龟包 231201 10X

显示全部楼层 · 发表于 2023-12-1 15:12:50

下载：https://share.weiyun.com/TyAK4jxu
海外分流：https://k00.fr/guibao1201 | password: turtle

江民：

扫描8X 未双击（无主防）合计8/10

显示全部楼层 · 发表于 2023-12-1 15:15:50

PYAS 本地高敏感 Kill 8，连网清空

显示全部楼层 · 发表于 2023-12-1 15:17:04

本帖最后由 UNknownOoo 于 2023-12-1 15:19 编辑

火绒
扫描：8X

扫描文件：10
发现风险：8
已处理风险：8
病毒详情：
风险路径：C:\Users\UnknownOoo\Downloads\Compressed\1201\231201-05-Berbew-a4f2c2.exe, 病毒名：Worm/Mimail.a, 病毒ID：4e96b616a2af8041, 处理结果：已处理，删除文件
风险路径：C:\Users\UnknownOoo\Downloads\Compressed\1201\231201-03-Berbew-6df6ed.exe, 病毒名：Worm/Mimail.a, 病毒ID：4e96b616a2af8041, 处理结果：已处理，删除文件
风险路径：C:\Users\UnknownOoo\Downloads\Compressed\1201\231201-02-AgentTesla-da2237.exe, 病毒名：TrojanSpy/Agent.ae, 病毒ID：7182995b0f36c985, 处理结果：已处理，删除文件
风险路径：C:\Users\UnknownOoo\Downloads\Compressed\1201\231201-01-AgentTesla-b248e4.exe, 病毒名：TrojanSpy/Agent.ae, 病毒ID：7182995b0f36c985, 处理结果：已处理，删除文件
风险路径：C:\Users\UnknownOoo\Downloads\Compressed\1201\231201-04-Berbew-6049c9.exe, 病毒名：Backdoor/Berbew.c, 病毒ID：c41b74bb15add7cf, 处理结果：已处理，删除文件
风险路径：C:\Users\UnknownOoo\Downloads\Compressed\1201\231201-07-AgentTesla-3609ff.exe, 病毒名：TrojanSpy/MSIL.AgentTesla.mq, 病毒ID：9abee9103f76285d, 处理结果：已处理，删除文件
风险路径：C:\Users\UnknownOoo\Downloads\Compressed\1201\231201-10-Kutaki-45ge43.exe, 病毒名：Trojan/Gold, 病毒ID：fae66c9de474f957, 处理结果：已处理，删除文件
风险路径：C:\Users\UnknownOoo\Downloads\Compressed\1201\231201-06-AgentTesla-249910.bat, 病毒名：TrojanDropper/BAT.Agent.qd, 病毒ID：fd420b84c5442a55, 处理结果：已处理，删除文件

复制代码

X-Sec
扫描：10X

---------------------
2023/12/01 15:16:16 Threat Detected: C:\Users\UnknownOoo\Downloads\Compressed\1201\231201-01-AgentTesla-b248e4.exe -- [xave-heur] Heur:Stealer.Generic
2023/12/01 15:16:16 Threat Detected: C:\Users\UnknownOoo\Downloads\Compressed\1201\231201-03-Berbew-6df6ed.exe -- [rame-classic] Backdoor.Qakbot!1.A74D
2023/12/01 15:16:18 Threat Detected: C:\Users\UnknownOoo\Downloads\Compressed\1201\231201-05-Berbew-a4f2c2.exe -- [rame-classic] Backdoor.Qakbot!1.A74D
2023/12/01 15:16:18 Threat Detected: C:\Users\UnknownOoo\Downloads\Compressed\1201\231201-02-AgentTesla-da2237.exe -- [rame-classic] Spyware.AgentTesla!1.EE33
2023/12/01 15:16:18 Threat Detected: C:\Users\UnknownOoo\Downloads\Compressed\1201\231201-04-Berbew-6049c9.exe -- [rame-classic] Backdoor.Qakbot!1.A74D
2023/12/01 15:16:18 Threat Detected: C:\Users\UnknownOoo\Downloads\Compressed\1201\231201-07-AgentTesla-3609ff.exe -- [rame-rdm.msil2] Malware.Obfus/MSIL@AI.96
2023/12/01 15:16:20 Threat Detected: C:\Users\UnknownOoo\Downloads\Compressed\1201\231201-10-Kutaki-45ge43.exe -- [rame-classic] Stealer.Kutaki!1.D278
2023/12/01 15:16:20 Threat Detected: C:\Users\UnknownOoo\Downloads\Compressed\1201\231201-08-Remcos-7449c7.exe -- [rame-cloud] Backdoor.Remcos!8.B89E
2023/12/01 15:16:20 Threat Detected: C:\Users\UnknownOoo\Downloads\Compressed\1201\231201-09-CobaltStrikeGO-2189ee.exe -- [rame-classic] Backdoor.CobaltStrike!1.EF05
2023/12/01 15:16:19 Threat Detected: C:\Users\UnknownOoo\Downloads\Compressed\1201\231201-06-AgentTesla-249910.bat -- [rame-cloud] Stealer.Disco/BAT!8.16AEE

