样本集奉上_8

显示全部楼层 · 发表于 2018-6-24 16:32:39

50个样本，已检查过没有重复文件。。。快来快来，扫描？双击？一概欢迎！

蓝奏云盘，下载挺快。。。https://www.lanzous.com/i1a8gte 密码：infected

显示全部楼层 · 发表于 2018-6-24 16:35:50

本帖最后由 191196846 于 2018-6-25 09:10 编辑

Comodo Valkyrie Analysis System 19:05
27/30
==============================
HitmanPro
26/50

HitmanPro 3.8.0.292
www.hitmanpro.com
Computer name . . . . : DESKTOP-VPBE70N
Windows . . . . . . . : 10.0.0.17134.X64/4
User name . . . . . . : DESKTOP-VPBE70N\zhong
UAC . . . . . . . . . : Enabled
License . . . . . . . : Paid (255 days left)
Scan date . . . . . . : 2018-06-24 16:40:20
Scan mode . . . . . . : Context
Scan duration . . . . : 33s
Disk access mode . . : Direct disk access (FsdHigh)
Cloud . . . . . . . . : Internet
Reboot . . . . . . . : No
Threats . . . . . . . : 26
Objects scanned . . . : 50
Files scanned . . . . : 50
Remnants scanned . . : 0 files / 0 keys
Malware _____________________________________________________________________
C:\Users\zhong\Downloads\Compressed\VIRUS TEST\卡饭\VirusSamples_8\Samp_(11).file.exe
Size . . . . . . . : 95,234 bytes
Age . . . . . . . : 0.0 days (2018-06-24 16:36:37)
Entropy . . . . . : 6.4
SHA-256 . . . . . : B20F2039FEE591F5D654032DA9A4B493C79CD2E91C2B60BA6B79D33D8A651BDA
> Bitdefender . . . : Gen:Variant.Zlob.1
> Kaspersky . . . . : HEUR:Trojan.Win32.Generic
> HitmanPro . . . . : Mal/EncPk-ACO
C:\Users\zhong\Downloads\Compressed\VIRUS TEST\卡饭\VirusSamples_8\Samp_(12).file.exe
Size . . . . . . . : 96,258 bytes
Age . . . . . . . : 0.0 days (2018-06-24 16:36:37)
Entropy . . . . . : 6.4
SHA-256 . . . . . : 5E6F17BA41B22A1A89A6DCCEC7CB34BDE99B900D5C8B628D6B66BDED4CB2EF8C
> Bitdefender . . . : Gen:Variant.Zlob.1
> Kaspersky . . . . : Trojan-PSW.Win32.Fareit.df
> HitmanPro . . . . : Mal/Fareit-A
C:\Users\zhong\Downloads\Compressed\VIRUS TEST\卡饭\VirusSamples_8\Samp_(13).file.dll
Size . . . . . . . : 259,586 bytes
Age . . . . . . . : 0.0 days (2018-06-24 16:36:37)
Entropy . . . . . : 6.5
SHA-256 . . . . . : 896A8FADEC110DF4E63BAAFA6C6AB1C6514C7A18AFBE1BE9E2A87FB8948EB2B3
> Bitdefender . . . : Gen:Variant.Razy.319285
> Kaspersky . . . . : HEUR:Trojan.Win32.Duqu2.gen
C:\Users\zhong\Downloads\Compressed\VIRUS TEST\卡饭\VirusSamples_8\Samp_(17).file.exe
Size . . . . . . . : 507,906 bytes
Age . . . . . . . : 0.0 days (2018-06-24 16:36:37)
Entropy . . . . . : 7.9
SHA-256 . . . . . : 795A6A1B434884906504ABED4EA3201326971D2E189D07A617ED150EF0BCC354
Product . . . . . : vsdvdsfv
Publisher
Description . . . : dsgrfd Application
Version . . . . . : 1.0.0.1
LanguageID . . . . : 3079
> Bitdefender . . . : Gen:Variant.Symmi.29542
> Kaspersky . . . . : HEUR:Trojan.Win32.Generic
C:\Users\zhong\Downloads\Compressed\VIRUS TEST\卡饭\VirusSamples_8\Samp_(24).file.dll
Size . . . . . . . : 41,986 bytes
Age . . . . . . . : 0.0 days (2018-06-24 16:36:37)
Entropy . . . . . : 6.1
SHA-256 . . . . . : 719B209286E9D694D28380C8829041FDD462EE7CB29AED8D4460E6B5750B624D
> Bitdefender . . . : Trojan.Generic.9337560
> Kaspersky . . . . : Backdoor.Win32.Gulpix.lh
C:\Users\zhong\Downloads\Compressed\VIRUS TEST\卡饭\VirusSamples_8\Samp_(28).file.exe
Size . . . . . . . : 32,258 bytes
Age . . . . . . . : 0.0 days (2018-06-24 16:36:37)
Entropy . . . . . : 7.6
SHA-256 . . . . . : B8A8DEDCAED2BE38F3CAAB0900D3E122C7782B3FC30ECDB706BD096F22FC92BE
> Bitdefender . . . : Trojan.Peed.Gen
> Kaspersky . . . . : HEUR:Trojan.Win32.Generic
> HitmanPro . . . . : Troj/Agent-QXW
C:\Users\zhong\Downloads\Compressed\VIRUS TEST\卡饭\VirusSamples_8\Samp_(3).file.dll
Size . . . . . . . : 14,338 bytes
Age . . . . . . . : 0.0 days (2018-06-24 16:36:37)
Entropy . . . . . : 5.7
SHA-256 . . . . . : C7A049F4E1861D48685C127DBC45988341B0384DB149E58C6BFE0F36255622DE
Product . . . . . : Process Explorer
Publisher . . . . : Sysinternals - [url]www.sysinternals.com[/url]
Description . . . : Sysinternals Process Explorer
Version . . . . . : 16.0
Copyright . . . . : Copyright © 1998-2014 Mark Russinovich
LanguageID . . . . : 1033
> Bitdefender . . . : Trojan.Duqu.F
> Kaspersky . . . . : HEUR:Trojan.Win32.Duqu2.gen
