#Bazarloader （8.31）

显示全部楼层 · 发表于 2021-8-31 12:35:31

本帖最后由 hsks 于 2021-8-31 12:46 编辑

https://ws28.cn/f/6a4zqjjdfc0 复制链接到浏览器打开

显示全部楼层 · 发表于 2021-8-31 12:53:59

360：0

显示全部楼层 · 发表于 2021-8-31 12:55:44

卡巴剩8个.jpg文件

显示全部楼层 · 发表于 2021-8-31 12:59:30

eset

显示全部楼层 · 发表于 2021-8-31 13:08:03

智量 11X

2021-08-31 13:06:08 C:\Users\Administrator\Desktop\2021-08-30-TA551-BazarLoader-malware-and-artifacts\Extracted-docs\tell.08.21.doc HEUR.Office.ML.A
2021-08-31 13:06:01 C:\Users\Administrator\Desktop\2021-08-30-TA551-BazarLoader-malware-and-artifacts\Extracted-docs\enjoin.08.30.2021.doc HEUR.Office.ML.A
2021-08-31 13:06:01 C:\Users\Administrator\Desktop\2021-08-30-TA551-BazarLoader-malware-and-artifacts\Extracted-docs\report-08.21.doc HEUR.Office.ML.A
2021-08-31 13:06:01 C:\Users\Administrator\Desktop\2021-08-30-TA551-BazarLoader-malware-and-artifacts\Extracted-docs\decree-08.21.doc HEUR.Office.ML.A
2021-08-31 13:06:01 C:\Users\Administrator\Desktop\2021-08-30-TA551-BazarLoader-malware-and-artifacts\Extracted-docs\certificate-08.21.doc HEUR.Office.ML.A
2021-08-31 13:06:01 C:\Users\Administrator\Desktop\2021-08-30-TA551-BazarLoader-malware-and-artifacts\Extracted-docs\commerce .08.21.doc HEUR.Office.ML.A
2021-08-31 13:06:00 C:\Users\Administrator\Desktop\2021-08-30-TA551-BazarLoader-malware-and-artifacts\Extracted-docs\document-08.30.2021.doc HEUR.Office.ML.A
2021-08-31 13:06:00 C:\Users\Administrator\Desktop\2021-08-30-TA551-BazarLoader-malware-and-artifacts\Extracted-docs\intelligence_08.21.doc HEUR.Office.ML.A
2021-08-31 13:06:00 C:\Users\Administrator\Desktop\2021-08-30-TA551-BazarLoader-malware-and-artifacts\Extracted-docs\legal agreement.08.21.doc HEUR.Office.ML.A
2021-08-31 13:05:59 C:\Users\Administrator\Desktop\2021-08-30-TA551-BazarLoader-malware-and-artifacts\Extracted-docs\commerce -08.21.doc HEUR.Office.ML.A
2021-08-31 13:05:59 C:\Users\Administrator\Desktop\2021-08-30-TA551-BazarLoader-malware-and-artifacts\Extracted-docs\legislate.08.21.doc HEUR.Office.ML.A

复制代码

显示全部楼层 · 发表于 2021-8-31 13:10:21

BD：6x
杀的全都是文档

显示全部楼层 · 发表于 2021-8-31 13:18:38

火绒19x

显示全部楼层 · 发表于 2021-8-31 13:21:44

趋势 miss

显示全部楼层 · 发表于 2021-8-31 14:15:10

Avira 12

显示全部楼层 · 发表于 2021-8-31 14:19:55

卡巴斯基上报后的回复

Hello,

New malicious software was found in the attached files. Its detection will be included in the next update.
Thank you for your help.
devDevDiv.jpg - Trojan.Win64.Agent.qwhxei
devDivEx.jpg - Trojan.Win64.Agent.qwhxej
dirDirDrive.jpg - Trojan.Win64.Agent.qwhxek
dirDocDrive.jpg - Trojan.Win64.Agent.qwhxel
divDirDir.jpg - Trojan.Win64.Agent.qwhxem
divWinDiv.jpg - Trojan.Win64.Agent.qwhxen
driveWinDoc.jpg - Trojan.Win64.Agent.qwhxeo
winEx.jpg - Trojan.Win64.Agent.qwhxep

[病毒样本] #Bazarloader （8.31）

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源