EXE样本10X_84

QVM360

RT，想双击自己改后缀，后果自负。。



载点：https://www.lanzous.com/i9v77pe     密码：infected

QVM360

刚才整理样本的时候不小心运行了#84 (10).vir，还好及时结束进程，大家帮我分析下哈！

温馨小屋

卡巴

扫描9个剩一个10




10号运行杀了一堆监控程序，然后就退出了

暗_黑

fsp   9x
剩余#10

a233

Avast清空

我我我55

eset杀了9个

我我我55

ESET 10exe，2020年3月2日 Win32/Packed.FlyStudio.AA 易语言程序

暗_黑

QVM360 发表于 2020-3-2 14:28
刚才整理样本的时候不小心运行了#84 (10).vir，还好及时结束进程，大家帮我分析下哈！

https://s.threatbook.cn/report/f ... p1_enx86_office2013
微步分析，里面有处置建议

Nocria

IKARUS - 8/10

1. [02.03.2020 14:04:51] On-demand scan started: "user_defined"
   
2. [02.03.2020 14:04:51] Found, 0.00s, SigName: "Trojan.Win32.Crypt", SigId: 293770591, Type: "VIRUS", File: "C:\Users\promi\Desktop\EXE样本10X_84\EXE样本10X_84\#84 (1).vir"
   
3. [02.03.2020 14:04:51] Found, 0.78s, SigName: "Trojan.Win32.Disabler", SigId: 3466347, Type: "VIRUS", File: "C:\Users\promi\Desktop\EXE样本10X_84\EXE样本10X_84\#84 (10).vir"
   
4. [02.03.2020 14:04:51] Found, 0.94s, SigName: "Win32.SuspectCrc", SigId: 293740485, Type: "VIRUS", File: "C:\Users\promi\Desktop\EXE样本10X_84\EXE样本10X_84\#84 (4).vir"
   
5. [02.03.2020 14:04:51] Found, 0.250s, SigName: "Trojan-Spy.Keylogger.AgentTesla", SigId: 3714736, Type: "VIRUS", File: "C:\Users\promi\Desktop\EXE样本10X_84\EXE样本10X_84\#84 (5).vir"
   
6. [02.03.2020 14:04:51] Found, 0.234s, SigName: "Trojan.MSIL.Inject", SigId: 3761433, Type: "VIRUS", File: "C:\Users\promi\Desktop\EXE样本10X_84\EXE样本10X_84\#84 (6).vir"
   
7. [02.03.2020 14:04:51] Found, 0.16s, SigName: "Trojan.VB.Crypt", SigId: 3762298, Type: "VIRUS", File: "C:\Users\promi\Desktop\EXE样本10X_84\EXE样本10X_84\#84 (7).vir"
   
8. [02.03.2020 14:04:51] Found, 0.16s, SigName: "Trojan-Spy.Agent", SigId: 3734558, Type: "VIRUS", File: "C:\Users\promi\Desktop\EXE样本10X_84\EXE样本10X_84\#84 (8).vir"
   
9. [02.03.2020 14:04:51] Found, 0.15s, SigName: "Trojan.VB.Crypt", SigId: 3761387, Type: "VIRUS", File: "C:\Users\promi\Desktop\EXE样本10X_84\EXE样本10X_84\#84 (9).vir"
   
10. [02.03.2020 14:04:52] On-demand scan FINISHED: "user_defined"
    
11. [02.03.2020 14:04:52] ----------------------------------------------------
    
12. [02.03.2020 14:04:52] Directories scanned: 2
    
13. [02.03.2020 14:04:52] Files scanned: 10
    
14. [02.03.2020 14:04:52] Virus found: 8
    
15. [02.03.2020 14:04:52] ----------------------------------------------------

复制代码

沈志鸣

火绒3x

#84 (2).vir HVM:VirTool/Obfuscator.gen!A
#84 (4).vir HEUR:VirTool/DelfInjector.gen!J
#84 (5).vir HVM:TrojanDropper/Sloader.a