The Service You Can’t Refuse: A Secluded HijackRAT

显示全部楼层 · 发表于 2014-7-3 01:52:16

http://www.fireeye.com/blog/tech ... uded-hijackrat.html

显示全部楼层 · 发表于 2014-7-3 05:14:52

Dr.Web

Object(s) to scan:
- C:\Users\PRODUCTION I.G\Desktop\sktdy.7z

>C:\Users\PRODUCTION I.G\Desktop\sktdy.7z is 7-ZIP archive
>>C:\Users\PRODUCTION I.G\Desktop\sktdy.7z\sktdy.apk is ZIP archive
C:\Users\PRODUCTION I.G\Desktop\sktdy.7z\sktdy.apk\res\layout\lvyy.xml - Ok
C:\Users\PRODUCTION I.G\Desktop\sktdy.7z\sktdy.apk\res\xml\an.xml - Ok
C:\Users\PRODUCTION I.G\Desktop\sktdy.7z\sktdy.apk\AndroidManifest.xml - Ok
C:\Users\PRODUCTION I.G\Desktop\sktdy.7z\sktdy.apk\resources.arsc - Ok
C:\Users\PRODUCTION I.G\Desktop\sktdy.7z\sktdy.apk\res\drawable-hdpi\abgn.png - Ok
C:\Users\PRODUCTION I.G\Desktop\sktdy.7z\sktdy.apk\res\drawable-hdpi\bg0.jpg - Ok
C:\Users\PRODUCTION I.G\Desktop\sktdy.7z\sktdy.apk\res\drawable-hdpi\bga.png - Ok
C:\Users\PRODUCTION I.G\Desktop\sktdy.7z\sktdy.apk\res\drawable-hdpi\bgb.png - Ok
C:\Users\PRODUCTION I.G\Desktop\sktdy.7z\sktdy.apk\res\drawable-hdpi\bgnh.jpg - Ok
C:\Users\PRODUCTION I.G\Desktop\sktdy.7z\sktdy.apk\res\drawable-hdpi\bgp.jpg - Ok
C:\Users\PRODUCTION I.G\Desktop\sktdy.7z\sktdy.apk\res\drawable-hdpi\bgs.png - Ok
C:\Users\PRODUCTION I.G\Desktop\sktdy.7z\sktdy.apk\res\drawable-hdpi\bgsh.png - Ok
C:\Users\PRODUCTION I.G\Desktop\sktdy.7z\sktdy.apk\res\drawable-hdpi\bgsp.jpg - Ok
C:\Users\PRODUCTION I.G\Desktop\sktdy.7z\sktdy.apk\res\drawable-hdpi\bgwo.jpg - Ok
C:\Users\PRODUCTION I.G\Desktop\sktdy.7z\sktdy.apk\res\drawable-hdpi\bss.png - Ok
C:\Users\PRODUCTION I.G\Desktop\sktdy.7z\sktdy.apk\res\drawable-hdpi\epp.png - Ok
C:\Users\PRODUCTION I.G\Desktop\sktdy.7z\sktdy.apk\res\drawable-hdpi\haa.png - Ok
C:\Users\PRODUCTION I.G\Desktop\sktdy.7z\sktdy.apk\res\drawable-hdpi\ic.png - Ok
C:\Users\PRODUCTION I.G\Desktop\sktdy.7z\sktdy.apk\res\drawable-hdpi\icp.png - Ok
C:\Users\PRODUCTION I.G\Desktop\sktdy.7z\sktdy.apk\res\drawable-hdpi\k.png - Ok
C:\Users\PRODUCTION I.G\Desktop\sktdy.7z\sktdy.apk\res\drawable-hdpi\n.png - Ok
C:\Users\PRODUCTION I.G\Desktop\sktdy.7z\sktdy.apk\res\drawable-hdpi\p.png - Ok
C:\Users\PRODUCTION I.G\Desktop\sktdy.7z\sktdy.apk\res\drawable-hdpi\s.png - Ok
C:\Users\PRODUCTION I.G\Desktop\sktdy.7z\sktdy.apk\res\drawable-hdpi\vr.png - Ok
C:\Users\PRODUCTION I.G\Desktop\sktdy.7z\sktdy.apk\res\drawable-hdpi\w.png - Ok
C:\Users\PRODUCTION I.G\Desktop\sktdy.7z\sktdy.apk\classes.dex - infected with Android.SmsSpy.82.origin
C:\Users\PRODUCTION I.G\Desktop\sktdy.7z\sktdy.apk\classes.dex - infected
C:\Users\PRODUCTION I.G\Desktop\sktdy.7z\sktdy.apk\META-INF\MANIFEST.MF - Ok
C:\Users\PRODUCTION I.G\Desktop\sktdy.7z\sktdy.apk\META-INF\CERT.SF - Ok
C:\Users\PRODUCTION I.G\Desktop\sktdy.7z\sktdy.apk\META-INF\CERT.RSA - Ok
C:\Users\PRODUCTION I.G\Desktop\sktdy.7z\sktdy.apk - infected archive
C:\Users\PRODUCTION I.G\Desktop\sktdy.7z - infected archive, , incurable
C:\Users\PRODUCTION I.G\Desktop\sktdy.7z - infected archive, , incurable

显示全部楼层 · 发表于 2014-7-3 07:57:07

bav云杀
安全管家杀

显示全部楼层 · 发表于 2014-7-3 08:09:55

Bitdefender blocked this page
The page you are trying to access contains Android.Trojan.Banker.H.

显示全部楼层 · 发表于 2014-7-3 08:34:56

显示全部楼层 · 发表于 2014-7-3 09:07:34

ESET：Kill

显示全部楼层 · 发表于 2014-7-3 09:27:33

咖啡的月神就是牛逼，这也可以启发

显示全部楼层 · 发表于 2014-7-3 11:56:08

Bitdefender blocked this page
The page you are trying to access contains Android.Trojan.Banker.H.

显示全部楼层 · 发表于 2014-7-3 13:00:27

猎豹

显示全部楼层 · 发表于 2014-7-3 17:13:57

[病毒样本] The Service You Can’t Refuse: A Secluded HijackRAT

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源