> HitmanPro . . . . : Troj/Duqu-I
C:\Users\zhong\Downloads\Compressed\VIRUS TEST\卡饭\VirusSamples_8\Samp_(30).file.exe
Size . . . . . . . : 24,578 bytes
Age . . . . . . . : 0.0 days (2018-06-24 16:36:37)
Entropy . . . . . : 7.7
SHA-256 . . . . . : DF4E683C52B94A7C73C3BF5812E3CD8FAD539770B6FBEBF3ABAF371EBFEA31B9
> Bitdefender . . . : Trojan.Ransom.ABZ
> Kaspersky . . . . : Trojan-Ransom.Win32.Swed.a
> HitmanPro . . . . : Troj/Ransom-AAN
C:\Users\zhong\Downloads\Compressed\VIRUS TEST\卡饭\VirusSamples_8\Samp_(35).file.exe
Size . . . . . . . : 40,962 bytes
Age . . . . . . . : 0.0 days (2018-06-24 16:36:37)
Entropy . . . . . : 6.0
SHA-256 . . . . . : 1D4A161F4FE8B8D7D5E84B4286F7ED5E7842479204F388267B684BA6FBA5C4F9
> Bitdefender . . . : Gen:Trojan.Heur.RP.cqXaaKbEFkhb
C:\Users\zhong\Downloads\Compressed\VIRUS TEST\卡饭\VirusSamples_8\Samp_(36).file.exe
Size . . . . . . . : 230,914 bytes
Age . . . . . . . : 0.0 days (2018-06-24 16:36:37)
Entropy . . . . . : 7.2
SHA-256 . . . . . : F5008CF4BE453A5160B07F56D1CAB16D246CC8FACB60828B05D9D530DA9AE7BA
> Bitdefender . . . : Dropped:Trojan.Generic.9337560
> HitmanPro . . . . : Mal/Generic-S
C:\Users\zhong\Downloads\Compressed\VIRUS TEST\卡饭\VirusSamples_8\Samp_(37).file.exe
Size . . . . . . . : 69,634 bytes
Age . . . . . . . : 0.0 days (2018-06-24 16:36:37)
Entropy . . . . . : 5.1
SHA-256 . . . . . : 9893BD99335BEDB079FE2B7D37809902D5449BC8F3EEEC2A9680E5FE679DA21D
> Bitdefender . . . : Trojan.Ransom.ABZ
> Kaspersky . . . . : Trojan-Ransom.Win32.Swed.a
C:\Users\zhong\Downloads\Compressed\VIRUS TEST\卡饭\VirusSamples_8\Samp_(38).file.dll
Size . . . . . . . : 86,018 bytes
Age . . . . . . . : 0.0 days (2018-06-24 16:36:37)
Entropy . . . . . : 7.9
SHA-256 . . . . . : 6E02CDF6674A6C4001C666300F1FD9FC0CFD0BFC9A6DC2B51B36890E8A743405
> Bitdefender . . . : Trojan.GenericKDV.1079446
> HitmanPro . . . . : Mal/Basine-A
C:\Users\zhong\Downloads\Compressed\VIRUS TEST\卡饭\VirusSamples_8\Samp_(39).file.dll
Size . . . . . . . : 96,770 bytes
Age . . . . . . . : 0.0 days (2018-06-24 16:36:37)
Entropy . . . . . : 7.8
SHA-256 . . . . . : D0C146850B6C73F2E3ED741D308CFC83120543FADFBCFBB544CA364FB8453173
> Bitdefender . . . : Trojan.Generic.9121237
C:\Users\zhong\Downloads\Compressed\VIRUS TEST\卡饭\VirusSamples_8\Samp_(4).file.dll
Size . . . . . . . : 14,850 bytes
Age . . . . . . . : 0.0 days (2018-06-24 16:36:37)
Entropy . . . . . : 5.7
SHA-256 . . . . . : 060B04A83265617369F628011E6F33F6EA5DCA3D8B021975C045D09BD75ABAAC
Product . . . . . : Microsoft® Windows® Operating System
Publisher . . . . : Microsoft Corporation
Description . . . : MSI Custom Action v3
Version . . . . . : 6.1.7601.17514
Copyright . . . . : © Microsoft Corporation. All rights reserved.
LanguageID . . . . : 1033
> Bitdefender . . . : Trojan.Duqu.E
C:\Users\zhong\Downloads\Compressed\VIRUS TEST\卡饭\VirusSamples_8\Samp_(40).file.dll
Size . . . . . . . : 158,722 bytes
Age . . . . . . . : 0.0 days (2018-06-24 16:36:37)
Entropy . . . . . : 6.5
SHA-256 . . . . . : CD7C541C94DC9E922AD60E45AB3040724BB4ABA73250247BEDAAFD4BA7402CFC
> Bitdefender . . . : Trojan.GenericKD.2941224
> Kaspersky . . . . : Trojan-Banker.Win32.Banbra.bkeb
C:\Users\zhong\Downloads\Compressed\VIRUS TEST\卡饭\VirusSamples_8\Samp_(41).file.dll
Size . . . . . . . : 174,594 bytes
Age . . . . . . . : 0.0 days (2018-06-24 16:36:37)
Entropy . . . . . : 6.5
SHA-256 . . . . . : 0E7BE8B83E48D0B5001EC345CA6E41E6D459654E1701F0C3CDBE7F63ACD082EE
> Bitdefender . . . : Gen:Variant.Graftor.17718
> HitmanPro . . . . : Mal/Generic-L
C:\Users\zhong\Downloads\Compressed\VIRUS TEST\卡饭\VirusSamples_8\Samp_(44).file.exe
Size . . . . . . . : 4,610 bytes
Age . . . . . . . : 0.0 days (2018-06-24 16:36:37)
Entropy . . . . . : 3.9
SHA-256 . . . . . : 9AA956C55F25C724B85F1A530BEFDF4554CF4846EE28F2B79590F5A14D6BC248
Product . . . . . : nohost.exe
Publisher . . . . : Microsoft
Description . . . : nohost.exe
Version . . . . . : 1.0.0.0
LanguageID . . . . : 0
> Kaspersky . . . . : Net-Worm.Win32.Eterok.e
C:\Users\zhong\Downloads\Compressed\VIRUS TEST\卡饭\VirusSamples_8\Samp_(45).file.dll
