KillMBR 1x

显示全部楼层 · 发表于 2021-8-26 20:46:59

卡巴斯基断网双击主防杀

显示全部楼层 · 发表于 2021-8-26 21:13:52

红伞kill：APC

显示全部楼层 · 发表于 2021-8-26 21:14:05

360杀毒：压缩包扫描不报
解压后静默扫描杀

显示全部楼层 · 发表于 2021-8-27 09:58:21

anthonyqian 发表于 2021-8-26 20:44
如果自动机可以跑出恶意行为的，avast拉黑速度真的会很快，就算传播不广… 而且这个样本我也提交了，我和 ...

Avast
Win32:Malware-gen

显示全部楼层 · 发表于 2021-8-27 10:05:40

正在缓冲发表于 2021-8-27 09:58
Avast
Win32:Malware-gen

应该是进入了人工分析的阶段了吧……avast的人工分析差不多是12小时

显示全部楼层 · 发表于 2021-8-27 10:25:46

金山毒霸查杀 Win32.Troj.Undef

显示全部楼层 · 发表于 2021-8-27 11:28:50

能穿透还原软件吗？

显示全部楼层 · 发表于 2021-8-27 17:22:38

HMPA kill.

Mitigation WipeGuard
Timestamp 2021-08-27T09:21:55
Platform 6.3.9600/x64 v907 06_3d%
PID 7972
Feature 007D0A30000001A2
Application D:\###Area###\KillMBR\KillMBR.exe
Created 2021-08-27T09:20:28
Description KillMBR.exe
Reason Master Boot Record (MBR)
Volume \Device\HarddiskVolume2
BusType SATA
LBA 0
Length 1
PartitionType 0xFF
0000 E9 C1 00 E4 60 24 80 88 C4 3A 26 A1 7D 74 18 80 ....`$...:&.}t..
0010 FC 50 74 0F 80 FC 4B 74 0A 80 FC 4D 74 05 80 FC .Pt...Kt...Mt...
0020 48 75 04 88 26 A0 7D CF 90 A0 9F 7D FE C0 A2 9F Hu..&.}....}....
0030 7D 3C 0A 75 75 B0 00 A2 9F 7D 8B 1E C0 7D 8A 26 }<.uu....}...}.&
0040 A0 7D 80 FC 48 74 11 80 FC 50 74 15 80 FC 4B 74 .}..Ht...Pt...Kt
0050 19 80 FC 4D 74 1D EB 22 C6 06 A1 7D 50 FE CF EB ...Mt.."...}P...
0060 19 C6 06 A1 7D 48 FE C7 EB 10 C6 06 A1 7D 4D FE ....}H.......}M.
0070 CB EB 07 C6 06 A1 7D 4B FE C3 E8 0D 01 BF C0 7D ......}K.......}
0080 03 3E CA 7D 03 3E CA 7D 83 EF 02 83 EF 02 26 8B .>.}.>.}......&.
0090 05 83 C7 02 26 89 05 83 EF 02 81 FF C0 7D 75 EB ....&........}u.
00A0 89 1E C0 7D E8 99 00 E8 61 00 B0 20 E6 20 CF B8 ...}....a.. . ..
00B0 00 00 8E D8 BB 20 00 C7 07 28 00 C7 47 02 C0 07 ..... ...(..G...
00C0 CD 08 FB C3 90 8C C8 8E C0 B4 00 B0 03 CD 10 E8 ................
00D0 6E 00 E8 84 00 E8 51 00 E8 65 00 E8 2D 00 E8 CE n.....Q..e..-...
00E0 FF EB FE 55 89 E5 50 53 51 52 B4 02 B7 00 8B 56 ...U..PSQR.....V
00F0 04 CD 10 B4 09 B0 03 B7 00 BB 0D 00 B7 00 B9 01 ................
0100 00 CD 10 5A 59 5B 58 89 EC 5D C3 50 51 57 8B 0E ...ZY[X..].PQW..
0110 CA 7D BF C0 7D 26 8B 05 50 E8 C7 FF 83 C4 02 83 .}..}&..P.......
0120 C7 02 49 75 F0 5F 59 58 C3 B4 01 CD 16 74 06 B4 ..Iu._YX.....t..
0130 00 CD 16 EB F4 B4 01 CD 16 74 FA B4 00 CD 16 C3 .........t......
0140 50 53 51 52 B7 07 B4 06 B0 00 B5 00 B1 00 B6 18 PSQR............
0150 B2 4F CD 10 5A 59 5B 58 C3 89 EE BD A2 7D 8B 0E .O..ZY[X.....}..
0160 B2 7D B6 0C B2 24 B7 00 B0 01 B3 0C B4 13 CD 10 .}...$..........
0170 89 F5 C3 BD B4 7D 8B 0E BE 7D B6 0C B2 24 B7 00 .....}...}...$..
0180 B0 01 B3 0C B4 13 CD 10 EB FE 80 FB 4F 7F E4 80 ............O...
0190 FF 18 7F DF 80 FB 00 74 DA 80 FF 00 74 D5 C3 00 .......t....t...
01A0 4D 4B 70 72 65 73 73 20 73 20 74 6F 20 73 74 61 MKpress s to sta
01B0 72 74 10 00 47 61 6D 65 20 4F 76 65 72 21 0A 00 rt..Game Over!..
01C0 09 05 08 05 07 05 06 05 05 05 05 00 00 00 00 00 ................
01D0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
01E0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
01F0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 55 AA ..............U.

复制代码

[病毒样本] KillMBR 1x

本帖子中包含更多资源

本帖子中包含更多资源