样本集奉上_114 (02.23)

显示全部楼层 · 发表于 2019-2-23 14:15:27

85枚样本送上，全都是exe，已检查过没有重复，快来快来，扫描？双击？一概欢迎！

PS：原始样本50枚，另有用 UPX 或 ASPack 处理过的35枚。查杀结果格式： S: xx/50，M: xx/35，T: xx/85

蓝奏云盘，下载挺快。。。https://www.lanzous.com/i37prob 密码：infected

显示全部楼层 · 发表于 2019-2-23 14:15:52

本帖最后由 huang1111 于 2019-2-23 14:56 编辑

卡巴扫描kill54x卡巴pdm杀16
剩余15个要么是检测到虚拟机，要么运行时已停止，要么是突然退出进程，要么无法在我的系统环境下运行，已经全部重跑一遍，确认无问题，还有一些白文件
附上剩余文件截图：

显示全部楼层 · 发表于 2019-2-23 14:17:04

本帖最后由 www-tekeze 于 2019-2-23 14:18 编辑

huang1111 发表于 2019-2-23 14:15
卡巴

呵呵，不双击的话会很尴尬。。

PS：RQ没了，恢复后给沙发送上。。。

显示全部楼层 · 发表于 2019-2-23 14:18:24

本帖最后由静影沉璧于 2019-2-23 15:03 编辑

BD：

右键扫描：66X
Samp(16)M.exe Backdoor.Hupigon.AYPE Deleted
Samp(34)M.exe Backdoor.Corebot Deleted
Samp(35).exe Trojan.GenericKD.3202065 Deleted
Samp(14)M.exe Gen:Variant.Jaik.24781 Deleted
Samp(32)M.exe Trojan.Ransom.Locky.AP Deleted
Samp(33)M.exe Trojan.Emotet.HU Deleted
Samp(31).exe Trojan.Generic.5528589 Deleted
Samp(29)M.exe Gen:Variant.Ulise.4041 Deleted
Samp(13).exe Gen:Variant.Razy.438415 Deleted
Samp(48).exe Trojan.GenericKD.31675658 Deleted
Samp(3)M.exe Trojan.GenericKDZ.40579 Deleted
Samp(6)M.exe=>(NSIS o)=>lzma_nsis0002 Trojan.GenericKD.4754140 Moved to Quarantine
Samp(4)M.exe MemScan:Trojan.Agent.DICG Deleted
Samp(35)M.exe Gen:Variant.Titirez.1 Deleted
Samp(25)M.exe=>(NSIS o)=>zlib_nsis0000 Gen:Heur.NSIS.Cerber.1 Moved to Quarantine
Samp(20).exe Gen:Variant.Razy.162579 Deleted
Samp(21).exe Trojan.GenericKD.40403039 Deleted
Samp(25)M.exe=>(heurC) Zum.Ransom.NSIS.Cerber.1 Moved to Quarantine
Samp(28)M.exe Gen:Heur.BrResMon.1 Deleted
Samp(24)M.exe Gen:Trojan.Heur.RP.hKWbailRaxg Deleted
Samp(27)M.exe MemScan:Trojan.Agent.DFCG Deleted
Samp(13)M.exe GenPack:Trojan.Agent.DMTF Deleted
Samp(31)M.exe MemScan:Trojan.Agent.BQQF Deleted
Samp(23)M.exe MemScan:Trojan.Generic.7098704 Deleted
Samp(16).exe Trojan.GenericKD.4755941 Deleted
Samp(34).exe Trojan.Generic.20585231 Deleted
Samp(26)M.exe DeepScan:Generic.EmotetN.FD9B84C0 Deleted
Samp(9)M.exe DeepScan:Generic.Zamg.8.0215D087 Deleted
Samp(20)M.exe Gen:Heur.Emotet.2 Deleted
Samp(12).exe Gen:Trojan.Heur.JP.9mHfaODfIsni Deleted
Samp(19)M.exe Gen:Variant.Barys.878 Deleted
Samp(30).exe Gen:Variant.Zusy.227302 Deleted
Samp(7).exe Trojan.GenericKD.30348089 Deleted
Samp(5).exe Trojan.Ransom.Spora.Gen.1 Deleted
Samp(49).exe Application.Agent.OL Deleted
Samp(8).exe Gen:Variant.Graftor.380600 Deleted
Samp(47).exe Trojan.GenericKD.40672130 Deleted
Samp(28).exe Trojan.GenericKD.5052321 Deleted
Samp(1)M.exe MemScan:Trojan.Agent.DFPS Deleted
Samp(6).exe Trojan.GenericKD.31540174 Deleted
Samp(14).exe Trojan.GenericKD.40860458 Deleted
Samp(32).exe Backdoor.Hupigon.162797 Deleted
Samp(50).exe Gen:Variant.Barys.54953 Deleted
Samp(9).exe Trojan.BRMon.Gen.3 Deleted
Samp(26).exe Trojan.Ransom.Locky.AP Deleted
Samp(44).exe Trojan.GenericKD.12639017 Deleted
Samp(25).exe Trojan.GenericKD.31192053 Deleted
Samp(43).exe Trojan.GenericKD.6009978 Deleted
Samp(27).exe Win32.Parite.F Moved to Quarantine
Samp(45).exe Trojan.GenericKD.31415188 Deleted
Samp(22).exe Gen:Variant.Ser.Ursu.1880 Deleted
Samp(40).exe Trojan.Agent.DFPS Deleted
Samp(38).exe Trojan.GenericKDV.1152014 Deleted
Samp(39).exe Trojan.GenericKD.40434555 Deleted
Samp(37).exe Trojan.GenericKD.31501109 Deleted
Samp(24).exe Trojan.Generic.23253473 Deleted
Samp(42).exe Trojan.Agent.BQQF Deleted
Samp(36).exe Gen:Variant.Strictor.171023 Deleted
Samp(41).exe DeepScan:Generic.Zamg.8.B5B7B5EA Deleted
Samp(23).exe Trojan.GenericKD.40794471 Deleted
Samp(2).exe Trojan.Ransom.CerberKD.5992828 Deleted
Samp(1).exe Trojan.Agent.DFCG Deleted
Samp(15).exe Trojan.GenericKD.4187475 Deleted
Samp(10).exe Gen:Heur.Ransom.Lukitos.1 Deleted
Samp(11).exe Backdoor.Bot.39531 Deleted
Samp(29).exe Gen:Trojan.Heur2.LPT8OWbbe0Y52cIb Deleted
Samp(17).exe Gen:Variant.Ursu.261449 Deleted