Size . . . . . . . : 11,830 bytes
Age . . . . . . . : 0.0 days (2018-06-24 16:36:37)
Entropy . . . . . : 5.7
SHA-256 . . . . . : 31F22679B714C006681E6FE26971749D5E7B5D0368E5309203614C25966A7286
Product . . . . . : Microsoft® Windows® Operating System
Publisher . . . . : Microsoft Corporation
Description . . . : MSI Custom Action v3
Version . . . . . : 6.1.7601.17514
Copyright . . . . : © Microsoft Corporation. All rights reserved.
LanguageID . . . . : 1033
> Bitdefender . . . : Trojan.Duqu.E
C:\Users\zhong\Downloads\Compressed\VIRUS TEST\卡饭\VirusSamples_8\Samp_(46).file.exe
Size . . . . . . . : 261,122 bytes
Age . . . . . . . : 0.0 days (2018-06-24 16:36:37)
Entropy . . . . . : 7.1
SHA-256 . . . . . : C3F469FFEFEBD41F383207C74E047498F418B074096F7E14DF990C16D0A9189A
Needs elevation . : Yes
Product . . . . . : Microsoft Windows Auto Update
LanguageID . . . . : 0
> Kaspersky . . . . : HEUR:Trojan-Ransom.Win32.Generic
C:\Users\zhong\Downloads\Compressed\VIRUS TEST\卡饭\VirusSamples_8\Samp_(47).file.exe
Size . . . . . . . : 401,410 bytes
Age . . . . . . . : 0.0 days (2018-06-24 16:36:37)
Entropy . . . . . : 5.5
SHA-256 . . . . . : 8211E81D492FF333B3E0B162EDCCA7B93CC780D76BCCD74781CCA11965EA6C33
> Bitdefender . . . : Backdoor.Ircbot.XF
> Kaspersky . . . . : Backdoor.Win32.IRCBot.xf
C:\Users\zhong\Downloads\Compressed\VIRUS TEST\卡饭\VirusSamples_8\Samp_(48).file.dll
Size . . . . . . . : 68,450 bytes
Age . . . . . . . : 0.0 days (2018-06-24 16:36:37)
Entropy . . . . . : 6.4
SHA-256 . . . . . : 81C82FC22EF8F0F246F656CF90DB4A7FD6CCF2E0B6612097D0BB48283E8EAD98
> Bitdefender . . . : Gen:Variant.Zusy.111440
> HitmanPro . . . . : Mal/Emogen-Y
C:\Users\zhong\Downloads\Compressed\VIRUS TEST\卡饭\VirusSamples_8\Samp_(49).file.dll
Size . . . . . . . : 76,642 bytes
Age . . . . . . . : 0.0 days (2018-06-24 16:36:37)
Entropy . . . . . : 6.4
SHA-256 . . . . . : 5D80A607950EF3336328836FF23289053C26E0046877A66C864644B24B704C1F
> Kaspersky . . . . : HEUR:Trojan.Win32.Generic
> HitmanPro . . . . : Mal/Emogen-Y
C:\Users\zhong\Downloads\Compressed\VIRUS TEST\卡饭\VirusSamples_8\Samp_(50).file.exe
Size . . . . . . . : 643,074 bytes
Age . . . . . . . : 0.0 days (2018-06-24 16:36:37)
Entropy . . . . . : 6.4
SHA-256 . . . . . : 3BE92AA8DF835A2B45F1DF125B2396ECC1E1A195DA6C2F867CD74B59E45F24CA
Product . . . . . : TODO: <???>
Publisher . . . . : TODO: <???>
Description . . . : TODO: <????>
Version . . . . . : 1.0.0.1
LanguageID . . . . : 2052
> Bitdefender . . . : Trojan.Generic.12825098
C:\Users\zhong\Downloads\Compressed\VIRUS TEST\卡饭\VirusSamples_8\Samp_(6).file.exe
Size . . . . . . . : 30,722 bytes
Age . . . . . . . : 0.0 days (2018-06-24 16:36:37)
Entropy . . . . . : 7.6
SHA-256 . . . . . : A680AA7BE7A39651380549547F5BEADC3226E5D3AF48ADB2EE6DC44085583955
Product . . . . . : Equal Tiny Finale Area Seduce
Publisher . . . . : Lighttek Software
Description . . . : Tree Draft Came Gummy Awe
Version . . . . . : 1.7
Copyright . . . . : Cairo Dibs Fast Credo 1999-2010
LanguageID . . . . : 1033
> Bitdefender . . . : Trojan.AgentWDCR.IDJ
> HitmanPro . . . . : Mal/Zbot-EZ
C:\Users\zhong\Downloads\Compressed\VIRUS TEST\卡饭\VirusSamples_8\Samp_(7).file.exe
Size . . . . . . . : 50,754 bytes
Age . . . . . . . : 0.0 days (2018-06-24 16:36:37)
Entropy . . . . . : 6.6
SHA-256 . . . . . : 7E33C69C8E7E88EF4FFD46232300CE6E49C3CCA8EDCA119B74A107B7E916F31F
> Kaspersky . . . . : not-a-virus:Downloader.NSIS.AdLoad.i
C:\Users\zhong\Downloads\Compressed\VIRUS TEST\卡饭\VirusSamples_8\Samp_(9).file.exe
Size . . . . . . . : 70,658 bytes
Age . . . . . . . : 0.0 days (2018-06-24 16:36:37)
Entropy . . . . . : 5.8
SHA-256 . . . . . : B59D8D0EA28554792679C5D454B6A25B266EC777997DB3E2DBB3D94D45F8E71A
Product . . . . . : RemoveDrive
Publisher . . . . : Uwe Sieber - [url]www.uwe-sieber.de[/url]
Description . . . : RemoveDrive (Win32) - Prepares drives for safe removal
Version . . . . . : 1.9.4.1
LanguageID . . . . : 0
> Bitdefender . . . : Gen:Variant.Kazy.41694
> Kaspersky . . . . : HEUR:Trojan.Win32.Generic
> HitmanPro . . . . : Mal/EncPk-ZC