复制代码

华为乾坤扫描：8X

显示全部楼层 · 发表于 2023-12-1 15:34:53

天守：10

显示全部楼层 · 发表于 2023-12-1 15:51:51

EIS清空

显示全部楼层 · 发表于 2023-12-1 16:13:47

KFA 21.3清空

显示全部楼层 · 发表于 2023-12-1 16:35:22

本帖最后由 Agu 于 2023-12-1 16:42 编辑

360國際版 - 10X

Scan Result
======================
High-risk Items
----------------------
C:\Users\YR\Downloads\1201\231201-01-AgentTesla-b248e4.exe DE277874A56C8FB0F3FFB20D01409CCD B248E455C969F7A2551D7E4DAA515BCD68A18BDC 70,3,2,4,280,1,256, || 0_0_1 [360 Cloud Scan Engine][Win32/TrojanSpy.AgentTesla.HwMAsUYA][Quarantined files][Not resolved]
C:\Users\YR\Downloads\1201\231201-03-Berbew-6df6ed.exe 07DA084B4A6A4DB370E5A8B9F26CB570 6DF6ED057D1B646312215017B77E6F2DC74BE9C4 70,4,2,4,280,1,256, || 0_0_1 [KunPeng Engine][Backdoor.Win32.Berbew.D][Quarantined files][Not resolved]
C:\Users\YR\Downloads\1201\231201-02-AgentTesla-da2237.exe E89EAADDD83209D3D795FF15A6959ADB DA22373B877106D202FC472AE0D75829697085E0 70,3,2,4,280,1,256, || 0_0_1 [360 Cloud Scan Engine][Win32/TrojanSpy.AgentTesla.HwMAsUYA][Quarantined files][Not resolved]
C:\Users\YR\Downloads\1201\231201-04-Berbew-6049c9.exe 064878CDB518185E73CD33D0D5CDC4EF 6049C907004925B128AA4F8E1032C8E3BBE87DF3 70,4,2,4,280,1,256, || 0_0_1 [KunPeng Engine][Backdoor.Win32.Berbew.C][Quarantined files][Not resolved]
C:\Users\YR\Downloads\1201\231201-05-Berbew-a4f2c2.exe 473DFA6F5FE4F5D5F6CB38758C1DE41D A4F2C26EB616270DD28296B9AA07BD3ECF14BBEF 70,4,2,4,280,1,256, || 0_0_1 [KunPeng Engine][Backdoor.Win32.Berbew.G][Quarantined files][Not resolved]
C:\Users\YR\Downloads\1201\231201-07-AgentTesla-3609ff.exe 987A2DD36BF202DE190BB71BDBA080B7 3609FFE72F3982C9FC7A8199BCC2B9FB88F6771F 70,3,2,4,280,1,256, || 0_0_1 [360 Cloud Scan Engine][Win32/Trojan.Generic.HwMAqG0A][Quarantined files][Not resolved]
C:\Users\YR\Downloads\1201\231201-08-Remcos-7449c7.exe 3F38596CC3A4D9D6020D3CEBFF1A8F6C 7449C7578BE539C1ACBE51F23B690641B08EA336 70,3,2,4,280,1,256, || 0_0_1 [360 Cloud Scan Engine][Win32/Heur.Generic.HwMAq78A][Quarantined files][Not resolved]
C:\Users\YR\Downloads\1201\231201-10-Kutaki-45ge43.exe 5EE81A84EBF389055AA233770B09A710 45FE4367DD86F888A70E0C82B899A6602596BFFF 70,3,2,4,280,1,256, || 0_0_1 [360 Cloud Scan Engine][Win32/Trojan.Generic.HgIATOsA][Quarantined files][Not resolved]
C:\Users\YR\Downloads\1201\231201-06-AgentTesla-249910.bat 8E16EC48C40BFD51E6305C1B2F4E9FA8 24991017D3088F6FC943E11DF888591AA34E3055 70,3,2,4,280,1,256, || 0_0_0 [360 Cloud Scan Engine][Script/Trojan.Generic.HhsATOsA][Quarantined files][Not resolved]
C:\Users\YR\Downloads\1201\231201-09-CobaltStrikeGO-2189ee.exe 84405AEA07C596E9671DAEDE88D4CE61 2189EE912F37227C7DD1B214F4431F62E14A44D9 70,3,2,4,280,1,256, || 0_0_1 [360 Cloud Scan Engine][Win64/Trojan.Goshell.H8oAejsA][Quarantined files][Not resolved]

复制代码

Avast - 9X
剩餘檔案：231201-06-AgentTesla-249910.bat

显示全部楼层 · 发表于 2023-12-1 16:53:23

蜘蛛
实时7

双击 1

显示全部楼层 · 发表于 2023-12-1 16:56:13

SEP清空

显示全部楼层 · 发表于 2023-12-1 17:56:53

金山毒霸kill 8x

[病毒样本] 龟包 231201 10X

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源