#RedLine Stealer 13X

显示全部楼层 · 发表于 2022-1-19 16:00:45

下载1：https://www.123pan.com/s/xaeA-OblvH
下载2：https://wss1.cn/f/7efcxomdtse

显示全部楼层 · 发表于 2022-1-19 16:09:35

本帖最后由 ICzcz 于 2022-1-19 16:13 编辑

ESET：kill all

时间;扫描程序;对象类型;对象;检测;操作;用户;信息;哈希;此处首次所见
2022/1/19 16:12:02;文件系统实时防护;文件;Downloads\Downloads\15fe4385a2289aaf208f080abb7277332ef8e71edc68902709ab917945a36740;MSIL/Kryptik.ADWG 特洛伊木马的变量;已通过删除清除;在通过应用程序创建的新文件上发生了事件: C:\Program Files\WinRAR\WinRAR.exe (5BE4CE09B674B292CEAF62554772F6BEC9649FBB).;EABEEF2E91D829CC71DB259422C16601D4ACB0A1;2022/1/19 16:11:49
2022/1/19 16:12:02;文件系统实时防护;文件;Downloads\Downloads\1b4fcd8497e6003009010a19abaa8981366922be96e93a84e30ca2885476ccd7;Win32/Packed.Obsidium.DU 特洛伊木马的变量;已通过删除清除;在通过应用程序创建的新文件上发生了事件: C:\Program Files\WinRAR\WinRAR.exe (5BE4CE09B674B292CEAF62554772F6BEC9649FBB).;FC0EB612EBF10A39D0ED0F996D08A92DAED3C277;2022/1/19 16:11:49
2022/1/19 16:12:02;文件系统实时防护;文件;Downloads\Downloads\fdeadd54dd29fe51b251242795c83c4defcdade23fdb4b589c05939ae42d6900;MSIL/Spy.Agent.DFY 特洛伊木马的变量;已通过删除清除;在通过应用程序创建的新文件上发生了事件: C:\Program Files\WinRAR\WinRAR.exe (5BE4CE09B674B292CEAF62554772F6BEC9649FBB).;FE0BDAA10B42A2F3D9BDDECF0DDDD4EA1BC34A89;2022/1/19 16:11:49
2022/1/19 16:12:03;文件系统实时防护;文件;Downloads\Downloads\slot8.exe;MSIL/Spy.Agent.DFY 特洛伊木马的变量;已通过删除清除;在通过应用程序创建的新文件上发生了事件: C:\Program Files\WinRAR\WinRAR.exe (5BE4CE09B674B292CEAF62554772F6BEC9649FBB).;FE0BDAA10B42A2F3D9BDDECF0DDDD4EA1BC34A89;2022/1/19 16:11:49
2022/1/19 16:12:04;文件系统实时防护;文件;Downloads\Downloads\rednovi.exe;MSIL/Spy.Agent.DFY 特洛伊木马的变量;已通过删除清除;在通过应用程序创建的新文件上发生了事件: C:\Program Files\WinRAR\WinRAR.exe (5BE4CE09B674B292CEAF62554772F6BEC9649FBB).;42799D6BF9179A8AD72573EB580DB48BBD0383E2;2022/1/19 16:11:49
2022/1/19 16:12:05;文件系统实时防护;文件;Downloads\Downloads\891aba61b8fec4005f25d405ddfec4d445213c77fce1e967ba07f13bcbe0dad5;MSIL/Kryptik.ADLB 特洛伊木马的变量;已通过删除清除;在通过应用程序创建的新文件上发生了事件: C:\Program Files\WinRAR\WinRAR.exe (5BE4CE09B674B292CEAF62554772F6BEC9649FBB).;26F8852F4F23FD86B4C47F9083075EABD644A28D;2022/1/19 16:11:49
