New service - the Team Cymru Malware Hash Registry!

[Steve Freegard]

Alex Broens wrote:
> On 10/28/2008 6:08 PM, Steve Freegard wrote:
>> Alex Broens wrote:
>>> On 10/28/2008 5:18 PM, --[ UxBoD ]-- wrote:
>>>> Just to good Steve ;)
>>>
>>> latest trojan downloader detected via homebrew sigs is in 
>>> "Instruction.zip"
>>>
>>> is cymru seeing it already
>>
>> Dunno - why don't you test it for yourself:
>>
>> smf at laptop-smf:~$ host 
>> 69630e4574ec6798239b091cda43dca0.malware.hash.cymru.com
>> 69630e4574ec6798239b091cda43dca0.malware.hash.cymru.com has address 
>> 127.0.0.2
> 
> I don't have the sample file anymore.. :-)
> (was too fast doing cleanup)
> 
> the hashes differ..

That's the hash of Eicar - that's why...