#AsyncRAT (2020-03-14)

zay365

AnyRun上一天之内被上传了很多有关联的样本
有几个的信息还是尼泊尔语的
https://www.lanzous.com/iaa918d

54ss

BD扫描 14/20 相信双击能够全杀

C:\Users\JOJO\Downloads\AsyncRAT.rar=>C# MR.jn.exe=>(MSIL 0)=>(Embedded 0)	Gen:Variant.Zusy.275162	Moved to Quarantine
C:\Users\JOJO\Downloads\AsyncRAT.rar=>Temp_1.exe	Trojan.GenericKD.42846966	Moved to Quarantine
C:\Users\JOJO\Downloads\AsyncRAT.rar=>clean.exe=>(NSIS o)=>lzma_nsis0001=>(MSIL 0)=>(Embedded 0)	Gen:Variant.Zusy.275162	Moved to Quarantine
C:\Users\JOJO\Downloads\AsyncRAT.rar=>hhhhhhhhhhhhhhhhhhh.exe=>(NSIS o)=>lzma_nsis0001	Gen:Suspicious.Cloud.4.om0@aGaL4de	Moved to Quarantine
C:\Users\JOJO\Downloads\AsyncRAT.rar=>clean.exe=>(NSIS o)=>lzma_nsis0002=>(NSIS o)=>lzma_nsis0001	Trojan.GenericKD.42846966	Moved to Quarantine
C:\Users\JOJO\Downloads\AsyncRAT.rar=>Client(1).exe	Gen:Variant.Razy.583888	Moved to Quarantine
C:\Users\JOJO\Downloads\AsyncRAT.rar=>Client.exe	Gen:Variant.Razy.583888	Moved to Quarantine
C:\Users\JOJO\Downloads\AsyncRAT.rar=>qqqqqqqq.exe	Trojan.GenericKD.33543586	Moved to Quarantine
C:\Users\JOJO\Downloads\AsyncRAT.rar=>tttttttttt.exe=>(NSIS o)=>lzma_nsis0001	Trojan.GenericKD.42846966	Moved to Quarantine
C:\Users\JOJO\Downloads\AsyncRAT.rar=>英مe'zЮ文הת个בPנ么ר间文字ЬiלБЪБQDйLййLёХЬנйЮ间z食ХאניЖת.exe	Gen:Variant.Razy.113806	Moved to Quarantine
C:\Users\JOJO\Downloads\AsyncRAT.rar=>0000000.exe	Gen:Suspicious.Cloud.4.km0@auDO2Nii	Moved to Quarantine
C:\Users\JOJO\Downloads\AsyncRAT.rar=>00000001.exe	Gen:Suspicious.Cloud.4.pm0@aW4yrR	Moved to Quarantine
C:\Users\JOJO\Downloads\AsyncRAT.rar=>1.exe	Gen:Suspicious.Cloud.4.om0@aGaL4de	Moved to Quarantine
C:\Users\JOJO\Downloads\AsyncRAT.rar=>00000002.exe	Gen:Suspicious.Cloud.4.im0@aK1JrRb	Moved to Quarantine

我我我55

卡巴斯基剩下3个 双击全杀

swizzer

智量团灭

knight0756

nod32 13剩下一个C# MR.jn.exe

静影沉璧

ESET

扫描余1x

1. Log
   
2. Scan Log
   
3. Version of detection engine: 21000P (20200315)
   
4. Date: 2020/3/15  Time: 17:23:32
   
5. Scanned disks, folders and files: C:\Users\Administrator\Desktop\AsyncRAT
   
6. C:\Users\Administrator\Desktop\AsyncRAT\0000000.exe - a variant of Generik.BOULHSC trojan - cleaned by deleting [1]
   
7. C:\Users\Administrator\Desktop\AsyncRAT\00000001.exe - a variant of MSIL/Kryptik.SPL trojan - cleaned by deleting [1]
   
8. C:\Users\Administrator\Desktop\AsyncRAT\00000002.exe - a variant of Generik.EOGYLBF trojan - cleaned by deleting [1]
   
9. C:\Users\Administrator\Desktop\AsyncRAT\1.exe - a variant of MSIL/Packed.CryptoObfuscator.B trojan - cleaned by deleting [1]
   
