-------------------------------样本集奉上_135-------------------------------

马甲账号

RT，未改后缀请小心食用，后果自负。。



载点：https://www.lanzous.com/iaddl1i     密码：infected

LSPD

Kaspersky
扫描 -Aspack kill 9x miss 6x
        -MD5 kill 12x miss 3x
        -Original kill 15x
        -UPX kill 11x miss 4x
双击 -Aspack kill 4x miss 2x(13号报错，9号miss）
        -MD5 kill 1x miss 2x(4.9号）
        -UPX kill 3x miss 1x(9号）

Nocria

IKARUS

Original - 12/15

1. [18.03.2020 08:50:19] On-demand scan started: "user_defined"
   
2. [18.03.2020 08:50:19] Found, 0.32s, SigName: "Trojan-Banker.Emotet", SigId: 3780555, Type: "VIRUS", File: "C:\Users\promi\Desktop\样本集奉上_135\Original\11.exe"
   
3. [18.03.2020 08:50:19] Found, 0.63s, SigName: "Trojan-Spy.Agent", SigId: 294337784, Type: "VIRUS", File: "C:\Users\promi\Desktop\样本集奉上_135\Original\12.exe"
   
4. [18.03.2020 08:50:19] Found, 0.62s, SigName: "Trojan.MSIL.Agent", SigId: 3666868, Type: "VIRUS", File: "C:\Users\promi\Desktop\样本集奉上_135\Original\13.exe"
   
5. [18.03.2020 08:50:19] Found, 0.62s, SigName: "Trojan.Win32.Krypt", SigId: 3620030, Type: "VIRUS", File: "C:\Users\promi\Desktop\样本集奉上_135\Original\14.exe"
   
6. [18.03.2020 08:50:19] Found, 0.47s, SigName: "Trojan-Ransom.Nemesis", SigId: 3429710, Type: "VIRUS", File: "C:\Users\promi\Desktop\样本集奉上_135\Original\15.exe"
   
7. [18.03.2020 08:50:19] Found, 0.16s, SigName: "Trojan.MSIL.Inject", SigId: 3781434, Type: "VIRUS", File: "C:\Users\promi\Desktop\样本集奉上_135\Original\2.com"
   
8. [18.03.2020 08:50:19] Found, 0.63s, SigName: "Trojan.Injector", SigId: 3322806, Type: "VIRUS", File: "C:\Users\promi\Desktop\样本集奉上_135\Original\3.exe"
   
9. [18.03.2020 08:50:19] Found, 0.63s, SigName: "Win32.Outbreak", SigId: 294381052, Type: "VIRUS", File: "C:\Users\promi\Desktop\样本集奉上_135\Original\4.exe"
   
10. [18.03.2020 08:50:19] Found, 0.15s, SigName: "Trojan.TrickBot", SigId: 3467792, Type: "VIRUS", File: "C:\Users\promi\Desktop\样本集奉上_135\Original\5.exe"
    
11. [18.03.2020 08:50:19] Found, 0.266s, SigName: "Trojan.Inject", SigId: 3780516, Type: "VIRUS", File: "C:\Users\promi\Desktop\样本集奉上_135\Original\10.exe"
    
12. [18.03.2020 08:50:19] Found, 0.63s, SigName: "Trojan.MSIL.Spy", SigId: 2916829, Type: "VIRUS", File: "C:\Users\promi\Desktop\样本集奉上_135\Original\7.exe"
    
13. [18.03.2020 08:50:19] Found, 0.171s, SigName: "Trojan.Inject", SigId: 3780516, Type: "VIRUS", File: "C:\Users\promi\Desktop\样本集奉上_135\Original\6.exe"
    
14. [18.03.2020 08:50:20] On-demand scan FINISHED: "user_defined"
    
15. [18.03.2020 08:50:20] ----------------------------------------------------
    
16. [18.03.2020 08:50:20] Directories scanned: 1
    
17. [18.03.2020 08:50:20] Files scanned: 15
    
18. [18.03.2020 08:50:20] Virus found: 12
    
19. [18.03.2020 08:50:20] ----------------------------------------------------

复制代码

MD5 - 10/15

1. [18.03.2020 08:51:02] On-demand scan started: "user_defined"
   