复制代码

==============================
Rising ML Engine
15/50

-= | RISING ANTI-MALWARE SCANNER FOR WINDOWS | =-
* Compile time: May 8 2018 , 10:36:30
* Options in command-line:-output-json -cloud=1 -enable-asg=1 -enable-tfe=1 -log=C:\Users\zhong\Downloads\Compressed\rame-windows-x64-ai-ml-20180615-toy\ScanLog_180624164226.log
* Detection target : (1) C:\Users\zhong\Downloads\Compressed\VIRUS TEST\卡饭\VirusSamples_8
* Using malware-signature database: C:\Users\zhong\Downloads\Compressed\rame-windows-x64-ai-ml-20180615-toy/malware.rmd
* Version of malwre-signature database : 0
* Cloud-assisted component initializes failed.
* Initializeing engine instance ...
* Initializeing engine instance ...
* Initializeing engine instance ...
* Initializeing engine instance ...
* Initializeing engine instance ...
* Initializeing engine instance ...
* Initializeing engine instance ...
* Initializeing engine instance ...
Scan started on Sun Jun 24 16:42:26 2018
{"filename":"C:\\Users\\zhong\\Downloads\\Compressed\\VIRUS TEST\\卡饭\\VirusSamples_8\\Samp_(15).file.Linux_ELF","show":"MTU","type":"scan"}
{"filename":"C:\\Users\\zhong\\Downloads\\Compressed\\VIRUS TEST\\卡饭\\VirusSamples_8\\Samp_(16).file","show":"MTU","type":"scan"}
{"filename":"C:\\Users\\zhong\\Downloads\\Compressed\\VIRUS TEST\\卡饭\\VirusSamples_8\\Samp_(10).file","show":"MTU","type":"scan"}
{"filename":"C:\\Users\\zhong\\Downloads\\Compressed\\VIRUS TEST\\卡饭\\VirusSamples_8\\Samp_(17).file.exe","infect":{"engine":"rdm-lite","threat":"Malware.Heuristic.MLite(95%)"},"show":"MTU","type":"scan"}
{"filename":"C:\\Users\\zhong\\Downloads\\Compressed\\VIRUS TEST\\卡饭\\VirusSamples_8\\Samp_(14).file.Linux_ELF","show":"MTU","type":"scan"}
{"filename":"C:\\Users\\zhong\\Downloads\\Compressed\\VIRUS TEST\\卡饭\\VirusSamples_8\\Samp_(18).file.DOC","show":"MTU","type":"scan"}
{"filename":"C:\\Users\\zhong\\Downloads\\Compressed\\VIRUS TEST\\卡饭\\VirusSamples_8\\Samp_(2).file","show":"MTU","type":"scan"}
{"filename":"C:\\Users\\zhong\\Downloads\\Compressed\\VIRUS TEST\\卡饭\\VirusSamples_8\\Samp_(1).file","show":"MTU","type":"scan"}
{"filename":"C:\\Users\\zhong\\Downloads\\Compressed\\VIRUS TEST\\卡饭\\VirusSamples_8\\Samp_(12).file.exe","infect":{"engine":"rdm-lite","threat":"Malware.Heuristic.MLite(100%)"},"show":"MTU","type":"scan"}
{"filename":"C:\\Users\\zhong\\Downloads\\Compressed\\VIRUS TEST\\卡饭\\VirusSamples_8\\Samp_(13).file.dll","show":"MTU","type":"scan"}
{"filename":"C:\\Users\\zhong\\Downloads\\Compressed\\VIRUS TEST\\卡饭\\VirusSamples_8\\Samp_(11).file.exe","show":"MTU","type":"scan"}
{"filename":"C:\\Users\\zhong\\Downloads\\Compressed\\VIRUS TEST\\卡饭\\VirusSamples_8\\Samp_(20).file.rtf","show":"MTU","type":"scan"}
{"filename":"C:\\Users\\zhong\\Downloads\\Compressed\\VIRUS TEST\\卡饭\\VirusSamples_8\\Samp_(23).file.CLASS","show":"MTU","type":"scan"}
{"filename":"C:\\Users\\zhong\\Downloads\\Compressed\\VIRUS TEST\\卡饭\\VirusSamples_8\\Samp_(27).file","show":"MTU","type":"scan"}
{"filename":"C:\\Users\\zhong\\Downloads\\Compressed\\VIRUS TEST\\卡饭\\VirusSamples_8\\Samp_(24).file.dll","infect":{"engine":"rdm-lite","threat":"Malware.Heuristic.MLite(100%)"},"show":"MTU","type":"scan"}
{"filename":"C:\\Users\\zhong\\Downloads\\Compressed\\VIRUS TEST\\卡饭\\VirusSamples_8\\Samp_(28).file.exe","infect":{"engine":"rdm-lite","threat":"Malware.Heuristic.MLite(100%)"},"show":"MTU","type":"scan"}
{"filename":"C:\\Users\\zhong\\Downloads\\Compressed\\VIRUS TEST\\卡饭\\VirusSamples_8\\Samp_(26).file","show":"MTU","type":"scan"}
{"filename":"C:\\Users\\zhong\\Downloads\\Compressed\\VIRUS TEST\\卡饭\\VirusSamples_8\\Samp_(3).file.dll","show":"MTU","type":"scan"}
{"filename":"C:\\Users\\zhong\\Downloads\\Compressed\\VIRUS TEST\\卡饭\\VirusSamples_8\\Samp_(31).file.exe","show":"MTU","type":"scan"}
{"filename":"C:\\Users\\zhong\\Downloads\\Compressed\\VIRUS TEST\\卡饭\\VirusSamples_8\\Samp_(29).file.exe","show":"MTU","type":"scan"}
{"filename":"C:\\Users\\zhong\\Downloads\\Compressed\\VIRUS TEST\\卡饭\\VirusSamples_8\\Samp_(30).file.exe","infect":{"engine":"rdm-lite","threat":"Malware.Heuristic.MLite(80%)"},"show":"MTU","type":"scan"}
{"filename":"C:\\Users\\zhong\\Downloads\\Compressed\\VIRUS TEST\\卡饭\\VirusSamples_8\\Samp_(32).file.ICNS","show":"MTU","type":"scan"}
{"filename":"C:\\Users\\zhong\\Downloads\\Compressed\\VIRUS TEST\\卡饭\\VirusSamples_8\\Samp_(34).file.PSD","show":"MTU","type":"scan"}
