EXE样本6X_213

显示全部楼层 · 发表于 2020-3-31 23:27:01

本帖最后由 QVM360 于 2020-3-31 23:28 编辑

RT，未改后缀请小心食用，后果自负。。

载点：https://www.lanzous.com/iauofed 密码：infected

综合了上次投票的结果，得出这个标题。。

希望大佬们能够多多赏糖，您的赏糖是我更新最大的动力！

显示全部楼层 · 发表于 2020-3-31 23:39:07

eset剩下1个

显示全部楼层 · 发表于 2020-4-1 01:43:09

极宝杀毒V1.7.4
kill all

显示全部楼层 · 发表于 2020-3-31 23:57:24

Avast
Original 5/6
MD5 5/6
UPX 4/6
ZProtect 2/6
ASPack 2/6
VMP 1/6
不双击

显示全部楼层 · 发表于 2020-4-1 00:00:00

Avira Free kill All

显示全部楼层 · 发表于 2020-4-1 01:31:26

毒霸

扫描时间：[2020-04-01 01:30:45]
扫描用时：[00:00:12]
扫描类型：自定义查杀
扫描文件总数：37
扫描速度：2文件/秒
发现威胁：2个
清除威胁：2个
=============================================
[2020-04-01 01:31:05]
威胁：f:\浏览器下载\exe样本6x_213\vmprotect\6.vmp.exe
类型：win32.heur.kvmh012.a
处理方式：删除
[2020-04-01 01:31:05]
威胁：f:\浏览器下载\exe样本6x_213\aspack\2.exe
类型：win32.troj.generic_a.a.(kcloud)
处理方式：删除