2. [18.03.2020 08:51:02] Found, 0.15s, SigName: "Trojan-Banker.Emotet", SigId: 3780555, Type: "VIRUS", File: "C:\Users\promi\Desktop\样本集奉上_135\MD5\11.exe"
   
3. [18.03.2020 08:51:02] Found, 0.187s, SigName: "Trojan.Inject", SigId: 3780516, Type: "VIRUS", File: "C:\Users\promi\Desktop\样本集奉上_135\MD5\10.exe"
   
4. [18.03.2020 08:51:02] Found, 0.188s, SigName: "Trojan.MSIL.Agent", SigId: 3666868, Type: "VIRUS", File: "C:\Users\promi\Desktop\样本集奉上_135\MD5\13.exe"
   
5. [18.03.2020 08:51:02] Found, 0.31s, SigName: "Trojan.Win32.Krypt", SigId: 3620030, Type: "VIRUS", File: "C:\Users\promi\Desktop\样本集奉上_135\MD5\14.exe"
   
6. [18.03.2020 08:51:02] Found, 0.31s, SigName: "Trojan-Ransom.Nemesis", SigId: 3429710, Type: "VIRUS", File: "C:\Users\promi\Desktop\样本集奉上_135\MD5\15.exe"
   
7. [18.03.2020 08:51:02] Found, 0.32s, SigName: "Trojan.MSIL.Inject", SigId: 3781434, Type: "VIRUS", File: "C:\Users\promi\Desktop\样本集奉上_135\MD5\2.com"
   
8. [18.03.2020 08:51:02] Found, 0.15s, SigName: "Trojan.TrickBot", SigId: 3467792, Type: "VIRUS", File: "C:\Users\promi\Desktop\样本集奉上_135\MD5\5.exe"
   
9. [18.03.2020 08:51:02] Found, 0.47s, SigName: "Trojan.Injector", SigId: 3322806, Type: "VIRUS", File: "C:\Users\promi\Desktop\样本集奉上_135\MD5\3.exe"
   
10. [18.03.2020 08:51:02] Found, 0.32s, SigName: "Trojan.MSIL.Spy", SigId: 2916829, Type: "VIRUS", File: "C:\Users\promi\Desktop\样本集奉上_135\MD5\7.exe"
    
11. [18.03.2020 08:51:02] Found, 0.140s, SigName: "Trojan.Inject", SigId: 3780516, Type: "VIRUS", File: "C:\Users\promi\Desktop\样本集奉上_135\MD5\6.exe"
    
12. [18.03.2020 08:51:02] On-demand scan FINISHED: "user_defined"
    
13. [18.03.2020 08:51:02] ----------------------------------------------------
    
14. [18.03.2020 08:51:02] Directories scanned: 1
    
15. [18.03.2020 08:51:02] Files scanned: 15
    
16. [18.03.2020 08:51:02] Virus found: 10
    
17. [18.03.2020 08:51:02] ----------------------------------------------------

复制代码

UPX - 8/13

1. [18.03.2020 08:51:38] On-demand scan started: "user_defined"
   
2. [18.03.2020 08:51:38] Found, 0.32s, SigName: "Trojan-Banker.Emotet", SigId: 3780555, Type: "VIRUS", File: "C:\Users\promi\Desktop\样本集奉上_135\UPX\11.exe"
   
3. [18.03.2020 08:51:38] Found, 0.219s, SigName: "Trojan.Inject", SigId: 3780516, Type: "VIRUS", File: "C:\Users\promi\Desktop\样本集奉上_135\UPX\10.exe"
   
4. [18.03.2020 08:51:38] Found, 0.203s, SigName: "Trojan.MSIL.Agent", SigId: 3666868, Type: "VIRUS", File: "C:\Users\promi\Desktop\样本集奉上_135\UPX\13.exe"
   
5. [18.03.2020 08:51:38] Found, 0.109s, SigName: "Trojan-Ransom.Nemesis", SigId: 3429710, Type: "VIRUS", File: "C:\Users\promi\Desktop\样本集奉上_135\UPX\15.exe"
   
