2021-09-17-Squirrelwaffle-and-Cobalt-Strike-malware-and-artifacts

Nocria

IKARUS emptied.

1. [18.09.2021 22:30:39] On-demand scan started: "user_defined"
   
2. [18.09.2021 22:30:39] Found, 0.00s, SigName: "Trojan.Office.Doc", SigId: 3890484, Type: "VIRUS", File: "C:\Users\promi\Desktop\2021-09-17-Squirrelwaffle-and-Cobalt-Strike-malware-and-artifacts\2021-09-17-Squirrelwaffle-and-Cobalt-Strike-malware-and-artifacts\diagram-141.doc"
   
3. [18.09.2021 22:30:39] Found, 0.15s, SigName: "Trojan.Office.Doc", SigId: 3890484, Type: "VIRUS", File: "C:\Users\promi\Desktop\2021-09-17-Squirrelwaffle-and-Cobalt-Strike-malware-and-artifacts\2021-09-17-Squirrelwaffle-and-Cobalt-Strike-malware-and-artifacts\diagram-326.doc"
   
4. [18.09.2021 22:30:39] Found, 0.15s, SigName: "Trojan.Office.Doc", SigId: 3890484, Type: "VIRUS", File: "C:\Users\promi\Desktop\2021-09-17-Squirrelwaffle-and-Cobalt-Strike-malware-and-artifacts\2021-09-17-Squirrelwaffle-and-Cobalt-Strike-malware-and-artifacts\diagram-346.doc"
   
5. [18.09.2021 22:30:39] Found, 0.31s, SigName: "Trojan.Office.Doc", SigId: 3890484, Type: "VIRUS", File: "C:\Users\promi\Desktop\2021-09-17-Squirrelwaffle-and-Cobalt-Strike-malware-and-artifacts\2021-09-17-Squirrelwaffle-and-Cobalt-Strike-malware-and-artifacts\diagram-650.doc"
   
6. [18.09.2021 22:30:39] Found, 0.47s, SigName: "Trojan.Office.Doc", SigId: 3890484, Type: "VIRUS", File: "C:\Users\promi\Desktop\2021-09-17-Squirrelwaffle-and-Cobalt-Strike-malware-and-artifacts\2021-09-17-Squirrelwaffle-and-Cobalt-Strike-malware-and-artifacts\diagram-721.doc"
   
7. [18.09.2021 22:30:39] Found, 0.16s, SigName: "Trojan.Office.Doc", SigId: 3890484, Type: "VIRUS", File: "C:\Users\promi\Desktop\2021-09-17-Squirrelwaffle-and-Cobalt-Strike-malware-and-artifacts\2021-09-17-Squirrelwaffle-and-Cobalt-Strike-malware-and-artifacts\diagram-74.doc"
   
8. [18.09.2021 22:30:39] Found, 0.16s, SigName: "Trojan.Office.Doc", SigId: 3890484, Type: "VIRUS", File: "C:\Users\promi\Desktop\2021-09-17-Squirrelwaffle-and-Cobalt-Strike-malware-and-artifacts\2021-09-17-Squirrelwaffle-and-Cobalt-Strike-malware-and-artifacts\diagram-801.doc"
   
9. [18.09.2021 22:30:39] Found, 0.16s, SigName: "Trojan.Office.Doc", SigId: 3890484, Type: "VIRUS", File: "C:\Users\promi\Desktop\2021-09-17-Squirrelwaffle-and-Cobalt-Strike-malware-and-artifacts\2021-09-17-Squirrelwaffle-and-Cobalt-Strike-malware-and-artifacts\diagram-831.doc"
   
10. [18.09.2021 22:30:39] Found, 0.15s, SigName: "Trojan.Office.Doc", SigId: 3890484, Type: "VIRUS", File: "C:\Users\promi\Desktop\2021-09-17-Squirrelwaffle-and-Cobalt-Strike-malware-and-artifacts\2021-09-17-Squirrelwaffle-and-Cobalt-Strike-malware-and-artifacts\diagram-838.doc"
    
11. [18.09.2021 22:30:39] Found, 0.15s, SigName: "Trojan.Office.Doc", SigId: 3890484, Type: "VIRUS", File: "C:\Users\promi\Desktop\2021-09-17-Squirrelwaffle-and-Cobalt-Strike-malware-and-artifacts\2021-09-17-Squirrelwaffle-and-Cobalt-Strike-malware-and-artifacts\diagram-88.doc"
    
12. [18.09.2021 22:30:39] Found, 0.16s, SigName: "Trojan.Office.Doc", SigId: 3890484, Type: "VIRUS", File: "C:\Users\promi\Desktop\2021-09-17-Squirrelwaffle-and-Cobalt-Strike-malware-and-artifacts\2021-09-17-Squirrelwaffle-and-Cobalt-Strike-malware-and-artifacts\diagram-909.doc"
    
13. [18.09.2021 22:30:39] Found, 0.16s, SigName: "Trojan-Downloader.VBS.Agent", SigId: 335940899, Type: "VIRUS", File: "C:\Users\promi\Desktop\2021-09-17-Squirrelwaffle-and-Cobalt-Strike-malware-and-artifacts\2021-09-17-Squirrelwaffle-and-Cobalt-Strike-malware-and-artifacts\pin.vbs"
    
14. [18.09.2021 22:30:39] Found, 0.47s, SigName: "Gen.Variant.Refroso", SigId: 1529015, Type: "VIRUS", File: "C:\Users\promi\Desktop\2021-09-17-Squirrelwaffle-and-Cobalt-Strike-malware-and-artifacts\2021-09-17-Squirrelwaffle-and-Cobalt-Strike-malware-and-artifacts\rvogdko8fnp.exe"
    
15. [18.09.2021 22:30:39] Found, 0.62s, SigName: "Trojan.Win32.Krypt", SigId: 335940902, Type: "VIRUS", File: "C:\Users\promi\Desktop\2021-09-17-Squirrelwaffle-and-Cobalt-Strike-malware-and-artifacts\2021-09-17-Squirrelwaffle-and-Cobalt-Strike-malware-and-artifacts\www2.dll"
    
16. [18.09.2021 22:30:39] On-demand scan FINISHED: "user_defined"
    
17. [18.09.2021 22:30:39] ----------------------------------------------------
    
18. [18.09.2021 22:30:39] Directories scanned: 2
    
19. [18.09.2021 22:30:39] Files scanned: 14
    
20. [18.09.2021 22:30:39] Virus found: 14
    
21. [18.09.2021 22:30:39] ----------------------------------------------------

复制代码