ELF样本23X_01

QVM360

RT，未改后缀请小心食用，后果自负。。



载点：https://kafanealg.lanzous.com/ic505re     密码：infected

anthonyqian

卡巴扫描missed all

a233

Avast 22X
剩余1X

a27573

你从哪搞来的Linux样本？
MalwareBazer？

ESET 20/23

心醉咖啡

10.42毒霸0

QVM360

a27573 发表于 2020-5-1 10:25
你从哪搞来的Linux样本？
MalwareBazer？

对，还有anyrun和微步

狂欢...

360ts  22/23

mr_bean_forever

McAfee Livesafe 扫描只杀 1 个。

Nocria

IKARUS - 19/23

1. [01.05.2020 11:30:51] On-demand scan started: "user_defined"
   
2. [01.05.2020 11:30:51] Found, 0.15s, SigName: "Trojan.Linux.Mirai", SigId: 289892291, Type: "VIRUS", File: "C:\Users\promi\Desktop\ELF样本23X_01\ELF样本23X_01\Kafan_Sample_10dca79e2633951588ff82b31dd31c749e2b1015ef81feffce7.elf"
   
3. [01.05.2020 11:30:51] Found, 0.15s, SigName: "Trojan.Linux.Agent", SigId: 3329652, Type: "VIRUS", File: "C:\Users\promi\Desktop\ELF样本23X_01\ELF样本23X_01\Kafan_Sample_179fbc7ffa88ae94778f7507693077e700b035bfbba68c7eb91.elf"
   
4. [01.05.2020 11:30:51] Found, 0.16s, SigName: "Trojan.Linux.Mirai", SigId: 3451898, Type: "VIRUS", File: "C:\Users\promi\Desktop\ELF样本23X_01\ELF样本23X_01\Kafan_Sample_1d23e3b5471b532fe9a8c2d7fc691d4a408a2274d1f1ac5d12f.elf"
   
5. [01.05.2020 11:30:51] Found, 0.16s, SigName: "Trojan.Linux.Gafgyt", SigId: 3423867, Type: "VIRUS", File: "C:\Users\promi\Desktop\ELF样本23X_01\ELF样本23X_01\Kafan_Sample_2af65e8875bd37dafc8ab60499becd4d96f469870ad9b39c6b5.elf"
   
6. [01.05.2020 11:30:51] Found, 0.16s, SigName: "Trojan.Linux.Gafgyt", SigId: 3423867, Type: "VIRUS", File: "C:\Users\promi\Desktop\ELF样本23X_01\ELF样本23X_01\Kafan_Sample_367130ca6509791ae94bfe756e9d6b911daac24f64e0ef10594.elf"
   
7. [01.05.2020 11:30:51] Found, 0.16s, SigName: "Trojan.Linux.Gafgyt", SigId: 3441419, Type: "VIRUS", File: "C:\Users\promi\Desktop\ELF样本23X_01\ELF样本23X_01\Kafan_Sample_3bd401f77adfa547910ea79cfe4368dfefd3c51b10985d0c4c0.elf"
   
8. [01.05.2020 11:30:51] Found, 0.16s, SigName: "Trojan.Linux.Tsunami", SigId: 3502652, Type: "VIRUS", File: "C:\Users\promi\Desktop\ELF样本23X_01\ELF样本23X_01\Kafan_Sample_56af3858f6efcfd4d5ae4f8930ba4185ed735de327e50b2ee8b.elf"
   
9. [01.05.2020 11:30:51] Found, 0.16s, SigName: "Trojan.Linux.Gafgyt", SigId: 3434462, Type: "VIRUS", File: "C:\Users\promi\Desktop\ELF样本23X_01\ELF样本23X_01\Kafan_Sample_583fd725e5e0c9d2d4bd57d5106c43b5ef57bd00ff299426f6e.elf"
   
10. [01.05.2020 11:30:51] Found, 0.16s, SigName: "Trojan.Linux.Mirai", SigId: 3744523, Type: "VIRUS", File: "C:\Users\promi\Desktop\ELF样本23X_01\ELF样本23X_01\Kafan_Sample_796e6b78698c64b2b921af29146ab241efbfe066d168e66755b.elf"
    
