b5a113c78e9c64e729b192595a92f09116d74526c8d36a3ccb918164b4a1e141

显示全部楼层 · 发表于 2018-9-30 23:11:35

https://ti.360.net/blog/articles ... exploit-kit-sample/

https://my.mixtape.moe/incssf.7z

显示全部楼层 · 发表于 2018-9-30 23:12:19

本帖最后由 Kaspersky用户于 2018-9-30 23:18 编辑

BDF扫描MISS

显示全部楼层 · 发表于 2018-9-30 23:13:18

30.09.2018 23.12.40;检测到的对象 ( 文件 ) 已删除;C:\Users\Administrator\Desktop\cac1237461f95916061915364352c1cb4a611fea0e3988ec9f2d7a870005af86//equation//exploit;C:\Users\Administrator\Desktop\cac1237461f95916061915364352c1cb4a611fea0e3988ec9f2d7a870005af86//equation//exploit;HEUR:Exploit.MSOffice.Generic;木马程序;09/30/2018 23:12:40
30.09.2018 23.12.40;检测到的对象 ( 文件 ) 已删除;C:\Users\Administrator\Desktop\cac1237461f95916061915364352c1cb4a611fea0e3988ec9f2d7a870005af86//equation;C:\Users\Administrator\Desktop\cac1237461f95916061915364352c1cb4a611fea0e3988ec9f2d7a870005af86//equation;HEUR:Exploit.MSOffice.Generic;木马程序;09/30/2018 23:12:40
30.09.2018 23.12.40;检测到的对象 ( 文件 ) 已删除;C:\Users\Administrator\Desktop\cac1237461f95916061915364352c1cb4a611fea0e3988ec9f2d7a870005af86;C:\Users\Administrator\Desktop\cac1237461f95916061915364352c1cb4a611fea0e3988ec9f2d7a870005af86;09/30/2018 23:12:40

复制代码

显示全部楼层 · 发表于 2018-9-30 23:14:34

本帖最后由 191196846 于 2018-9-30 23:16 编辑

VirusTotal Smart Scanner 1.06
======================================================================================
Scan Time: 2018-09-30-23-14-09
Scan Duration: 4 seconds
Scan Target: C:\Users\zhong\Downloads\Compressed\VIRUS TEST\卡饭\incssf
Number of Scan Files: 1
Number of Infected Files: 1
engine_threshold_slider : 80
upload_check : True
log_check : True
menu_check : True
scan_pe_check : False
grayware_check : True
rescan_check : False
black_check : True
white_check : True
crawler_check : True
======================================================================================
Threat(s):
Exploit.Generic sha256: cac1237461f95916061915364352c1cb4a611fea0e3988ec9f2d7a870005af86 Path: C:\Users\zhong\Downloads\Compressed\VIRUS TEST\卡饭\incssf\cac1237461f95916061915364352c1cb4a611fea0e3988ec9f2d7a870005af86

复制代码

Huorong MISS

显示全部楼层 · 发表于 2018-9-30 23:16:48

紅傘

右鍵掃描不報

显示全部楼层 · 发表于 2018-9-30 23:46:14

360

类型:木马-virus.exp.21711882.b
描述:木马是一种伪装成正常文件的恶意软件，会盗取您的帐号、密码等隐私资料。
扫描引擎:QEX引擎
文件路径:C:\Documents and Settings\Administrator\My Documents\Downloads\cac1237461f95916061915364352c1cb4a611fea0e3988ec9f2d7a870005af86
文件大小:6.07M (6,362,026 字节)
文件指纹（MD5）:0a8efb742ef488bcb8ccd6b616125eea
数字签名:
数字签名是否有效:无效
处理建议:隔离文件

显示全部楼层 · 发表于 2018-9-30 23:53:28

Trend Micro

MISS

显示全部楼层 · 发表于 2018-10-1 00:21:59

火绒miss，智量报可疑。

显示全部楼层 · 发表于 2018-10-1 07:41:13

ahnlab kill

显示全部楼层 · 发表于 2018-10-1 09:29:46

VirusTotal 7 / 58
https://www.virustotal.com/#/fil ... 70005af86/detection

[其他相关] b5a113c78e9c64e729b192595a92f09116d74526c8d36a3ccb918164b4a1e141

本帖子中包含更多资源

浏览过的版块