Ransom.Shade (17.06.07)

显示全部楼层 · 发表于 2017-6-7 10:46:39

[mw_shl_code=css,true] http://eng.pastricanac.com/data/0606.exe [/mw_shl_code]

[mw_shl_code=css,true]https://www.upload.ee/files/7092457/1.7z.html[/mw_shl_code]

infected

https://www.virustotal.com/en/fi ... nalysis/1496795145/

显示全部楼层 · 发表于 2017-6-7 10:51:48

Kaspersky
07.06.2017 10.51.16;Detected object (file) deleted;C:\Users\Ivan\Downloads\0606.exe;C:\Users\Ivan\Downloads\0606.exe;UDS:DangerousObject.Multi.Generic;Unknown object;06/07/2017 10:51:16

显示全部楼层 · 发表于 2017-6-7 10:52:29

微点拦截

显示全部楼层 · 发表于 2017-6-7 11:03:31

FS
Trojan-dropper:W32/Gen1649.24e779f4ab!Online
C:\Users\常用.user-PC.000\Desktop\1\0606.exe: 已清除

显示全部楼层 · 发表于 2017-6-7 11:13:26

趋势扫描杀
Ransom_HPCERBER.SMONT5

显示全部楼层 · 发表于 2017-6-7 11:16:54

CCAV

显示全部楼层 · 发表于 2017-6-7 11:39:30

本帖最后由 Dolby123 于 2017-6-7 11:41 编辑

url block

different hash
http://bbs.kafan.cn/thread-2091519-1-1.html

显示全部楼层 · 发表于 2017-6-7 11:51:16

the same as this one?

https://malwaretips.com/threads/shade-ransomware.72291/

显示全部楼层 · 发表于 2017-6-7 12:02:20

欧阳宣发表于 2017-6-7 11:51
the same as this one?

https://malwaretips.com/threads/shade-ransomware.72291/

no
md5 hash
21e5525dfb6a5a4fba5b217377559c9d | 1456986456991ef32fc6694d6d60c17e
see VT links

显示全部楼层 · 发表于 2017-6-7 12:14:55

管家扫描miss

[病毒样本] Ransom.Shade (17.06.07)

本帖子中包含更多资源

本帖子中包含更多资源