Ohh Again :)

Davo

This is a very special sample, it should be detected heuristic because it has a huge polymorpic out there, so it's important to detect all variant and not even in generic, maybe better heur.

/applications/core/interface/file/attachment.php?id=3466" data-fileid="3466" rel="">malware2.rar

/applications/core/interface/file/attachment.php?id=3465" data-fileid="3465" rel="">malware.zip