#Lyceum #APT (2022-06)

wwwab

00006666 发表于 2022-6-16 19:45
感觉它们可能把SCR格式当成压缩包了，然后就不能解压…………

无奇不有

kuroandsan

双击SONAR杀（

huangzihang

联网：viewPDF.scr is infected with Gen:Suspicious.Cloud.2.@FZ@aKKPKNcO

断网，
Antivirus：
DefaultBox\user\current\AppData\Local\Temp\RarSFX0\s563.exe is infected with IL:Trojan.MSILZilla.14278.（衍生物） The threat has been successfully blocked, your device is safe

Feature:
Advanced Threat Defense

Bitdefender detected potentially malicious behavior and blocked all applications involved.
Detection ID: SuspiciousBehavior.7ED26B9B1AD4E718

wwwab

Hello,

Thank you for your patience regarding this matter.

We have received an update from our Antimalware Team in which we are informed that the file is malicious and detection will be added in the next couple of updates.

Please let us know if there is anything else we can assist you with or if we may close this case.

Have a nice day!

Your sample submission has been analysed. The file(s) you submitted are malicious in nature and detection will be available on the Sophos Labs Database shortly.

Please update Sophos Anti-Virus or Sophos Central Endpoint and run a Full System Scan to clean up this threat.

Sophos Technical Support

喀反

WD:

pal家族

亚信信舱
miss