龟包 231124 20X

神龟Turmi

下载：https://share.weiyun.com/lJpSMDjz
海外分流：https://k00.fr/guibao1124 | password: turtle

BKAV：


扫描1X 双击9X 合计10/20

嘿嘿不能说

360：18









自动上报部分



总：19

PYAS_Security

PYAS V2.9.3 本地引擎(高敏感) Kill 14
PYAS V2.9.3 连网(高敏感) Kill All

GreatMOLA

Deep Instinct 静态19x，剩PsEmpire，执行后SEP拦截。
147.182.170.15:9090/admin/get.php



Check Point
19x，剩18号（19号实际已被杀），执行后杀衍生物。取证自动响应，杀本体。

540923555

华为干掉4个

Renascence

SEP监控清空

GreatMOLA

Trend Micro WorryFree Agent 扫描13x，其中ML12x。




执行 3x

kuroandsan

avast 扫描剩余第19个批处理

双击：

GDHJDSYDH

EIS killed 18x，KART blocked 2x

UNknownOoo

火绒
扫描：6X

1. 扫描文件：20
   
2. 发现风险：6
   
3. 已处理风险：0
   
4. 病毒详情：
   
5. 风险路径：C:\Users\UnknownOoo\Downloads\Compressed\1124\231124-15-Msfvenom-21de6e.exe, 病毒名：VirTool/Meterpreter.a, 病毒ID：d8c9bfd98e4a57a6, 处理结果：暂不处理
   
6. 风险路径：C:\Users\UnknownOoo\Downloads\Compressed\1124\231124-01-Azorult-b9310f.exe >> [NSIS].nsi, 病毒名：HEUR:Trojan/Injector.aa, 病毒ID：f31218ddeade9504, 处理结果：暂不处理
   
7. 风险路径：C:\Users\UnknownOoo\Downloads\Compressed\1124\231124-02-Azorult-88f7c6.exe >> [NSIS].nsi, 病毒名：HEUR:Trojan/Injector.aa, 病毒ID：f31218ddeade9504, 处理结果：暂不处理
   
8. 风险路径：C:\Users\UnknownOoo\Downloads\Compressed\1124\231124-09-AgentTesla-dd963a.exe, 病毒名：TrojanSpy/Agent.ae, 病毒ID：7182995b0f36c985, 处理结果：暂不处理
   
9. 风险路径：C:\Users\UnknownOoo\Downloads\Compressed\1124\231124-03-AgentTesla-3848dd.exe, 病毒名：HEUR:VirTool/MSIL.Obfuscator.gen!A, 病毒ID：3fda44dcb57a42be, 处理结果：暂不处理
   
10. 风险路径：C:\Users\UnknownOoo\Downloads\Compressed\1124\231124-16-MsfvenomPYI-fc3eaa.exe, 病毒名：Trojan/Python.ShellLoader.ar, 病毒ID：f58afe7c3732dd89, 处理结果：暂不处理
    

复制代码

X-Sec
扫描：16X

1. ---------------------
   
2. 2023/11/24 13:05:18 Threat Detected: C:\Users\UnknownOoo\Downloads\Compressed\1124\231124-01-Azorult-b9310f.exe -- [rame-cloud] Trojan.Makoob!8.10A67
   
3. 2023/11/24 13:05:18 Threat Detected: C:\Users\UnknownOoo\Downloads\Compressed\1124\231124-03-AgentTesla-3848dd.exe -- [rame-rdm.msil2] Malware.Obfus/MSIL@AI.96
   
4. 2023/11/24 13:05:18 Threat Detected: C:\Users\UnknownOoo\Downloads\Compressed\1124\231124-02-Azorult-88f7c6.exe -- [rame-cloud] Trojan.Makoob!8.10A67
   
5. 2023/11/24 13:05:19 Threat Detected: C:\Users\UnknownOoo\Downloads\Compressed\1124\231124-05-AgentTesla-0d13cf.exe -- [rame-rdm.msil2] Malware.Obfus/MSIL@AI.100
   
6. 2023/11/24 13:05:19 Threat Detected: C:\Users\UnknownOoo\Downloads\Compressed\1124\231124-04-AgentTesla-1e2eb1.exe -- [rame-rdm.msil2] Malware.Obfus/MSIL@AI.100
   
7. 2023/11/24 13:05:19 Threat Detected: C:\Users\UnknownOoo\Downloads\Compressed\1124\231124-07-AgentTesla-15f8c7.exe -- [rame-rdm.msil2] Malware.Obfus/MSIL@AI.100
   
8. 2023/11/24 13:05:19 Threat Detected: C:\Users\UnknownOoo\Downloads\Compressed\1124\231124-09-AgentTesla-dd963a.exe -- [xave-heur] Heur:Stealer.Generic
   
9. 2023/11/24 13:05:19 Threat Detected: C:\Users\UnknownOoo\Downloads\Compressed\1124\231124-06-AgentTesla-72a133.exe -- [rame-cloud] Stealer.Agent!8.C2
   
10. 2023/11/24 13:05:20 Threat Detected: C:\Users\UnknownOoo\Downloads\Compressed\1124\231124-11-AgentTesla-febe52.exe -- [rame-rdm.msil2] Malware.Obfus/MSIL@AI.100
    
11. 2023/11/24 13:05:20 Threat Detected: C:\Users\UnknownOoo\Downloads\Compressed\1124\231124-08-AgentTesla-cdee2a.exe -- [rame-rdm.msil2] Malware.Obfus/MSIL@AI.100
    
12. 2023/11/24 13:05:20 Threat Detected: C:\Users\UnknownOoo\Downloads\Compressed\1124\231124-10-AgentTesla-bc4d90.exe -- [rame-rdm.msil2] Malware.Obfus/MSIL@AI.100
    
13. 2023/11/24 13:05:21 Threat Detected: C:\Users\UnknownOoo\Downloads\Compressed\1124\231124-17-Amadey-e9d920.exe -- [rame-rdm.msil2] Malware.Obfus/MSIL@AI.93
    
14. 2023/11/24 13:05:21 Threat Detected: C:\Users\UnknownOoo\Downloads\Compressed\1124\231124-12-AgentTesla-06e791.exe -- [rame-rdm.msil2] Malware.Obfus/MSIL@AI.100
    
15. 2023/11/24 13:05:21 Threat Detected: C:\Users\UnknownOoo\Downloads\Compressed\1124\231124-15-Msfvenom-21de6e.exe -- [rame-classic] HackTool.Swrort!1.6477
    
16. 2023/11/24 13:05:22 Threat Detected: C:\Users\UnknownOoo\Downloads\Compressed\1124\231124-20-NanoCore-283b8d.exe -- [rame-rdm.msil2] Malware.Obfus/MSIL@AI.90
    
17. 2023/11/24 13:05:22 Threat Detected: C:\Users\UnknownOoo\Downloads\Compressed\1124\231124-16-MsfvenomPYI-fc3eaa.exe -- [rame-cloud] Trojan.ShellCode!8.2FDD

复制代码