Silence Group

Jerry.Lin

https://reaqta.com/2019/01/silence-group-targeting-russian-banks/
https://www.freebuf.com/articles/network/195373.html

dreams521

卡巴 ACE

1. 17.02.2019 17.27.10;检测到的对象 ( 文件 ) 已删除;C:\Users\Administrator\Desktop\Silence\6806630c8bec6145475e421900f63dec20c2c6fdfe3a6f12b6bfddb8db6bb821.bin.CHM//start.htm;C:\Users\Administrator\Desktop\Silence\6806630c8bec6145475e421900f63dec20c2c6fdfe3a6f12b6bfddb8db6bb821.bin.CHM//start.htm;Trojan-Downloader.HTML.Agent.akn;木马程序;02/17/2019 17:27:10
   
2. 17.02.2019 17.27.10;检测到的对象 ( 文件 ) 已删除;C:\Users\Administrator\Desktop\Silence\6806630c8bec6145475e421900f63dec20c2c6fdfe3a6f12b6bfddb8db6bb821.bin.CHM//toc-generated.hhc;C:\Users\Administrator\Desktop\Silence\6806630c8bec6145475e421900f63dec20c2c6fdfe3a6f12b6bfddb8db6bb821.bin.CHM//toc-generated.hhc;Trojan.HTML.Starter.b;木马程序;02/17/2019 17:27:10
   
3. 17.02.2019 17.27.10;检测到的对象 ( 文件 ) 已删除;C:\Users\Administrator\Desktop\Silence\6806630c8bec6145475e421900f63dec20c2c6fdfe3a6f12b6bfddb8db6bb821.bin.CHM//Index-generated.hhk;C:\Users\Administrator\Desktop\Silence\6806630c8bec6145475e421900f63dec20c2c6fdfe3a6f12b6bfddb8db6bb821.bin.CHM//Index-generated.hhk;Trojan.HTML.Starter.b;木马程序;02/17/2019 17:27:10
   
4. 17.02.2019 17.27.10;检测到的对象 ( 文件 ) 已删除;C:\Users\Administrator\Desktop\Silence\6806630c8bec6145475e421900f63dec20c2c6fdfe3a6f12b6bfddb8db6bb821.bin.CHM;C:\Users\Administrator\Desktop\Silence\6806630c8bec6145475e421900f63dec20c2c6fdfe3a6f12b6bfddb8db6bb821.bin.CHM;UDS:DangerousObject.Multi.Generic;02/17/2019 17:27:10
   
5. 17.02.2019 17.27.08;检测到的对象 ( 文件 ) 已删除;C:\Users\Administrator\Desktop\Silence\77775f1dbfceb1f1915d2db067a0a8239dab771d41084fc89e9478f3995f2498.bin.CHM//toc-generated.hhc;C:\Users\Administrator\Desktop\Silence\77775f1dbfceb1f1915d2db067a0a8239dab771d41084fc89e9478f3995f2498.bin.CHM//toc-generated.hhc;Trojan.HTML.Starter.b;木马程序;02/17/2019 17:27:08
   
6. 17.02.2019 17.27.08;检测到的对象 ( 文件 ) 已删除;C:\Users\Administrator\Desktop\Silence\77775f1dbfceb1f1915d2db067a0a8239dab771d41084fc89e9478f3995f2498.bin.CHM//Index-generated.hhk;C:\Users\Administrator\Desktop\Silence\77775f1dbfceb1f1915d2db067a0a8239dab771d41084fc89e9478f3995f2498.bin.CHM//Index-generated.hhk;Trojan.HTML.Starter.b;木马程序;02/17/2019 17:27:08
   
7. 17.02.2019 17.27.08;检测到的对象 ( 文件 ) 已删除;C:\Users\Administrator\Desktop\Silence\77775f1dbfceb1f1915d2db067a0a8239dab771d41084fc89e9478f3995f2498.bin.CHM//start.htm;C:\Users\Administrator\Desktop\Silence\77775f1dbfceb1f1915d2db067a0a8239dab771d41084fc89e9478f3995f2498.bin.CHM//start.htm;Trojan-Downloader.HTML.Banload.n;木马程序;02/17/2019 17:27:08
   
8. 17.02.2019 17.27.08;检测到的对象 ( 文件 ) 已删除;C:\Users\Administrator\Desktop\Silence\77775f1dbfceb1f1915d2db067a0a8239dab771d41084fc89e9478f3995f2498.bin.CHM;C:\Users\Administrator\Desktop\Silence\77775f1dbfceb1f1915d2db067a0a8239dab771d41084fc89e9478f3995f2498.bin.CHM;UDS:DangerousObject.Multi.Generic;02/17/2019 17:27:08
   