{"filename":"C:\\Users\\zhong\\Downloads\\Compressed\\VIRUS TEST\\卡饭\\VirusSamples_8\\Samp_(25).file","show":"MTU","type":"scan"}
{"filename":"C:\\Users\\zhong\\Downloads\\Compressed\\VIRUS TEST\\卡饭\\VirusSamples_8\\Samp_(33).file.JPG","show":"MTU","type":"scan"}
{"filename":"C:\\Users\\zhong\\Downloads\\Compressed\\VIRUS TEST\\卡饭\\VirusSamples_8\\Samp_(36).file.exe","infect":{"engine":"rdm-lite","threat":"Malware.Heuristic.MLite(96%)"},"show":"MTU","type":"scan"}
{"filename":"C:\\Users\\zhong\\Downloads\\Compressed\\VIRUS TEST\\卡饭\\VirusSamples_8\\Samp_(38).file.dll","infect":{"engine":"rdm-lite","threat":"Malware.Heuristic.MLite(83%)"},"show":"MTU","type":"scan"}
{"filename":"C:\\Users\\zhong\\Downloads\\Compressed\\VIRUS TEST\\卡饭\\VirusSamples_8\\Samp_(39).file.dll","infect":{"engine":"rdm-lite","threat":"Malware.Heuristic.MLite(80%)"},"show":"MTU","type":"scan"}
{"filename":"C:\\Users\\zhong\\Downloads\\Compressed\\VIRUS TEST\\卡饭\\VirusSamples_8\\Samp_(37).file.exe","infect":{"engine":"rdm-lite","threat":"Malware.Heuristic.MLite(96%)"},"show":"MTU","type":"scan"}
{"filename":"C:\\Users\\zhong\\Downloads\\Compressed\\VIRUS TEST\\卡饭\\VirusSamples_8\\Samp_(4).file.dll","show":"MTU","type":"scan"}
{"filename":"C:\\Users\\zhong\\Downloads\\Compressed\\VIRUS TEST\\卡饭\\VirusSamples_8\\Samp_(21).file.exe","show":"MTU","type":"scan"}
{"filename":"C:\\Users\\zhong\\Downloads\\Compressed\\VIRUS TEST\\卡饭\\VirusSamples_8\\Samp_(42).file.WMF","show":"MTU","type":"scan"}
{"filename":"C:\\Users\\zhong\\Downloads\\Compressed\\VIRUS TEST\\卡饭\\VirusSamples_8\\Samp_(40).file.dll","show":"MTU","type":"scan"}
{"filename":"C:\\Users\\zhong\\Downloads\\Compressed\\VIRUS TEST\\卡饭\\VirusSamples_8\\Samp_(44).file.exe","show":"MTU","type":"scan"}
{"filename":"C:\\Users\\zhong\\Downloads\\Compressed\\VIRUS TEST\\卡饭\\VirusSamples_8\\Samp_(45).file.dll","show":"MTU","type":"scan"}
{"filename":"C:\\Users\\zhong\\Downloads\\Compressed\\VIRUS TEST\\卡饭\\VirusSamples_8\\Samp_(35).file.exe","infect":{"engine":"rdm-lite","threat":"Malware.Heuristic.MLite(100%)"},"show":"MTU","type":"scan"}
{"filename":"C:\\Users\\zhong\\Downloads\\Compressed\\VIRUS TEST\\卡饭\\VirusSamples_8\\Samp_(48).file.dll","infect":{"engine":"rdm-lite","threat":"Malware.Heuristic.MLite(100%)"},"show":"MTU","type":"scan"}
{"filename":"C:\\Users\\zhong\\Downloads\\Compressed\\VIRUS TEST\\卡饭\\VirusSamples_8\\Samp_(41).file.dll","show":"MTU","type":"scan"}
{"filename":"C:\\Users\\zhong\\Downloads\\Compressed\\VIRUS TEST\\卡饭\\VirusSamples_8\\Samp_(47).file.exe","infect":{"engine":"rdm-lite","threat":"Malware.Heuristic.MLite(86%)"},"show":"MTU","type":"scan"}
{"filename":"C:\\Users\\zhong\\Downloads\\Compressed\\VIRUS TEST\\卡饭\\VirusSamples_8\\Samp_(49).file.dll","infect":{"engine":"rdm-lite","threat":"Malware.Heuristic.MLite(100%)"},"show":"MTU","type":"scan"}
{"filename":"C:\\Users\\zhong\\Downloads\\Compressed\\VIRUS TEST\\卡饭\\VirusSamples_8\\Samp_(6).file.exe","infect":{"engine":"rdm-lite","threat":"Malware.Heuristic.MLite(98%)"},"show":"MTU","type":"scan"}
{"filename":"C:\\Users\\zhong\\Downloads\\Compressed\\VIRUS TEST\\卡饭\\VirusSamples_8\\Samp_(8).file.Linux_ELF","show":"MTU","type":"scan"}
{"filename":"C:\\Users\\zhong\\Downloads\\Compressed\\VIRUS TEST\\卡饭\\VirusSamples_8\\Samp_(43).file","show":"MTU","type":"scan"}
{"filename":"C:\\Users\\zhong\\Downloads\\Compressed\\VIRUS TEST\\卡饭\\VirusSamples_8\\Samp_(9).file.exe","infect":{"engine":"rdm-lite","threat":"Malware.Heuristic.MLite(100%)"},"show":"MTU","type":"scan"}
{"filename":"C:\\Users\\zhong\\Downloads\\Compressed\\VIRUS TEST\\卡饭\\VirusSamples_8\\Samp_(50).file.exe","show":"MTU","type":"scan"}
{"filename":"C:\\Users\\zhong\\Downloads\\Compressed\\VIRUS TEST\\卡饭\\VirusSamples_8\\Samp_(22).file.APK","show":"MTU","type":"scan"}
{"filename":"C:\\Users\\zhong\\Downloads\\Compressed\\VIRUS TEST\\卡饭\\VirusSamples_8\\Samp_(46).file.exe","show":"MTU","type":"scan"}
{"filename":"C:\\Users\\zhong\\Downloads\\Compressed\\VIRUS TEST\\卡饭\\VirusSamples_8\\Samp_(7).file.exe","show":"MTU","type":"scan"}
{"filename":"C:\\Users\\zhong\\Downloads\\Compressed\\VIRUS TEST\\卡饭\\VirusSamples_8\\Samp_(5).file.ZIP","show":"MTU","type":"scan"}
{"filename":"C:\\Users\\zhong\\Downloads\\Compressed\\VIRUS TEST\\卡饭\\VirusSamples_8\\Samp_(19).file.exe","show":"MTU","type":"scan"}
Scan ended on Sun Jun 24 16:42:27 2018
Duration : 0:0:184(m:s:ms)
Objects : 15 / 110 = 13.64%
Files : 15 / 50 = 30.00%

