CryptoLocker/vmp (2022-12-29)

显示全部楼层 · 发表于 2022-12-29 16:50:27

https://krakenfiles.com/view/T91dKMKj3R/file.html

显示全部楼层 · 发表于 2022-12-29 16:59:25

360

显示全部楼层 · 发表于 2022-12-29 17:00:15

类型:木马-Win32/Trojan.Generic.HxMBRA4B
描述:木马是一种伪装成正常文件的恶意软件，会盗取您的帐号、密码等隐私资料。
扫描引擎:云安全引擎
文件路径:C:\Users\Downloads\1\1.exe
文件大小:4.76M (4,994,048 字节)
文件指纹（MD5）:f2b54e147d818ab2d4ce1fec0552b9ed
处理建议:隔离文件

显示全部楼层 · 发表于 2022-12-29 17:01:46

卡巴解压杀 Trojan.Win32.DelShad.kdo

显示全部楼层 · 发表于 2022-12-29 17:02:10

显示全部楼层 · 发表于 2022-12-29 17:05:38

本帖最后由呵呵大神001 于 2022-12-29 17:09 编辑

sophos Mal/VMProtBad-A
sentinelone Static AI - Malicious PE

Abnormalities

This binary contains abnormal section names which could be an indication that it was created with non-standard development tools

The Entry point for this binary has an uncommon section name

Hiding/Stealthiness

The majority of sections in this PE have high entropy, a sign of obfuscation or packing

This binary may contain encrypted or compressed data as measured by high entropy of the sections (greater than 6.8)

Packer

This binary was packed with VMProtect

显示全部楼层 · 发表于 2022-12-29 17:10:49

wd：寄无加密

显示全部楼层 · 发表于 2022-12-29 18:20:17

本帖最后由 anthonyqian 于 2022-12-30 08:00 编辑

ESET + Dr Web KATANA

scan: 1.exe - Win32/Packed.VMProtect.AGR -> Win32/Filecoder.RagnarLocker.D

execute: DPH:Trojan.Encoder.8

显示全部楼层 · 发表于 2022-12-29 19:17:31

亚信 0

显示全部楼层 · 发表于 2022-12-29 19:56:07

bdts kill

[病毒样本] CryptoLocker/vmp (2022-12-29)

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源