EXE样本11X_217

QVM360

RT，未改后缀请小心食用，后果自负。。



载点：https://www.lanzous.com/iawfite     密码：infected

请按照此格式进行回帖：
-----------------------------------------------------------------------------------------------------
杀软名称：
扫描结果：
Original (x₀/11)
MD5 (x₁/11)
UPX (x₂/4)
ASPack (x₃/4)
ZProtect (x₄/4)
VMProtect (x₅/4)
双击结果：（可选）
Original (y₀/11-x₀)
MD5 (y₁/11-x₁)
UPX (y₂/4-x₂)
ASPack (y₃/4-x₃)
ZProtect (y₄/4-x₄)
VMProtect (y₅/4-x₅)
必要截图（可选）：
-----------------------------------------------------------------------------------------------------



求大佬赏糖！

救命稻草

密码好像没加上。

心醉咖啡

毒霸

a233

Avast

Original 8/11
MD5 6/11
UPX 1/4
ASPack 1/4
其余未检出

，就一个.

杀软名称：Avira  清空
实时扫描结果：21个
Original (5/11)
MD5 (6/11)
UPX (1/4)
ASPack (3/4)
ZProtect (2/4)
VMProtect (4/4)
双击结果：17个
Original (6/6)
MD5 (5/5)
UPX (3/3)
ASPack (1/1)
ZProtect (2/2）
VMProtect （0/0)

，就一个.

心醉咖啡 发表于 2020-4-1 23:23
毒霸

建议毒霸OEM个APC  绝对吊炸天  毒霸这个云太可怜了

我我我55

卡巴斯基扫描还剩下12个，双击还剩下6个没查杀，放到卡巴斯基云都分析全是病毒了。

Jerry.Lin

WD (High+)
37/38
漏了一个 MD5 #11

Filename	Threat Name	Initial Detect Time
10.vmp.exe	Trojan:Win32/Wacatac.D!ml	4/1/2020 10:49
8.vmp.exe	Trojan:Win32/Wacatac.D!ml	4/1/2020 10:48
8.vmp.exe	Trojan:Win32/Wacatac.D!ml	4/1/2020 10:48
6.vmp.exe	Trojan:Win32/Lokibot.ART!MTB	4/1/2020 10:48
9.exe	Trojan:Win32/Wacatac.C!ml	4/1/2020 10:48
8.exe	Trojan:Win32/Azden.A!cl	4/1/2020 10:48
6.exe	Trojan:Win32/Lokibot.ART!MTB	4/1/2020 10:47
10.exe	Trojan:Win32/Wacatac.C!ml	4/1/2020 10:47
9.exe	Trojan:Win32/Wacatac.D!ml	4/1/2020 10:47
8.exe	Trojan:Win32/Wacatac.C!ml	4/1/2020 10:47
6.exe	Trojan:Win32/Wacatac.C!ml	4/1/2020 10:47
9.exe	Trojan:Win32/Wacatac.C!ml	4/1/2020 10:47
10.exe	Trojan:Win32/Wacatac.C!ml	4/1/2020 10:46
11.exe	Program:Win32/Wacapew.C!ml	4/1/2020 10:46
6.exe	Trojan:Win32/Lokibot.ART!MTB	4/1/2020 10:46
10.exe	Trojan:Win32/Wacatac.C!ml	4/1/2020 10:46
10.exe	Trojan:Win32/Wacatac.C!ml	4/1/2020 10:46
2.exe	Trojan:Win32/Wacatac.D!ml	4/1/2020 10:46
6.exe	Trojan:Win32/Lokibot.ART!MTB	4/1/2020 10:46
3.exe	Trojan:Win32/Wacatac.C!ml	4/1/2020 10:46
2.exe	Trojan:Win32/Wacatac.D!ml	4/1/2020 10:46
3.exe	Trojan:Win32/Wacatac.C!ml	4/1/2020 10:45
2.exe	Trojan:Win32/Wacatac.D!ml	4/1/2020 10:45
1.exe	Trojan:Win32/Wacatac.C!ml	4/1/2020 10:45
2.exe	Trojan:Win32/Wacatac.D!ml	4/1/2020 10:45
10.exe	Trojan:Win32/Wacatac.C!ml	4/1/2020 10:45
2.exe	Trojan:Win32/Wacatac.D!ml	4/1/2020 10:45
1.exe	Trojan:Win32/Wacatac.C!ml	4/1/2020 10:45
7.exe	Backdoor:MSIL/RevengeRat.GA!MTB	4/1/2020 10:44
8.exe	Trojan:Win32/Wacatac.C!ml	4/1/2020 10:44
4.exe	Backdoor:MSIL/Bladabindi	4/1/2020 10:44
6.exe	Trojan:Win32/Wacatac.D!ml	4/1/2020 10:44
8.exe	Trojan:Win32/Wacatac.C!ml	4/1/2020 10:44
7.exe	Backdoor:MSIL/RevengeRat.GA!MTB	4/1/2020 10:44
4.exe	Backdoor:MSIL/Bladabindi	4/1/2020 10:44
6.exe	Trojan:Win32/Wacatac.D!ml	4/1/2020 10:43
7.exe	Backdoor:MSIL/RevengeRat.GA!MTB	4/1/2020 10:43
4.exe	Backdoor:MSIL/Bladabindi	4/1/2020 10:43

欧阳宣

1. Malwarebytes
   
2. 
   
