25X

UNknownOoo

https://wwjw.lanzouq.com/iQYfL1kyorhe

可能有些C2已经寄了

LSPLDD

BD静态11X:

46845616.exe
Gen:Trojan.Heur.RP.ku2@bqif0jlj

[D]薪补政策.exe
Trojan.GenericFCA.Agent.114533

00623795.exe
Gen:Variant.Zusy.533078

2024.1.12.exe
Trojan.GenericKD.71191337

[D]V0i.exe
Gen:Variant.Midie.141122

PO_TSD 010-01-024 Via-Build-Mart.exe
Gen:Variant.Lazy.257323

2023.12.06 电.子.云.票.exe
Trojan.GenericKD.71192047

28465478.exe
Gen:Trojan.Heur.RP.ku2@bC@!xKnj

查询口-电脑端.exe
Gen:Variant.Zusy.533078

电脑版-终端.exe
Trojan.GenericKD.71190445

20240108.2001.exe
Gen:Suspicious.Cloud.2.ju1@amLE!Cij

双击:

[D]Inject.exe
已被偵測為可能是惡意程式並遭到封鎖

[D]output.exe
SuspiciousBehavior.71F2A0B273F613C0

9159.exe --> hxxp://www.tongzhi2.com/20240112.jpg
Generic.ShellCode.RDI.Marte.10.5AC55ACC

dllhost.exe
SuspiciousBehavior.71F2A0B25597CCCD

J9体育.exe
已被偵測為可能是惡意程式並遭到封鎖

sm1ss.exe
Gen:Suspicious.Cloud.2.f!W@aylKbcm

trj-20240112.exe
威脅

无反应:

[D]678.exe
[Sustest]20231205.exe
[Sustest]dllhost1.exe
[可能的环境检测]图片.exe
0920332206.exe
企业补贴名单.exe
招采测试极速上手操作指南.exe

biue

123456aaaafsdeg

1. 360 Total Security扫描日志
   
2. 
   
3. 扫描时间：2024-01-13 11:43:01
   
4. 扫描用时：00:00:10
   
5. 扫描项目总数：26
   
6. 威胁总数：15
   
7. 处理威胁数：15
   
8. 
   
9. 扫描选项
   
10. ----------------------
    
11. 扫描压缩包：否
    
12. 常规引擎设置：鲲鹏引擎
    
13. 
    
14. 扫描内容
    
15. ----------------------
    
16. C:\Users\Administrator\Desktop\新建文件夹\trj-20240112.exe
    
17. C:\Users\Administrator\Desktop\新建文件夹\查询口-电脑端.exe
    
18. C:\Users\Administrator\Desktop\新建文件夹\电脑版-终端.exe
    
19. C:\Users\Administrator\Desktop\新建文件夹\企业补贴名单.exe
    
20. C:\Users\Administrator\Desktop\新建文件夹\招采测试极速上手操作指南.exe
    
21. C:\Users\Administrator\Desktop\新建文件夹\[D]678.exe
    
22. C:\Users\Administrator\Desktop\新建文件夹\[D]Inject.exe
    
23. C:\Users\Administrator\Desktop\新建文件夹\[D]output.exe
    
24. C:\Users\Administrator\Desktop\新建文件夹\[D]V0i.exe
    
25. C:\Users\Administrator\Desktop\新建文件夹\[D]薪补政策.exe
    
26. C:\Users\Administrator\Desktop\新建文件夹\[Sustest]20231205.exe
    
27. C:\Users\Administrator\Desktop\新建文件夹\[Sustest]dllhost1.exe
    
28. C:\Users\Administrator\Desktop\新建文件夹\[可能的环境检测]图片.exe
    
29. C:\Users\Administrator\Desktop\新建文件夹\2023.12.06 电.子.云.票.exe
    
30. C:\Users\Administrator\Desktop\新建文件夹\2024.1.12.exe
    
31. C:\Users\Administrator\Desktop\新建文件夹\9159.exe
    
32. C:\Users\Administrator\Desktop\新建文件夹\00623795.exe
    
33. C:\Users\Administrator\Desktop\新建文件夹\20240108.2001.exe
    
34. C:\Users\Administrator\Desktop\新建文件夹\28465478.exe
    
35. C:\Users\Administrator\Desktop\新建文件夹\46845616.exe
    
36. C:\Users\Administrator\Desktop\新建文件夹\0920332206.exe
    
37. C:\Users\Administrator\Desktop\新建文件夹\dllhost.exe
    
38. C:\Users\Administrator\Desktop\新建文件夹\J9体育.exe
    
39. C:\Users\Administrator\Desktop\新建文件夹\PO_TSD 010-01-024 Via-Build-Mart.exe
    
40. C:\Users\Administrator\Desktop\新建文件夹\sm1ss.exe
    
41. 
    