复制代码

==============================
Cuckoo Sandbox
Malware 5/50 7.0+
Suspicous 4/50 4.0-7.0

Total 9/50

显示全部楼层 · 发表于 2018-6-24 16:37:21

本帖最后由温馨小屋于 2018-6-24 16:59 编辑

Bitdefender：37/50
再测ATD，杀29

显示全部楼层 · 发表于 2018-6-24 16:44:03

卡巴斯基33/50

显示全部楼层 · 发表于 2018-6-24 16:47:35

本帖最后由温馨小屋于 2018-6-24 16:53 编辑

NS 30/50

SONAR杀19

Hacktool
类型: 压缩
风险: 高 (高隐藏, 高删除, 高性能, 高隐私)
类别: 病毒
状态: 完全解决
-----------
1 个受感染文件
[doublepulsar-1.3.1.0.xml] 位于 [x:\users\zry\desktop\virussamples_8\samp_(5).file] - 已删除

Hacktool
类型: 压缩
风险: 高 (高隐藏, 高删除, 高性能, 高隐私)
类别: 病毒
状态: 完全解决
-----------
1 个受感染文件
[eternalromance-1.4.0.0.xml] 位于 [x:\users\zry\desktop\virussamples_8\samp_(5).file] - 已删除

Hacktool
类型: 压缩
风险: 高 (高隐藏, 高删除, 高性能, 高隐私)
类别: 病毒
状态: 完全解决
-----------
1 个受感染文件
[eternalsynergy-1.0.1.0.xml] 位于 [x:\users\zry\desktop\virussamples_8\samp_(5).file] - 已删除

Trojan.Gen.2
类型: 压缩
风险: 高 (高隐藏, 高删除, 高性能, 高隐私)
类别: 病毒
状态: 完全解决
-----------
1 个受感染文件
[x64.shellcode.output] 位于 [x:\users\zry\desktop\virussamples_8\samp_(5).file] - 已删除

