File name: 6F22.tmp.exe Detection ratio: 3 / 54 Nuclear Exploit Kit Redirect 4

墨家小子

SHA256:        514520329c67129efafaceec1dbc1a2231fb246fb7efb8e9a724d4c9f4bcb3b6
File name:        6F22.tmp.exe
Detection ratio:        3 / 54
Analysis date:        2016-02-23 01:29:20 UTC ( 4 minutes ago )
https://www.virustotal.com/en/file/514520329c67129efafaceec1dbc1a2231fb246fb7efb8e9a724d4c9f4bcb3b6/analysis/

McAfee        Ransom-Teerac!7AF50DA774CE        20160223
Qihoo-360        HEUR/QVM07.1.Malware.Gen        20160223
Rising        PE:Trojan.Ransom-Tesla!1.A322 [F]        20160222

IPS捕获：2016/2/23 9:31:13,高,阻止了 localhost 的入侵企图,已阻止,不需要操作,Web Attack: Nuclear Exploit Kit Redirect  4,不需要操作,不需要操作,"localhost (127.0.0.1, 4XXX8)",rXXXets.com/features/sXXXode-generator/,"localhost (127.0.0.1, 8915)",localhost (127.0.0.1),"TCP, 端口 4XXX8",

胖福

ymb668888

卡巴miss，双击后主防拦截

23.02.2016 10.02.15;恶意程序已删除;PDM:Trojan.Win32.Generic;C:\Users\Administrator\Downloads\6F22.tmp.exe;c:\users\administrator\downloads\6f22.tmp.exe;02/23/2016 10:02:15
23.02.2016 10.02.15;恶意程序已删除;PDM:Trojan.Win32.Generic;C:\Users\Administrator\Downloads\6F22.tmp.exe;c:\users\administrator\downloads\6f22.tmp.exe;02/23/2016 10:02:15
23.02.2016 10.02.15;恶意程序已删除;PDM:Trojan.Win32.Generic;C:\Users\Administrator\Downloads\6F22.tmp.exe;c:\sandbox\administrator\defaultbox\drive\c\windows\gpxkotivvraf.exe;02/23/2016 10:02:15
23.02.2016 10.02.15;恶意程序已删除;PDM:Trojan.Win32.Generic;C:\Users\Administrator\Downloads\6F22.tmp.exe;c:\sandbox\administrator\defaultbox\drive\c\windows\gpxkotivvraf.exe;02/23/2016 10:02:15
23.02.2016 10.02.01;恶意程序已终止;PDM:Trojan.Win32.Generic;Refocus Retched Toileting;C:\Sandbox\Administrator\DefaultBox\drive\C\Windows\gpxkotivvraf.exe;02/23/2016 10:02:01
23.02.2016 10.02.01;检测到恶意程序;PDM:Trojan.Win32.Generic;Refocus Retched Toileting;c:\sandbox\administrator\defaultbox\drive\c\windows\gpxkotivvraf.exe;02/23/2016 10:02:01
23.02.2016 10.02.01;检测到恶意程序;PDM:Trojan.Win32.Generic;Refocus Retched Toileting;c:\users\administrator\downloads\6f22.tmp.exe;02/23/2016 10:02:01
23.02.2016 10.02.01;检测到恶意程序;PDM:Trojan.Win32.Generic;Refocus Retched Toileting;c:\users\administrator\downloads\6f22.tmp.exe;02/23/2016 10:02:01
23.02.2016 10.02.01;检测到恶意程序;PDM:Trojan.Win32.Generic;Refocus Retched Toileting;c:\sandbox\administrator\defaultbox\drive\c\windows\gpxkotivvraf.exe;

windows7爱好者

DPH击杀

从此之后我在把蜘蛛换了，样本区所有人千刀万剐，在此立誓

ymb668888

@windows7爱好者 你这立誓

MrDeep

windows7爱好者 发表于 2016-2-23 10:17
DPH击杀

从此之后我在把蜘蛛换了，样本区所有人千刀万剐，在此立誓

万一   万一出问题了呢？

windows7爱好者

MrDeep 发表于 2016-2-23 10:42
万一   万一出问题了呢？

不可能

MrDeep

windows7爱好者 发表于 2016-2-23 10:43
不可能

我当年下片也是这么说的 结果

z2009

过bg网页防护，360下载保护杀

五月大地

狮子的版本有点旧了，不过也算是及时。