#NOBELIUM 基于电子邮件的新型攻击 相关样本 (2021-05-25)

沧桑浪子

360杀毒扫描日志

病毒库版本：2021-05-28 15:52
扫描时间：2021-05-28 17:37:21
扫描用时：00:00:28
扫描类型：右键扫描
扫描文件总数：17
项目总数：5
清除项目数：0

扫描选项
----------------------
扫描所有文件：是
扫描压缩包：是
发现病毒处理方式：由用户选择处理
扫描磁盘引导区：是
扫描 Rootkit：是
使用云查杀引擎：是
使用QVM人工智能引擎：是
扫描建议修复项：是
常规引擎设置：

扫描内容
----------------------
D:\360SANDBOX\shadow\360安全浏览器下载\njjjj.zip


白名单设置
----------------------


扫描结果
======================
高危风险项
----------------------
D:\360SANDBOX\shadow\360安全浏览器下载\njjjj.zip=>njjjj/ee42ddacbd202008bcc1312e548e1d9ac670dd3d86c999606a3a01d464a2a330        感染型病毒(Win32/TrojanSpy.Khalesi.HggASVUA)        未处理
D:\360SANDBOX\shadow\360安全浏览器下载\njjjj.zip=>njjjj/ee44c0692fd2ab2f01d17ca4b58ca6c7f79388cbc681f885bb17ec946514088c        感染型病毒(Win32/HackTool.CobaltStrike.HggASVUA)        未处理
D:\360SANDBOX\shadow\360安全浏览器下载\njjjj.zip=>njjjj/2523f94bd4fba4af76f4411fe61084a7e7d80dec163c9ccba9226c80b8b31252=>Documents.dll        感染型病毒(Win32/HackTool.CobaltStrike.HggASVUA)        未处理
D:\360SANDBOX\shadow\360安全浏览器下载\njjjj.zip=>njjjj/94786066a64c0eb260a28a2959fcd31d63d175ade8b05ae682d3f6f9b2a5a916=>Documents.dll        感染型病毒(Win32/TrojanSpy.Khalesi.HggASVUA)        未处理
D:\360SANDBOX\shadow\360安全浏览器下载\njjjj.zip=>njjjj/d035d394a82ae1e44b25e273f99eae8e2369da828d6b6fdb95076fd3eb5de142=>Documents.dll        感染型病毒(Win32/HackTool.CobaltStrike.HggASVUA)        未处理

846472713

浪里个浪9527 发表于 2021-5-28 15:52

这软件在哪里下载？

846472713

SEP 2个

救命稻草

wwwbzhan

846472713 发表于 2021-5-28 17:53
这软件在哪里下载？

官网有免费试用

k2132

智量 3个  火绒 miss

Nocria

IKARUS - 6/7

1. [28.05.2021 22:39:20] On-demand scan started: "user_defined"
   
2. [28.05.2021 22:39:20] Found, 0.156s, SigName: "Trojan.Win64.Rozena", SigId: 323801360, Type: "VIRUS", File: "C:\Users\promi\Desktop\njjjj\2523f94bd4fba4af76f4411fe61084a7e7d80dec163c9ccba9226c80b8b31252"
   
3. [28.05.2021 22:39:20] Found, 0.171s, SigName: "Trojan.LNK.Agent", SigId: 323838573, Type: "VIRUS", File: "C:\Users\promi\Desktop\njjjj\48b5fb3fa3ea67c2bc0086c41ec755c39d748a7100d71b81f618e82bf1c479f0"
   
4. [28.05.2021 22:39:20] Found, 0.172s, SigName: "Trojan.Win64.Rozena", SigId: 323796613, Type: "VIRUS", File: "C:\Users\promi\Desktop\njjjj\94786066a64c0eb260a28a2959fcd31d63d175ade8b05ae682d3f6f9b2a5a916"
   
5. [28.05.2021 22:39:20] Found, 0.203s, SigName: "Trojan.Win64.Rozena", SigId: 323810885, Type: "VIRUS", File: "C:\Users\promi\Desktop\njjjj\d035d394a82ae1e44b25e273f99eae8e2369da828d6b6fdb95076fd3eb5de142"
   
6. [28.05.2021 22:39:20] Found, 0.141s, SigName: "Trojan.Win64.Rozena", SigId: 323796613, Type: "VIRUS", File: "C:\Users\promi\Desktop\njjjj\ee42ddacbd202008bcc1312e548e1d9ac670dd3d86c999606a3a01d464a2a330"
   
7. [28.05.2021 22:39:20] Found, 0.16s, SigName: "Trojan.Win64.Rozena", SigId: 323801360, Type: "VIRUS", File: "C:\Users\promi\Desktop\njjjj\ee44c0692fd2ab2f01d17ca4b58ca6c7f79388cbc681f885bb17ec946514088c"
   
8. [28.05.2021 22:39:21] On-demand scan FINISHED: "user_defined"
   
9. [28.05.2021 22:39:21] ----------------------------------------------------
   
10. [28.05.2021 22:39:21] Directories scanned: 1
    
11. [28.05.2021 22:39:21] Files scanned: 7
    
12. [28.05.2021 22:39:21] Virus found: 6
    
13. [28.05.2021 22:39:21] ----------------------------------------------------

复制代码

小Q机器人

奇安信  3杀