[病毒样本] 1x

显示全部楼层 · 发表于 2022-8-13 13:34:27

https://wwt.lanzouy.com/i2HI609hdv0b

显示全部楼层 · 发表于 2022-8-13 13:38:41

显示全部楼层 · 发表于 2022-8-13 13:46:53

KIS 扫描miss 已上报，TIP动态被过

显示全部楼层 · 发表于 2022-8-13 14:00:38

Kaspersky
双击SW杀

Event: Malicious object detected
Application: 05e7c11a42830e8522d885720dfb016867aeefbe179520e1f68e434f3335b689.exe
User: DESKTOP-PH3MU9R\Admin
User type: Active user
Component: System Watcher
Result description: Detected
Type: Trojan
Name: PDM:Exploit.Win32.Generic
Threat level: High
Object type: Process
Object path: c:\users\admin\desktop
Object name: 05e7c11a42830e8522d885720dfb016867aeefbe179520e1f68e434f3335b689.exe
Reason: Databases
Databases release date: Today, 8/13/2022 9:35:00 AM

复制代码

Event: Malicious object detected
Application: 05e7c11a42830e8522d885720dfb016867aeefbe179520e1f68e434f3335b689.exe
User: DESKTOP-PH3MU9R\Admin
User type: Active user
Component: System Watcher
Result description: Detected
Type: Trojan
Name: PDM:Exploit.Win32.Generic.nblk
Threat level: High
Object type: Process
Object path: c:\users\admin\desktop
Object name: 05e7c11a42830e8522d885720dfb016867aeefbe179520e1f68e434f3335b689.exe
Reason: Databases
Databases release date: Today, 8/13/2022 9:35:00 AM

复制代码

显示全部楼层 · 发表于 2022-8-13 14:12:17

MES 扫描双击均miss

显示全部楼层 · 发表于 2022-8-13 14:17:53

ESET 扫描 0
LG 未测

显示全部楼层 · 发表于 2022-8-13 14:29:29

rogersg 发表于 2022-8-13 14:00
Kaspersky
双击SW杀

generic后面竟然有跟nblk后缀了？卡巴主防报毒名不是很少会精确到那里吗

显示全部楼层 · 发表于 2022-8-13 14:34:17

GreatMOLA 发表于 2022-8-13 14:17
ESET 扫描 0
LG 未测

ELG missed (离谱

双击高级内存扫描+HTTP过滤器+网络防护触发

显示全部楼层 · 发表于 2022-8-13 15:35:39

anthonyqian 发表于 2022-8-13 14:34
ELG missed (离谱

双击高级内存扫描+HTTP过滤器+网络防护触发

《扫描程序：未知》

我是谁？我在哪？

显示全部楼层 · 发表于 2022-8-13 16:24:45

毒霸