c812ed09247d0d85d0157ee0546375afaff1f82b1c317142baba488d97a1ae77

显示全部楼层 · 发表于 2020-5-1 14:54:57

显示全部楼层 · 发表于 2020-5-1 14:56:38

AVG
Win32:ShellCode [Expl]

显示全部楼层 · 发表于 2020-5-1 15:03:32

CategoryID : 30
DidThreatExecute : False
IsActive : False
Resources : {containerfile:_C:\Users\25727\Desktop\c812ed09247d0d85d0157ee0546375afaff1f82b1c317142baba488d97a1a
e77\Swift.xlsx, containerfile:_C:\Users\25727\Desktop\c812ed09247d0d85d0157ee0546375afaff1f82b1c3171
42baba488d97a1ae77\Swift.xlsx, file:_C:\Users\25727\Desktop\c812ed09247d0d85d0157ee0546375afaff1f82b
1c317142baba488d97a1ae77\Swift.xlsx->xl/embeddings/oleObject1.bin, file:_C:\Users\25727\Desktop\c812
ed09247d0d85d0157ee0546375afaff1f82b1c317142baba488d97a1ae77\Swift.xlsx->xl/embeddings/oleObject1.bi
n}
RollupStatus : 1
SchemaVersion : 1.0.0.0
SeverityID : 5
ThreatID : 2147729468
ThreatName : Exploit:O97M/CVE-2017-11882.L
TypeID : 0
PSComputerName :

复制代码

显示全部楼层 · 发表于 2020-5-1 15:10:02

本帖最后由救命稻草于 2020-5-1 15:39 编辑

瑞星"Exploit.Generic!8.3E1"
运行杀的衍生物

显示全部楼层 · 发表于 2020-5-1 16:17:59

ESET
可能是 Win32/Exploit.CVE-2017-11882.C 特洛伊木马的变种

显示全部楼层 · 发表于 2020-5-2 15:16:46

卡巴

[病毒样本] c812ed09247d0d85d0157ee0546375afaff1f82b1c317142baba488d97a1ae77