EXE样本10X_91

swizzer

智量

TimelessTT

AVIRA kill all

---

三分钟后扫9.upx.exe HEUR/APC --->

54ss

BD kill 12x
C:\Users\JOJO\Downloads\EXE样本10X_91.zip=>EXE样本10X_91/10.exe Gen:Variant.Razy.547003 Deleted
C:\Users\JOJO\Downloads\EXE样本10X_91.zip=>EXE样本10X_91/1.exe Gen:Variant.MSILPerseus.212368 Deleted
C:\Users\JOJO\Downloads\EXE样本10X_91.zip=>EXE样本10X_91/7.exe Gen:Variant.MSILKrypt.11 Deleted
C:\Users\JOJO\Downloads\EXE样本10X_91.zip=>EXE样本10X_91=>8.exe=>(AutoIT o)=>(AutoIT Script)=>(unicode) AIT:Trojan.Nymeria.219 Deleted
C:\Users\JOJO\Downloads\EXE样本10X_91.zip=>EXE样本10X_91/4.exe GenPack:Trojan.Inject.AUZ Deleted
C:\Users\JOJO\Downloads\EXE样本10X_91.zip=>EXE样本10X_91/10.upx.exe Gen:Trojan.Heur.RP.jmGfaadGJTki Deleted
C:\Users\JOJO\Downloads\EXE样本10X_91.zip=>EXE样本10X_91/2.exe Trojan.GenericKD.33544271 Deleted
C:\Users\JOJO\Downloads\EXE样本10X_91.zip=>EXE样本10X_91/3.exe Trojan.GenericKD.32711293 Deleted
C:\Users\JOJO\Downloads\EXE样本10X_91.zip=>EXE样本10X_91/5.exe Gen:Variant.Razy.274809 Deleted
C:\Users\JOJO\Downloads\EXE样本10X_91.zip=>EXE样本10X_91=>8.exe=>(AutoIT Script)=>(unicode) AIT:Trojan.Nymeria.219 Deleted
C:\Users\JOJO\Downloads\EXE样本10X_91.zip=>EXE样本10X_91=>8.upx.exe=>(AutoIT o)=>(AutoIT Script)=>(unicode) AIT:Trojan.Nymeria.219 Deleted
C:\Users\JOJO\Downloads\EXE样本10X_91.zip=>EXE样本10X_91/9.exe Gen:Variant.Razy.547003 Deleted
C:\Users\JOJO\Downloads\EXE样本10X_91.zip=>EXE样本10X_91=>8.upx.exe=>(AutoIT Script)=>(unicode) AIT:Trojan.Nymeria.219 Deleted
C:\Users\JOJO\Downloads\EXE样本10X_91.zip=>EXE样本10X_91/9.upx.exe Gen:Trojan.Heur.RP.jmGfae2Vyiii Deleted

很温和

bd全灭

Nocria

IKARUS emptied

1. [16.03.2020 10:23:13] On-demand scan started: "user_defined"
   
2. [16.03.2020 10:23:13] Found, 0.15s, SigName: "Trojan-Downloader.MSIL.Tiny", SigId: 3182228, Type: "VIRUS", File: "C:\Users\promi\Desktop\EXE样本10X_91\EXE样本10X_91\1.exe"
   
3. [16.03.2020 10:23:13] Found, 0.46s, SigName: "Win32.SuspectCrc", SigId: 294320862, Type: "VIRUS", File: "C:\Users\promi\Desktop\EXE样本10X_91\EXE样本10X_91\2.exe"
   
4. [16.03.2020 10:23:13] Found, 0.63s, SigName: "Trojan.MSIL.Crypt", SigId: 3063393, Type: "VIRUS", File: "C:\Users\promi\Desktop\EXE样本10X_91\EXE样本10X_91\3.exe"
   
5. [16.03.2020 10:23:13] Found, 0.47s, SigName: "Backdoor.Win32.DarkKomet", SigId: 3597992, Type: "VIRUS", File: "C:\Users\promi\Desktop\EXE样本10X_91\EXE样本10X_91\4.exe"
   
6. [16.03.2020 10:23:13] Found, 0.109s, SigName: "Trojan-Spy.Agent", SigId: 3731495, Type: "VIRUS", File: "C:\Users\promi\Desktop\EXE样本10X_91\EXE样本10X_91\10.exe"
   
7. [16.03.2020 10:23:13] Found, 0.125s, SigName: "Trojan-Spy.Agent", SigId: 3731495, Type: "VIRUS", File: "C:\Users\promi\Desktop\EXE样本10X_91\EXE样本10X_91\10.upx.exe"
   
8. [16.03.2020 10:23:13] Found, 0.62s, SigName: "Trojan.MSIL.Crypt", SigId: 2034846, Type: "VIRUS", File: "C:\Users\promi\Desktop\EXE样本10X_91\EXE样本10X_91\5.exe"
   
9. [16.03.2020 10:23:13] Found, 0.78s, SigName: "Trojan.MSIL.NanoCore", SigId: 3320069, Type: "VIRUS", File: "C:\Users\promi\Desktop\EXE样本10X_91\EXE样本10X_91\6.exe"
   
10. [16.03.2020 10:23:13] Found, 0.62s, SigName: "Trojan.MSIL.NanoCore", SigId: 1325605, Type: "VIRUS", File: "C:\Users\promi\Desktop\EXE样本10X_91\EXE样本10X_91\7.exe"
    
11. [16.03.2020 10:23:13] Found, 0.78s, SigName: "Trojan.MSIL.NanoCore", SigId: 3320069, Type: "VIRUS", File: "C:\Users\promi\Desktop\EXE样本10X_91\EXE样本10X_91\6.upx.exe"
    
12. [16.03.2020 10:23:13] Found, 0.78s, SigName: "Trojan-Spy.Agent", SigId: 3731495, Type: "VIRUS", File: "C:\Users\promi\Desktop\EXE样本10X_91\EXE样本10X_91\9.exe"
    
13. [16.03.2020 10:23:13] Found, 0.156s, SigName: "Trojan-Spy.Agent", SigId: 3731495, Type: "VIRUS", File: "C:\Users\promi\Desktop\EXE样本10X_91\EXE样本10X_91\9.upx.exe"
    
14. [16.03.2020 10:23:13] Found, 0.547s, SigName: "Trojan.Autoit", SigId: 3302128, Type: "VIRUS", File: "C:\Users\promi\Desktop\EXE样本10X_91\EXE样本10X_91\8.exe"
    
15. [16.03.2020 10:23:13] Found, 0.532s, SigName: "Trojan.Autoit", SigId: 3302128, Type: "VIRUS", File: "C:\Users\promi\Desktop\EXE样本10X_91\EXE样本10X_91\8.upx.exe"
    
16. [16.03.2020 10:23:14] On-demand scan FINISHED: "user_defined"
    
17. [16.03.2020 10:23:14] ----------------------------------------------------
    
18. [16.03.2020 10:23:14] Directories scanned: 2
    
19. [16.03.2020 10:23:14] Files scanned: 14
    
20. [16.03.2020 10:23:14] Virus found: 14
    
21. [16.03.2020 10:23:14] ----------------------------------------------------

复制代码

ox400000

咖啡清空，我发现咖啡对于非PE样本不太敏感外其他的还是可以的

Alitalia

火绒清空