样本集奉上_89 (11.11)

显示全部楼层 · 发表于 2018-11-11 23:31:09

七游发表于 2018-11-11 23:24
感觉之前就是版本号更新。以及，现在已经是11月11号了。

这俩帖子并不能证明什么

显示全部楼层 · 发表于 2018-11-11 23:33:14

松竹承茂发表于 2018-11-11 23:31
这俩帖子并不能证明什么

大家到这里来试试。。。https://bbs.kafan.cn/thread-2136450-1-1.html

显示全部楼层 · 发表于 2018-11-12 09:14:49

KVM也很给力呀

显示全部楼层 · 发表于 2018-11-12 11:27:24

dsb2466 发表于 2018-11-12 09:14
KVM也很给力呀

毒霸入云库还是比较快，昨晚相信不会超40X 。

显示全部楼层 · 发表于 2018-11-12 11:39:48

avira
44+M27=71/80

11/11/2018,22-25-45 [INFO] FP reports status 'NO False Positive' for file 'e:\samples\virussamples_89\samp(13).vir'
11/11/2018,22-25-45 [INFO] e:\samples\virussamples_89\samp(13).vir
11/11/2018,22-25-45 [INFO] [DETECTION] file contains 'HEUR/AGEN.1021719'
11/11/2018,22-25-46 [INFO] FP reports status 'NO False Positive' for file 'e:\samples\virussamples_89\samp(14).vir'
11/11/2018,22-25-46 [INFO] The file 'e:\samples\virussamples_89\samp(14).vir' was scanned with the Protection Cloud. SHA256 = 8A26412234EC7CB43B07BAE7E9910EB0F7EB807CF8581ABED56AAFAF514AC4A2
11/11/2018,22-25-46 [INFO] e:\samples\virussamples_89\samp(14).vir
11/11/2018,22-25-46 [INFO] [DETECTION] file contains 'TR/Crypt.XPACK.8a2641'
11/11/2018,22-25-46 [INFO] FP reports status 'NO False Positive' for file 'e:\samples\virussamples_89\samp(15).vir'
11/11/2018,22-25-46 [INFO] e:\samples\virussamples_89\samp(15).vir
11/11/2018,22-25-46 [INFO] [DETECTION] file contains 'HEUR/AGEN.1007129'
11/11/2018,22-25-46 [INFO] FP reports status 'NO False Positive' for file 'e:\samples\virussamples_89\samp(16).vir'
11/11/2018,22-25-46 [INFO] e:\samples\virussamples_89\samp(16).vir
11/11/2018,22-25-46 [INFO] [DETECTION] file contains 'HEUR/AGEN.1003677'
11/11/2018,22-25-46 [INFO] FP reports status 'NO False Positive' for file 'e:\samples\virussamples_89\samp(18).vir'
11/11/2018,22-25-46 [INFO] e:\samples\virussamples_89\samp(18).vir
11/11/2018,22-25-46 [INFO] [DETECTION] file contains 'HEUR/AGEN.1030990'
11/11/2018,22-25-46 [INFO] FP reports status 'NO False Positive' for file 'e:\samples\virussamples_89\samp(19).vir'
11/11/2018,22-25-46 [INFO] e:\samples\virussamples_89\samp(19).vir
11/11/2018,22-25-46 [INFO] [DETECTION] file contains 'HEUR/AGEN.1013435'
11/11/2018,22-25-47 [INFO] FP reports status 'NO False Positive' for file 'e:\samples\virussamples_89\samp(21).vir'
11/11/2018,22-25-47 [INFO] e:\samples\virussamples_89\samp(21).vir
11/11/2018,22-25-47 [INFO] [DETECTION] file contains 'HEUR/AGEN.1023862'
11/11/2018,22-25-47 [INFO] FP reports status 'NO False Positive' for file 'e:\samples\virussamples_89\samp(22).vir'
11/11/2018,22-25-47 [INFO] e:\samples\virussamples_89\samp(22).vir
11/11/2018,22-25-47 [INFO] [DETECTION] file contains 'Java/Lamar.ygs.21'
11/11/2018,22-25-47 [INFO] FP reports status 'NO False Positive' for file 'e:\samples\virussamples_89\samp(23).vir'
11/11/2018,22-25-47 [INFO] e:\samples\virussamples_89\samp(23).vir
11/11/2018,22-25-47 [INFO] [DETECTION] file contains 'EXP/Java.Obfus.qeofd'
11/11/2018,22-25-47 [INFO] FP reports status 'NO False Positive' for file 'e:\samples\virussamples_89\samp(24).vir'
11/11/2018,22-25-47 [INFO] e:\samples\virussamples_89\samp(24).vir
