143c59cf481a921b99061557684194041d8462cd31f75ff806b9f1b22940a35d

显示全部楼层 · 发表于 2017-5-1 19:36:29

http://www.vxsecurity.sg/2017/04 ... 3-xml-document-xml/

文章里有样本链接

显示全部楼层 · 发表于 2017-5-1 19:39:47

解压密码？？？

显示全部楼层 · 发表于 2017-5-1 21:19:42

趋势

Threat: TROJ_FRS.0NA003DS17
Source: Threat
Affected Files: \143c59cf481a921b99061557684194041d8462cd31f75ff806b9f1b22940a35d\2016TaxReport.doc
Response: Removed
Detected By: Real Time Scan

显示全部楼层 · 发表于 2017-5-1 21:20:32

缺缺发表于 2017-5-1 19:39
解压密码？？？

Do note, this is a MALICIOUS file, so please do the analysis in a “safe” environment. The password to the attachment is “infected29A”

显示全部楼层 · 发表于 2017-5-1 21:58:34

\143c59cf481a921b99061557684194041d8462cd31f75ff806b9f1b22940a35d

Trojan.GenericKD.4951077 (B)

显示全部楼层 · 发表于 2017-5-3 09:24:12

ESET miss

[其他相关] 143c59cf481a921b99061557684194041d8462cd31f75ff806b9f1b22940a35d