10. C:\Users\Administrator\Desktop\AsyncRAT\111111.exe - a variant of MSIL/Packed.CryptoObfuscator.B trojan - cleaned by deleting [1]
    
11. C:\Users\Administrator\Desktop\AsyncRAT\3.exe - a variant of Win32/Injector.ELAO trojan - cleaned by deleting [1]
    
12. C:\Users\Administrator\Desktop\AsyncRAT\Client(1).exe - a variant of MSIL/Agent.CFQ trojan - cleaned by deleting [1]
    
13. C:\Users\Administrator\Desktop\AsyncRAT\Client.exe - a variant of MSIL/Agent.CFQ trojan - cleaned by deleting [1]
    
14. C:\Users\Administrator\Desktop\AsyncRAT\Temp_1.exe » AUTOIT » qqqqqqqq.exe - a variant of MSIL/Packed.CryptoObfuscator.B trojan - cleaned by deleting [1]
    
15. C:\Users\Administrator\Desktop\AsyncRAT\Temp_1.exe » AUTOIT » script.bin - a variant of Win32/TrojanDropper.Autoit.HG trojan - cleaned by deleting [1]
    
16. C:\Users\Administrator\Desktop\AsyncRAT\Temp_2.exe » AUTOIT » oooooooooooooo.exe - a variant of MSIL/Packed.CryptoObfuscator.B trojan - cleaned by deleting [1]
    
17. C:\Users\Administrator\Desktop\AsyncRAT\Temp_2.exe » AUTOIT » script.bin - a variant of Win32/TrojanDropper.Autoit.HG trojan - cleaned by deleting [1]
    
18. C:\Users\Administrator\Desktop\AsyncRAT\Temp_2.exe » EMB » Resource[1][29] - a variant of MSIL/Packed.CryptoObfuscator.B trojan - cleaned by deleting [1]
    
19. C:\Users\Administrator\Desktop\AsyncRAT\Unpalpablelyex1.exe - a variant of Win32/Injector.ELBD trojan - cleaned by deleting [1]
    
20. C:\Users\Administrator\Desktop\AsyncRAT\clean.exe » NSIS » system.exe » NSIS » system.exe » AUTOIT » qqqqqqqq.exe - a variant of MSIL/Packed.CryptoObfuscator.B trojan - cleaned by deleting [1]
    
21. C:\Users\Administrator\Desktop\AsyncRAT\clean.exe » NSIS » system.exe » NSIS » system.exe » AUTOIT » script.bin - a variant of Win32/TrojanDropper.Autoit.HG trojan - cleaned by deleting [1]
    
22. C:\Users\Administrator\Desktop\AsyncRAT\clean.exe » NSIS » system.exe » NSIS » system1.exe » AUTOIT » oooooooooooooo.exe - a variant of MSIL/Packed.CryptoObfuscator.B trojan - cleaned by deleting [1]
    
23. C:\Users\Administrator\Desktop\AsyncRAT\clean.exe » NSIS » system.exe » NSIS » system1.exe » AUTOIT » script.bin - a variant of Win32/TrojanDropper.Autoit.HG trojan - cleaned by deleting [1]
    
24. C:\Users\Administrator\Desktop\AsyncRAT\clean.exe » NSIS » system.exe » NSIS » system1.exe » EMB » Resource[1][29] - a variant of MSIL/Packed.CryptoObfuscator.B trojan - cleaned by deleting [1]
    
25. C:\Users\Administrator\Desktop\AsyncRAT\gaytest.bat - BAT/TrojanDownloader.Agent.NZP trojan - cleaned by deleting [1]
    
