样本包61x

温馨小屋

秋日之殇 发表于 2021-1-18 18:04
啊这？是我年轻了

https://bbs.kafan.cn/forum.php?m ... ypeid%26typeid%3D31

心醉咖啡

DPT1 发表于 2021-1-18 17:20

bobo干预了，哈哈

Jerry.Lin

1. Object: Infected Threat: 50  Action: Deleted
   
2. Object: crli-0.dll Threat: Trojan.Equation.4  Action: Deleted Path: C:\Users\zhong\Downloads\MalwareTest\Kafan\新建文4342件夹\新建文件夹\crli-0.dll
   
3. Object: coli-0.dll Threat: BackDoor.Spy.3365  Action: Deleted Path: C:\Users\zhong\Downloads\MalwareTest\Kafan\新建文4342件夹\新建文件夹\coli-0.dll
   
4. Object: cnli-1.dll Threat: Trojan.Equation.5  Action: Deleted Path: C:\Users\zhong\Downloads\MalwareTest\Kafan\新建文4342件夹\新建文件夹\cnli-1.dll
   
5. Object: cnli-0.dll Threat: Trojan.Equation.3  Action: Deleted Path: C:\Users\zhong\Downloads\MalwareTest\Kafan\新建文4342件夹\新建文件夹\cnli-0.dll
   
6. Object: adfw.dll Threat: Trojan.Equation.1  Action: Deleted Path: C:\Users\zhong\Downloads\MalwareTest\Kafan\新建文4342件夹\新建文件夹\adfw.dll
   
7. Object: adfw-2.dll Threat: BackDoor.Spy.3364  Action: Deleted Path: C:\Users\zhong\Downloads\MalwareTest\Kafan\新建文4342件夹\新建文件夹\adfw-2.dll
   
8. Object: dmgd-4.dll Threat: Trojan.Equation.8  Action: Deleted Path: C:\Users\zhong\Downloads\MalwareTest\Kafan\新建文4342件夹\新建文件夹\dmgd-4.dll
   
9. Object: esco-0.dll Threat: Trojan.Equation.9  Action: Deleted Path: C:\Users\zhong\Downloads\MalwareTest\Kafan\新建文4342件夹\新建文件夹\esco-0.dll
   
10. Object: etch-0.dll Threat: Trojan.Equation.10  Action: Deleted Path: C:\Users\zhong\Downloads\MalwareTest\Kafan\新建文4342件夹\新建文件夹\etch-0.dll
    
11. Object: etchCore-0.x64.dll Threat: Trojan.Equation.11  Action: Deleted Path: C:\Users\zhong\Downloads\MalwareTest\Kafan\新建文4342件夹\新建文件夹\etchCore-0.x64.dll
    
12. Object: dmgd-1.dll Threat: Trojan.Equation.7  Action: Deleted Path: C:\Users\zhong\Downloads\MalwareTest\Kafan\新建文4342件夹\新建文件夹\dmgd-1.dll
    
13. Object: etchCore-0.x86.dll Threat: Trojan.Equation.12  Action: Deleted Path: C:\Users\zhong\Downloads\MalwareTest\Kafan\新建文4342件夹\新建文件夹\etchCore-0.x86.dll
    
14. Object: eteb-2.dll Threat: Trojan.Equation.13  Action: Deleted Path: C:\Users\zhong\Downloads\MalwareTest\Kafan\新建文4342件夹\新建文件夹\eteb-2.dll
    
15. Object: etebCore-2.x64.dll Threat: Trojan.Equation.14  Action: Deleted Path: C:\Users\zhong\Downloads\MalwareTest\Kafan\新建文4342件夹\新建文件夹\etebCore-2.x64.dll
    
16. Object: etebCore-2.x86.dll Threat: Trojan.Equation.15  Action: Deleted Path: C:\Users\zhong\Downloads\MalwareTest\Kafan\新建文4342件夹\新建文件夹\etebCore-2.x86.dll
    
17. Object: exma-1.dll Threat: Trojan.Equation.17  Action: Deleted Path: C:\Users\zhong\Downloads\MalwareTest\Kafan\新建文4342件夹\新建文件夹\exma-1.dll
    
18. Object: exma.dll Threat: Trojan.Equation.16  Action: Deleted Path: C:\Users\zhong\Downloads\MalwareTest\Kafan\新建文4342件夹\新建文件夹\exma.dll
    
19. Object: libiconv-2.dll Threat: Trojan.Equation.135  Action: Deleted Path: C:\Users\zhong\Downloads\MalwareTest\Kafan\新建文4342件夹\新建文件夹\libiconv-2.dll
    