2022/1/19 16:12:08;文件系统实时防护;文件;Downloads\Downloads\73942b1b5a8146090a40fe50a67c7c86c739329506db9ff5adc638ed7bb1654e;MSIL/Spy.Agent.DFY 特洛伊木马;已通过删除清除;在通过应用程序创建的新文件上发生了事件: C:\Program Files\WinRAR\WinRAR.exe (5BE4CE09B674B292CEAF62554772F6BEC9649FBB).;F8100E6BE9965750A7853DF863289B359D966E9C;2022/1/19 16:11:49
2022/1/19 16:12:09;文件系统实时防护;文件;Downloads\Downloads\bf31d8b83e50a7af3e2dc746c74b85d64ce28d7c33b95c09cd46b9caa4d53cad;MSIL/Spy.Agent.DFY 特洛伊木马的变量;已通过删除清除;在通过应用程序创建的新文件上发生了事件: C:\Program Files\WinRAR\WinRAR.exe (5BE4CE09B674B292CEAF62554772F6BEC9649FBB).;42799D6BF9179A8AD72573EB580DB48BBD0383E2;2022/1/19 16:11:49
2022/1/19 16:12:13;文件系统实时防护;文件;Downloads\Downloads\b8ebdc5b1e33b9382433151f62464d3860cf8c8950d2f1a0278ef77679a04d3b;Win32/Packed.Obsidium.DU 特洛伊木马的变量;已通过删除清除;在通过应用程序创建的新文件上发生了事件: C:\Program Files\WinRAR\WinRAR.exe (5BE4CE09B674B292CEAF62554772F6BEC9649FBB).;B39F90CB0023A34EC74A440CFBAFAB41C0B2A18D;2022/1/19 16:11:49
2022/1/19 16:12:13;文件系统实时防护;文件;Downloads\Downloads\216a733c391337fa303907a15fa55f01c9aeb128365fb6d6d245f7c7ec774100;MSIL/Kryptik.ADLB 特洛伊木马的变量;已通过删除清除;在通过应用程序创建的新文件上发生了事件: C:\Program Files\WinRAR\WinRAR.exe (5BE4CE09B674B292CEAF62554772F6BEC9649FBB).;7412CC99A555355BBA0B13637964F48D094813EB;2022/1/19 16:11:49
2022/1/19 16:12:13;文件系统实时防护;文件;Downloads\Downloads\af4bf44056fc0b8c538e1e677ed1453d1dd884e78e1d66d1d2b83abb79ff1161;Win32/Packed.Asprotect.KY 特洛伊木马的变量;已通过删除清除;在通过应用程序创建的新文件上发生了事件: C:\Program Files\WinRAR\WinRAR.exe (5BE4CE09B674B292CEAF62554772F6BEC9649FBB).;D41BD1CB516CE94177CC77186F368828CA0988B5;2022/1/19 16:11:49
2022/1/19 16:12:14;文件系统实时防护;文件;Downloads\Downloads\8d7883edc608a3806bc4ca58637e0d06a83f784da4e1804e9c5f24676a532a7e;Win32/Packed.Asprotect.KY 特洛伊木马的变量;已通过删除清除;在通过应用程序创建的新文件上发生了事件: C:\Program Files\WinRAR\WinRAR.exe (5BE4CE09B674B292CEAF62554772F6BEC9649FBB).;C3582B089D6C7E9E7B53597CEA53A18F3D8E1D02;2022/1/19 16:11:49
2022/1/19 16:12:15;文件系统实时防护;文件;Downloads\Downloads\2af009cdf12e1f84f161a2d4f2b4f97155eb6ec6230265604edbc8b21afb5f1a;Win32/Packed.Asprotect.NAY 特洛伊木马的变量;已通过删除清除;在通过应用程序创建的新文件上发生了事件: C:\Program Files\WinRAR\WinRAR.exe (5BE4CE09B674B292CEAF62554772F6BEC9649FBB).;9ABDA2D52BD0720163649C4D08B830E070663B81;2022/1/19 16:11:49

