【Gumblar/GENO】Web改竄ウイルス総合11【8080】

お疲れ様です。

>>168,181,183-184,306 JPCERT : CodeName : COLOR #d68107

Wepawet http://wepawet.cs.ucsb.edu/view.php?hash=73bd268a264f33a9b9e1d2329195b598&t=1376999711&type=js

urlQuery http://urlquery.net/report.php?id=4640111

aguseGATEWAY http://megalodon.jp/2013-0820-2114-56/gw.aguse.jp/?aguse_url=http%3A%2F%2Fichigu%2Ememopad%2Eorg%2Findex%2Ehtm

VIRUSTOTAL
https://www.virustotal.com/en/url/e2c1f014719be0ac0e95afe7c61e657e68fc4aa7766c7f85c938efe587617f6d/analysis/1377001053/
Detection ratio: 10 / 39
Analysis date: 2013-08-20 12:17:33 UTC
Additional information
last-modified: Mon, 19 Aug 2013 10:07:53 GMT
Response content SHA-256
ea1111b0e6e54c498633c99e95ebb9aea4eb9f2f3810feee92e86de1f70f6058
https://www.virustotal.com/en/file/ea1111b0e6e54c498633c99e95ebb9aea4eb9f2f3810feee92e86de1f70f6058/analysis/1377001013/
SHA256: ea1111b0e6e54c498633c99e95ebb9aea4eb9f2f3810feee92e86de1f70f6058
SHA1: 0d51cc0372565fb485f832439595f9117b4ddd46
MD5: 8b28c0e8d3da4893926a0796e6e946ec
File size: 13.1 KB ( 13436 bytes )
File name: index.htm
File type: HTML
Detection ratio: 7 / 45
Analysis date: 2013-08-20 12:16:53 UTC

検体送付かんりょ　さいとあどばいざはまだだお
「d68107」は初見？
https://twitter.com/jpcert_ac/status/345343485387345920
https://pbs.twimg.com/media/BMroEfxCEAID-K-.png