11/11/2018,22-25-47 [INFO] [DETECTION] file contains 'HEUR/AGEN.1003867'
11/11/2018,22-25-47 [INFO] FP reports status 'NO False Positive' for file 'e:\samples\virussamples_89\samp(26).vir'
11/11/2018,22-25-47 [INFO] e:\samples\virussamples_89\samp(26).vir
11/11/2018,22-25-47 [INFO] [DETECTION] file contains 'HEUR/Macro.Agent'
11/11/2018,22-25-47 [INFO] FP reports status 'NO False Positive' for file 'e:\samples\virussamples_89\samp(27).vir'
11/11/2018,22-25-47 [INFO] The file 'e:\samples\virussamples_89\samp(27).vir' was scanned with the Protection Cloud. SHA256 = B6708BB21911FE143FDC33A57993DB91BE7F90EBACC0EAC302019B2D12A763E3
11/11/2018,22-25-47 [INFO] e:\samples\virussamples_89\samp(27).vir
11/11/2018,22-25-47 [INFO] [DETECTION] file contains 'TR/Crypt.ZPACK.b6708b'
11/11/2018,22-25-48 [INFO] FP reports status 'NO False Positive' for file 'e:\samples\virussamples_89\samp(29).vir'
11/11/2018,22-25-48 [INFO] The file 'e:\samples\virussamples_89\samp(29).vir' was scanned with the Protection Cloud. SHA256 = 78FABF339B726203334BB592812AB42C8652AB37535EECCF2E457DF257D7A881
11/11/2018,22-25-48 [INFO] e:\samples\virussamples_89\samp(29).vir
11/11/2018,22-25-48 [INFO] [DETECTION] file contains 'TR/Crypt.ZPACK.78fabf'
11/11/2018,22-25-48 [INFO] FP reports status 'NO False Positive' for file 'e:\samples\virussamples_89\samp(35).vir'
11/11/2018,22-25-48 [INFO] e:\samples\virussamples_89\samp(35).vir
11/11/2018,22-25-48 [INFO] [DETECTION] file contains 'W32/Parite'
11/11/2018,22-25-48 [INFO] FP reports status 'NO False Positive' for file 'e:\samples\virussamples_89\samp(42).vir'
11/11/2018,22-25-48 [INFO] e:\samples\virussamples_89\samp(42).vir
11/11/2018,22-25-48 [INFO] [DETECTION] file contains 'EXP/Flash.EB.1186'
11/11/2018,22-25-48 [INFO] FP reports status 'NO False Positive' for file 'e:\samples\virussamples_89\samp(43).vir'
11/11/2018,22-25-48 [INFO] e:\samples\virussamples_89\samp(43).vir
11/11/2018,22-25-48 [INFO] [DETECTION] file contains 'TR/Kryptik.onxza'
11/11/2018,22-25-48 [INFO] FP reports status 'NO False Positive' for file 'e:\samples\virussamples_89\samp(45).vir'
11/11/2018,22-25-48 [INFO] e:\samples\virussamples_89\samp(45).vir
11/11/2018,22-25-48 [INFO] [DETECTION] file contains 'TR/Spora.sci'
11/11/2018,22-25-48 [INFO] FP reports status 'NO False Positive' for file 'e:\samples\virussamples_89\samp(46).vir'
11/11/2018,22-25-48 [INFO] e:\samples\virussamples_89\samp(46).vir
11/11/2018,22-25-48 [INFO] [DETECTION] file contains 'EXP/FLASH.Onuitro.A.Gen'
11/11/2018,22-25-48 [INFO] FP reports status 'NO False Positive' for file 'e:\samples\virussamples_89\samp(47).vir'
11/11/2018,22-25-48 [INFO] e:\samples\virussamples_89\samp(47).vir
11/11/2018,22-25-48 [INFO] [DETECTION] file contains 'TR/Crypt.XPACK.422289'
11/11/2018,22-25-49 [INFO] FP reports status 'NO False Positive' for file 'e:\samples\virussamples_89\samp(48).vir'
11/11/2018,22-25-49 [INFO] e:\samples\virussamples_89\samp(48).vir
11/11/2018,22-25-49 [INFO] [DETECTION] file contains 'HEUR/AGEN.1021836'
11/11/2018,22-25-49 [INFO] FP reports status 'NO False Positive' for file 'e:\samples\virussamples_89\samp(49).vir'