Trojan.Gen.2
类型: 压缩
风险: 高 (高隐藏, 高删除, 高性能, 高隐私)
类别: 病毒
状态: 完全解决
-----------
1 个受感染文件
[x86.shellcode.output] 位于 [x:\users\zry\desktop\virussamples_8\samp_(5).file] - 已删除

Unix.LinuxEncoder
类型: 异常
风险: 高 (高隐藏, 高删除, 高性能, 高隐私)
类别: 病毒
状态: 完全解决
-----------
2 个受感染文件
x:\users\zry\desktop\virussamples_8\samp_(14).file - 已删除
x:\users\zry\desktop\virussamples_8\samp_(15).file - 已删除
1 个浏览器缓存

OSX.Sofacy
类型: 异常
风险: 高 (高隐藏, 高删除, 高性能, 高隐私)
类别: 病毒
状态: 完全解决
-----------
1 个受感染文件
x:\users\zry\desktop\virussamples_8\samp_(16).file - 已删除
1 个浏览器缓存

Heur.AdvML.B
类型: 异常
风险: 高 (高隐藏, 高删除, 高性能, 高隐私)
类别: 启发式病毒
状态: 完全解决
-----------
1 个受感染文件
x:\users\zry\desktop\virussamples_8\samp_(17).file - 已删除
1 个浏览器缓存

Trojan.Gen.2
类型: 异常
风险: 高 (高隐藏, 高删除, 高性能, 高隐私)
类别: 病毒
状态: 完全解决
-----------
1 个受感染文件
x:\users\zry\desktop\virussamples_8\samp_(17).file - 不需要操作
1 个浏览器缓存

Trojan.Mdropper
类型: 异常
风险: 高 (高隐藏, 高删除, 高性能, 高隐私)
类别: 病毒
状态: 完全解决
-----------
1 个受感染文件
x:\users\zry\desktop\virussamples_8\samp_(20).file - 已删除
1 个浏览器缓存

Backdoor.Korplug
类型: 异常
风险: 高 (高隐藏, 高删除, 高性能, 高隐私)
类别: 病毒
状态: 完全解决
-----------
1 个受感染文件
x:\users\zry\desktop\virussamples_8\samp_(24).file - 已删除
1 个浏览器缓存

Heur.AdvML.B
类型: 异常
风险: 高 (高隐藏, 高删除, 高性能, 高隐私)
类别: 启发式病毒
状态: 完全解决
-----------
1 个受感染文件
x:\users\zry\desktop\virussamples_8\samp_(28).file - 已删除
1 个浏览器缓存

Trojan.Gen
类型: 异常
风险: 高 (高隐藏, 高删除, 高性能, 高隐私)
类别: 病毒
状态: 完全解决
-----------
4 个受感染文件
x:\users\zry\desktop\virussamples_8\samp_(28).file - 不需要操作
x:\users\zry\desktop\virussamples_8\samp_(38).file - 不需要操作
x:\users\zry\desktop\virussamples_8\samp_(40).file - 不需要操作
x:\users\zry\desktop\virussamples_8\samp_(41).file - 不需要操作
1 个浏览器缓存

W32.Duqu.B
类型: 异常
风险: 高 (高隐藏, 高删除, 高性能, 高隐私)
类别: 病毒
状态: 完全解决
-----------
4 个受感染文件
x:\users\zry\desktop\virussamples_8\samp_(3).file - 已删除
x:\users\zry\desktop\virussamples_8\samp_(13).file - 已删除
x:\users\zry\desktop\virussamples_8\samp_(4).file - 已删除
x:\users\zry\desktop\virussamples_8\samp_(45).file - 已删除
1 个浏览器缓存

Trojan.Ransomlock
类型: 异常
风险: 高 (高隐藏, 高删除, 高性能, 高隐私)
类别: 病毒
状态: 完全解决
-----------
1 个受感染文件
x:\users\zry\desktop\virussamples_8\samp_(30).file - 已删除
1 个浏览器缓存

PUA.Winexe!g1
类型: 异常
风险: 低 (低隐藏, 低删除, 低性能, 低隐私)
类别: 安全风险
状态: 完全解决
-----------
1 个受感染文件
x:\users\zry\desktop\virussamples_8\samp_(31).file - 已删除
1 个浏览器缓存

Heur.AdvML.B
类型: 异常
风险: 高 (高隐藏, 高删除, 高性能, 高隐私)
类别: 启发式病毒
状态: 完全解决
-----------
1 个受感染文件
x:\users\zry\desktop\virussamples_8\samp_(11).file - 已删除
1 个浏览器缓存

Heur.AdvML.A
类型: 异常
风险: 高 (高隐藏, 高删除, 高性能, 高隐私)
类别: 启发式病毒
状态: 完全解决
-----------
1 个受感染文件
x:\users\zry\desktop\virussamples_8\samp_(12).file - 已删除
1 个浏览器缓存

Infostealer
类型: 异常
风险: 高 (高隐藏, 高删除, 高性能, 高隐私)
类别: 病毒
状态: 完全解决
-----------
2 个受感染文件
x:\users\zry\desktop\virussamples_8\samp_(12).file - 不需要操作
x:\users\zry\desktop\virussamples_8\samp_(50).file - 已删除
1 个浏览器缓存

Heur.AdvML.C
类型: 异常
风险: 高 (高隐藏, 高删除, 高性能, 高隐私)
类别: 启发式病毒
状态: 完全解决
-----------
1 个受感染文件
x:\users\zry\desktop\virussamples_8\samp_(35).file - 已删除
1 个浏览器缓存

W32.SillyFDC
类型: 异常
风险: 高 (高隐藏, 高删除, 高性能, 高隐私)
类别: 病毒
状态: 需要重新启动
-----------
1 个受感染文件
x:\users\zry\desktop\virussamples_8\samp_(35).file - 不需要操作
1 个浏览器缓存

