Too bad MD5 is broken. To really confuse things, the attackers could generate an innocent but colliding binary.
How does it help them? If you find file with this MD5 on your system, you have either the virus, or a colliding binary crafted by the attackers - bad in either case \o/