ShellCode 1x

显示全部楼层 · 发表于 2022-9-1 10:24:16

WIBD:HEUR.ShellCode.H00

显示全部楼层 · 发表于 2022-9-1 10:27:15

eset kill

显示全部楼层 · 发表于 2022-9-1 10:57:02

质量差，avast杀

显示全部楼层 · 发表于 2022-9-1 10:57:05

腾管16，1x

显示全部楼层 · 发表于 2022-9-1 13:09:10

火绒扫描miss 未双击

显示全部楼层 · 发表于 2022-9-1 14:39:18

The app E:\infected\1e6c4fca798635d93fbf2cd285362856f87d71e35fd7842a3e241ba158209fc9\1e6c4fca798635d93fbf2cd285362856f87d71e35fd7842a3e241ba158209fc9.exe infected with Gen:Suspicious.Cloud.2.tKY@aG3jOfj was moved to quarantine. It is recommended that you run a System Scan to make sure your system is clean

显示全部楼层 · 发表于 2022-9-1 18:05:59

ksc
Event: Object deleted
Application name: SearchProtocolHost.exe
Application path: C:\Windows\System32
Component: File Anti-Virus
Result description: Deleted
Type: Trojan
Name: UDS:Trojan.Win32.Cobalt.lys
Precision: Exactly
Threat level: High
Object type: File
Object name: 1e6c4fca798635d93fbf2cd285362856f87d71e35fd7842a3e241ba158209fc9.exe
Object path: C:\Users\Ca\Desktop\1e6c4fca798635d93fbf2cd285362856f87d71e35fd7842a3e241ba158209fc9
MD5: BFD20775C8071DB42FC80D007D4DEF4C

显示全部楼层 · 发表于 2022-9-1 18:46:20

火绒还真是MISS了呢

显示全部楼层 · 发表于 2022-9-1 20:45:46

WD：HackTool:Win64/CobaltStrike.B

显示全部楼层 · 发表于 2022-9-1 22:04:39

解压即杀

[病毒样本] ShellCode 1x

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源