兩個釣魚樣本

megakotaro

公司郵箱收到的
密碼：infected

微步雲沙箱明明有顯示高危險行為，整體卻判定安全
倒是Hybrid-Analysis一個判定是惡意一個整體認為是安全，但虛擬機執行是可疑
微步在线云沙箱 (threatbook.cn)
微步在线云沙箱 (threatbook.cn)

Free Automated Malware Analysis Service - powered by Falcon Sandbox - Viewing online file analysis results for 'Arrival notice.html' (hybrid-analysis.com)
Free Automated Malware Analysis Service - powered by Falcon Sandbox - Viewing online file analysis results for 'Swiftcopy.html' (hybrid-analysis.com)

aboringman

ESET：Double kill.

HTML/Phishing.Gen 特洛伊木马

anthonyqian

卡巴只杀了一个

hxxps://www.cmanextstep.com/wp-content/uploads/ms-logo-v1 copy.svg

wwwab

钓鱼网站又不是挂马网站，网页本身没毒，只是内容恶意而已，沙箱怎么可能跑得出来啊，跑html出来的结果都是浏览器自身的行为，排除掉一些肯定判定为“安全”啊

Nocria

IKARUS

1. Date and Time: 3/27/2021 1:34:19 PM
   
2. File Size: 9.04 kB
   
3. Detection Name: Phishing.HTML.Doc
   
4. Detection-ID: 320579126
   
5. Suggestion: Backup
   
6. File Name: Arrival notice.html
   
7. Original Path: C:\Users\promi\AppData\Local\Temp\BNZ.605ec3d947c70
   

复制代码