CS马1X

显示全部楼层 · 发表于 2023-1-9 11:29:50

本帖最后由 hsks 于 2023-1-9 11:32 编辑

https://www.virustotal.com/gui/f ... 48c0bff95?nocache=1

https://we.tl/t-UFvcdk5ujB

伪装成招聘信息

显示全部楼层 · 发表于 2023-1-9 11:32:20

卡巴扫描miss

显示全部楼层 · 发表于 2023-1-9 11:34:14

360杀毒实时防护日志

时间防护说明处理结果文件
------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
2023-01-09 11:32:26 恶意软件(HEUR/QVM202.0.866D.Malware.Gen)MD5:1633a17d9fe1614e44ed2fd60ccbacdc已删除此文件，如果您发现误删，可从隔离区恢复此文件。 f:\360sandbox\shadow\2023.01\1\1.exe

显示全部楼层 · 发表于 2023-1-9 11:47:15

雷神扫描双击 miss

显示全部楼层 · 发表于 2023-1-9 11:47:26

本帖最后由 anthonyqian 于 2023-1-9 19:24 编辑

ESET missed 已上报

卡巴斯基双击 PDM:Exploit

————

ESET分析后入库本体和衍生物

The detection for this threat will be included in the next update of detection engine:

1.exe - Win64/TrojanDownloader.Agent.XItrojan

libmlt-6.dll -Win64/TrojanDownloader.Agent.XI trojan

显示全部楼层 · 发表于 2023-1-9 12:10:51

显示全部楼层 · 发表于 2023-1-9 12:21:24

WD 2x

显示全部楼层 · 发表于 2023-1-9 12:24:25

corwdstrike kill

显示全部楼层 · 发表于 2023-1-9 13:11:02

显示全部楼层 · 发表于 2023-1-9 13:17:07

本帖最后由 anxiety520 于 2023-1-9 14:30 编辑

样本已提交china-support@kaspersky.com 样本反虚拟机 opentip未检出

23/01/29 KSN UDS:Trojan.Win32.Cobalt

Dynamic analysis detects
Status Name
Malware
Trojan.Win64.Cobalt.sb.b
Malware
Trojan.Win32.Jobutyve.sb
Malware
Trojan.Win32.CobaltStrike.sb
Malware
Trojan.Win32.Cobalt.neb

复制代码

Greetings!
Greeting
The detection will be included in the next update:
thanks for your feedback
JACK
If suggested solution did not help or you need more information, please reply to this message. We remind you that you can contact Kaspersky Technical Support via email (in this case, please, do not change Subject field) or, in case if you created your request on the portal, you will see the direct link below for the quick answer.

复制代码

[病毒样本] CS马1X

本帖子中包含更多资源

本帖子中包含更多资源