KillMBR+用户锁

bbnijk

BD miss

1.1.1.1.1.1.1.1

按照他的重启后MBR没了..
（也就这个？

大知猪本人

panda 下载后杀掉了

lankefes

BD杀

chjs

这次BD识别真快，刚复制进去就检测了

chjs

117054487 发表于 2022-12-19 08:54
essp 扫描+双击 寄

你这是重装系统？

117054487

chjs 发表于 2023-2-13 16:29
你这是重装系统？

好家伙 几个月前的帖子了 重启就这样了 引导没了

python无名氏

试试新做的微步文件查询器

1. Config:
   
2. ----sha1: e6c894c62a983792898782a33b042098218aa8ad
   
3. ----md5: af73eaba221d29d8475fe4622f6d6cad
   
4. ----sha256: bef10fbfda8aa7d5fecabcd7e08707e6a6b75913ef37eb017bebf560fb7dce64
   
5. ----file_name: PowerShell Setup.exe
   
6. ----file_type: EXEx86
   
7. ----malware_type: Trojan
   
8. ----Trojan_family: KillMBR
   
9. ----sandbox_type:
   
10. --------win7_sp1_enx86_office2013
    
11. --------win10_1903_enx64_office2016
    
12. ----Level: malicious
    
13. ----submit_time: 2022-12-19 08:19:29
    
14. ----threat_score: 125
    
15. ----multi_engines: 7/22
    
16. 
    
17. 
    
18. Multiengines:
    
19. ----IKARUS: Trojan.Win32.KillMBR
    
20. ----vbwebshell: safe
    
21. ----Avast: safe
    
22. ----Avira: safe
    
23. ----Sophos: safe
    
24. ----K7: Trojan ( 0059cb001 )
    
25. ----Rising: safe
    
26. ----Kaspersky: safe
    
27. ----Panda: Trj/Chgt.AD
    
28. ----Baidu-China: safe
    
29. ----NANO: safe
    
30. ----Antiy: Trojan/Win32.KillMBR
    
31. ----AVG: safe
    
32. ----Baidu: safe
    
33. ----DrWeb: safe
    
34. ----GDATA: Trojan.GenericKD.64405183
    
35. ----Microsoft: safe
    
36. ----Qihu360: Trojan.Generic
    
37. ----ESET: Win32/KillMBR.NJE trojan
    
38. ----ClamAV: safe
    
39. ----JiangMin: safe
    
40. ----Trustlook: safe
    
41. 
    
42. 
    
43. Permalink:
    
44. ----https://s.threatbook.com/report/file/bef10fbfda8aa7d5fecabcd7e08707e6a6b75913ef37eb017bebf560fb7dce64

复制代码

wwwab

[quote][url=forum.php?mod=redirect

API有限制~

直接批量爬取网页当心被拉黑出口IP
现在账号查询样本/情报都有明确的额度限制，不过一般不会超过

python无名氏

wwwab 发表于 2023-2-13 21:06
[quote][url=forum.php?mod=redirect

API有限制~

1. import requests
   
2. 
   
3. url = 'https://api.threatbook.cn/v3/file/report'
   
4. params = {
   
5.     'apikey': 'apikey',
   
6.     'sandbox_type': 'win7_sp1_enx64_office2013',
   
7.     'sha256': 'e7e8e79a121b41cd84461cd16776b6fd3eb3bf9f3b59451385aa651f52f94b01'
   
8. }
   
9. try:
   
10.     response = requests.get(url, params=params)
    
11.     json_data = response.json()
    
12. except:
    
13.     print("Unable to connect to the network!")
    
14. if json_data["response_code"] == -1 or json_data["response_code"] == 4:
    
15.     print(json_data["verbose_msg"])
    
16. else:
    
17.     print("Config:")
    
18.     print("----sha1: "+json_data['data']['summary']['sha1'])
    
19.     print("----md5: "+json_data['data']['summary']['md5'])
    
20.     print("----sha256: "+json_data['data']['summary']['sample_sha256'])
    
21.     print("----file_name: "+json_data['data']['summary']['file_name'])
    
22.     print("----file_type: "+json_data['data']['summary']['file_type'])
    
23.     print("----malware_type: "+json_data['data']['summary']['tag']['x'][0])
    
24.     print("----Trojan_family: "+json_data['data']['summary']['tag']['x'][1])
    
25.     print("----sandbox_type: ")
    
26.     sandbox_list = json_data['data']['summary']['sandbox_type_list']
    
27.     for sandbox in sandbox_list:
    
28.         print("--------"+sandbox)
    
29.     print("----Level: "+json_data['data']['summary']['threat_level'])
    
30.     print("----submit_time: "+json_data['data']['summary']['submit_time'])
    
31.     print("----threat_score: "+str(json_data['data']['summary']['threat_score']))
    
32.     print("----multi_engines: "+json_data['data']['summary']['multi_engines'])
    
33.     print("\r\nMultiengines:")
    
34.     Mult = json_data['data']['multiengines']['result']
    
35.     for Copyname,think in Mult.items():
    
36.         print("----"+Copyname+": "+think)
    
37.     print("\r\nPermalink:")
    
38.     print("----"+json_data['data']['permalink'])
    
39.    
    
40.    
    
41. 
    
42. #一天100次，够用了~
    

复制代码