9. 17.02.2019 17.27.07;检测到的对象 ( 文件 ) 已删除;C:\Users\Administrator\Desktop\Silence\0e0729b51709325688f2741e2d5c6b3f547901837d89c203cb8aa2985b5f0018.bin.exe;C:\Users\Administrator\Desktop\Silence\0e0729b51709325688f2741e2d5c6b3f547901837d89c203cb8aa2985b5f0018.bin.exe;HEUR:Trojan.Win32.Silence.gen;木马程序;02/17/2019 17:27:07
   
10. 17.02.2019 17.27.06;检测到的对象 ( 文件 ) 已删除;C:\Users\Administrator\Desktop\Silence\1135813663bf9c747a1cca7312aef97d345d231df5cdeb314cb8606017d26d86_gbbUYsi7Fo.bin.CHM//toc-generated.hhc;C:\Users\Administrator\Desktop\Silence\1135813663bf9c747a1cca7312aef97d345d231df5cdeb314cb8606017d26d86_gbbUYsi7Fo.bin.CHM//toc-generated.hhc;Trojan.HTML.Starter.b;木马程序;02/17/2019 17:27:06
    
11. 17.02.2019 17.27.06;检测到的对象 ( 文件 ) 已删除;C:\Users\Administrator\Desktop\Silence\1135813663bf9c747a1cca7312aef97d345d231df5cdeb314cb8606017d26d86_gbbUYsi7Fo.bin.CHM//start.htm;C:\Users\Administrator\Desktop\Silence\1135813663bf9c747a1cca7312aef97d345d231df5cdeb314cb8606017d26d86_gbbUYsi7Fo.bin.CHM//start.htm;Trojan.HTML.Agent.nd;木马程序;02/17/2019 17:27:06
    
12. 17.02.2019 17.27.06;检测到的对象 ( 文件 ) 已删除;C:\Users\Administrator\Desktop\Silence\1135813663bf9c747a1cca7312aef97d345d231df5cdeb314cb8606017d26d86_gbbUYsi7Fo.bin.CHM//Index-generated.hhk;C:\Users\Administrator\Desktop\Silence\1135813663bf9c747a1cca7312aef97d345d231df5cdeb314cb8606017d26d86_gbbUYsi7Fo.bin.CHM//Index-generated.hhk;Trojan.HTML.Starter.b;木马程序;02/17/2019 17:27:06
    
13. 17.02.2019 17.27.06;检测到的对象 ( 文件 ) 已删除;C:\Users\Administrator\Desktop\Silence\1135813663bf9c747a1cca7312aef97d345d231df5cdeb314cb8606017d26d86_gbbUYsi7Fo.bin.CHM;C:\Users\Administrator\Desktop\Silence\1135813663bf9c747a1cca7312aef97d345d231df5cdeb314cb8606017d26d86_gbbUYsi7Fo.bin.CHM;UDS:DangerousObject.Multi.Generic;02/17/2019 17:27:06
    

复制代码

蓝蓝的天空

火绒不报

www-tekeze

火绒miss all，智量kill .exe，不检测Html 。

你好，再见

1. 极宝杀毒 查杀日志
   
2. 
   
3. 当前版本：正式版 V1.5
   
4. 
   
5. 开始时间：2019年2月17日17时32分13秒
   
6. 
   
7. 结束时间：2019年2月17日17时32分15秒
   
8. 
   
9. 扫描用时: 3秒
   
10. 
    
11. 扫描速度：无
    
12. 
    
13. 扫描文件：4个
    
14. 
    
15. 发现威胁：4个
    
16. 
    
17. 威胁列表：
    
18. 
    
19.         D:\Sirius\未处理\Silence\0e0729b51709325688f2741e2d5c6b3f547901837d89c203cb8aa2985b5f0018.bin.exe        Win32/Trojan.5a2
    
20. 
    
21.         D:\Sirius\未处理\Silence\1135813663bf9c747a1cca7312aef97d345d231df5cdeb314cb8606017d26d86_gbbUYsi7Fo.bin.CHM        Win32/Trojan.e27
    
22. 
    
23.         D:\Sirius\未处理\Silence\6806630c8bec6145475e421900f63dec20c2c6fdfe3a6f12b6bfddb8db6bb821.bin.CHM        Win32/Trojan.Downloader.8ac
    
24. 
    
25.         D:\Sirius\未处理\Silence\77775f1dbfceb1f1915d2db067a0a8239dab771d41084fc89e9478f3995f2498.bin.CHM        Win32/Trojan.e27

复制代码

llcy

SEP 清空

www-tekeze

ESET，清空！

www-tekeze

红伞，监控杀exe，剩余Html多次扫描不报。

傻瓜爱笨蛋

解压 GD全部歼灭

con16

cav