Detection ratio: 4 / 55 VoodooShield来一枚，热热身先，加密勒索挂马

显示全部楼层 · 发表于 2016-3-21 17:22:57

SHA256: 0b1ab3b63990884a2353adb5ab3e9b7ffdc1fcb3f69d80ec6df5de6f9bb91667
File name: AAB4.tmp.exe
Detection ratio: 4 / 55
Analysis date: 2016-03-21 09:19:03 UTC ( 3 minutes ago )
https://www.virustotal.com/en/file/0b1ab3b63990884a2353adb5ab3e9b7ffdc1fcb3f69d80ec6df5de6f9bb91667/analysis/1458551943/

Baidu Win32.Trojan.WisdomEyes.151026.9950.9996 20160318
Kaspersky UDS:DangerousObject.Multi.Generic 20160321
Qihoo-360 HEUR/QVM07.1.Malware.Gen 20160321
Tencent Win32.Trojan.Filelocker.Dwjb 20160321

显示全部楼层 · 发表于 2016-3-21 17:27:06

BD双击

显示全部楼层 · 发表于 2016-3-21 17:30:40

f-secure

显示全部楼层 · 发表于 2016-3-21 17:30:55

显示全部楼层 · 发表于 2016-3-21 17:38:49

双击，红伞杀

显示全部楼层 · 发表于 2016-3-21 17:44:37

红伞云查杀 'TR/Crypt.XPACK.Gen2 (Cloud)' [trojan]

显示全部楼层 · 发表于 2016-3-24 16:34:16

启动进程C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\AAB4.tmp.exe
C:\Documents and Settings\Administrator\My Documents\nnevyb.exe
C:\WINDOWS\system32\cmd.exe 启动参数:"C:\WINDOWS\system32\cmd.exe" /c DEL C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\AAB4TM~1.EXE >> NUL
C:\WINDOWS\system32\cmd.exe 启动参数:/c DEL C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\AAB4TM~1.EXE >> NUL

[可疑文件] Detection ratio: 4 / 55 VoodooShield来一枚，热热身先，加密勒索挂马

本帖子中包含更多资源

评分

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源

浏览过的版块