#1 (18.9.11)

显示全部楼层 · 发表于 2018-9-12 09:04:41

本帖最后由 STCn1000 于 2018-9-12 17:12 编辑

norton security
scan miss。已上报赛门铁克。
赛门铁克已回复入库

File 1:	1.js
MD5:	4991d662c3f368a97dda3b326628d810
SHA256:	40470d83459dca9e3450bdfb12b661bfd55ffe72c2e6254e8f4bf676d2df21d5
Determination:	Already Detected
Submission Detail:	This file is detected as Trojan Horse with our existing Rapid Release definition set. Protection is available in Rapid Release definitions with a sequence number of 195588 or greater.
Signature Protection Name:	Trojan Horse

确认定义已下发

显示全部楼层 · 发表于 2018-9-12 10:11:32

ESET MISS

显示全部楼层 · 发表于 2018-9-12 13:00:22

Karna 发表于 2018-9-11 23:55
卡巴2019 英文免费版扫描+双击miss
样本有注入多个系统进程的行为，貌似是后门远控一类的。先观察到的有 ...

Trojan-Dropper.JS.Agent.ot
卡巴入库

[病毒样本] #1 (18.9.11)