Downloader ➡ Backdoor 1X

显示全部楼层 · 发表于 2023-5-8 18:19:21

Kaspersky Anti-Virus Console Scanner [Version 8.10.0.511]
Copyright (C) 2007-2020 Kaspersky Lab. All rights reserved.
Number of viruses in database: 21240118
LastUpdate: 8.05.2023 15:42:00
Database folder: 'E:\VMwareWin7\KAVSDK\bases\'
Queue length: 1024
Scanning...
Waiting for completion...
'C:\Downloads\missed\c6c75df614c0fe10083447a5a024d36241f7bab1d1df6e6beeccc77412aff7d1//keyl.bin': detected 'Trojan.Win32.Agentb.bxom'
'C:\Downloads\missed\8207853e65ab85bc166ca4f1036122624b97b5e4eca6ccbe6a045817e916c315': detected 'UDS:Backdoor.Win32.Zegost.mtukm'
'C:\Downloads\missed\8207853e65ab85bc166ca4f1036122624b97b5e4eca6ccbe6a045817e916c315//1E9D7AB\FILES.7z//TempFolder/csgame.dll': detected 'UDS:Trojan.
Script.Alien.gen'
'C:\Downloads\missed\c6c75df614c0fe10083447a5a024d36241f7bab1d1df6e6beeccc77412aff7d1//new.chm': suspected 'HEUR:Trojan.Script.Alien.gen'
'C:\Downloads\missed\8207853e65ab85bc166ca4f1036122624b97b5e4eca6ccbe6a045817e916c315': detected 'UDS:Backdoor.Win32.Zegost.mtukm'
'C:\Downloads\missed\8207853e65ab85bc166ca4f1036122624b97b5e4eca6ccbe6a045817e916c315': scan result - INFECTED
'C:\Downloads\missed\c6c75df614c0fe10083447a5a024d36241f7bab1d1df6e6beeccc77412aff7d1': scan result - INFECTED
INFECTED - 2
KAVE uninitialized
KAVECSCAN finished.

复制代码

显示全部楼层 · 发表于 2023-5-8 18:27:08

本帖最后由东南大学于 2023-5-8 18:43 编辑

Sophos、Avira不杀本体，衍生物杀1个

>>> Virus 'ATK/sRDI-A' found in file c:\Downloads\missed\c6c75df614c0fe10083447a5a024d36241f7bab1d1df6e6beeccc77412aff7d1\keyl.bin

复制代码

2023-05-08 18:38:08,847 WARNING: file=c:\Downloads\missed\c6c75df614c0fe10083447a5a024d36241f7bab1d1df6e6beeccc77412aff7d1 type=trojan alert=[usihost.bin <<< TR/Redcap.ynqjq] desc=[Is the Trojan horse TR/Redcap.ynqjq]

复制代码

显示全部楼层 · 发表于 2023-5-8 19:02:16

k7扫描双击全miss，我还寻思买一个终身版来养老，看来还是买不得

显示全部楼层 · 发表于 2023-5-8 20:08:22

毒霸扫描miss

显示全部楼层 · 发表于 2023-5-8 20:34:49

McAfee

显示全部楼层 · 发表于 2023-5-8 20:53:07

提示: 该帖被管理员或版主屏蔽

显示全部楼层 · 发表于 2023-5-8 23:29:44

上报usihost.bin，10分钟就收到回复了

Hello,
New malicious software was found in this file:
Trojan.Win32.Agentb.lcil
Thank you for your help.

Best regards, Vyacheslav, Malware Analyst
39A/3 Leningradskoe Shosse, Moscow, 125212, Russia Tel./Fax: + 7 (495) 797 8700 http://www.kaspersky.com https://securelist.com
https://opentip.kaspersky.com/ - get insights about suspicious files, hashes, URLs, IP addresses or domain names

https://www.virustotal.com/gui/f ... 412aebecc/detection

显示全部楼层 · 发表于 2023-5-9 13:37:37

avast kill both

qiti 头像被屏蔽	发表于 2023-5-8 20:53:07 \| 显示全部楼层提示: 该帖被管理员或版主屏蔽
qiti 头像被屏蔽
	回复举报

[病毒样本] Downloader ➡ Backdoor 1X

本帖子中包含更多资源

本帖子中包含更多资源