#Gh0stRAT #灰树蛙

swizzer

加壳加得很失败(或许对于目标而言是成功的)

https://mp.weixin.qq.com/s/avIxdlLjDWHK5w0R1lZp-g

hsks

https://bbs.kafan.cn/thread-2262743-1-1.html
感觉有点像（

hansyu

McAfee RP-S
ti!3BF62577E019

UNknownOoo

火绒
扫描：MISS

1. 病毒库时间：2023-11-14 17:43
   
2. 开始时间：2023-11-15 18:36
   
3. 总计用时：00:00:01
   
4. 扫描对象：3
   
5. 扫描文件：1
   
6. 发现风险：0
   

复制代码

X-Sec
扫描：MISS

dght432

anthonyqian

Avira  0

hhhq316

蜘蛛miss
EMSI



avast


FS

天河二号

360杀毒扫描日志

病毒库日期：2023-09-25
扫描时间：2023-11-15 19:08:51
扫描用时：00:00:01
扫描类型：右键扫描
扫描文件总数：1
项目总数：0
清除项目数：0


扫描miss

呼啸山庄

2023/11/15 19:25

Firefox kill

卡巴斯基加强版 21.15.8.493 scan miss (opentip miss 看样子是opentip的Windows 7虚拟机直接崩了)
ESET Smart Security 17.0.10.0 (Detection Engine 28240P 2023/11/15) kill

Time;Scanner;Object type;Object;Detection;Action;User;Information;Hash;First seen here
2023/11/15 19:13:30;Real-time file system protection;file;C:\Users\P02-1\Downloads\finalshellsetup\.petmp659511\finalshellsetup.exe;a variant of Win32/Packed.PESpin.A suspicious application;cleaned by deleting;ASUS-TUF-GAMING\P02-1;Event occurred on a new file created by the application: C:\Program Files\PeaZip\res\bin\7z\7z.exe (F136EF9BF8BD2FC753292FB5B7CF173A22675FB3).;A938A9BA62F1151133DAEF0B21D8E6FF77407278;2023/11/15 19:13:26

Time: 2023/11/15 19:13:30
Scanner: Real-time file system protection
Object type: file
Object: C:\Users\P02-1\Downloads\finalshellsetup\.petmp659511\finalshellsetup.exe
Detection: a variant of Win32/Packed.PESpin.A suspicious application
Action: cleaned by deleting
User: ASUS-TUF-GAMING\P02-1
Information: Event occurred on a new file created by the application: C:\Program Files\PeaZip\res\bin\7z\7z.exe (F136EF9BF8BD2FC753292FB5B7CF173A22675FB3).
Hash: A938A9BA62F1151133DAEF0B21D8E6FF77407278
First seen here: 2023/11/15 19:13:26

lambggy

江民 新AI Kill：

【病毒信息】
时间 路径 扫描结果 病毒名
2023-11-15 19:35:41 C:\Users\Administrator\Desktop\finalshellsetup\finalshellsetup.exe 删除病毒 Trojan.PE.AI

mfj0613

诺顿
Trojan.Gen.MBT
Heur.AdvML.B