又一个端午节样本（远控?） x1

显示全部楼层 · 发表于 2022-6-2 12:00:12

本帖最后由 anthonyqian 于 2022-6-8 19:07 编辑

来自Anyrun，VT首次上传5月30日，但目前检测率还是1/68。

卡巴上报后入库：

New malicious software was found in the attached file. Its detection will be included in the next update.
Trojan.Win32.Agentb.kudt

飞塔：

Based on our initial analysis, the sample contains unwanted content and warrant the following detection:
MD5: 2b2a360fe3972664a5376aec374f8a40 - W32/Agent.F715!tr

BD:

The analysis of the file has been completed.

The file is malicious and detection will be added in the next couple of updates.

ESET上报后:

As we haven't found any unequivocally malicious functionality in the submitted file(s), they will not be detected as malware.

大蜘蛛：

Your submission has been analyzed. This file presents no threat to your system.

Avira 目前报Redcap

显示全部楼层 · 发表于 2022-6-2 12:03:43

火绒扫描miss

显示全部楼层 · 发表于 2022-6-2 12:06:50

Avira SCAN MISS

谁来测下新版双击

显示全部楼层 · 发表于 2022-6-2 12:06:52

本帖最后由 aboringman 于 2022-6-2 12:26 编辑

360：miss

显示全部楼层 · 发表于 2022-6-2 12:12:07

Jerry.Lin 发表于 2022-6-2 12:06
Avira SCAN MISS

谁来测下新版双击

[ML] Evaluated [Path = C:\WINDOWS\Temp\sentry_temp\端午节活动报名表.exe.FC96764656382B474F4E302E42F3266D ][PUNQ = 3762391360128 ][Score = 0.0000 ]

显示全部楼层 · 发表于 2022-6-2 12:13:01

anthonyqian 发表于 2022-6-1 22:12
[ML] Evaluated [Score = 0.0000 ]

可还行

显示全部楼层 · 发表于 2022-6-2 12:13:44

显示全部楼层 · 发表于 2022-6-2 12:15:00

Jerry.Lin 发表于 2022-6-2 12:13
可还行

至少Sentry机器学习（静态？）一点都不觉得可疑

显示全部楼层 · 发表于 2022-6-2 12:21:20

@智量官方

显示全部楼层 · 发表于 2022-6-2 12:27:13

还要密码？

[可疑文件] 又一个端午节样本（远控?） x1

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源

评分

本帖子中包含更多资源

本帖子中包含更多资源