复制代码

显示全部楼层 · 发表于 2020-4-1 08:32:51

malwarebytes

Malwarebytes
File: 34
MachineLearning/Anomalous.97%, D:\VIRUS\EXE样本6X_213\EXE-·|+6X_213\ASPACK\1.EXE, No Action By User, 0, 392687, 1.0.21702, , shuriken,
MachineLearning/Anomalous.100%, D:\VIRUS\EXE样本6X_213\EXE-·|+6X_213\ASPACK\6.EXE, No Action By User, 0, 392687, 1.0.21702, , shuriken,
MachineLearning/Anomalous.100%, D:\VIRUS\EXE样本6X_213\EXE-·|+6X_213\ASPACK\2.EXE, No Action By User, 0, 392687, 1.0.21702, , shuriken,
MachineLearning/Anomalous.100%, D:\VIRUS\EXE样本6X_213\EXE-·|+6X_213\ASPACK\5.EXE, No Action By User, 0, 392687, 1.0.21702, , shuriken,
MachineLearning/Anomalous.100%, D:\VIRUS\EXE样本6X_213\EXE-·|+6X_213\UPX\6.EXE, No Action By User, 0, 392687, 1.0.21702, , shuriken,
Trojan.GuLoader, D:\VIRUS\EXE样本6X_213\EXE-·|+6X_213\ASPACK\4.EXE, No Action By User, 8320, 805543, 1.0.21702, 000000000000000000000003, dds, 00656610
Spyware.RaccoonStealer, D:\VIRUS\EXE样本6X_213\EXE-·|+6X_213\ASPACK\3.EXE, No Action By User, 7451, 805947, 1.0.21702, 000000000000000000000003, dds, 00656610
Trojan.GuLoader, D:\VIRUS\EXE样本6X_213\EXE-·|+6X_213\MD5\4.EXE, No Action By User, 8320, 805543, 1.0.21702, , ame,
Backdoor.AveMaria, D:\VIRUS\EXE样本6X_213\EXE-·|+6X_213\MD5\6.EXE, No Action By User, 3875, 685416, 1.0.21702, 3F2886197B2E441BD1EC2740, dds, 00656610
Backdoor.AveMaria, D:\VIRUS\EXE样本6X_213\EXE-·|+6X_213\ORIGINAL\6.EXE, No Action By User, 3875, 685416, 1.0.21702, 3F2886197B2E441BD1EC2740, dds, 00656610
Trojan.MalPack.GS, D:\VIRUS\EXE样本6X_213\EXE-·|+6X_213\MD5\2.EXE, No Action By User, 8183, 805942, 1.0.21702, , ame,
Trojan.GuLoader, D:\VIRUS\EXE样本6X_213\EXE-·|+6X_213\ORIGINAL\4.EXE, No Action By User, 8320, 805543, 1.0.21702, , ame,
Trojan.MalPack.GS, D:\VIRUS\EXE样本6X_213\EXE-·|+6X_213\ORIGINAL\2.EXE, No Action By User, 8183, 805942, 1.0.21702, , ame,
Trojan.MalPack.DLF, D:\VIRUS\EXE样本6X_213\EXE-·|+6X_213\MD5\5.EXE, No Action By User, 7765, 805468, 1.0.21702, D1ECB63A45C643DF39740621, dds, 00656610
Trojan.MalPack.GS, D:\VIRUS\EXE样本6X_213\EXE-·|+6X_213\UPX\2.EXE, No Action By User, 8183, 805942, 1.0.21702, , ame,
Trojan.GuLoader, D:\VIRUS\EXE样本6X_213\EXE-·|+6X_213\UPX\4.EXE, No Action By User, 8320, 805543, 1.0.21702, , ame,
Backdoor.Qbot, D:\VIRUS\EXE样本6X_213\EXE-·|+6X_213\MD5\1.EXE, No Action By User, 670, 803062, 1.0.21702, 8A999259CF2B5951EB6B13E3, dds, 00656610
Spyware.RaccoonStealer, D:\VIRUS\EXE样本6X_213\EXE-·|+6X_213\MD5\3.EXE, No Action By User, 7451, 805947, 1.0.21702, 6C8AD563706339ACF853C1F6, dds, 00656610
Trojan.MalPack.DLF, D:\VIRUS\EXE样本6X_213\EXE-·|+6X_213\ORIGINAL\5.EXE, No Action By User, 7765, 805468, 1.0.21702, D1ECB63A45C643DF39740621, dds, 00656610
Spyware.RaccoonStealer, D:\VIRUS\EXE样本6X_213\EXE-·|+6X_213\ORIGINAL\3.EXE, No Action By User, 7451, 805947, 1.0.21702, 6C8AD563706339ACF853C1F6, dds, 00656610
Backdoor.Qbot, D:\VIRUS\EXE样本6X_213\EXE-·|+6X_213\ORIGINAL\1.EXE, No Action By User, 670, 803062, 1.0.21702, 8A999259CF2B5951EB6B13E3, dds, 00656610
Spyware.LokiBot, D:\VIRUS\EXE样本6X_213\EXE-·|+6X_213\UPX\5.EXE, No Action By User, 4188, 641023, 1.0.21702, , ame,
Generic.Malware/Suspicious, D:\VIRUS\EXE样本6X_213\EXE-·|+6X_213\VMPROTECT\4.VMP.EXE, No Action By User, 0, 392686, 1.0.21702, , shuriken,
Generic.Malware/Suspicious, D:\VIRUS\EXE样本6X_213\EXE-·|+6X_213\VMPROTECT\2.VMP.EXE, No Action By User, 0, 392686, 1.0.21702, , shuriken,
Generic.Malware/Suspicious, D:\VIRUS\EXE样本6X_213\EXE-·|+6X_213\VMPROTECT\6.VMP.EXE, No Action By User, 0, 392686, 1.0.21702, , shuriken,
MachineLearning/Anomalous.100%, D:\VIRUS\EXE样本6X_213\EXE-·|+6X_213\ZPROTECT\6.ZP.EXE, No Action By User, 0, 392687, 1.0.21702, , shuriken,
Generic.Malware/Suspicious, D:\VIRUS\EXE样本6X_213\EXE-·|+6X_213\ZPROTECT\5.ZP.EXE, No Action By User, 0, 392686, 1.0.21702, , shuriken,
Backdoor.Qbot, D:\VIRUS\EXE样本6X_213\EXE-·|+6X_213\UPX\1.EXE, No Action By User, 670, 803062, 1.0.21702, , ame,
Spyware.RaccoonStealer, D:\VIRUS\EXE样本6X_213\EXE-·|+6X_213\UPX\3.EXE, No Action By User, 7451, 805947, 1.0.21702, , ame,
Spyware.RaccoonStealer, D:\VIRUS\EXE样本6X_213\EXE-·|+6X_213\VMPROTECT\3.VMP.EXE, No Action By User, 7451, 805947, 1.0.21702, 000000000000000000000003, dds, 00656610
Trojan.GuLoader, D:\VIRUS\EXE样本6X_213\EXE-·|+6X_213\ZPROTECT\4.ZP.EXE, No Action By User, 8320, 805929, 1.0.21702, 601364C0E0EBA2FCFC77CFD3, dds, 00656610
Spyware.RaccoonStealer, D:\VIRUS\EXE样本6X_213\EXE-·|+6X_213\ZPROTECT\3.ZP.EXE, No Action By User, 7451, 805947, 1.0.21702, C45E95BB815FF716823461BF, dds, 00656610
Backdoor.Qbot, D:\VIRUS\EXE样本6X_213\EXE-·|+6X_213\ZPROTECT\1.ZP.EXE, No Action By User, 670, 803062, 1.0.21702, 601364C0E0EBA2FCFC77CFD3, dds, 00656610
Generic.Malware/Suspicious, D:\VIRUS\EXE样本6X_213\EXE-·|+6X_213\ZPROTECT\2.ZP.EXE, No Action By User, 0, 392686, 1.0.21702, , shuriken,

复制代码

显示全部楼层 · 发表于 2020-4-1 08:38:37

显示全部楼层 · 发表于 2020-4-1 08:58:42

诺顿kill all
类型：启发式病毒；病毒

显示全部楼层 · 发表于 2020-4-1 10:09:56

杀剩下的文件已提交官方复核。

[病毒样本] EXE样本6X_213

评分

本帖子中包含更多资源

本帖子中包含更多资源

浏览过的版块