6. [18.03.2020 08:51:38] Found, 0.78s, SigName: "Trojan.Injector", SigId: 3322806, Type: "VIRUS", File: "C:\Users\promi\Desktop\样本集奉上_135\UPX\3.exe"
   
7. [18.03.2020 08:51:38] Found, 0.62s, SigName: "Trojan-Banker.TrickBot", SigId: 3674940, Type: "VIRUS", File: "C:\Users\promi\Desktop\样本集奉上_135\UPX\5.exe"
   
8. [18.03.2020 08:51:39] Found, 0.109s, SigName: "Trojan.Inject", SigId: 3781370, Type: "VIRUS", File: "C:\Users\promi\Desktop\样本集奉上_135\UPX\8.exe"
   
9. [18.03.2020 08:51:39] Found, 0.172s, SigName: "Trojan.Inject", SigId: 3780516, Type: "VIRUS", File: "C:\Users\promi\Desktop\样本集奉上_135\UPX\6.exe"
   
10. [18.03.2020 08:51:39] On-demand scan FINISHED: "user_defined"
    
11. [18.03.2020 08:51:39] ----------------------------------------------------
    
12. [18.03.2020 08:51:39] Directories scanned: 1
    
13. [18.03.2020 08:51:39] Files scanned: 13
    
14. [18.03.2020 08:51:39] Virus found: 8
    
15. [18.03.2020 08:51:39] ----------------------------------------------------

复制代码

ASPack - 3/13

1. [18.03.2020 08:52:19] On-demand scan started: "user_defined"
   
2. [18.03.2020 08:52:20] Found, 0.63s, SigName: "Trojan.Kazy", SigId: 2759213, Type: "VIRUS", File: "C:\Users\promi\Desktop\样本集奉上_135\Aspack\4.exe"
   
3. [18.03.2020 08:52:20] Found, 0.15s, SigName: "Trojan.Win32.Vapsup", SigId: 1973426, Type: "VIRUS", File: "C:\Users\promi\Desktop\样本集奉上_135\Aspack\5.exe"
   
4. [18.03.2020 08:52:21] Found, 0.110s, SigName: "Trojan-Dropper.Vb", SigId: 1970945, Type: "VIRUS", File: "C:\Users\promi\Desktop\样本集奉上_135\Aspack\9.exe"
   
5. [18.03.2020 08:52:21] On-demand scan FINISHED: "user_defined"
   
6. [18.03.2020 08:52:21] ----------------------------------------------------
   
7. [18.03.2020 08:52:21] Directories scanned: 1
   
8. [18.03.2020 08:52:21] Files scanned: 13
   
9. [18.03.2020 08:52:21] Virus found: 3
   
10. [18.03.2020 08:52:21] ----------------------------------------------------
    

复制代码

静影沉璧

ESET

Aspack 12/13

1. Log
   
2. Scan Log
   
3. Version of detection engine: 21015P (20200317)
   
4. Date: 2020/3/18  Time: 8:40:48
   
5. Scanned disks, folders and files: C:\Users\Administrator\Desktop\样本集奉上_135\Aspack
   
6. C:\Users\Administrator\Desktop\样本集奉上_135\Aspack\1.exe » AUTOIT » script.bin - a variant of Win32/Injector.Autoit.FDY trojan - cleaned by deleting [1]
   
7. C:\Users\Administrator\Desktop\样本集奉上_135\Aspack\10.exe - a variant of Win32/Injector.ELBM trojan - cleaned by deleting [1]
   
8. C:\Users\Administrator\Desktop\样本集奉上_135\Aspack\11.exe - Win32/Emotet.CD trojan - cleaned by deleting [1]
   
9. C:\Users\Administrator\Desktop\样本集奉上_135\Aspack\12.exe - a variant of Win32/Spy.Agent.PWS trojan - cleaned by deleting [1]
   
10. C:\Users\Administrator\Desktop\样本集奉上_135\Aspack\14.exe - a variant of Win32/Injector.ELCS trojan - cleaned by deleting [1]
    
11. C:\Users\Administrator\Desktop\样本集奉上_135\Aspack\15.exe - a variant of Win32/Filecoder.FP trojan - cleaned by deleting [1]
    
12. C:\Users\Administrator\Desktop\样本集奉上_135\Aspack\3.exe - a variant of Win32/Injector.AUGE trojan - cleaned by deleting [1]
    
