From Malware Traffic #TA551 #IcedID（2.26）

显示全部楼层 · 发表于 2021-2-26 09:09:23

本帖最后由 hsks 于 2021-2-26 09:51 编辑

https://ws28.cn/f/4t00fznbhn0
https://cowtransfer.com/s/950cf40ab2ce49

https://share.weiyun.com/TumooDyH
有一个压缩包损坏了，好可惜

配图emmm

显示全部楼层 · 发表于 2021-2-26 09:12:30

腾讯御点 miss

显示全部楼层 · 发表于 2021-2-26 09:22:34

本帖最后由 z68436425 于 2021-2-26 09:26 编辑

ESET

剩一个放在桌面上他自己运行了

显示全部楼层 · 发表于 2021-2-26 09:24:16

本帖最后由 k2132 于 2021-2-26 09:25 编辑

火绒报9个.doc文件其他不报

智量报9个doc文件 .hta双击报（部分截图）剩余不报

显示全部楼层 · 发表于 2021-2-26 10:23:40

Avast

2021/2/26 10:19:27 C:\Users\Administrator\Desktop\2021-02-25-Word-docs-and-installer-DLL-files\Documents\legislate-02.25.2021.doc|>word\vbaProject.bin|>[Embedded:vba_scremu] [L] Script:SNH-gen [Trj] (0)
文件已成功移至隔离区...
2021/2/26 10:19:29 C:\Users\Administrator\Desktop\2021-02-25-Word-docs-and-installer-DLL-files\Documents\official paper.02.21.doc|>word\vbaProject.bin|>[Embedded:vba_scremu] [L] Script:SNH-gen [Trj] (0)
文件已成功移至隔离区...
2021/2/26 10:19:35 C:\Users\Administrator\Desktop\ijuqca.dll [L] Win64:TrojanX-gen [Trj] (0)
文件已成功移至隔离区...
2021/2/26 10:19:39 C:\Users\Administrator\Desktop\2021-02-25-Word-docs-and-installer-DLL-files\ProgramData\a4eSM.tmp [L] Win64:Malware-gen (0)
文件已成功移至隔离区...
2021/2/26 10:19:45 C:\Users\Administrator\Desktop\2021-02-25-Word-docs-and-installer-DLL-files\ProgramData\aSV1c.tmp [L] Win64:Malware-gen (0)
文件已成功移至隔离区...
2021/2/26 10:19:51 C:\Users\Administrator\Desktop\2021-02-25-Word-docs-and-installer-DLL-files\ProgramData\aUayK.tmp [L] Win64:Malware-gen (0)
文件已成功移至隔离区...
2021/2/26 10:20:06 C:\Users\Administrator\Desktop\ice-32.dat [L] Win64:TrojanX-gen [Trj] (0)
文件已成功移至隔离区...
2021/2/26 10:20:14 C:\Users\Administrator\Desktop\2021-02-25-Word-docs-and-installer-DLL-files\ProgramData\azaQWg.tmp [L] Win64:Malware-gen (0)
文件已成功移至隔离区...
2021/2/26 10:20:17 C:\Users\Administrator\Desktop\2021-02-25-Word-docs-and-installer-DLL-files\ProgramData\ao4Wn.tmp [L] Win64:Malware-gen (0)
文件已成功移至隔离区...
2021/2/26 10:20:21 C:\Users\Administrator\Desktop\2021-02-25-Word-docs-and-installer-DLL-files\ProgramData\an3hO4.tmp [L] Win64:Malware-gen (0)
文件已成功移至隔离区...
2021/2/26 10:20:36 C:\Users\Administrator\Desktop\2021-02-25-Word-docs-and-installer-DLL-files\ProgramData\a3rJi.tmp [L] Win64:Malware-gen (0)
文件已成功移至隔离区...