3. File: 24
   
4. Trojan.GuLoader.VB, D:\VIRUS\EXE-·|+11X_217\MD5\10.EXE, Quarantined, 9167, 806006, 1.0.21746, , ame,
   
5. MachineLearning/Anomalous.97%, D:\VIRUS\EXE-·|+11X_217\ASPACK\10.EXE, Quarantined, 0, 392687, 1.0.21746, , shuriken,
   
6. MachineLearning/Anomalous.97%, D:\VIRUS\EXE-·|+11X_217\ASPACK\9.EXE, Quarantined, 0, 392687, 1.0.21746, , shuriken,
   
7. MachineLearning/Anomalous.100%, D:\VIRUS\EXE-·|+11X_217\ASPACK\6.EXE, Quarantined, 0, 392687, 1.0.21746, , shuriken,
   
8. Generic.Malware/Suspicious, D:\VIRUS\EXE-·|+11X_217\ORIGINAL\11.EXE, Quarantined, 0, 392686, 1.0.21746, , shuriken,
   
9. Trojan.Crypt.MSIL.Generic, D:\VIRUS\EXE-·|+11X_217\MD5\1.EXE, Quarantined, 9287, 806229, 1.0.21746, , ame,
   
10. Backdoor.NJRat, D:\VIRUS\EXE-·|+11X_217\MD5\4.EXE, Quarantined, 4296, 277642, 1.0.21746, 30823BFB781F92F9F66992AB, dds, 00657564
    
11. Spyware.LokiBot, D:\VIRUS\EXE-·|+11X_217\MD5\6.EXE, Quarantined, 4190, 806090, 1.0.21746, , ame,
    
12. Trojan.Crypt.MSIL.Generic, D:\VIRUS\EXE-·|+11X_217\MD5\3.EXE, Quarantined, 9287, 806229, 1.0.21746, , ame,
    
13. Trojan.Crypt.MSIL.Generic, D:\VIRUS\EXE-·|+11X_217\ORIGINAL\1.EXE, Quarantined, 9287, 806229, 1.0.21746, , ame,
    
14. Backdoor.LiteHTTP, D:\VIRUS\EXE-·|+11X_217\MD5\2.EXE, Quarantined, 10219, 806323, 1.0.21746, C09878A34F76F3E2EBAE04E2, dds, 00657564
    
15. Backdoor.RevengeRAT, D:\VIRUS\EXE-·|+11X_217\MD5\7.EXE, Quarantined, 4210, 679912, 1.0.21746, BE2B219BDEFC33B04B959CCE, dds, 00657564
    
16. Trojan.MalPack.VB, D:\VIRUS\EXE-·|+11X_217\MD5\8.EXE, Quarantined, 834, 806295, 1.0.21746, , ame,
    
17. Backdoor.LiteHTTP, D:\VIRUS\EXE-·|+11X_217\ORIGINAL\2.EXE, Quarantined, 10219, 806323, 1.0.21746, C09878A34F76F3E2EBAE04E2, dds, 00657564
    
18. Trojan.MalPack.VB, D:\VIRUS\EXE-·|+11X_217\ORIGINAL\8.EXE, Quarantined, 834, 806295, 1.0.21746, , ame,
    
19. Trojan.Qbot, D:\VIRUS\EXE-·|+11X_217\MD5\9.EXE, Quarantined, 4105, 806294, 1.0.21746, , ame,
    
20. Backdoor.NJRat, D:\VIRUS\EXE-·|+11X_217\ORIGINAL\4.EXE, Quarantined, 4296, 277642, 1.0.21746, 30823BFB781F92F9F66992AB, dds, 00657564
    
21. Backdoor.RevengeRAT, D:\VIRUS\EXE-·|+11X_217\ORIGINAL\7.EXE, Quarantined, 4210, 679912, 1.0.21746, BE2B219BDEFC33B04B959CCE, dds, 00657564
    
22. Trojan.Crypt.MSIL.Generic, D:\VIRUS\EXE-·|+11X_217\ORIGINAL\3.EXE, Quarantined, 9287, 806229, 1.0.21746, , ame,
    
23. Trojan.Qbot, D:\VIRUS\EXE-·|+11X_217\UPX\9.EXE, Quarantined, 4105, 806294, 1.0.21746, , ame,
    
24. Trojan.Qbot, D:\VIRUS\EXE-·|+11X_217\ORIGINAL\9.EXE, Quarantined, 4105, 806294, 1.0.21746, , ame,
    
25. Trojan.Qbot, D:\VIRUS\EXE-·|+11X_217\ZPROTECT\9.ZP.EXE, Quarantined, 4105, 806294, 1.0.21746, 601364C0E0EBA2FCFC77CFD3, dds, 00657564
    
26. Trojan.GuLoader.VB, D:\VIRUS\EXE-·|+11X_217\ORIGINAL\10.EXE, Quarantined, 9167, 806006, 1.0.21746, , ame,
    
27. Spyware.LokiBot, D:\VIRUS\EXE-·|+11X_217\ORIGINAL\6.EXE, Quarantined, 4190, 806090, 1.0.21746, , ame,
    

复制代码

QVM360

ESET 剩下2个vmp