#js #vjworm (2020-01-15)

显示全部楼层 · 发表于 2021-1-15 21:57:12

本帖最后由 QVM360 于 2021-1-15 21:58 编辑

https://mc163.lanzoux.com/iqcmXkg082b
https://app.any.run/tasks/f72a9fc1-24d9-48f8-9ef9-07ff0dd38959
Cnc Server :

45.15.143.249

复制代码

显示全部楼层 · 发表于 2021-1-15 22:01:41

卡巴扫描 miss
未双击

显示全部楼层 · 发表于 2021-1-15 22:06:38

ESET miss 双击 miss

显示全部楼层 · 发表于 2021-1-15 22:06:50

本帖最后由秋日之殇于 2021-1-15 22:11 编辑

卡巴斯基双击杀，这个样本我今天发过了

显示全部楼层 · 发表于 2021-1-15 22:08:28

Filename: eVoucher#.js
Threat name: ISB.Downloader!gen40Full Path: C:\Users\NortonLTSC\Desktop\eVoucher#.js

____________________________

____________________________

On computers as of
2021/1/15 at 22:08:08

Last Used
2021/1/15 at 22:08:08

Startup Item
No

Launched
No

Threat type: Heuristic Virus. Detection of a threat based on malware heuristics.

____________________________

eVoucher#.js Threat name: ISB.Downloader!gen40
Locate

Very Few Users
Fewer than 5 users in the Norton Community have used this file.

Very New
This file was released less than 1 week ago.

High
This file risk is high.

____________________________

Source: External Media

____________________________

File Actions

File: C:\Users\NortonLTSC\Desktop\ eVoucher#.js Blocked
____________________________

File Thumbprint - SHA:
Not available
File Thumbprint - MD5:
Not available

显示全部楼层 · 发表于 2021-1-15 22:08:55

TimelessTT 发表于 2021-1-15 22:01
卡巴扫描 miss
未双击

卡巴一部分脚本启发只有双击才触发

显示全部楼层 · 发表于 2021-1-15 22:09:42

温馨小屋发表于 2021-1-15 22:08
卡巴一部分脚本启发只有双击才触发

好吧

显示全部楼层 · 发表于 2021-1-15 22:28:48

360

显示全部楼层 · 发表于 2021-1-15 22:29:01

Avast IDP Blocked

显示全部楼层 · 发表于 2021-1-15 23:16:53

mcafee miss

[病毒样本] #js #vjworm (2020-01-15)

评分

本帖子中包含更多资源

本帖子中包含更多资源