MALWARE INFECTION FROM BRAZIL MALSPAM

显示全部楼层 · 发表于 2022-4-21 10:01:19

MALWARE INFECTION FROM BRAZIL MALSPAM

https://ws28.cn/f/84m8ewq8x59 密码: 34249578

显示全部楼层 · 发表于 2022-4-21 10:06:16

显示全部楼层 · 发表于 2022-4-21 10:09:40

诺顿

显示全部楼层 · 发表于 2022-4-21 10:43:14

SOPHOS 1X

在 zlibai.dll 检测到 Generic ML PUA

复制代码

显示全部楼层 · 发表于 2022-4-21 10:52:34

Avira 1X：
zlibai.dll - HEUR/APC

显示全部楼层 · 发表于 2022-4-21 11:01:58

MCAFEE 1X
zlibai.dll RP-LS

显示全部楼层 · 发表于 2022-4-21 11:08:09

MD kill 1x

显示全部楼层 · 发表于 2022-4-21 11:16:52

eset
Time;Scanner;Object type;Object;Detection;Action;User;Information;Hash;First seen here
21/4/2022 上午 11:03:02;Real-time file system protection;file;C:\Users\123\OneDrive\桌面\2022-04-19-malware-and-artifacts-from-Brazil-malspam\SegunÃ§a\Aplicativo\zlibai.dll;a variant of Win32/Spy.Ousaban.AT trojan;cleaned by deleting;PIXEL\123;Event occurred during an attempt to access the file by the application: C:\Program Files\Microsoft OneDrive\OneDrive.exe (535E050620A25B7FF6AACA3E9EBD34731EF30261).;25E59012B840E6C136C3CA23ACB1EEFF485EB62B;21/4/2022 上午 11:02:59

显示全部楼层 · 发表于 2022-4-21 12:37:44

火绒扫描miss

显示全部楼层 · 发表于 2022-4-21 12:41:36

Avast Scan Report
* This file is generated automatically
*
* Scan name: Scan from Windows Explorer
* Started on: Thursday, April 21, 2022 12:39:40 PM
* VPS: 220420-6, 2022/4/20
*

C:\Users\ingol\Downloads\2022-04-19-malware-and-artifacts-from-Brazil-malspam\PREFEITURAfds.zip|>ji89UHECQSfP.msi|>disk1.cab|>zlibai.dll [L] Win32:Trojan-gen (0)
C:\Users\ingol\Downloads\2022-04-19-malware-and-artifacts-from-Brazil-malspam\ji89UHECQSfP.msi|>disk1.cab|>zlibai.dll [L] Win32:Trojan-gen (0)
C:\Users\ingol\Downloads\2022-04-19-malware-and-artifacts-from-Brazil-malspam\Segun?§a\Aplicativo\zlibai.dll [L] Win32:Trojan-gen (0)
Infected files: 3
Total files: 101
Total folders: 3

[病毒样本] MALWARE INFECTION FROM BRAZIL MALSPAM

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源

浏览过的版块