13. C:\Users\Administrator\Desktop\样本集奉上_135\Aspack\4.exe - a variant of Win32/Injector.ELCQ trojan - cleaned by deleting [1]
    
14. C:\Users\Administrator\Desktop\样本集奉上_135\Aspack\5.exe - Win32/TrickBot.CJ trojan - cleaned by deleting [1]
    
15. C:\Users\Administrator\Desktop\样本集奉上_135\Aspack\6.exe - a variant of Win32/Injector.ELBM trojan - cleaned by deleting [1]
    
16. C:\Users\Administrator\Desktop\样本集奉上_135\Aspack\8.exe - a variant of Win32/Injector.ELCD trojan - cleaned by deleting [1]
    
17. C:\Users\Administrator\Desktop\样本集奉上_135\Aspack\9.exe - Suspicious Object - cleaned by deleting [1]
    
18. Number of scanned objects: 15
    
19. Number of detections: 12
    
20. Number of cleaned objects: 12
    
21. Time of completion: 8:41:12  Total scanning time: 24 sec (00:00:24)
    
22. 
    
23. Notes:
    
24. [1] Object has been deleted as it only contained the virus body.
    

复制代码

MD5 15/15

1. Log
   
2. Scan Log
   
3. Version of detection engine: 21015P (20200317)
   
4. Date: 2020/3/18  Time: 8:42:51
   
5. Scanned disks, folders and files: C:\Users\Administrator\Desktop\样本集奉上_135\MD5
   
6. C:\Users\Administrator\Desktop\样本集奉上_135\MD5\1.exe » AUTOIT » script.bin - a variant of Win32/Injector.Autoit.FDY trojan - cleaned by deleting [1]
   
7. C:\Users\Administrator\Desktop\样本集奉上_135\MD5\10.exe - a variant of Win32/Injector.ELBM trojan - cleaned by deleting [1]
   
8. C:\Users\Administrator\Desktop\样本集奉上_135\MD5\11.exe - Win32/Emotet.CD trojan - cleaned by deleting [1]
   
9. C:\Users\Administrator\Desktop\样本集奉上_135\MD5\12.exe - a variant of Win32/Spy.Agent.PWS trojan - cleaned by deleting [1]
   
10. C:\Users\Administrator\Desktop\样本集奉上_135\MD5\13.exe » NSIS » Client.exe - a variant of MSIL/Agent.CFQ trojan - cleaned by deleting [1]
    
11. C:\Users\Administrator\Desktop\样本集奉上_135\MD5\13.exe » NSIS » Client1.exe - a variant of MSIL/Agent.APN trojan - cleaned by deleting [1]
    
12. C:\Users\Administrator\Desktop\样本集奉上_135\MD5\13.exe » NSIS » Server.exe - MSIL/Bladabindi.BH trojan - cleaned by deleting [1]
    
13. C:\Users\Administrator\Desktop\样本集奉上_135\MD5\14.exe - a variant of Win32/Injector.ELCS trojan - cleaned by deleting [1]
    
14. C:\Users\Administrator\Desktop\样本集奉上_135\MD5\15.exe - a variant of Win32/Filecoder.FP trojan - cleaned by deleting [1]
    
15. C:\Users\Administrator\Desktop\样本集奉上_135\MD5\2.com - Win32/Formbook.AA trojan - cleaned by deleting [1]
    
16. C:\Users\Administrator\Desktop\样本集奉上_135\MD5\3.exe - a variant of Win32/Injector.AUGE trojan - cleaned by deleting [1]
    
17. C:\Users\Administrator\Desktop\样本集奉上_135\MD5\4.exe - a variant of Win32/Injector.ELCQ trojan - cleaned by deleting [1]
    
18. C:\Users\Administrator\Desktop\样本集奉上_135\MD5\5.exe - Win32/TrickBot.CJ trojan - cleaned by deleting [1]
    
19. C:\Users\Administrator\Desktop\样本集奉上_135\MD5\6.exe - a variant of Win32/Injector.ELBM trojan - cleaned by deleting [1]
    
