#AgentTesla 3x

Nocria

https://c-t.work/s/5562d720a78d44

Avira emptied.

wangyuhe

联想电脑管家

狂欢...

3

NT狼狼

金山毒霸

Nocria

NT狼狼 发表于 2020-7-6 11:44
金山毒霸

这好像不是本楼的样本吧

a233

Avast清空

2020/7/6 11:46:19        C:\Users\Administrator\Desktop\76ab0fa6579d776abe1292437e892d21043fe216b0e2517a86696c9640282007.exe [L] Win32:CrypterX-gen [Trj] (0)
文件已成功移至隔离区...
2020/7/6 11:46:22        C:\Users\Administrator\Desktop\8d519346a57dd9f92414cf2fa7b5417055d458dd03d2a6b567309ce4bcde43ff.exe [L] Win32:PWSX-gen [Trj] (0)
文件已成功移至隔离区...
2020/7/6 11:46:42        C:\Users\Administrator\Desktop\d6bf71b068bc124e0c9200cad32906d1aceb3e57ff99a695073f235b83ffb0fb.exe [L] FileRepMetagen [Malware] (0)
文件已成功移至隔离区...

NT狼狼

Nocria 发表于 2020-7-6 11:47
这好像不是本楼的样本吧

一时手快贴错图

rogersg

ESET 2×剩下一个显示信誉为risky，但就是不杀，服了

1. Time;Scanner;Object type;Object;Detection;Action;User;Information;Hash;First seen here
   
2. 2020/7/6 11:47:48;Real-time file system protection;file;D:\Users\Admin\Desktop\AgentTesla 3x\8d519346a57dd9f92414cf2fa7b5417055d458dd03d2a6b567309ce4bcde43ff.exe;a variant of MSIL/Kryptik.WSI trojan;cleaned by deleting;DESKTOP-CMJROL5\Admin;Event occurred on a new file created by the application: C:\Program Files\Bandizip\Bandizip.exe (CF6614F47F30D531089245146C2DBE44ED327C76).;81D6562FAA621C3F1139E36ED1C0A74EB3A5B5BE;2020/7/6 11:46:14
   
3. 2020/7/6 11:47:48;Real-time file system protection;file;D:\Users\Admin\Desktop\AgentTesla 3x\76ab0fa6579d776abe1292437e892d21043fe216b0e2517a86696c9640282007.exe;a variant of MSIL/Kryptik.WSG trojan;cleaned by deleting;DESKTOP-CMJROL5\Admin;Event occurred on a new file created by the application: C:\Program Files\Bandizip\Bandizip.exe (CF6614F47F30D531089245146C2DBE44ED327C76).;E2E9407A40AABE7DD17E62CB5B590E55FBD18FD5;2020/7/6 11:46:13

复制代码

LSPD

Norton 清空

1. 2020/7/6 11:49:31,高,检测到 8d519346a57dd9f92414cf2fa7b5417055d458dd03d2a6b567309ce4bcde43ff.exe (SONAR.Heuristic.170) (检测方: SONAR),已隔离,已解决 - 不需要操作,已执行威胁操作: 8
   
2. 2020/7/6 11:47:58,高,检测到 76ab0fa6579d776abe1292437e892d21043fe216b0e2517a86696c9640282007.exe (Heur.AdvML.C) (检测方: 自动防护),已隔离,已解决 - 不需要操作,已执行 威胁 操作: 1
   
3. 2020/7/6 11:47:58,高,检测到 76ab0fa6579d776abe1292437e892d21043fe216b0e2517a86696c9640282007.exe (Trojan.Gen.2) (检测方: 自动防护),已隔离,已解决 - 不需要操作,已执行 威胁 操作: 1
   
4. 2020/7/6 11:47:24,高,d6bf71b068bc124e0c9200cad32906d1aceb3e57ff99a695073f235b83ffb0fb.exe (Trojan.Gen.2) 检测方 自动防护,已阻止,已解决 - 不需要操作,已执行  操作: 0

复制代码

Picca

卡巴清空