20. Object: out.dll Threat: Trojan.Siggen7.56007  Action: Deleted Path: C:\Users\zhong\Downloads\MalwareTest\Kafan\新建文4342件夹\新建文件夹\out.dll
    
21. Object: pcla-0.dll Threat: Trojan.Equation.21  Action: Deleted Path: C:\Users\zhong\Downloads\MalwareTest\Kafan\新建文4342件夹\新建文件夹\pcla-0.dll
    
22. Object: pytrch.py Threat: Python.Exploit.6  Action: Deleted Path: C:\Users\zhong\Downloads\MalwareTest\Kafan\新建文4342件夹\新建文件夹\pytrch.py
    
23. Object: pytrch.pyc Threat: Trojan.Equation.136  Action: Deleted Path: C:\Users\zhong\Downloads\MalwareTest\Kafan\新建文4342件夹\新建文件夹\pytrch.pyc
    
24. Object: pcre-0.dll Threat: Trojan.Equation.73  Action: Deleted Path: C:\Users\zhong\Downloads\MalwareTest\Kafan\新建文4342件夹\新建文件夹\pcre-0.dll
    
25. Object: pcrecpp-0.dll Threat: Trojan.Equation.74  Action: Deleted Path: C:\Users\zhong\Downloads\MalwareTest\Kafan\新建文4342件夹\新建文件夹\pcrecpp-0.dll
    
26. Object: pcreposix-0.dll Threat: Trojan.Equation.75  Action: Deleted Path: C:\Users\zhong\Downloads\MalwareTest\Kafan\新建文4342件夹\新建文件夹\pcreposix-0.dll
    
27. Object: posh.dll Threat: Trojan.Equation.76  Action: Deleted Path: C:\Users\zhong\Downloads\MalwareTest\Kafan\新建文4342件夹\新建文件夹\posh.dll
    
28. Object: spoolsv.xml Threat: BackDoor.Siggen2.3055  Action: Deleted Path: C:\Users\zhong\Downloads\MalwareTest\Kafan\新建文4342件夹\新建文件夹\spoolsv.xml
    
29. Object: remotetimeevent.dll Threat: Trojan.Vools.16  Action: Deleted Path: C:\Users\zhong\Downloads\MalwareTest\Kafan\新建文4342件夹\新建文件夹\remotetimeevent.dll
    
30. Object: riar-2.dll Threat: Trojan.Equation.22  Action: Deleted Path: C:\Users\zhong\Downloads\MalwareTest\Kafan\新建文4342件夹\新建文件夹\riar-2.dll
    
31. Object: posh-0.dll Threat: Trojan.Equation.77  Action: Deleted Path: C:\Users\zhong\Downloads\MalwareTest\Kafan\新建文4342件夹\新建文件夹\posh-0.dll
    
32. Object: riar.dll Threat: Trojan.Equation.2  Action: Deleted Path: C:\Users\zhong\Downloads\MalwareTest\Kafan\新建文4342件夹\新建文件夹\riar.dll
    
33. Object: spoolsv.exe Threat: BackDoor.Siggen2.2089  Action: Deleted Path: C:\Users\zhong\Downloads\MalwareTest\Kafan\新建文4342件夹\新建文件夹\spoolsv.exe
    
34. Object: tibe-2.dll Threat: Trojan.Equation.23  Action: Deleted Path: C:\Users\zhong\Downloads\MalwareTest\Kafan\新建文4342件夹\新建文件夹\tibe-2.dll
    
35. Object: tibe.dll Threat: Trojan.Equation.23  Action: Deleted Path: C:\Users\zhong\Downloads\MalwareTest\Kafan\新建文4342件夹\新建文件夹\tibe.dll
    
36. Object: tibe-1.dll Threat: Trojan.Equation.23  Action: Deleted Path: C:\Users\zhong\Downloads\MalwareTest\Kafan\新建文4342件夹\新建文件夹\tibe-1.dll
    
37. Object: MHH352tran.exe Threat: Infected container  Action: Deleted Path: C:\Users\zhong\Downloads\MalwareTest\Kafan\新建文4342件夹\新建文件夹\MHH352tran.exe
    
38. Object: trch-0.dll Threat: Trojan.Equation.24  Action: Deleted Path: C:\Users\zhong\Downloads\MalwareTest\Kafan\新建文4342件夹\新建文件夹\trch-0.dll
    
39. Object: trch-1.dll Threat: Trojan.Equation.24  Action: Deleted Path: C:\Users\zhong\Downloads\MalwareTest\Kafan\新建文4342件夹\新建文件夹\trch-1.dll
    
40. Object: trch.dll Threat: Trojan.Equation.23  Action: Deleted Path: C:\Users\zhong\Downloads\MalwareTest\Kafan\新建文4342件夹\新建文件夹\trch.dll
    
