郵箱伺服器可疑文件X1

显示全部楼层 · 发表于 2023-4-12 15:16:03

密碼：infected

opentip：
https://opentip.kaspersky.com/b5cf3fba65c81981f8e0b94bfe405cad7c1e7ba137300ed8620d88d730fd98c9/
躲避沙箱偵測：Avoiding of the sandbox analysis was detected. We recommend to send the file for long-time processing (MIRTE: T1497.003 Virtualization/Sandbox Evasion: Time Based Evasion)

VT：
https://www.virustotal.com/gui/file/b5cf3fba65c81981f8e0b94bfe405cad7c1e7ba137300ed8620d88d730fd98c9

显示全部楼层 · 发表于 2023-4-12 15:30:08

显示全部楼层 · 发表于 2023-4-12 15:42:31

火绒
扫描：启发 KILL

显示全部楼层 · 发表于 2023-4-12 15:53:12

AVAST MISSED

显示全部楼层 · 发表于 2023-4-12 16:40:44

本帖最后由 761773275 于 2023-4-12 16:41 编辑

SOPHOS 好家伙疯狂注入

复制代码

复制代码

显示全部楼层 · 发表于 2023-4-12 17:28:44

DI：Spyware
我本地的杀了 VT的没报这什么情况。。。。。。

显示全部楼层 · 发表于 2023-4-12 17:42:54

BDTS：ATD

You must restart your device to finalize the cleaning process.
Application Alibaba Order.exe has been detected as potentially malicious and was blocked.
Application path: C:\Users\***\Desktop\Alibaba Order\Alibaba Order.exe
Command line parameters: "C:\Users\***\Desktop\Alibaba Order\Alibaba Order.exe"
Detection ID: SuspiciousBehavior.FF8487AC2729296D

复制代码

F-Secure：miss

显示全部楼层 · 发表于 2023-4-12 18:41:53

post88 发表于 2023-4-12 15:53
AVAST MISSED

IDP杀了

显示全部楼层 · 发表于 2023-4-12 19:07:28

Norton
执行，防火墙拦截联网（原因：可疑网络活动；默认操作）

显示全部楼层 · 发表于 2023-4-12 19:13:30

McAfee
ti!B5CF3FBA65C8

[可疑文件] 郵箱伺服器可疑文件X1