白加黑 1X

显示全部楼层 · 发表于 2023-5-11 13:03:23

UNknownOoo 发表于 2023-5-11 12:22
白加黑，注意隐藏文件

好的，谢谢提醒

显示全部楼层 · 发表于 2023-5-11 14:19:50

Hello,

New malicious software was found in the attached file.
Trojan.Win64.Loader

Its detection will be included in the next update.
Thank you for your help.

Best regards, Alexey Safonov, Malware Analyst, Kaspersky Lab
39A/3 Leningradskoe Shosse, Moscow, 125212, Russia Tel./Fax: + 7 (495) 797 8700 http://www.kaspersky.com https://securelist.com
https://opentip.kaspersky.com/ - get insights about suspicious files, hashes, URLs, IP addresses or domain names

显示全部楼层 · 发表于 2023-5-11 17:57:30

BEST

高级威胁防护已阻止注入恶意代码的进程。进程路径: C:\Users\Leung\Desktop\202305061849354575 杜云若综拓经理简历\202305061849354575 杜云若综拓经理简历.exe. 威胁名称: Gen:Trojan.Beacon.Shellcode.Marte.1.

复制代码

显示全部楼层 · 发表于 2023-5-11 19:51:34

卡巴miss
火绒kill

显示全部楼层 · 发表于 2023-5-12 15:41:52

ESET分析回复

The detection for this threat will be included in the next update of detection engine, expected version: 27222.

WzComAddrBook64.dll - Win64/Agent.CJA trojan
202305061849354575 _________.exe - Clean
Payload : CobaltStrike

[病毒样本] 白加黑 1X