搜索
12
返回列表 发新帖
楼主: Jirehlov1234
收起左侧

[病毒样本] 3c3fec3cef9506c1e7d333a079384baa19b70f6ed56ec2f51485682543ac1235

[复制链接]
www-tekeze
发表于 2019-10-2 23:12:21 | 显示全部楼层

安天和无BD管家,Both Miss 。


Nocria
发表于 2019-10-2 23:38:37 | 显示全部楼层

AVA 25.23536
GD 26.16138

*** Process ***

Process: 5240
File name: 019-10-02 113354.exe
Path: C:\Users\promi\AppData\Local\Temp\BNZ.5d94c4362624a\019-10-02 113354.exe

Publisher: Unknown publisher

Started by: 019-10-02 113354.exe
Publisher: Unknown publisher


*** Actions ***

An unknown process was accessed.
The program has created or manipulated an executable file.
The program attempted to remove its own program file.
The program attempted to rename its own program file.
The program attempted to move its own program file.


*** Quarantine ***

The following files were moved into quarantine:
C:\Users\promi\AppData\Local\Temp\BNZ.5d94c4362624a\019-10-02 113354.exe
C:\Users\promi\AppData\Local\movecrypto\movecrypto.exe

The following registry entries were deleted:


YGLhnIIJLScnJycmBi4nKCcnJwe5YuGcorAtJycnJyYGrHJyYmJycsAvJycnJyYGj3LCcpJyknBmcnJycmJicHZycnJyYmJwuHJycnJiYnB5cnJycmJicLqy4V5jKykb7jW2crLhXmMrCOcoJ+dwb3JycnJiYnB/cnJycmJigPtygnJycnKAvnJyKCcpJw8A
Rules version: 5.0.152
OS: Windows 6.3 Service Pack 0.0 Build: 9600 - Workstation 64bit OS
dll version: 76935

--b07c5861
MD5: 1A41953E40C7BDD7C42993C802735B6F
"C:\Users\promi\AppData\Local\Temp\BNZ.5d94c4362624a\019-10-02 113354.exe"
MD5: 1A41953E40C7BDD7C42993C802735B6F

本帖子中包含更多资源

您需要 登录 才可以下载或查看,没有帐号?快速注册

x
www-tekeze
发表于 2019-10-3 00:04:42 | 显示全部楼层

SEP,Killed 。

本帖子中包含更多资源

您需要 登录 才可以下载或查看,没有帐号?快速注册

x
暗_黑
发表于 2019-10-3 08:44:36 | 显示全部楼层

我一直在好奇,盒子是啥
静影沉璧
发表于 2019-10-3 08:51:27 | 显示全部楼层
暗_黑 发表于 2019-10-3 08:44
我一直在好奇,盒子是啥

FortiSandbox
暗_黑
发表于 2019-10-3 09:07:34 | 显示全部楼层

有下载地址吗
BE_HC
发表于 2019-10-3 09:10:30 | 显示全部楼层

硬件来的。。。
a939707506
发表于 2019-10-3 11:10:55 | 显示全部楼层
BD miss
暗_黑
发表于 2019-10-3 11:18:05 | 显示全部楼层
Sophos   Troj / Emotet-BHK
您需要登录后才可以回帖 登录 | 快速注册

本版积分规则

手机版|杀毒软件|软件论坛|卡饭乐购| 卡饭论坛

Copyright © KaFan  KaFan.cn All Rights Reserved.

Powered by Discuz! X3.4( 苏ICP备07004770号 ) GMT+8, 2019-12-11 20:40 , Processed in 0.064531 second(s), 15 queries .

快速回复 返回顶部 返回列表