https://live.paloaltonetworks.com/t5/general-topics/antivirus-signatures/m-p/560724#M113649 <P>Anyone knows what this new threat is?</P> <P class="" data-reactid=".0.1.1:$v5jLu.1.1.0.0.0">Name: Virus/Win32.WGeneric.ecphcy</P> <P class="tabbed-header Post-71" data-reactid=".0.1.1:$v5jLu.1.1.0.0.1">Unique Threat ID: 610234284</P> <P class="" data-reactid=".0.1.1:$v5jLu.1.1.0.0.2">Create Time: 2023-10-03 18:19:57 (UTC)</P> <P class="" data-reactid=".0.1.1:$v5jLu.1.1.0.0.2">SHA256:&nbsp;<SPAN>6bebb1b86738063e72821d2ee0018ff25e60859ec5a6093ad6d548f7e839cc62</SPAN></P> <P class="" data-reactid=".0.1.1:$v5jLu.1.1.0.0.2">&nbsp;</P> <P class="tabbed-header Post-71" data-reactid=".0.1.1:$v5jLu.1.1.0.1.0">Threat ID: 3185372</P> <P class="tabbed-header Post-71" data-reactid=".0.1.1:$v5jLu.1.1.0.1.1">Current Release: 808871 (2023-10-03 UTC)</P> <P class="tabbed-header Post-71" data-reactid=".0.1.1:$v5jLu.1.1.0.1.2">First Release: 808871 (2023-10-03 UTC)</P> Thu, 05 Oct 2023 17:11:29 GMT luke_luma 2023-10-05T17:11:29Z https://live.paloaltonetworks.com/t5/general-topics/antivirus-signatures/m-p/560724#M113649 <P>Anyone knows what this new threat is?</P> <P class="" data-reactid=".0.1.1:$v5jLu.1.1.0.0.0">Name: Virus/Win32.WGeneric.ecphcy</P> <P class="tabbed-header Post-71" data-reactid=".0.1.1:$v5jLu.1.1.0.0.1">Unique Threat ID: 610234284</P> <P class="" data-reactid=".0.1.1:$v5jLu.1.1.0.0.2">Create Time: 2023-10-03 18:19:57 (UTC)</P> <P class="" data-reactid=".0.1.1:$v5jLu.1.1.0.0.2">SHA256:&nbsp;<SPAN>6bebb1b86738063e72821d2ee0018ff25e60859ec5a6093ad6d548f7e839cc62</SPAN></P> <P class="" data-reactid=".0.1.1:$v5jLu.1.1.0.0.2">&nbsp;</P> <P class="tabbed-header Post-71" data-reactid=".0.1.1:$v5jLu.1.1.0.1.0">Threat ID: 3185372</P> <P class="tabbed-header Post-71" data-reactid=".0.1.1:$v5jLu.1.1.0.1.1">Current Release: 808871 (2023-10-03 UTC)</P> <P class="tabbed-header Post-71" data-reactid=".0.1.1:$v5jLu.1.1.0.1.2">First Release: 808871 (2023-10-03 UTC)</P> Thu, 05 Oct 2023 17:11:29 GMT https://live.paloaltonetworks.com/t5/general-topics/antivirus-signatures/m-p/560724#M113649 luke_luma 2023-10-05T17:11:29Z https://live.paloaltonetworks.com/t5/general-topics/antivirus-signatures/m-p/560728#M113650 <P>Hello,</P> <P>Tough to say with the 'generic' signatures. Could be a false positive. Only way to know is to grab the pcap and open a case.</P> <P>Regards,</P> <P>&nbsp;</P> Thu, 05 Oct 2023 18:22:49 GMT https://live.paloaltonetworks.com/t5/general-topics/antivirus-signatures/m-p/560728#M113650 OtakarKlier 2023-10-05T18:22:49Z