20. C:\Users\Administrator\Desktop\样本集奉上_135\MD5\7.exe - a variant of MSIL/Spy.Agent.AES trojan - cleaned by deleting [1]
    
21. C:\Users\Administrator\Desktop\样本集奉上_135\MD5\8.exe - a variant of Win32/Injector.ELCD trojan - cleaned by deleting [1]
    
22. C:\Users\Administrator\Desktop\样本集奉上_135\MD5\9.exe - a variant of Win32/GenKryptik.EGMC trojan - cleaned by deleting [1]
    
23. Number of scanned objects: 23
    
24. Number of detections: 17
    
25. Number of cleaned objects: 17
    
26. Time of completion: 8:43:17  Total scanning time: 26 sec (00:00:26)
    
27. 
    
28. Notes:
    
29. [1] Object has been deleted as it only contained the virus body.
    

复制代码

Original 15/15

1. Log
   
2. Scan Log
   
3. Version of detection engine: 21015P (20200317)
   
4. Date: 2020/3/18  Time: 8:44:43
   
5. Scanned disks, folders and files: C:\Users\Administrator\Desktop\样本集奉上_135\Original
   
6. C:\Users\Administrator\Desktop\样本集奉上_135\Original\1.exe » AUTOIT » script.bin - a variant of Win32/Injector.Autoit.FDY trojan - cleaned by deleting [1]
   
7. C:\Users\Administrator\Desktop\样本集奉上_135\Original\10.exe - a variant of Win32/Injector.ELBM trojan - cleaned by deleting [1]
   
8. C:\Users\Administrator\Desktop\样本集奉上_135\Original\11.exe - Win32/Emotet.CD trojan - cleaned by deleting [1]
   
9. C:\Users\Administrator\Desktop\样本集奉上_135\Original\12.exe - a variant of Win32/Spy.Agent.PWS trojan - cleaned by deleting [1]
   
10. C:\Users\Administrator\Desktop\样本集奉上_135\Original\13.exe » NSIS » Client.exe - a variant of MSIL/Agent.CFQ trojan - cleaned by deleting [1]
    
11. C:\Users\Administrator\Desktop\样本集奉上_135\Original\13.exe » NSIS » Client1.exe - a variant of MSIL/Agent.APN trojan - cleaned by deleting [1]
    
12. C:\Users\Administrator\Desktop\样本集奉上_135\Original\13.exe » NSIS » Server.exe - MSIL/Bladabindi.BH trojan - cleaned by deleting [1]
    
13. C:\Users\Administrator\Desktop\样本集奉上_135\Original\14.exe - a variant of Win32/Injector.ELCS trojan - cleaned by deleting [1]
    
14. C:\Users\Administrator\Desktop\样本集奉上_135\Original\15.exe - a variant of Win32/Filecoder.FP trojan - cleaned by deleting [1]
    
15. C:\Users\Administrator\Desktop\样本集奉上_135\Original\2.com - Win32/Formbook.AA trojan - cleaned by deleting [1]
    
16. C:\Users\Administrator\Desktop\样本集奉上_135\Original\3.exe - a variant of Win32/Injector.AUGE trojan - cleaned by deleting [1]
    
17. C:\Users\Administrator\Desktop\样本集奉上_135\Original\4.exe - a variant of Win32/Injector.ELCQ trojan - cleaned by deleting [1]
    
18. C:\Users\Administrator\Desktop\样本集奉上_135\Original\5.exe - Win32/TrickBot.CJ trojan - cleaned by deleting [1]
    
19. C:\Users\Administrator\Desktop\样本集奉上_135\Original\6.exe - a variant of Win32/Injector.ELBM trojan - cleaned by deleting [1]
    
20. C:\Users\Administrator\Desktop\样本集奉上_135\Original\7.exe - a variant of MSIL/Spy.Agent.AES trojan - cleaned by deleting [1]
    
21. C:\Users\Administrator\Desktop\样本集奉上_135\Original\8.exe - a variant of Win32/Injector.ELCD trojan - cleaned by deleting [1]
    
22. C:\Users\Administrator\Desktop\样本集奉上_135\Original\9.exe - a variant of Generik.EOEXBRK trojan - cleaned by deleting [1]
    
23. Number of scanned objects: 23
    
24. Number of detections: 17
    
25. Number of cleaned objects: 17
    
26. Time of completion: 8:45:02  Total scanning time: 19 sec (00:00:19)
    
27. 
    