显示全部楼层 · 发表于 2021-2-26 12:53:36

WD不报。

显示全部楼层 · 发表于 2021-2-26 14:27:56

金山毒霸

显示全部楼层 · 发表于 2021-2-26 18:56:27

360

360杀毒扫描日志
病毒库版本：
扫描时间：2021-02-26 18:55:24
扫描用时：00:00:03
扫描类型：右键扫描
扫描文件总数：25
项目总数：18
清除项目数：18
扫描选项
----------------------
扫描所有文件：是
扫描压缩包：是
发现病毒处理方式：由用户选择处理
扫描磁盘引导区：是
扫描 Rootkit：是
使用云查杀引擎：是
使用QVM人工智能引擎：是
扫描建议修复项：是
常规引擎设置：未使用
扫描内容
----------------------
E:\浏览器下载\From Malware Traffic
白名单设置
----------------------
扫描结果
======================
高危风险项
----------------------
E:\浏览器下载\From Malware Traffic\2021-02-25-malware-and-artifacts-from-an-infection\ice-32.dat Win64/Trojan.Generic.HggASPsA 已删除
E:\浏览器下载\From Malware Traffic\2021-02-25-malware-and-artifacts-from-an-infection\ijuqca.dll Win64/Trojan.Generic.HggASPsA 已删除
E:\浏览器下载\From Malware Traffic\2021-02-25-malware-and-artifacts-from-an-infection\2021-02-25-Word-docs-and-installer-DLL-files\ProgramData\a3rJi.tmp Win64/Trojan.Generic.HggASPwA 已删除
E:\浏览器下载\From Malware Traffic\2021-02-25-malware-and-artifacts-from-an-infection\2021-02-25-Word-docs-and-installer-DLL-files\ProgramData\an3hO4.tmp Win64/Trojan.Generic.HggASPwA 已删除
E:\浏览器下载\From Malware Traffic\2021-02-25-malware-and-artifacts-from-an-infection\2021-02-25-Word-docs-and-installer-DLL-files\ProgramData\a4eSM.tmp Win64/Trojan.Generic.HggASPwA 已删除
E:\浏览器下载\From Malware Traffic\2021-02-25-malware-and-artifacts-from-an-infection\2021-02-25-Word-docs-and-installer-DLL-files\ProgramData\ao4Wn.tmp Win64/Trojan.Generic.HggASPwA 已删除
E:\浏览器下载\From Malware Traffic\2021-02-25-malware-and-artifacts-from-an-infection\2021-02-25-Word-docs-and-installer-DLL-files\ProgramData\aSV1c.tmp Win64/Trojan.Generic.HggASPwA 已删除
E:\浏览器下载\From Malware Traffic\2021-02-25-malware-and-artifacts-from-an-infection\2021-02-25-Word-docs-and-installer-DLL-files\ProgramData\azaQWg.tmp Win64/Trojan.Generic.HggASPwA 已删除
E:\浏览器下载\From Malware Traffic\2021-02-25-malware-and-artifacts-from-an-infection\2021-02-25-Word-docs-and-installer-DLL-files\ProgramData\aUayK.tmp Win64/Trojan.Generic.HggASPwA 已删除
E:\浏览器下载\From Malware Traffic\2021-02-25-malware-and-artifacts-from-an-infection\2021-02-25-Word-docs-and-installer-DLL-files\Documents\certificate.02.25.2021.doc Office/Trojan.Generic.HjcASPsA 已删除
E:\浏览器下载\From Malware Traffic\2021-02-25-malware-and-artifacts-from-an-infection\2021-02-25-Word-docs-and-installer-DLL-files\Documents\inquiry_02.21.doc Office/Trojan.Generic.HjcASPwA 已删除
E:\浏览器下载\From Malware Traffic\2021-02-25-malware-and-artifacts-from-an-infection\2021-02-25-Word-docs-and-installer-DLL-files\Documents\inquiry 02.25.21.doc heur.macro.gen.aa 已修复
E:\浏览器下载\From Malware Traffic\2021-02-25-malware-and-artifacts-from-an-infection\2021-02-25-Word-docs-and-installer-DLL-files\Documents\legislate-02.25.2021.doc 木马程序(Trojan.Generic) 已删除
E:\浏览器下载\From Malware Traffic\2021-02-25-malware-and-artifacts-from-an-infection\2021-02-25-Word-docs-and-installer-DLL-files\Documents\official paper.02.21.doc Office/Trojan.Generic.HjcASPwA 已删除
E:\浏览器下载\From Malware Traffic\2021-02-25-malware-and-artifacts-from-an-infection\2021-02-25-Word-docs-and-installer-DLL-files\Documents\deed contract_02.21.doc Office/Trojan.Generic.HjcASPwA 已删除
E:\浏览器下载\From Malware Traffic\2021-02-25-malware-and-artifacts-from-an-infection\2021-02-25-Word-docs-and-installer-DLL-files\Documents\legal agreement 02.25.2021.doc Office/Trojan.Generic.HjcASPwA 已删除
E:\浏览器下载\From Malware Traffic\2021-02-25-malware-and-artifacts-from-an-infection\2021-02-25-Word-docs-and-installer-DLL-files\Documents\report_02.21.doc Office/Trojan.Generic.HjcASPwA 已删除
E:\浏览器下载\From Malware Traffic\2021-02-25-malware-and-artifacts-from-an-infection\2021-02-25-Word-docs-and-installer-DLL-files\Documents\statistics_02.25.2021.doc Office/Trojan.Generic.HjcASPwA 已删除

复制代码

[病毒样本] From Malware Traffic #TA551 #IcedID（2.26）

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源