11/11/2018,22-25-49 [INFO] e:\samples\virussamples_89\samp(49).vir
11/11/2018,22-25-49 [INFO] [DETECTION] file contains 'JS/Dldr.Locky.wgty'
11/11/2018,22-25-49 [INFO] FP reports status 'NO False Positive' for file 'e:\samples\virussamples_89\samp(50).vir'
11/11/2018,22-25-49 [INFO] e:\samples\virussamples_89\samp(50).vir
11/11/2018,22-25-49 [INFO] [DETECTION] file contains 'HEUR/AGEN.1013725'
11/11/2018,22-25-49 [INFO] FP reports status 'NO False Positive' for file 'e:\samples\virussamples_89\virussamples_89m\Samp(1)M.vir'
11/11/2018,22-25-49 [INFO] e:\samples\virussamples_89\virussamples_89m\Samp(1)M.vir
11/11/2018,22-25-49 [INFO] [DETECTION] file contains 'TR/Crypt.ASPM.Gen'
11/11/2018,22-25-49 [INFO] FP reports status 'NO False Positive' for file 'e:\samples\virussamples_89\virussamples_89m\Samp(11)M.vir'
11/11/2018,22-25-49 [INFO] e:\samples\virussamples_89\virussamples_89m\Samp(11)M.vir
11/11/2018,22-25-49 [INFO] [DETECTION] file contains 'HEUR/AGEN.1023603'
11/11/2018,22-25-49 [INFO] FP reports status 'NO False Positive' for file 'e:\samples\virussamples_89\virussamples_89m\Samp(12)M.vir'
11/11/2018,22-25-49 [INFO] The file 'e:\samples\virussamples_89\virussamples_89m\Samp(12)M.vir' was scanned with the Protection Cloud. SHA256 = E8797564D31CA290FC4C0380D967AC28D196D4108FA988B9F5C3F2F34CE15AFD
11/11/2018,22-25-49 [INFO] e:\samples\virussamples_89\virussamples_89m\Samp(12)M.vir
11/11/2018,22-25-49 [INFO] [DETECTION] file contains 'TR/Crypt.ASPM.e87975'
11/11/2018,22-25-49 [INFO] FP reports status 'NO False Positive' for file 'e:\samples\virussamples_89\virussamples_89m\Samp(13)M.vir'
11/11/2018,22-25-49 [INFO] e:\samples\virussamples_89\virussamples_89m\Samp(13)M.vir
11/11/2018,22-25-49 [INFO] [DETECTION] file contains 'HEUR/AGEN.1013435'
11/11/2018,22-25-49 [INFO] FP reports status 'NO False Positive' for file 'e:\samples\virussamples_89\virussamples_89m\Samp(14)M.vir'
11/11/2018,22-25-49 [INFO] e:\samples\virussamples_89\virussamples_89m\Samp(14)M.vir
11/11/2018,22-25-49 [INFO] [DETECTION] file contains 'HEUR/AGEN.1023862'
11/11/2018,22-25-49 [INFO] FP reports status 'NO False Positive' for file 'e:\samples\virussamples_89\virussamples_89m\Samp(15)M.vir'
11/11/2018,22-25-49 [INFO] e:\samples\virussamples_89\virussamples_89m\Samp(15)M.vir
11/11/2018,22-25-49 [INFO] [DETECTION] file contains 'HEUR/AGEN.1008711'
11/11/2018,22-25-49 [INFO] FP reports status 'NO False Positive' for file 'e:\samples\virussamples_89\virussamples_89m\Samp(16)M.vir'
11/11/2018,22-25-49 [INFO] e:\samples\virussamples_89\virussamples_89m\Samp(16)M.vir
11/11/2018,22-25-49 [INFO] [DETECTION] file contains 'TR/Crypt.XPACK.Gen'
11/11/2018,22-25-49 [INFO] FP reports status 'NO False Positive' for file 'e:\samples\virussamples_89\virussamples_89m\Samp(17)M.vir'
11/11/2018,22-25-49 [INFO] e:\samples\virussamples_89\virussamples_89m\Samp(17)M.vir
11/11/2018,22-25-49 [INFO] [DETECTION] file contains 'TR/Dropper.Gen'
11/11/2018,22-26-02 [INFO] FP reports status 'NO False Positive' for file 'e:\samples\virussamples_89\virussamples_89m\Samp(18)M.vir'