11. [01.05.2020 11:30:51] Found, 0.00s, SigName: "Trojan.Linux.Gafgyt", SigId: 3434462, Type: "VIRUS", File: "C:\Users\promi\Desktop\ELF样本23X_01\ELF样本23X_01\Kafan_Sample_85d1bd501a5bcd589fca224347d1e2c3f59d10bd9e76e889e61.elf"
    
12. [01.05.2020 11:30:51] Found, 0.00s, SigName: "Trojan.Linux.Mirai", SigId: 3451898, Type: "VIRUS", File: "C:\Users\promi\Desktop\ELF样本23X_01\ELF样本23X_01\Kafan_Sample_a715c4624fc607d933421d8d3157a46b6712e94c01bb46d894a.elf"
    
13. [01.05.2020 11:30:51] Found, 0.32s, SigName: "Trojan.Linux.Gafgyt", SigId: 3441419, Type: "VIRUS", File: "C:\Users\promi\Desktop\ELF样本23X_01\ELF样本23X_01\Kafan_Sample_496df3009e6393028f20a6cf4fe6d375ec2704f8d947bcab64e.elf"
    
14. [01.05.2020 11:30:51] Found, 0.00s, SigName: "Trojan.Linux.Mirai", SigId: 3451894, Type: "VIRUS", File: "C:\Users\promi\Desktop\ELF样本23X_01\ELF样本23X_01\Kafan_Sample_ac7da6d8d00f3d680630d596df154f74e03ff37e6942f90639e.elf"
    
15. [01.05.2020 11:30:51] Found, 0.15s, SigName: "Trojan.Linux.Gafgyt", SigId: 3434462, Type: "VIRUS", File: "C:\Users\promi\Desktop\ELF样本23X_01\ELF样本23X_01\Kafan_Sample_cccb83364647d81495e698bad837d68dc52dd9574ab35a9e3ea.elf"
    
16. [01.05.2020 11:30:51] Found, 0.00s, SigName: "Trojan.Linux.Mirai", SigId: 3799961, Type: "VIRUS", File: "C:\Users\promi\Desktop\ELF样本23X_01\ELF样本23X_01\Kafan_Sample_db279f74eeef5c7e1cf3465e64fd261db21a4cdc4d7d89ccb5d.elf"
    
17. [01.05.2020 11:30:51] Found, 0.00s, SigName: "Trojan.Linux.Agent", SigId: 3329652, Type: "VIRUS", File: "C:\Users\promi\Desktop\ELF样本23X_01\ELF样本23X_01\Kafan_Sample_e03134f9f74319f5379845e23d4f4a1dced58708d50a6da3826.elf"
    
18. [01.05.2020 11:30:51] Found, 0.00s, SigName: "Trojan.Linux.Mirai", SigId: 3451894, Type: "VIRUS", File: "C:\Users\promi\Desktop\ELF样本23X_01\ELF样本23X_01\Kafan_Sample_fa9c6e3a63d7fc2dae57050fd05e7aed4cbef761b86540eaa01.elf"
    
19. [01.05.2020 11:30:51] Found, 0.00s, SigName: "Trojan.Linux.Gafgyt", SigId: 3441419, Type: "VIRUS", File: "C:\Users\promi\Desktop\ELF样本23X_01\ELF样本23X_01\Kafan_Sample_ffb8cea743d8ec3538cecfe1afe88d5f7818591fb5d4d2bd4e1.elf"
    
20. [01.05.2020 11:30:51] Found, 0.15s, SigName: "Trojan.Linux.Gafgyt", SigId: 3434462, Type: "VIRUS", File: "C:\Users\promi\Desktop\ELF样本23X_01\ELF样本23X_01\Kafan_Sample_c6ca0aaa53bd106b5a1ea2b38910b9a937a06c4815ecc056c68.elf"
    
21. [01.05.2020 11:30:51] On-demand scan FINISHED: "user_defined"
    
22. [01.05.2020 11:30:51] ----------------------------------------------------
    
23. [01.05.2020 11:30:51] Directories scanned: 2
    
24. [01.05.2020 11:30:51] Files scanned: 23
    
25. [01.05.2020 11:30:51] Virus found: 19
    
26. [01.05.2020 11:30:51] ----------------------------------------------------

复制代码

QVM360

Nocria 发表于 2020-5-1 11:31
IKARUS - 19/23

来着看看
https://bbs.kafan.cn/thread-2180730-1-1.html