Dropper

显示全部楼层 · 发表于 2021-3-28 18:52:09

Dropper

显示全部楼层 · 发表于 2021-3-28 18:55:29

显示全部楼层 · 发表于 2021-3-28 19:06:49

360解压提示木马。智量秒杀

显示全部楼层 · 发表于 2021-3-28 19:51:33

eset

日志
D:\迅雷下载\loader.rar > RAR > loader.exe > AUTOIT > script.bin - Win32/Injector.Autoit.CPP 特洛伊木马的变量 - 已删除

复制代码

显示全部楼层 · 发表于 2021-3-28 20:04:25

avast 拦截下载

显示全部楼层 · 发表于 2021-3-28 20:26:50

显示全部楼层 · 发表于 2021-3-28 21:30:19

loader.rar=>loader.exe=>(AutoIT r)=>(AutoIT Script)	Trojan.Downloader.JTFI	No action was taken
loader.rar=>loader.exe=>(AutoIT r)=>VBcLe=>(BASE64)	AIT:Trojan.Autoit.DDR	No action was taken
loader.rar=>loader.exe=>(AutoIT Script)	Trojan.Downloader.JTFI	No action was taken
loader.rar=>loader.exe=>VBcLe=>(BASE64)	AIT:Trojan.Autoit.DDR	No action was taken

显示全部楼层 · 发表于 2021-3-28 21:46:38

OSArmor 1.56

Date/Time: 2021/3/28 21:46:30
Process: [3144]C:\Users\Administrator\Downloads\loader\loader.exe
Process MD5 Hash: B72B65401C8D49137834445A4A7A5344
Parent: [1708]C:\Windows\explorer.exe
Rule: BlockUnsignedProcsWithHighIL
Rule Name: Block unsigned processes executed with high privileges
Command Line: "C:\Users\Administrator\Downloads\loader\loader.exe"
Signer: <NULL>
Parent Signer: <NULL>
User/Domain: Administrator/SK-20210319OIFS
System File: False
Parent System File: True
Integrity Level: High
Parent Integrity Level: High

显示全部楼层 · 发表于 2021-3-29 01:19:18

显示全部楼层 · 发表于 2021-3-29 14:58:57

毒霸

[病毒样本] Dropper

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源