28. Notes:
    
29. [1] Object has been deleted as it only contained the virus body.
    

复制代码

UPX 13/13

1. Log
   
2. Scan Log
   
3. Version of detection engine: 21015P (20200317)
   
4. Date: 2020/3/18  Time: 8:45:58
   
5. Scanned disks, folders and files: C:\Users\Administrator\Desktop\样本集奉上_135\UPX
   
6. C:\Users\Administrator\Desktop\样本集奉上_135\UPX\1.exe » UPX v13_m8 » AUTOIT » script.bin - a variant of Win32/Injector.Autoit.FDY trojan - cleaned by deleting [1]
   
7. C:\Users\Administrator\Desktop\样本集奉上_135\UPX\10.exe - a variant of Win32/Injector.ELBM trojan - cleaned by deleting [1]
   
8. C:\Users\Administrator\Desktop\样本集奉上_135\UPX\11.exe - Win32/Emotet.CD trojan - cleaned by deleting [1]
   
9. C:\Users\Administrator\Desktop\样本集奉上_135\UPX\12.exe - a variant of Win32/Spy.Agent.PWS trojan - cleaned by deleting [1]
   
10. C:\Users\Administrator\Desktop\样本集奉上_135\UPX\13.exe » NSIS » Client.exe - a variant of MSIL/Agent.CFQ trojan - cleaned by deleting [1]
    
11. C:\Users\Administrator\Desktop\样本集奉上_135\UPX\13.exe » NSIS » Client1.exe - a variant of MSIL/Agent.APN trojan - cleaned by deleting [1]
    
12. C:\Users\Administrator\Desktop\样本集奉上_135\UPX\13.exe » NSIS » Server.exe - MSIL/Bladabindi.BH trojan - cleaned by deleting [1]
    
13. C:\Users\Administrator\Desktop\样本集奉上_135\UPX\14.exe - a variant of Win32/Injector.ELCS trojan - cleaned by deleting [1]
    
14. C:\Users\Administrator\Desktop\样本集奉上_135\UPX\15.exe - a variant of Win32/Filecoder.FP trojan - cleaned by deleting [1]
    
15. C:\Users\Administrator\Desktop\样本集奉上_135\UPX\3.exe - a variant of Win32/Injector.AUGE trojan - cleaned by deleting [1]
    
16. C:\Users\Administrator\Desktop\样本集奉上_135\UPX\4.exe - a variant of Win32/Injector.ELCQ trojan - cleaned by deleting [1]
    
17. C:\Users\Administrator\Desktop\样本集奉上_135\UPX\5.exe - Win32/TrickBot.CJ trojan - cleaned by deleting [1]
    
18. C:\Users\Administrator\Desktop\样本集奉上_135\UPX\6.exe - a variant of Win32/Injector.ELBM trojan - cleaned by deleting [1]
    
19. C:\Users\Administrator\Desktop\样本集奉上_135\UPX\8.exe - a variant of Win32/Injector.ELCD trojan - cleaned by deleting [1]
    
20. C:\Users\Administrator\Desktop\样本集奉上_135\UPX\9.exe - Suspicious Object - cleaned by deleting [1]
    
21. Number of scanned objects: 23
    
22. Number of detections: 15
    
23. Number of cleaned objects: 15
    
24. Time of completion: 8:46:12  Total scanning time: 14 sec (00:00:14)
    
25. 
    
26. Notes:
    
27. [1] Object has been deleted as it only contained the virus body.
    

复制代码

0200dfg

360

CHURP

avast共杀40Xaspack剩余11X/MD5与original均剩余1X/UPXS剩余3X

马甲账号

静影沉璧 发表于 2020-3-18 08:46
ESET

Aspack 12/13

UPX也只有13个。。

静影沉璧

马甲账号 发表于 2020-3-18 08:49
UPX也只有13个。。

知道了

马甲账号

0200dfg 发表于 2020-3-18 08:47
360

360牛逼！加个Aspack压缩壳就直接报壳压缩壳都不会脱么？

雨落丶枫守

ESET