#IcedID

hsks

rt

windows11BigSur

卡巴扫描kill 5x

aboringman

360:1

被上报部分



最终+1

1. 2021-12-15 23:38:01     木马程序(Trojan.Generic)MD5:d5ea6809b1e468b70fd2169e7430a58d              已删除此文件，如果您发现误删，可从隔离区恢复此文件。        d:\360极速浏览器下载\test\youyou.dll

复制代码

另一个暂未发现风险

安全大脑

网名丢失

这还真是郁闷了，360卫士和360杀毒右键扫描剩余5个

欧阳宣

avira 4x

1. 12/15/2021,10:49:43.996        [INFO]        D:\Virus\7X\hazu9.dll
   
2. 12/15/2021,10:49:43.996        [INFO]        [DETECTION] file contains 'HEUR/APC'
   
3. 12/15/2021,10:49:44.275        [INFO]        FP reports status 'NO False Positive' for file 'D:\Virus\7X\hazu11.dll' [I:10, S:111]
   
4. 12/15/2021,10:49:44.278        [INFO]        The file 'D:\Virus\7X\hazu11.dll' was scanned with the Protection Cloud. SHA256 = 8D35397061A78A6642BDCE7F53A0939F9B64C5AA06AC0BD9D37DFBCB8D836D08 [I:2, S:0]
   
5. 12/15/2021,10:49:44.278        [INFO]        D:\Virus\7X\hazu11.dll
   
6. 12/15/2021,10:49:44.278        [INFO]        [DETECTION] file contains 'HEUR/APC'
   
7. 12/15/2021,10:50:05.010        [INFO]        FP reports status 'NO False Positive' for file 'D:\Virus\7X\relief-x64.dat' [I:10, S:111]
   
8. 12/15/2021,10:50:05.012        [INFO]        The file 'D:\Virus\7X\relief-x64.dat' has been uploaded to the Protection Cloud and analyzed. SHA256 = 951E4775D53AC6F4DF5AAD53D9638CE1B896508BCD6159C118DDC418A296E7E4 [I:2, S:0]
   
9. 12/15/2021,10:50:05.012        [INFO]        D:\Virus\7X\relief-x64.dat
   
10. 12/15/2021,10:50:05.013        [INFO]        [DETECTION] file contains 'HEUR/APC'
    
11. 12/15/2021,10:50:05.257        [INFO]        FP reports status 'NO False Positive' for file 'D:\Virus\7X\youYou.dll' [I:10, S:111]
    
12. 12/15/2021,10:50:05.258        [INFO]        The file 'D:\Virus\7X\youYou.dll' was scanned with the Protection Cloud. SHA256 = 39D042DF0E1068CFDE7277FA9F52AAF40B561A98401F43E170E81728D15A2A62 [I:2, S:0]
    
13. 12/15/2021,10:50:05.259        [INFO]        D:\Virus\7X\youYou.dll
    
14. 12/15/2021,10:50:05.259        [INFO]        [DETECTION] file contains 'TR/AD.Bazar.39d042'

复制代码

心心相印

eis kill all

清茗微漾

N360 kill4x
第一个文件双击kis网页反病毒阻止

vaedzy

BD kill 5X 剩余俩dll 貌似触发了沙箱沙箱结果
沙箱结果


20搞出来的沙箱，不比上万的EDTD详细么
@anthonyqian @Eset小粉絲 @ICzcz @netweb

心心相印

红伞余2x

ICzcz

vaedzy 发表于 2021-12-16 12:44
BD kill 5X 剩余俩dll 貌似触发了沙箱沙箱结果
沙箱结果

确实远超EDTD，差距太大了。。