 detections by virustotal not being detected by mbam.. How do i get this exe file results test data to mbam for researching .

[YardDog1]

It came from this url hxxp://dwcmarketing.co_dot_za/w/answers.html

[YardDog1]

backdoor trojans .. 15 such detections..

[wildman424]

Hi,

I'll look into this and forward the files to the research team for you.

If you would like to submit malicious files or malicious websites,

have a look at this topic and post them as instructed in that post to The Research Center

[YardDog1]

Great .. and thanks.. this url showed up at Yahoo Answers and is currently being removed from the site. but.. i was checking it in Sandboxie . but, not on a test computer.. seeing the virustotal results were enough for me ..

[wildman424]

the file is already detected

Files Detected: 7
c:\Users\wildman424\Downloads\Malware Removal\answer(2).exe (Trojan.Agent) -> No action taken.
[f46df304510bfd392c518e8fec146997]
c:\Users\wildman424\Downloads\Malware Removal\answer(1).exe (Trojan.Agent) -> No action taken.
[ce935a9dda82ca6c4d30bd6034cc916f]
c:\Users\wildman424\Downloads\Malware Removal\answer.exe (Trojan.Agent) -> No action taken.
[e081a156293359dde19c1c01c63a49b7]
c:\Users\wildman424\Downloads\Malware Removal\answer(6).exe (Trojan.Agent) -> No action taken.
[184940b769f32214433a6faed12fbd43]
c:\Users\wildman424\Downloads\Malware Removal\answer(5).exe (Trojan.Agent) -> No action taken.
[fa679a5d98c494a2403db86552ae41bf]
c:\Users\wildman424\Downloads\Malware Removal\answer(4).exe (Trojan.Agent) -> No action taken.
[4b16a45308540b2ba0ddec31c8382ed2]
c:\Users\wildman424\Downloads\Malware Removal\answer(3).exe (Trojan.Agent) -> No action taken.
[67fa57a0c894ef47700d031a2bd560a0]

File name: answer.exe

File type: Win32 EXE

SHA256: 1151e93e421e6d50a471b00efb3f6913694fd4559139253974aaa31df3d2c8c7

SHA1: 6e791281801359aee735fdbf2ade5670b7be97f7

MD5: fc069e1699c08a759c9c71f3b177f34f

File size: 523.0 KB ( 535560 bytes )

Detection ratio: 14 / 41

Analysis date: 2012-06-23 17:27:06 UTC ( 1 minute ago )

https://www.virustot...sis/1340472426/

Great .. and thanks.. this url showed up at Yahoo Answers and is currently being removed from the site. but.. i was checking it in Sandboxie . but, not on a test computer.. seeing the virustotal results were enough for me ..

DO NOT extract it from the sandbox, I'd delete the contents of that sandbox so there isn't any accidents