Stealer

显示全部楼层 · 发表于 2021-4-13 12:16:09

Dr.Web
Trojan.PWS.Siggen2.64491

显示全部楼层 · 发表于 2021-4-13 12:35:10

avast 扫描双击miss，衍生物杀

显示全部楼层 · 发表于 2021-4-13 13:07:39

IKARUS

Date and Time: 4/13/2021 1:06:58 PM
File Size: 361.91 kB
Detection Name: Trojan-Dropper.MSIL.Agent
Detection-ID: 3483638
Suggestion: Backup
File Name: RemamDriver.bin
Original Path: C:\Users\promi\Desktop\RemamDriver.bin

复制代码

显示全部楼层 · 发表于 2021-4-13 13:44:12

anthonyqian 发表于 2021-4-13 11:37
ESET 仍旧miss

可以试试双击能不能杀产物，这个exe其实就是个压缩包

显示全部楼层 · 发表于 2021-4-13 14:47:38

温馨小屋发表于 2021-4-13 13:44
可以试试双击能不能杀产物，这个exe其实就是个压缩包

可以的衍生物在VT上有40/70多的报毒率

显示全部楼层 · 发表于 2021-4-13 23:18:23

The following dropped file(s) were detected by Unsupervised machine learning algorithms:
lleqy.exe detected with model: Suspicious.Cloud.8.EuW@aiuSw!di
The memory dump of the following file(s) were detected by Unsupervised machine learning algorithms:
lleqy.exe (pid: 2840) detected with model: Suspicious.Cloud.8.GuW@auh80eii
BD好像开发了新算法并在云沙箱测试

显示全部楼层 · 发表于 2021-4-13 23:25:47

很温和发表于 2021-4-13 23:18
The following dropped file(s) were detected by Unsupervised machine learning algorithms:
lleqy.exe ...

这是BD的企业版还是个人版？

显示全部楼层 · 发表于 2021-4-13 23:45:19

温馨小屋发表于 2021-4-13 09:25
MES，RP杀，JTI信誉低。

JTI是什么

显示全部楼层 · 发表于 2021-4-13 23:46:06

anthonyqian 发表于 2021-4-13 23:25
这是BD的企业版还是个人版？

企业版
gravityzone elite 确定可以使用临时邮箱申请试用。
功能也比较全面包含了上面说的云沙箱

显示全部楼层 · 发表于 2021-4-13 23:46:55

很温和发表于 2021-4-13 23:18
The following dropped file(s) were detected by Unsupervised machine learning algorithms:
lleqy.exe ...

为啥机器学习会报云杀……

[病毒样本] Stealer

本帖子中包含更多资源