远控 1x

显示全部楼层 · 发表于 2023-2-26 18:01:19

本帖最后由 117054487 于 2023-2-26 19:27 编辑

KES/BEST miss打个补丁 best运行样本重启后全盘扫描能检测到

补丁2.0 能被内存扫描扫描到，但不会删除文件也不会阻止开机自启

显示全部楼层 · 发表于 2023-2-26 18:31:09

本帖最后由喀反于 2023-2-26 18:34 编辑

WD：运行拦触发勒索防护，投毒失败

勒索防护组件关闭后成功运行，并联网成功，几秒后被WD杀掉

显示全部楼层 · 发表于 2023-2-27 12:06:33

Hello,

New malicious software was found in the attached file. Its detection will be included in the next update.
Trojan.Win32.Agentb.lazb
Thank you for your help.

Best regards, Maxim, Malware analyst, Kaspersky Lab
39A/3 Leningradskoe Shosse, Moscow, 125212, Russia Tel./Fax: + 7 (495) 797 8700 http://www.kaspersky.com https://securelist.com
https://opentip.kaspersky.com/ - get insights about suspicious files, hashes, URLs, IP addresses or domain names

[病毒样本] 远控 1x

本帖子中包含更多资源

本帖子中包含更多资源