42. 扫描结果
    
43. ======================
    
44. 高风险项目
    
45. ----------------------
    
46. C:\Users\Administrator\Desktop\新建文件夹\电脑版-终端.exe 36532C6362BA2E8E4CEE638C549735A9 439466EDB95A71A0FB7CB33867E07BB87D87CF9F 70,3,2,4,280,1,256, || 0_0_1  [360云查杀引擎][Win32/Heur.Generic.HwcBngYA][隔离文件][已处理]
    
47. C:\Users\Administrator\Desktop\新建文件夹\[D]Inject.exe 72A573C99CE4E4ED6101390CABDF1BD0 A9529343202C8BDDBCE50D6E6E4EDFD629AFC26E 70,3,2,4,280,1,256, || 0_0_1  [360云查杀引擎][Win64/Trojan.Tidebypass.H8oAnE0A][隔离文件][已处理]
    
48. C:\Users\Administrator\Desktop\新建文件夹\[D]V0i.exe 61C8660A03A0D285B80B3BEDBA8461E3 9DE186DEF80A0369FFAF12F9839A61E653944203 70,3,2,4,280,1,256, || 0_0_1  [360云查杀引擎][Win64/HackTool.Meterpreter.H8oAnLIA][隔离文件][已处理]
    
49. C:\Users\Administrator\Desktop\新建文件夹\[D]薪补政策.exe CA731FB3DF04AA2B058A62E4F4DAD847 77A7AB992081DF7D83C353CAEC80D0C7961C1257 70,3,2,4,280,1,256, || 0_0_1  [360云查杀引擎][Win32/Backdoor.Lotok.HgIATRYA][隔离文件][已处理]
    
50. C:\Users\Administrator\Desktop\新建文件夹\[Sustest]dllhost1.exe E812B6B1AC89A3ACBB706DB4A7C62E35 BCEBE24CE78AF757BFF476565CA4C63DBE9DF941 70,3,2,4,280,1,256, || 0_0_1  [360云查杀引擎][Win64/Heur.Generic.H8oAnrsA][隔离文件][已处理]
    
51. C:\Users\Administrator\Desktop\新建文件夹\[可能的环境检测]图片.exe 5927026FE505BB2955A37A19FEF5349B 159197C981871D80EA41380E963A4EBFD1017079 70,3,2,4,280,1,256, || 0_0_1  [360云查杀引擎][Trojan.Generic][隔离文件][已处理]
    
52. C:\Users\Administrator\Desktop\新建文件夹\[Sustest]20231205.exe 9D214B5DCE13C26DF7469757B2381E8B D5D0658CE1D412B07EB52414873E1DD4067C63D5 70,3,2,4,280,1,256, || 0_0_1  [360云查杀引擎][Trojan.Generic][隔离文件][已处理]
    
53. C:\Users\Administrator\Desktop\新建文件夹\2024.1.12.exe 3CEA0B8D81944ED7D5B8E4711FD5C81A 191D293391735C40D5E0ABB63A36A252E7628DBE 70,3,2,4,280,1,256, || 0_0_1  [360云查杀引擎][Win32/TrojanDropper.Generic.HwcBnhUA][隔离文件][已处理]
    
54. C:\Users\Administrator\Desktop\新建文件夹\2023.12.06 电.子.云.票.exe F4AC48CED071D640E34AF816880B1FAB 6161DE6A01FF6E86A7123518CF2A7439945AD71F 70,3,2,4,280,1,256, || 0_0_1  [360云查杀引擎][Win64/Backdoor.Quasar.HgEATRYA][隔离文件][已处理]
    
55. C:\Users\Administrator\Desktop\新建文件夹\9159.exe 4019B3062CFBED6EA1CD31BF34C916FE 97C8775FBB4EEDEF6B63B02D4B10560C3EAE1564 70,3,2,4,280,1,256, || 0_0_1  [360云查杀引擎][Trojan.Generic][隔离文件][已处理]
    
56. C:\Users\Administrator\Desktop\新建文件夹\20240108.2001.exe FF22BCE6542F3DEB82AAECC2AD6E2595 C6E263773E1EB4597D01A81F61AF5347934E5058 70,3,2,4,280,1,256, || 0_0_1  [360云查杀引擎][Win32/Trojan.Generic.HgIATRYA][隔离文件][已处理]
    
57. C:\Users\Administrator\Desktop\新建文件夹\28465478.exe 2CDCE38214379989D6F5644BB3FC4454 CB770FF9FF2D9E10CC131161D32E93389FC101F4 70,3,2,4,280,1,256, || 0_0_1  [360云查杀引擎][Win32/TrojanDropper.Generic.HgIATRYA][隔离文件][已处理]
    
