22X

hsks

From Triage不保证样本有效性
https://t.wss.ink/f/a96m2gd9upp

https://we.tl/t-FBFhIDDeL7

dreams521

对对对对

智量机学11x，360 14x，双击又淦了几个

莒县小哥

心醉咖啡

360杀毒+卫士

biue

qwe12301

金山毒霸本地9X

二扫已经拉黑并且14X了

ytysh

Panda Dome Free Kill 1x

aboringman

Avast：21

1. C:\Users\123\Desktop\22X\287f7e7690afc8800fcad942dbce702893a4596363e7022062774b34f7326b28.exe [L] Win64:Evo-gen [Trj] (0)
   
2. C:\Users\123\Desktop\22X\91dfcd3566adbdb685cf347a34d7b779616aa33439ad33d6dce156064db91982.exe [L] Win32:Malware-gen (0)
   
3. C:\Users\123\Desktop\22X\f17cedbbed84b320c838ecc1870587b088c01bc50938b02339aa8051823c587b.exe [L] Win64:Evo-gen [Trj] (0)
   
4. C:\Users\123\Desktop\22X\BOQ_CamScanner.exe [L] Win32:Trojan-gen (0)
   
5. C:\Users\123\Desktop\22X\Wonderdraft_UiBuFUVB.exe|>{embedded}\Code.bin [L] Other:Malware-gen [Trj] (0)
   
6. C:\Users\123\Desktop\22X\Wonderdraft_UiBuFUVB.exe [L] FileRepMalware [Adw] (0)
   
7. C:\Users\123\Desktop\22X\Passwords                                                                             .txt.exe [L] Win32:PWSX-gen [Trj] (0)
   
8. C:\Users\123\Desktop\22X\8a78e2f08052660fdedbb04ec46b40bde9b20b81b2b4695595cfefed1cd5bc40_1.exe [L] Win64:DropperX-gen [Drp] (0)
   
9. C:\Users\123\Desktop\22X\Genshin Impact Information Contract & Referral Link.scr.exe [L] Win64:PWSX-gen [Trj] (0)
   
10. C:\Users\123\Desktop\22X\48f6242537331f5142237c388fc8fa1f52eecd568af2af01695342b1d17c4fd4.exe [L] Win32:Adware-gen [Adw] (0)
    
11. C:\Users\123\Desktop\22X\image-001_CamScanner.exe [L] Win32:Trojan-gen (0)
    
12. C:\Users\123\Desktop\22X\e80e15eb9d2cebb2c8c7f91a8471e1b75a9b4ee27d9de6b23cc90c57704a2651.exe [L] Win64:Evo-gen [Trj] (0)
    
13. C:\Users\123\Desktop\22X\rufus-3.21.exe|>socialprov.exe [E] Error 0x0000A47E (42110)
    
14. C:\Users\123\Desktop\22X\rufus-3.21.exe [L] Win64:Trojan-gen (0)
    
15. C:\Users\123\Desktop\22X\0x000a0000000133f2-56.exe [L] Win32:TrojanX-gen [Trj] (0)
    
16. C:\Users\123\Desktop\22X\File_PC_Setup-2023.exe [L] FileRepMalware (0)
    
17. C:\Users\123\Desktop\22X\Rufus_pro.exe|>followleov.exe [L] Win32:DropperX-gen [Drp] (0)
    
18. C:\Users\123\Desktop\22X\Setup (2).exe [L] FileRepMalware (0)
    
19. C:\Users\123\Desktop\22X\Setup (3).exe [L] Win32:Evo-gen [Trj] (0)
    
20. C:\Users\123\Desktop\22X\Setup.exe [L] Win64:PWSX-gen [Trj] (0)
    
21. C:\Users\123\Desktop\22X\Software (2).exe [L] Win32:RATX-gen [Trj] (0)
    
22. C:\Users\123\Desktop\22X\Software.exe [L] Win32:PWSX-gen [Trj] (0)
    
23. C:\Users\123\Desktop\22X\Xof mefipeve peb nelixaki yilepo.exe [L] Win32:SpywareX-gen [Trj] (0)

复制代码

剩下一个双击，监控击杀衍生物一只。

1. 2023/1/14 15:58:25        C:\Users\123\AppData\Roaming\ThoramiLoader.exe [L] Win32:SpywareX-gen [Trj] (0)

复制代码

之后本体报错退出

1. [+] Downloading Latest Thorami Files
   
2. [-] An exception occurred during a WebClient request.
   
3. 
   
4. 
   
5. [+] Injecting Thorami...
   
6. [-] Process not found!
   
7. 
   
8. Press enter to close.

复制代码

再次双击，被BS击杀。

1. ThroamiLeague.exe：IDP.Generic

复制代码

Shake2333

惊人的咖啡