11/11/2018,22-26-02 [INFO] The file 'e:\samples\virussamples_89\virussamples_89m\Samp(18)M.vir' has been uploaded to the Protection Cloud and analyzed. SHA256 = 4E07420B1E239A8337D8D46C02E26EBB8DA9FB9D51729F8C77318F2EB757C53B
11/11/2018,22-26-02 [INFO] e:\samples\virussamples_89\virussamples_89m\Samp(18)M.vir
11/11/2018,22-26-02 [INFO] [DETECTION] file contains 'HEUR/APC'
11/11/2018,22-26-03 [INFO] FP reports status 'NO False Positive' for file 'e:\samples\virussamples_89\virussamples_89m\Samp(19)M.vir'
11/11/2018,22-26-03 [INFO] The file 'e:\samples\virussamples_89\virussamples_89m\Samp(19)M.vir' was scanned with the Protection Cloud. SHA256 = 5091C399198B808361E2C17D89163F91B5D237380DF56F39F53EC09E01A69027
11/11/2018,22-26-03 [INFO] e:\samples\virussamples_89\virussamples_89m\Samp(19)M.vir
11/11/2018,22-26-03 [INFO] [DETECTION] file contains 'TR/AD.Dridex.5091c3'
11/11/2018,22-26-03 [INFO] FP reports status 'NO False Positive' for file 'e:\samples\virussamples_89\virussamples_89m\Samp(21)M.vir'
11/11/2018,22-26-03 [INFO] e:\samples\virussamples_89\virussamples_89m\Samp(21)M.vir
11/11/2018,22-26-03 [INFO] [DETECTION] file contains 'W32/Parite.BadClean.Gen'
11/11/2018,22-26-12 [INFO] FP reports status 'NO False Positive' for file 'e:\samples\virussamples_89\virussamples_89m\Samp(22)M.vir'
11/11/2018,22-26-12 [INFO] The file 'e:\samples\virussamples_89\virussamples_89m\Samp(22)M.vir' has been uploaded to the Protection Cloud and analyzed. SHA256 = B52A1F12FA17D5E33DA0C014AA59E2D6C9EACC8B6202DDBD31747D035C071B31
11/11/2018,22-26-12 [INFO] e:\samples\virussamples_89\virussamples_89m\Samp(22)M.vir
11/11/2018,22-26-12 [INFO] [DETECTION] file contains 'TR/Crypt.XPACK.b52a1f'
11/11/2018,22-26-24 [INFO] FP reports status 'NO False Positive' for file 'e:\samples\virussamples_89\virussamples_89m\Samp(24)M.vir'
11/11/2018,22-26-24 [INFO] The file 'e:\samples\virussamples_89\virussamples_89m\Samp(24)M.vir' has been uploaded to the Protection Cloud and analyzed. SHA256 = E5A96540E8F0AE5A2DDB31F473D70A91E6E9CE4EDFF1D6B91A4A8DD7961139F6
11/11/2018,22-26-24 [INFO] e:\samples\virussamples_89\virussamples_89m\Samp(24)M.vir
11/11/2018,22-26-24 [INFO] [DETECTION] file contains 'TR/Injector.e5a965'
11/11/2018,22-26-37 [INFO] FP reports status 'NO False Positive' for file 'e:\samples\virussamples_89\virussamples_89m\Samp(26)M.vir'
11/11/2018,22-26-37 [INFO] The file 'e:\samples\virussamples_89\virussamples_89m\Samp(26)M.vir' has been uploaded to the Protection Cloud and analyzed. SHA256 = 1210286D278EDA55E9FF242925A7135E6183BA7203E921D242150C494058AB2D
11/11/2018,22-26-37 [INFO] e:\samples\virussamples_89\virussamples_89m\Samp(26)M.vir
11/11/2018,22-26-37 [INFO] [DETECTION] file contains 'TR/TrickBot.121028'
11/11/2018,22-26-49 [INFO] FP reports status 'NO False Positive' for file 'e:\samples\virussamples_89\virussamples_89m\Samp(28)M.vir'
11/11/2018,22-26-49 [INFO] The file 'e:\samples\virussamples_89\virussamples_89m\Samp(28)M.vir' has been uploaded to the Protection Cloud and analyzed. SHA256 = 593EE6C7CE5E2D5775A454FB3BA439A43C6F10A5999C2F34D7057A1879A95C89
11/11/2018,22-26-49 [INFO] e:\samples\virussamples_89\virussamples_89m\Samp(28)M.vir
