远控 1x

显示全部楼层 · 发表于 2023-3-12 18:21:44

本帖最后由 UNknownOoo 于 2023-3-13 22:27 编辑

VT二扫：0/69

显示全部楼层 · 发表于 2023-3-13 11:34:40

利用GUID加载shellcode执行

显示全部楼层 · 发表于 2023-3-12 18:25:28

显示全部楼层 · 发表于 2023-3-12 18:51:18

本帖最后由 anthonyqian 于 2023-3-13 18:53 编辑

ESET 扫描 ELG missed，已上报

The detection for this threat will be included in the next update of detection engine, expected version: 26894.

显示全部楼层 · 发表于 2023-3-12 18:53:45

本帖最后由 117054487 于 2023-3-15 12:30 编辑

KES/opentip miss 上报卡巴

卡巴回复认为没有问题

Hello,

No malicious software was found in the attached file Backdoor.Generic.3.exe.
New malicious software was found in the other attached files. Its detection will be included in the next update.
Thank you for your help.

Best regards, Maxim, Malware analyst, Kaspersky Lab
39A/3 Leningradskoe Shosse, Moscow, 125212, Russia Tel./Fax: + 7 (495) 797 8700 http://www.kaspersky.com https://securelist.com
https://opentip.kaspersky.com/ - get insights about suspicious files, hashes, URLs, IP addresses or domain names

借大佬的分析回复了一下

Hello,

Sorry about it. You absolutely right.
It was our mistake.
New malicious software was found in the attached file. Its detection will be included in the next update.
Trojan.Win64.Agent.qwietk
Thank you for your help.

Best regards, Maxim, Malware analyst, Kaspersky Lab
39A/3 Leningradskoe Shosse, Moscow, 125212, Russia Tel./Fax: + 7 (495) 797 8700 http://www.kaspersky.com https://securelist.com
https://opentip.kaspersky.com/ - get insights about suspicious files, hashes, URLs, IP addresses or domain names

显示全部楼层 · 发表于 2023-3-12 18:56:30

虚拟机检测

显示全部楼层 · 发表于 2023-3-12 19:54:11

360未知

显示全部楼层 · 发表于 2023-3-12 21:44:27

显示全部楼层 · 发表于 2023-3-12 22:56:35

Norton

显示全部楼层 · 发表于 2023-3-13 05:11:48

MD扫描miss，双击kill

显示全部楼层 · 发表于 2023-3-13 11:07:44

crowdstrike 雙擊kill

[病毒样本] 远控 1x

本帖子中包含更多资源

本帖子中包含更多资源

评分

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源