双击后云杀：6X
Samp(7)M.exe Gen:Suspicious.Cloud.8.vmNfaSevw!dj
Samp(8)M.exe Gen:Suspicious.Cloud.8.rmKfaigLa8ii
Samp(10)M.exe Gen:Suspicious.Cloud.8.jmGfaCvv7fii
Samp(11)M.exe Gen:Suspicious.Cloud.8.smKfaCq4y0di
Samp(21)M.exe Gen:Suspicious.Cloud.8.lmKfa4CFvVai
Samp(22)M.exe Gen:Suspicious.Cloud.8.jmHfaGqSsQhG

主防杀：6X

T：S:44/50+M:34/35=78/85

显示全部楼层 · 发表于 2019-2-23 14:31:08

安天智甲，S：34/50，M：0/35，T：34/85，40.0%

显示全部楼层 · 发表于 2019-2-23 14:34:29

本帖最后由 www-tekeze 于 2019-2-23 14:45 编辑

管家无BD，S：38/50，M：1/35，T：39/85，45.9%

加BD后：S：43/50，M：22/35，T：65/85，76.5%

显示全部楼层 · 发表于 2019-2-23 14:48:36

火绒 S:36/50 M:19/35 T:55/85 64.7％

显示全部楼层 · 发表于 2019-2-23 14:51:44

www-tekeze 发表于 2019-2-23 14:17
呵呵，不双击的话会很尴尬。。 PS：RQ没了，恢复后给沙发送上。。。

砸糖别忘了

显示全部楼层 · 发表于 2019-2-23 14:53:06

31个@你好，再见不能放大索性下个版本去掉哈哈
36.47%

显示全部楼层 · 发表于 2019-2-23 14:55:29

ziyerain2015 发表于 2019-2-23 14:53
31个@你好，再见不能放大索性下个版本去掉哈哈
36.47%

这数据有点惨，脱壳能力有点堪忧

[病毒样本] 样本集奉上_114 (02.23)

评分

本帖子中包含更多资源

评分

本帖子中包含更多资源

评分

本帖子中包含更多资源

本帖子中包含更多资源

评分

本帖子中包含更多资源