11/11/2018,22-26-49 [INFO] [DETECTION] file contains 'TR/Crypt.XPACK.593ee6'
11/11/2018,22-27-02 [INFO] FP reports status 'NO False Positive' for file 'e:\samples\virussamples_89\virussamples_89m\Samp(29)M.vir'
11/11/2018,22-27-02 [INFO] The file 'e:\samples\virussamples_89\virussamples_89m\Samp(29)M.vir' has been uploaded to the Protection Cloud and analyzed. SHA256 = C6AF5DC375F432CF7AFFACF5DAB9157866E9D1DB1E56237FDE5D64D7A5E1F1B0
11/11/2018,22-27-02 [INFO] e:\samples\virussamples_89\virussamples_89m\Samp(29)M.vir
11/11/2018,22-27-02 [INFO] [DETECTION] file contains 'TR/Boaxxe.c6af5d'
11/11/2018,22-27-02 [INFO] FP reports status 'NO False Positive' for file 'e:\samples\virussamples_89\virussamples_89m\Samp(4)M.vir'
11/11/2018,22-27-02 [INFO] The file 'e:\samples\virussamples_89\virussamples_89m\Samp(4)M.vir' was scanned with the Protection Cloud. SHA256 = 32FFDE3C73F1CC342161889460630415A29A44E11747E2C8C398D419062EE1EB
11/11/2018,22-27-02 [INFO] e:\samples\virussamples_89\virussamples_89m\Samp(4)M.vir
11/11/2018,22-27-02 [INFO] [DETECTION] file contains 'TR/Emotet.32ffde'
11/11/2018,22-27-11 [INFO] FP reports status 'NO False Positive' for file 'e:\samples\virussamples_89\virussamples_89m\Samp(5)M.vir'
11/11/2018,22-27-11 [INFO] The file 'e:\samples\virussamples_89\virussamples_89m\Samp(5)M.vir' has been uploaded to the Protection Cloud and analyzed. SHA256 = E7E58F9FB074D5817230B987DCF4683B9734FB766466C14AE753D7CDB8B714AB
11/11/2018,22-27-11 [INFO] e:\samples\virussamples_89\virussamples_89m\Samp(5)M.vir
11/11/2018,22-27-11 [INFO] [DETECTION] file contains 'HEUR/APC'
11/11/2018,22-27-24 [INFO] FP reports status 'NO False Positive' for file 'e:\samples\virussamples_89\virussamples_89m\Samp(6)M.vir'
11/11/2018,22-27-24 [INFO] The file 'e:\samples\virussamples_89\virussamples_89m\Samp(6)M.vir' has been uploaded to the Protection Cloud and analyzed. SHA256 = CCA7EC9AFF66AF4653B3A55DA5DBF253195AFA63A3C345217714A94BBB0259AD
11/11/2018,22-27-24 [INFO] e:\samples\virussamples_89\virussamples_89m\Samp(6)M.vir
11/11/2018,22-27-24 [INFO] [DETECTION] file contains 'TR/VBInject.cca7ec'
11/11/2018,22-27-24 [INFO] FP reports status 'NO False Positive' for file 'e:\samples\virussamples_89\virussamples_89m\Samp(8)M.vir'
11/11/2018,22-27-24 [INFO] The file 'e:\samples\virussamples_89\virussamples_89m\Samp(8)M.vir' was scanned with the Protection Cloud. SHA256 = 0065598122D99048ACB005E310478B5BF3F0C02AF4B489AB2DA36162797E44C7
11/11/2018,22-27-24 [INFO] e:\samples\virussamples_89\virussamples_89m\Samp(8)M.vir
11/11/2018,22-27-24 [INFO] [DETECTION] file contains 'TR/AD.Locky.006559'

复制代码

显示全部楼层 · 发表于 2018-11-12 11:42:40

www-tekeze 发表于 2018-11-12 11:27
毒霸入云库还是比较快，昨晚相信不会超40X 。

KVM都是没入云报的

显示全部楼层 · 发表于 2018-11-12 11:44:58

www-tekeze 发表于 2018-11-12 11:27
毒霸入云库还是比较快，昨晚相信不会超40X 。

这个才是入云的效果吧

显示全部楼层 · 发表于 2018-11-12 13:14:06

dsb2466 发表于 2018-11-12 11:44
这个才是入云的效果吧

哦，是的，kcloud才是，己经68X，够快！

显示全部楼层 · 发表于 2018-11-12 14:06:51

www-tekeze 发表于 2018-11-12 13:14
哦，是的，kcloud才是，己经68X，够快！

下次准备啥时候测呀，我来测测毒霸

显示全部楼层 · 发表于 2018-11-12 14:18:10

dsb2466 发表于 2018-11-12 14:06
下次准备啥时候测呀，我来测测毒霸

明天吧，隔一天放一个包。

[病毒样本] 样本集奉上_89 (11.11)

本帖子中包含更多资源

本帖子中包含更多资源