9枚样本

ericdj

转载自Malwaretips Virus Exchange
原帖链接：https://malwaretips.com/threads/malware-9.56608/

感谢MT论坛silversurfer分享

下载链接：
hxxp://www59.zippyshare.com/v/i29h3Zay/file.html



解压密码：infected


恶意软件分析报告:
https://www.hybrid-analysis.com/ ... 4da?environmentId=4
https://www.hybrid-analysis.com/ ... 89b?environmentId=4
https://www.hybrid-analysis.com/ ... 21e?environmentId=1
https://www.hybrid-analysis.com/ ... a45?environmentId=1
https://www.hybrid-analysis.com/ ... 5b1?environmentId=1
https://www.hybrid-analysis.com/ ... 846?environmentId=4
https://www.hybrid-analysis.com/ ... ffa?environmentId=1
https://www.hybrid-analysis.com/ ... 506?environmentId=1
https://www.hybrid-analysis.com/ ... 552?environmentId=1


在线扫描结果：
https://www.virustotal.com/en/fi ... 8a53254da/analysis/
https://www.virustotal.com/en/fi ... 5e1ccd89b/analysis/
https://www.virustotal.com/en/fi ... d9f7f421e/analysis/
https://www.virustotal.com/en/fi ... 354b12a45/analysis/
https://www.virustotal.com/en/fi ... b80c765b1/analysis/
https://www.virustotal.com/en/fi ... 0049c5846/analysis/
https://www.virustotal.com/en/fi ... 4d1d41ffa/analysis/
https://www.virustotal.com/en/fi ... 0e74db506/analysis/
https://www.virustotal.com/en/fi ... 1fcba6552/analysis/


New Malware Samples (less than 10 days old): Yes

蓝天二号

ESS 全部KILL

z2009

bg解压后余4，双击，360灭3，共余1
dddscsda联网要求外，貌似没问题

ericdj

GD
右键干掉X6


右键入沙，干掉b2.exe


剩余俩
miss

轩夏

name="C:\Users\XuanXia\Desktop\malware#9\malware#9\26.exe", threat="Win32/Filecoder.TeslaCrypt.I trojan", action="", info=""
name="C:\Users\XuanXia\Desktop\malware#9\malware#9\45.exe", threat="a variant of Win32/Kryptik.EOYJ trojan", action="", info=""
name="C:\Users\XuanXia\Desktop\malware#9\malware#9\b2.exe", threat="Win32/Injector.CSYS trojan", action="", info=""
name="C:\Users\XuanXia\Desktop\malware#9\malware#9\b2.exe » NSIS » nit.dll", threat="Win32/Injector.CSYS trojan", action="", info=""
name="C:\Users\XuanXia\Desktop\malware#9\malware#9\dddscsda.exe", threat="Win32/Dridex.AA trojan", action="", info=""
name="C:\Users\XuanXia\Desktop\malware#9\malware#9\Inquiry Document 02-22-16pdf.exe", threat="a variant of MSIL/Injector.NTZ trojan", action="", info=
""
name="C:\Users\XuanXia\Desktop\malware#9\malware#9\pony.exe", threat="a variant of Win32/Kryptik.EOZH trojan", action="", info=""
name="C:\Users\XuanXia\Desktop\malware#9\malware#9\PO_7190839-pdf.exe", threat="a variant of MSIL/Injector.OGG trojan", action="", info=""
name="C:\Users\XuanXia\Desktop\malware#9\malware#9\rem.exe", threat="a variant of Win32/Kryptik.EOZY trojan", action="", info=""
name="C:\Users\XuanXia\Desktop\malware#9\malware#9\SAMPLES pdf.exe", threat="a variant of MSIL/Injector.OGG trojan", action="", info=""

ELOHIM

SCEP杀了四个。1.213.7011.0

xcvbaby

毒霸：3  

kbsj123321

avg 扫描 4个

nestalc

卡巴实时监控删除5个，扫描删除3个，留下1个 Inquiry Document 02-22-16pdf.exe。谁敢双击？

dongwenqi

nestalc 发表于 2016-2-24 15:37
卡巴实时监控删除5个，扫描删除3个，留下1个 Inquiry Document 02-22-16pdf.exe。谁敢双击？

已上报卡巴