26. C:\Users\Administrator\Desktop\AsyncRAT\hhhhhhhhhhhhhhhhhhh.exe » NSIS » 1.exe - a variant of MSIL/Packed.CryptoObfuscator.B trojan - cleaned by deleting [1]
    
27. C:\Users\Administrator\Desktop\AsyncRAT\hhhhhhhhhhhhhhhhhhh.exe » NSIS » 2.exe - a variant of MSIL/Packed.CryptoObfuscator.B trojan - cleaned by deleting [1]
    
28. C:\Users\Administrator\Desktop\AsyncRAT\oooooooooooooo.exe - a variant of MSIL/Packed.CryptoObfuscator.B trojan - cleaned by deleting [1]
    
29. C:\Users\Administrator\Desktop\AsyncRAT\program.exe - a variant of MSIL/TrojanDropper.Agent.EHR trojan - cleaned by deleting [1]
    
30. C:\Users\Administrator\Desktop\AsyncRAT\qqqqqqqq.exe - a variant of MSIL/Packed.CryptoObfuscator.B trojan - cleaned by deleting [1]
    
31. C:\Users\Administrator\Desktop\AsyncRAT\tttttttttt.exe » NSIS » system.exe » AUTOIT » qqqqqqqq.exe - a variant of MSIL/Packed.CryptoObfuscator.B trojan - cleaned by deleting [1]
    
32. C:\Users\Administrator\Desktop\AsyncRAT\tttttttttt.exe » NSIS » system.exe » AUTOIT » script.bin - a variant of Win32/TrojanDropper.Autoit.HG trojan - cleaned by deleting [1]
    
33. C:\Users\Administrator\Desktop\AsyncRAT\tttttttttt.exe » NSIS » system1.exe » AUTOIT » oooooooooooooo.exe - a variant of MSIL/Packed.CryptoObfuscator.B trojan - cleaned by deleting [1]
    
34. C:\Users\Administrator\Desktop\AsyncRAT\tttttttttt.exe » NSIS » system1.exe » AUTOIT » script.bin - a variant of Win32/TrojanDropper.Autoit.HG trojan - cleaned by deleting [1]
    
35. C:\Users\Administrator\Desktop\AsyncRAT\tttttttttt.exe » NSIS » system1.exe » EMB » Resource[1][29] - a variant of MSIL/Packed.CryptoObfuscator.B trojan - cleaned by deleting [1]
    
36. C:\Users\Administrator\Desktop\AsyncRAT\घअधबयएअपभतलएयटऋफऔऔछऔ.exe - a variant of MSIL/Packed.CryptoObfuscator.B trojan - cleaned by deleting [1]
    
37. C:\Users\Administrator\Desktop\AsyncRAT\घअधबयएअपभतलएयटऋषलबऑषफऔऔछऔ.exe - a variant of MSIL/Kryptik.HXZ trojan - cleaned by deleting [1]
    
38. C:\Users\Administrator\Desktop\AsyncRAT\英مe'zЮ文הת个בPנ么ר间文字ЬiלБЪБQDйLййLёХЬנйЮ间z食ХאניЖת.exe - a variant of MSIL/TrojanDropper.Agent.EHR trojan - cleaned by deleting [1]
    
39. Number of scanned objects: 70
    
40. Number of detections: 33
    
41. Number of cleaned objects: 33
    
42. Time of completion: 17:24:01  Total scanning time: 29 sec (00:00:29)
    
43. 
    
44. Notes:
    
45. [1] Object has been deleted as it only contained the virus body.
    

复制代码

liu237

360杀6个
改MD5杀8个？？
原文件再扫一边。。。杀19个。。。。
这云也。。。太快了前后两分钟
让我产生。。。了。。疑惑

CHURP

卡巴杀20个剩下3个修复

CHURP

我我我55 发表于 2020-3-15 17:21
卡巴斯基剩下3个 双击全杀

我的卡巴全杀剩下3个修复了你看看

a233

Avast 17X