EXE样本x1

NICO-COOPER

BEST防护拉满，HD机学kill

swizzer

智量(DB:2022/1/24)

1. 2022-02-03 15:07:36|C:\Users\Dolphiner\Downloads\69f068d27df315320047600a3bd748850792f83c2a2f1bd1a6c9ac1b2b5c61a9\69f068d27df315320047600a3bd748850792f83c2a2f1bd1a6c9ac1b2b5c61a9.exe|WIBD:HEUR.PEObfuscator.C

复制代码

aboringman

Norton：Scr.Malcode!gdn30

Nocria

BEAST blocked.

1. G DATA INTERNET SECURITY has prevented malicious software from running on your system.
   
2. The malicious program was identified by BEAST (Behavior Monitoring) as: Verdict.Malware
   
3. 
   
4. The following processes were therefore terminated by G DATA for security reasons:
   
5.         ----------------------------------------------------------------
   
6.         C:\Users\promi\AppData\Local\Temp\Rar$EXb2492.7901\69f068d27df315320047600a3bd748850792f83c2a2f1bd1a6c9ac1b2b5c61a9.exe (PID 2304)
   
7.         ----------------------------------------------------------------
   
8. 
   
9. The following programs responsible were moved to Quarantine by G DATA:
   
10.         ----------------------------------------------------------------
    
11.         C:\Users\promi\AppData\Local\Temp\Rar$EXb2492.7901\69f068d27df315320047600a3bd748850792f83c2a2f1bd1a6c9ac1b2b5c61a9.exe
    
12.         ----------------------------------------------------------------
    
13. 
    
14. Further information:
    
15. Module: FileCloud
    
16. File: C:\Users\promi\AppData\Local\Temp\Rar$EXb2492.7901\69f068d27df315320047600a3bd748850792f83c2a2f1bd1a6c9ac1b2b5c61a9.exe
    
17. Sha256: 69F068D27DF315320047600A3BD748850792F83C2A2F1BD1A6C9AC1B2B5C61A9
    
18. Md5: 6A598FDC6B975E42FFC2DB96954ADE7C
    
19. Size: 445440
    
20. Ref: 9b5161ef-90eb-40d3-8cbc-189bf3c0eb5c
    

复制代码

swizzer

aboringman 发表于 2022-2-3 15:09
Norton：Scr.Malcode!gdn30

签了个被吊销的证书就不杀了（不过双击还是杀衍生物的）

正在缓冲

Avast
Win32:PWSX-gen[Trj]

heavencc

卡巴
HEUR:Trojan-PSW.MSIL.Agensla.gen

复负复

Emsisoft
安天

安天关闭病毒库后不拦截双击

anthonyqian

BD 入库

Trojan.GenericKD.48242491

ft-cai

伞 miss

下面是豆