#Qakbot 3X

显示全部楼层 · 发表于 2021-12-8 01:12:13

ESSP ALL

Time;Scanner;Object type;Object;Detection;Action;User;Information;Hash;First seen here
12/7/2021 11:11:53 AM;Real-time file system protection;file;E:\MalwareTest\Kafan\34557X\2.dll;a variant of Generik.EASMSOG trojan;cleaned by deleting;LAPTOP-H4ANBJKH\zhong;Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe (DDC66996B438E251EC2006E0C848D56165974C60).;05D3ACDB3D829F052E7D54602F1F7A126D4D5857;12/7/2021 11:11:27 AM
12/7/2021 11:11:58 AM;Real-time file system protection;file;E:\MalwareTest\Kafan\34557X\3.dll;a variant of Generik.EASMSOG trojan;cleaned by deleting;LAPTOP-H4ANBJKH\zhong;Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe (DDC66996B438E251EC2006E0C848D56165974C60).;B48F87975050FDD9D77F15A2191E8B3CA736F81A;12/7/2021 11:11:27 AM
12/7/2021 11:11:58 AM;Real-time file system protection;file;E:\MalwareTest\Kafan\34557X\1.dll;a variant of Generik.EASMSOG trojan;cleaned by deleting;LAPTOP-H4ANBJKH\zhong;Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe (DDC66996B438E251EC2006E0C848D56165974C60).;808249813566FD63DB5C5EF6148ECCE3F45A35AD;12/7/2021 11:11:27 AM

复制代码

显示全部楼层 · 发表于 2021-12-8 02:20:40

360：

2021-12-08 02:19:57 感染型病毒(Win32/Backdoor.KBOT.HygByp8A)MD5:84909127d8a82a2fe1c378af42f091ff已删除此文件，如果您发现误删，可从隔离区恢复此文件。 d:\test\2.dll
2021-12-08 02:19:57 恶意软件(HEUR/QVM40.1.CA9F.Malware.Gen)MD5:37fb71c9c68d29e1fc58852746a762d9已删除此文件，如果您发现误删，可从隔离区恢复此文件。 d:\test\3.dll
2021-12-08 02:19:57 恶意软件(HEUR/QVM40.1.CA9F.Malware.Gen)MD5:c8ebe4dc23e8a6ccf1a15cb75687af47已删除此文件，如果您发现误删，可从隔离区恢复此文件。 d:\test\1.dll

复制代码

显示全部楼层 · 发表于 2021-12-8 08:56:23

本帖最后由 aiqinghe 于 2021-12-8 09:14 编辑

BEST扫描miss 提交到云沙盒测试
沙盒kill3

显示全部楼层 · 发表于 2021-12-8 09:35:09

McAfee余1x

显示全部楼层 · 发表于 2021-12-8 09:42:56

BDTS 三个云杀

1.dll is infected with Gen:Suspicious.Cloud.1.7r!@a0xswZii

3.dll is infected with Gen:Suspicious.Cloud.1.8r!@a0xswZii

2.dll Gen:Suspicious.Cloud.1.8r@@a0xswZii

[病毒样本] #Qakbot 3X

本帖子中包含更多资源

本帖子中包含更多资源