[Emerging-Sigs] Storm Changes

[Matt Jonkman]

Two new rules out for Storm. We have new samples that are mutating every
time they execute. Where we had one encryption/obfuscation key for the
last couple months, we now appear to have a new one for every execution.

2007915 and 2007916 are out. They should be reliable, but may change as
we begin to understand more of what this thing is doing.

Matt

-- 
--------------------------------------------
Matthew Jonkman
Emerging Threats
Phone 765-429-0398
Fax 312-264-0205
http://www.emergingthreats.net
--------------------------------------------

PGP: http://www.jonkmans.com/mattjonkman.asc