1x (2023-06-21)

显示全部楼层 · 发表于 2023-6-21 21:34:20

EMSi、FS
Miss

显示全部楼层 · 发表于 2023-6-22 01:07:41

趋势
扫描双击 miss

显示全部楼层 · 发表于 2023-6-22 01:32:54

小红伞主动扫描

显示全部楼层 · 发表于 2023-6-22 02:26:53

McAfee
ti!C3CB1A0411B9

显示全部楼层 · 发表于 2023-6-22 14:05:39

啊？？？我以为这货没跑起来？
S1 miss 通过EDR查看事件如下
Evasion
EtwBypass
Process bypassed the ETW mechanism
MITRE: Defense Evasion {T1562.001}
MITRE: {T1562.006}
InstrumentationCallbackBypassAttempt
Hook bypass attempt via Instrumentation callback
MITRE: Defense Evasion {T1562.001}

Malware
CoreDllRead
Detected attempt to read a core DLL of the OS
MITRE: Defense Evasion {T1562.001}
ParallelNtDllLoad
Detected attempt to re-map a core DLL of the OS
MITRE: Defense Evasion {T1562.001}

N/A
ProcessEnumeration
Process enumeration was identified
MITRE: Discovery {T1057}
MITRE: {T1518}
MITRE: {T1007}
MITRE: Collection {T1119}
MITRE: Defense Evasion {T1480.001}

Packer
PackedProcessSuspicion
Process suspicious as packed
MITRE: Defense Evasion {T1027}
MITRE: {T1480.001}

显示全部楼层 · 发表于 2023-6-22 16:24:54

隔山打空气发表于 2023-6-22 14:05
啊？？？我以为这货没跑起来？
S1 miss 通过EDR查看事件如下
Evasion

杀鸡用牛刀

显示全部楼层 · 发表于 2023-6-23 13:43:30

腾管miss

显示全部楼层 · 发表于 2023-6-23 14:03:07

Heur.AdvML.B

显示全部楼层 · 发表于 2023-6-25 17:39:59

本帖最后由 yaokai815 于 2023-6-28 10:17 编辑

金山毒霸kill

[病毒样本] 1x (2023-06-21)

本帖子中包含更多资源

评分

本帖子中包含更多资源