41. Object: trfo-0.dll Threat: Trojan.Equation.25  Action: Deleted Path: C:\Users\zhong\Downloads\MalwareTest\Kafan\新建文4342件夹\新建文件夹\trfo-0.dll
    
42. Object: trfo-2.dll Threat: Trojan.Equation.25  Action: Deleted Path: C:\Users\zhong\Downloads\MalwareTest\Kafan\新建文4342件夹\新建文件夹\trfo-2.dll
    
43. Object: trfo.dll Threat: Trojan.Equation.6  Action: Deleted Path: C:\Users\zhong\Downloads\MalwareTest\Kafan\新建文4342件夹\新建文件夹\trfo.dll
    
44. Object: tucl-1.dll Threat: Trojan.Equation.26  Action: Deleted Path: C:\Users\zhong\Downloads\MalwareTest\Kafan\新建文4342件夹\新建文件夹\tucl-1.dll
    
45. Object: tucl.dll Threat: Trojan.Equation.26  Action: Deleted Path: C:\Users\zhong\Downloads\MalwareTest\Kafan\新建文4342件夹\新建文件夹\tucl.dll
    
46. Object: ucl.dll Threat: Trojan.Equation.91  Action: Deleted Path: C:\Users\zhong\Downloads\MalwareTest\Kafan\新建文4342件夹\新建文件夹\ucl.dll
    
47. Object: x64.dll Threat: Trojan.Vools.15  Action: Deleted Path: C:\Users\zhong\Downloads\MalwareTest\Kafan\新建文4342件夹\新建文件夹\x64.dll
    
48. Object: x86.dll Threat: Trojan.Vools.15  Action: Deleted Path: C:\Users\zhong\Downloads\MalwareTest\Kafan\新建文4342件夹\新建文件夹\x86.dll
    
49. Object: xdvl-0.dll Threat: Trojan.Equation.28  Action: Deleted Path: C:\Users\zhong\Downloads\MalwareTest\Kafan\新建文4342件夹\新建文件夹\xdvl-0.dll
    
50. Object: zibe.dll Threat: Trojan.Equation.29  Action: Deleted Path: C:\Users\zhong\Downloads\MalwareTest\Kafan\新建文4342件夹\新建文件夹\zibe.dll
    
51. Object: _pytrch.pyd Threat: Trojan.Equation.58  Action: Deleted Path: C:\Users\zhong\Downloads\MalwareTest\Kafan\新建文4342件夹\新建文件夹\_pytrch.pyd
    
52. Object: Hacktools Threat: 6  Action: Deleted
    
53. Object: dllhostex.exe Threat: Tool.BtcMine.1980  Action: Deleted Path: C:\Users\zhong\Downloads\MalwareTest\Kafan\新建文4342件夹\新建文件夹\dllhostex.exe
    
54. Object: iconv.dll Threat: Tool.Equation.24  Action: Deleted Path: C:\Users\zhong\Downloads\MalwareTest\Kafan\新建文4342件夹\新建文件夹\iconv.dll
    
55. Object: libcurl.dll Threat: Tool.Equation.25  Action: Deleted Path: C:\Users\zhong\Downloads\MalwareTest\Kafan\新建文4342件夹\新建文件夹\libcurl.dll
    
56. Object: libxml2.dll Threat: Tool.Equation.23  Action: Deleted Path: C:\Users\zhong\Downloads\MalwareTest\Kafan\新建文4342件夹\新建文件夹\libxml2.dll
    
57. Object: ssleay32.dll Threat: Tool.Equation.22  Action: Deleted Path: C:\Users\zhong\Downloads\MalwareTest\Kafan\新建文4342件夹\新建文件夹\ssleay32.dll
    
58. Object: zlib1.dll Threat: Tool.Equation.21  Action: Deleted Path: C:\Users\zhong\Downloads\MalwareTest\Kafan\新建文4342件夹\新建文件夹\zlib1.dll

复制代码

wwwab

dsb2466 发表于 2021-1-18 17:31
永恒之蓝这堆文件，要是哪个杀软还不能杀的，怕是要拉出来敲打了

我亲自分析过，大部分都是WannaMine 4.0挖矿病毒，利用永恒之蓝漏洞进行攻击。深信服对此病毒的安全分析报告如下：https://www.sohu.com/a/302685362_244641

NT狼狼

heheda2001 发表于 2021-1-18 17:13
狼狼解压测一下？楼主压缩包没加密码

刚下载完还没解压就报毒啦。

ytysh

Ahn V3 Lite 剩余 3x 查杀率=95%

sichuanwenxuan

WD剩余两个。