#APT_CozyBear_Implant_Sep19_1

显示全部楼层 · 发表于 2020-3-14 21:46:09

YARA signature "IMPLANT_10_v2" classified file "9dc065f0e19795bc8f386a2a1bb5218d41ece4dc1e9c89f9b1fd106eff0c67c1.bin" as "apt,apt29" based on indicators: "34466633c148ffc1,346b6633c148ffc1,342f6633c148ffc1,6666666666660f1f840000000000" (Reference: https://www.us-cert.gov/ncas/current-activity/2017/02/10/Enhanced-Analysis-GRIZZLY-STEPPE, Author: US CERT)

复制代码

显示全部楼层 · 发表于 2020-3-14 21:48:39

显示全部楼层 · 发表于 2020-3-14 21:51:23

ESET Win64/Cozer.B

显示全部楼层 · 发表于 2020-3-14 21:51:42

Avast(没看到上面的）

显示全部楼层 · 发表于 2020-3-14 21:53:30

5596f969e36c819890091af69d360e97faf167fd.dll - Win64/Cozer.B 特洛伊木马的变种

显示全部楼层 · 发表于 2020-3-14 21:56:20

火绒扫描miss

显示全部楼层 · 发表于 2020-3-14 21:58:01

360miss

显示全部楼层 · 发表于 2020-3-14 22:02:20

liu237 发表于 2020-3-14 21:58
360miss

卤蛋现在杀

显示全部楼层 · 发表于 2020-3-14 22:02:28

EMSISOFT killed

显示全部楼层 · 发表于 2020-3-14 22:03:24

BE_HC 发表于 2020-3-14 22:02
卤蛋现在杀

这速度。。好快啊

[病毒样本] #APT_CozyBear_Implant_Sep19_1