远控释放器 1x

UNknownOoo

https://wwjw.lanzoum.com/iEVyH0liauxi

VT初扫：16/71

aboringman

Avast：0

日常过CC，但很快就触发监控机器学习杀衍生物（沙盘内，不过由于某种神秘力量导致处理失败，变成了封锁）。。。。。。

1. 2023/1/20 21:59:23        C:\Users\Public\svchost.exe [L] EvoGen (0)
   
2. During the file delete, error occurred: 拒绝访问。

复制代码

CC判定安全后放行，触发BS。

1. <ChestId>0000001A</ChestId>
   
2.                 <FileTime>1674223199</FileTime>
   
3.                 <OrigFileName>asfqgqqvebggabvqegvaqg</OrigFileName>
   
4.                 <OrigFolder>C:\Users\Public</OrigFolder>
   
5.                 <Comment></Comment>
   
6.                 <Virus>IDP.Generic</Virus>
   
7.                 <Category>Vir</Category>
   
8.                 <Restore>yes</Restore>
   
9.                 <TransferTime>1674223199</TransferTime>
   
10.                 <FileSize>9982976</FileSize>
    
11.                 <Viruses>IDP.Generic</Viruses>
    
12.                 <IDPBlob>050000000400000018191028300000004600000000004440eb0de5a244429d76f734e24afa0eb2e3527cd72cd901080000000212000000010105fc00010515fe000da70c8a5dc9475dad9b21f5ffe803d70080580100000a00000000809a03000100000000040000000098140000a1e30a60d72cd9010000000279779471d72cd9014e43003a005c00550053004500520053005c003100320033005c004400450053004b0054004f0050005c00530041004d0050004c0045005c00530041004d0050004c0045002e0045005800450000000002000800000000000003000000000000000000000000000000001e14000000000000009498a1e30a60d72cd90180ea000001000000000400000000a0e400000000240093826bfa976bfac679779471d72cd9014e43003a005c00550073006500720073005c005000750062006c00690063005c0061007300660071006700710071007600650062006700670061006200760071006500670076006100710067000000184900440050002e00470065006e006500720069006300000001080000001000020003000000000000000000000000000000001ea21000000000000066601618f094d1810043d25c6b51f031e5ebc88b8c73898e61c59fa734b276300831003200330000000054980000000000100100000000000000b2e3527cd72cd901809a020001000000000400000000b403000029680861d72cd901000000027ea55e78d72cd9014e43003a005c00550053004500520053005c003100320033005c004400450053004b0054004f0050005c00530041004d0050004c0045005c00530041004d0050004c0045002e0045005800450000000002000800000000000003000000000000000000000000000000001e140000000000000083b429680861d72cd90180840200010000000004000000001c090000692f3162d72cd901000000027ea55e78d72cd9013843003a005c00570069006e0064006f00770073005c0053007900730057004f005700360034005c0063006d0064002e0065007800650000000002000800000000000003000000000000000000000000000000001e1400000000000000891c692f3162d72cd90180aa020001000000000400000000880f000065729463d72cd901000000027ea55e78d72cd9015e43003a005c00550073006500720073005c003100320033005c004400650073006b0074006f0070005c00530061006d0070006c0065005c00500072006f0063006500730073004800610063006b006500720020002e0065007800650000000002000800000000000003000000000000000000000000000000001e14000000000000008f8865729463d72cd901808c020001000000000400000000080a00000a9f6a63d72cd901000000027ea55e78d72cd9014043003a005c00570069006e0064006f00770073005c00530079007300740065006d00330032005c0063006f006e0068006f00730074002e0065007800650000000002000800000000000003000000000000000000000000000000001e14000000000000008a080a9f6a63d72cd9018082000001000000000400000000f6a83aa394e5923d9f67827f39c5f501a19c4c79d72cd9013843003a005c00550053004500520053005c005000550042004c00490043005c0053005600430048004f00530054002e0045005800450000000001080000000000000003000000000000000000000000000000001e80000000000000000000000000000000</IDPBlob>
    
13.                 <SupportExceptions>yes</SupportExceptions>
    
14.                 <SendToAnalysis>yes</SendToAnalysis>

复制代码

心醉咖啡

360

喀反

aboringman 发表于 2023-1-20 22:04
Avast：0

日常过CC，但很快就触发监控机器学习杀衍生物（沙盘内，不过（可能）由于BS的干扰导致处理失败 ...

avast

pal家族

事件: 检测到恶意对象
用户: GP76\Xzz123
用户类型: 发起者
应用程序名称: WinRAR.exe
应用程序路径: C:\Program Files\WinRAR
组件: 文件反病毒
结果说明: 检测到
类型: 木马
名称: VHO:Trojan.Win64.Donut.uii
精确度: 确切
威胁级别: 高
对象类型: 文件
对象名称: Sample.exe
对象路径: E:\virus
对象的 MD5: 1F6F19C851340738FCC4FD474EE99D97
原因: 云保护

biue

往生全凭佛接引

解压后双击，智量火绒双杀

GDHJDSYDH

MD：Trojan:Win32/Wacatac.B!ml