搬运

dreams521

RT

1. https://wwa.lanzoui.com/i9RVpu2f45g

复制代码

Nocria

IKARUS - 12/13

1. [15.09.2021 21:15:46] On-demand scan started: "user_defined"
   
2. [15.09.2021 21:15:46] Found, 0.15s, SigName: "Trojan.Office.Doc", SigId: 335543419, Type: "VIRUS", File: "C:\Users\promi\Desktop\2021-09-14-Hancitor-malware-samples\0914_1619310183793.doc"
   
3. [15.09.2021 21:15:46] Found, 0.62s, SigName: "Trojan.Office.Doc", SigId: 335543413, Type: "VIRUS", File: "C:\Users\promi\Desktop\2021-09-14-Hancitor-malware-samples\0914_2075899505898.doc"
   
4. [15.09.2021 21:15:46] Found, 0.47s, SigName: "Trojan.Office.Doc", SigId: 335543418, Type: "VIRUS", File: "C:\Users\promi\Desktop\2021-09-14-Hancitor-malware-samples\0914_3019562103895.doc"
   
5. [15.09.2021 21:15:46] Found, 0.32s, SigName: "Trojan-Dropper.VBA.Agent", SigId: 4209818, Type: "VIRUS", File: "C:\Users\promi\Desktop\2021-09-14-Hancitor-malware-samples\0914_3111328809326.doc"
   
6. [15.09.2021 21:15:46] Found, 0.47s, SigName: "Trojan.Office.Doc", SigId: 335543421, Type: "VIRUS", File: "C:\Users\promi\Desktop\2021-09-14-Hancitor-malware-samples\0914_3266473673075.doc"
   
7. [15.09.2021 21:15:46] Found, 0.31s, SigName: "Trojan.Office.Doc", SigId: 335543420, Type: "VIRUS", File: "C:\Users\promi\Desktop\2021-09-14-Hancitor-malware-samples\0914_35394195010799.doc"
   
8. [15.09.2021 21:15:46] Found, 0.16s, SigName: "Trojan.Office.Doc", SigId: 335543414, Type: "VIRUS", File: "C:\Users\promi\Desktop\2021-09-14-Hancitor-malware-samples\0914_4064142248090.doc"
   
9. [15.09.2021 21:15:47] Found, 0.31s, SigName: "Trojan.Office.Doc", SigId: 335543415, Type: "VIRUS", File: "C:\Users\promi\Desktop\2021-09-14-Hancitor-malware-samples\0914_4318455841562.doc"
   
10. [15.09.2021 21:15:47] Found, 0.31s, SigName: "Trojan.Office.Doc", SigId: 335543412, Type: "VIRUS", File: "C:\Users\promi\Desktop\2021-09-14-Hancitor-malware-samples\0914_531107283103.doc"
    
11. [15.09.2021 21:15:47] Found, 0.16s, SigName: "Trojan.Office.Doc", SigId: 335543416, Type: "VIRUS", File: "C:\Users\promi\Desktop\2021-09-14-Hancitor-malware-samples\0914_547065726433.doc"
    
12. [15.09.2021 21:15:47] Found, 0.16s, SigName: "Trojan.Office.Doc", SigId: 335543417, Type: "VIRUS", File: "C:\Users\promi\Desktop\2021-09-14-Hancitor-malware-samples\0914_926206928839.doc"
    
13. [15.09.2021 21:15:47] Found, 0.31s, SigName: "Trojan-Banker.Hanticor", SigId: 335517714, Type: "VIRUS", File: "C:\Users\promi\Desktop\2021-09-14-Hancitor-malware-samples\hhhh.mp3"
    
14. [15.09.2021 21:15:47] On-demand scan FINISHED: "user_defined"
    
15. [15.09.2021 21:15:47] ----------------------------------------------------
    
16. [15.09.2021 21:15:47] Directories scanned: 1
    
17. [15.09.2021 21:15:47] Files scanned: 13
    
18. [15.09.2021 21:15:47] Virus found: 12
    
19. [15.09.2021 21:15:47] ----------------------------------------------------

复制代码

anthonyqian

avast 剩余reform.doc

琳辰

ESET: 12/13

0914_1619310183793.doc - GenScript.MNI trojan
0914_2075899505898.doc - GenScript.MNI trojan
0914_3019562103895.doc - GenScript.MNI trojan
0914_3111328809326.doc - GenScript.MNI trojan
0914_3266473673075.doc - GenScript.MNI trojan
0914_35394195010799.doc - GenScript.MNI trojan
0914_4064142248090.doc - GenScript.MNI trojan
0914_4318455841562.doc - GenScript.MNI trojan
0914_531107283103.doc - GenScript.MNI trojan
0914_547065726433.doc - GenScript.MNI trojan
0914_926206928839.doc - GenScript.MNI trojan
hhhh.mp3 - a variant of Win32/GenKryptik.FKOU trojan

File "reform.doc" is password-protected.

YECGAA

卡巴
剩余1个 reform.doc
hhh.mp3 HEUR:Trojan.Win32.Hancitor.gen
其余HEUR:Trojan-Dropper.Script.Generic

edge拦截下载

11111111111445

微点扫描1x,安天扫描miss

846472713

ESET 12X