复制代码

显示全部楼层 · 发表于 2022-1-19 16:11:11

迈克菲清空

显示全部楼层 · 发表于 2022-1-19 16:14:44

本帖最后由 k2132 于 2022-1-19 16:16 编辑

智量全杀

安天 7x

显示全部楼层 · 发表于 2022-1-19 16:17:19

Avast all

显示全部楼层 · 发表于 2022-1-19 16:20:30

小红伞扫描Kill 12x

1b4fcd8497e6003009010a19abaa8981366922be96e93a84e30ca2885476ccd7.aviradetected
2af009cdf12e1f84f161a2d4f2b4f97155eb6ec6230265604edbc8b21afb5f1a.aviradetected
8d7883edc608a3806bc4ca58637e0d06a83f784da4e1804e9c5f24676a532a7e.aviradetected
15fe4385a2289aaf208f080abb7277332ef8e71edc68902709ab917945a36740.aviradetected
216a733c391337fa303907a15fa55f01c9aeb128365fb6d6d245f7c7ec774100.aviradetected
891aba61b8fec4005f25d405ddfec4d445213c77fce1e967ba07f13bcbe0dad5.aviradetected
73942b1b5a8146090a40fe50a67c7c86c739329506db9ff5adc638ed7bb1654e.aviradetected
af4bf44056fc0b8c538e1e677ed1453d1dd884e78e1d66d1d2b83abb79ff1161.aviradetected
bf31d8b83e50a7af3e2dc746c74b85d64ce28d7c33b95c09cd46b9caa4d53cad.aviradetected
fdeadd54dd29fe51b251242795c83c4defcdade23fdb4b589c05939ae42d6900.aviradetected
rednovi.exe.aviradetected
slot8.exe.aviradetected

复制代码

大蜘蛛扫描Kill 9x

"c:\Downloads\20220119\13x\2af009cdf12e1f84f161a2d4f2b4f97155eb6ec6230265604edbc8b21afb5f1a.aviradetected" infected with Trojan.Siggen16.8952 - deleted
"c:\Downloads\20220119\13x\15fe4385a2289aaf208f080abb7277332ef8e71edc68902709ab917945a36740.aviradetected" infected with Trojan.PWS.Steam.23657 - deleted
"c:\Downloads\20220119\13x\216a733c391337fa303907a15fa55f01c9aeb128365fb6d6d245f7c7ec774100.aviradetected" infected with Trojan.Siggen16.7220 - deleted
"c:\Downloads\20220119\13x\891aba61b8fec4005f25d405ddfec4d445213c77fce1e967ba07f13bcbe0dad5.aviradetected" infected with Trojan.Siggen16.8113 - deleted
"c:\Downloads\20220119\13x\73942b1b5a8146090a40fe50a67c7c86c739329506db9ff5adc638ed7bb1654e.aviradetected" infected with Trojan.Siggen16.7656 - deleted
"c:\Downloads\20220119\13x\bf31d8b83e50a7af3e2dc746c74b85d64ce28d7c33b95c09cd46b9caa4d53cad.aviradetected" infected with Trojan.PWS.StealerNET.117 - deleted
"c:\Downloads\20220119\13x\fdeadd54dd29fe51b251242795c83c4defcdade23fdb4b589c05939ae42d6900.aviradetected" infected with Trojan.PWS.StealerNET.117 - deleted
"c:\Downloads\20220119\13x\rednovi.exe.aviradetected" infected with Trojan.PWS.StealerNET.117 - deleted
"c:\Downloads\20220119\13x\slot8.exe.aviradetected" infected with Trojan.PWS.StealerNET.117 - deleted

复制代码

显示全部楼层 · 发表于 2022-1-19 16:20:34

本帖最后由 846472713 于 2022-1-19 16:23 编辑

cylance 13x

显示全部楼层 · 发表于 2022-1-19 16:24:07

心心相印发表于 2022-1-19 16:11
迈克菲清空

咖啡牛逼了

显示全部楼层 · 发表于 2022-1-19 16:42:56

FSP清空

显示全部楼层 · 发表于 2022-1-19 17:09:09

诺顿清空

[病毒样本] #RedLine Stealer 13X

本帖子中包含更多资源

本帖子中包含更多资源