Heur.AdvML.B
类型: 异常
风险: 高 (高隐藏, 高删除, 高性能, 高隐私)
类别: 启发式病毒
状态: 完全解决
-----------
1 个受感染文件
x:\users\zry\desktop\virussamples_8\samp_(36).file - 已删除
1 个浏览器缓存

Backdoor.Trojan
类型: 异常
风险: 高 (高隐藏, 高删除, 高性能, 高隐私)
类别: 病毒
状态: 完全解决
-----------
1 个受感染文件
x:\users\zry\desktop\virussamples_8\samp_(36).file - 不需要操作
1 个浏览器缓存

Heur.AdvML.B
类型: 异常
风险: 高 (高隐藏, 高删除, 高性能, 高隐私)
类别: 启发式病毒
状态: 完全解决
-----------
1 个受感染文件
x:\users\zry\desktop\virussamples_8\samp_(37).file - 已删除
1 个浏览器缓存

Heur.AdvML.B
类型: 异常
风险: 高 (高隐藏, 高删除, 高性能, 高隐私)
类别: 启发式病毒
状态: 完全解决
-----------
1 个受感染文件
x:\users\zry\desktop\virussamples_8\samp_(38).file - 已删除
1 个浏览器缓存

Heur.AdvML.C
类型: 异常
风险: 高 (高隐藏, 高删除, 高性能, 高隐私)
类别: 启发式病毒
状态: 完全解决
-----------
1 个受感染文件
x:\users\zry\desktop\virussamples_8\samp_(39).file - 已删除
1 个浏览器缓存

Infostealer.Castov
类型: 异常
风险: 高 (高隐藏, 高删除, 高性能, 高隐私)
类别: 病毒
状态: 完全解决
-----------
1 个受感染文件
x:\users\zry\desktop\virussamples_8\samp_(39).file - 不需要操作
1 个浏览器缓存

Trojan Horse
类型: 异常
风险: 高 (高隐藏, 高删除, 高性能, 高隐私)
类别: 病毒
状态: 完全解决
-----------
1 个受感染文件
x:\users\zry\desktop\virussamples_8\samp_(40).file - 已删除
1 个浏览器缓存

Heur.AdvML.B
类型: 异常
风险: 高 (高隐藏, 高删除, 高性能, 高隐私)
类别: 启发式病毒
状态: 完全解决
-----------
1 个受感染文件
x:\users\zry\desktop\virussamples_8\samp_(41).file - 已删除
1 个浏览器缓存

Ransom.Cryptolocker.D
类型: 异常
风险: 高 (高隐藏, 高删除, 高性能, 高隐私)
类别: 病毒
状态: 完全解决
-----------
1 个受感染文件
x:\users\zry\desktop\virussamples_8\samp_(46).file - 已删除
1 个浏览器缓存

Heur.AdvML.B
类型: 异常
风险: 高 (高隐藏, 高删除, 高性能, 高隐私)
类别: 启发式病毒
状态: 完全解决
-----------
1 个受感染文件
x:\users\zry\desktop\virussamples_8\samp_(47).file - 已删除
1 个浏览器缓存

Backdoor.IRC.Bot
类型: 异常
风险: 高 (高隐藏, 高删除, 高性能, 高隐私)
类别: 病毒
状态: 完全解决
-----------
1 个受感染文件
x:\users\zry\desktop\virussamples_8\samp_(47).file - 不需要操作
1 个浏览器缓存

Trojan.Asprox.B!gm
类型: 异常
风险: 高 (高隐藏, 高删除, 高性能, 高隐私)
类别: 病毒
状态: 完全解决
-----------
2 个受感染文件
x:\users\zry\desktop\virussamples_8\samp_(48).file - 已删除
x:\users\zry\desktop\virussamples_8\samp_(49).file - 已删除
1 个浏览器缓存

Heur.AdvML.B
类型: 异常
风险: 高 (高隐藏, 高删除, 高性能, 高隐私)
类别: 启发式病毒
状态: 完全解决
-----------
1 个受感染文件
x:\users\zry\desktop\virussamples_8\samp_(9).file - 已删除
1 个浏览器缓存

Backdoor.Cycbot
类型: 异常
风险: 高 (高隐藏, 高删除, 高性能, 高隐私)
类别: 病毒
状态: 完全解决
-----------
1 个受感染文件
x:\users\zry\desktop\virussamples_8\samp_(9).file - 不需要操作
1 个浏览器缓存

Trojan.Smoaler!gen1
类型: 异常
风险: 高 (高隐藏, 高删除, 高性能, 高隐私)
类别: 启发式病毒
状态: 完全解决
-----------
1 个受感染文件
x:\users\zry\desktop\virussamples_8\samp_(6).file - 已删除
1 个浏览器缓存

显示全部楼层 · 发表于 2018-6-24 16:48:03

本帖最后由 pal家族于 2018-6-24 16:50 编辑

卡巴
30/50

有不少神奇的样本，比如方程式和毒蛆，还有几个osx上的样本。

显示全部楼层 · 发表于 2018-6-24 17:00:38

eset ess，35

显示全部楼层 · 发表于 2018-6-24 17:05:17

pal家族发表于 2018-6-24 16:48
卡巴
30/50

东北名菜：乱炖。。

显示全部楼层 · 发表于 2018-6-24 17:09:21

卡巴kill 33x
在线的不很准

显示全部楼层 · 发表于 2018-6-24 17:10:24

pal家族发表于 2018-6-24 16:48
卡巴
30/50

现在卡巴只剩17个了

[病毒样本] 样本集奉上_8

评分

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源