#APT #Lazarus (2020-07)

显示全部楼层 · 发表于 2020-7-23 18:14:38

https://jirehlov.lanzous.com/iZVL7ewwusb

https://twitter.com/DeadlyLynn/status/1286233135751995397?s=20

显示全部楼层 · 发表于 2020-7-23 18:16:16

ESET 1x

b_r_205699.dotm » ZIP » word/vbaProject.bin - a variant of VBA/TrojanDropper.Agent.BIT

显示全部楼层 · 发表于 2020-7-23 18:16:22

Bitdefender清空
C:\Users\ljsjo\Downloads\7.23.zip=>b_r_205699.dotm=>word/vbaProject.bin VB.Heur2.Chartres.1.Gen Deleted
C:\Users\ljsjo\Downloads\7.23.zip=>Boeing_Russia_AA.docx=>word=>_rels=>settings.xml.rels=>(Command) Trojan.Groooboor.Gen.19 Deleted
C:\Users\ljsjo\Downloads\7.23.zip=>b_r_205699.dotm=>word=>vbaProject.bin=>(Embedded Object Data)=>(BASE64)=>(BASE64)=>(BASE64) Trojan.GenericKD.34215447 Deleted

显示全部楼层 · 发表于 2020-7-23 18:16:58

智量Kill X1 Miss X1

显示全部楼层 · 发表于 2020-7-23 19:54:33

卡巴斯基 kill 1x
小红伞 kill 1x

显示全部楼层 · 发表于 2020-7-23 20:06:48

Emsisoft Anti-Malware

显示全部楼层 · 发表于 2020-7-23 20:46:54

FSP 1X

显示全部楼层 · 发表于 2020-7-23 20:57:49

IKARUS

Date and Time: 23/07/2020 20:57:28
File Name: b_r_205699.dotm
Original Path: C:\Users\promi\Desktop\7.23\
File Size: 6593.25 kB
Detection Name: Trojan-Downloader.VBA.Agent
Detection-ID: 3714223
Suggestion: Backup and Delete

复制代码

显示全部楼层 · 发表于 2020-7-23 22:38:09

Mcafee Livesafe 扫描+双击都被过

显示全部楼层 · 发表于 2020-7-24 08:26:10

b_r_205699.dotm 木马程序(Generic/Trojan.Dropper.be6) 已删除
Boeing_Russia_AA.docx 木马程序(Generic/Trojan.BO.2da) 已删除

[病毒样本] #APT #Lazarus (2020-07)

本帖子中包含更多资源

本帖子中包含更多资源