58. C:\Users\Administrator\Desktop\新建文件夹\dllhost.exe 4ED5DAB5F98A117280CA2AAEF26A9292 C3D463CF15B41119CEE1F9C78D79E3BEEF17C9EE 70,3,2,4,280,1,256, || 0_0_1  [360云查杀引擎][Trojan.Generic][隔离文件][已处理]
    
59. C:\Users\Administrator\Desktop\新建文件夹\PO_TSD 010-01-024 Via-Build-Mart.exe DCAA74C007C1070E78ED0417FB77CC9A 94AAA1F9FBF247D6C00A0D182862ADF6CEEC6C4B 70,3,2,4,280,1,256, || 0_0_1  [360云查杀引擎][Win32/Trojan.Generic.HwMAngYA][隔离文件][已处理]
    
60. C:\Users\Administrator\Desktop\新建文件夹\sm1ss.exe 1BC1827E332AEDFFB3D05579BD0C7D99 7B7D20DD883B31D20F8CF7679718987E43689640 70,3,2,4,280,1,256, || 0_0_1  [360云查杀引擎][Win64/Heur.Generic.H8oAnrsA][隔离文件][已处理]
    

复制代码

anthonyqian

ESET 扫描检测15个。

GDHJDSYDH

EIS+KFA扫描剩余5x；沙箱内双击运行EIS击杀1x的衍生物和内存杀1x，KFA主防杀2x，1x miss（其运行后自退）

DisaPDB

1. 360杀毒 扫描内容
   
2. ----------------------
   
3. C:\Users\Administrator\Desktop\25X
   
4. 扫描结果
   
5. ======================
   
6. 高危风险项
   
7. ----------------------
   
8. C:\Users\Administrator\Desktop\25X (2)\2023.12.06 电.子.云.票.exe        Win64/Backdoor.Quasar.HgEATRYA        已删除
   
9. C:\Users\Administrator\Desktop\25X (2)\20240108.2001.exe        感染型病毒(Win32/Trojan.Generic.HgIATRYA)        已删除
   
10. C:\Users\Administrator\Desktop\25X (2)\2024.1.12.exe        感染型病毒(Win32/TrojanDropper.Generic.HwcBnhUA)        已删除
    
11. C:\Users\Administrator\Desktop\25X (2)\28465478.exe        感染型病毒(Win32/TrojanDropper.Generic.HgIATRYA)        已删除
    
12. C:\Users\Administrator\Desktop\25X (2)\dllhost.exe        伪装成Windows系统文件的程序        已删除
    
13. C:\Users\Administrator\Desktop\25X (2)\9159.exe        木马程序(Trojan.Generic)        已删除
    
14. C:\Users\Administrator\Desktop\25X (2)\sm1ss.exe        Win64/Heur.Generic.H8oAnrsA        已删除
    
15. C:\Users\Administrator\Desktop\25X (2)\PO_TSD 010-01-024 Via-Build-Mart.exe        感染型病毒(Win32/Trojan.Generic.HwMAngYA)        已删除
    
16. C:\Users\Administrator\Desktop\25X (2)\[D]678.exe        Win64/Heur.Generic.H8oAob4A        已删除
    
17. C:\Users\Administrator\Desktop\25X (2)\[D]Inject.exe        Win64/Trojan.Tidebypass.H8oAnE0A        已删除
    
18. C:\Users\Administrator\Desktop\25X (2)\[D]V0i.exe        Win64/HackTool.Meterpreter.H8oAnLIA        已删除
    
19. C:\Users\Administrator\Desktop\25X (2)\[D]output.exe        Win64/Heur.Generic.H8oAob4A        已删除
    
20. C:\Users\Administrator\Desktop\25X (2)\[D]薪补政策.exe        感染型病毒(Win32/Backdoor.Lotok.HgIATRYA)        已删除
    
21. C:\Users\Administrator\Desktop\25X (2)\[Sustest]20231205.exe        木马程序(Trojan.Generic)        已删除
    
22. C:\Users\Administrator\Desktop\25X (2)\[Sustest]dllhost1.exe        Win64/Heur.Generic.H8oAnrsA        已删除
    
23. C:\Users\Administrator\Desktop\25X (2)\[可能的环境检测]图片.exe        木马程序(Trojan.Generic)        已删除
    
24. C:\Users\Administrator\Desktop\25X (2)\电脑版-终端.exe        感染型病毒(Win32/Heur.Generic.HwcBngYA)        已删除
    
25. C:\Users\Administrator\Desktop\25X (2)\企业补贴名单.exe        HEUR/QVM20.1.A1BE.Malware.Gen        已删除
    
26. 
    

复制代码

双击剩余全部miss

hansyu

McAfee 扫描 11x
ESET 解压 16x

hhjjjjjj123

卡巴19，emsisoft7

PYAS_Security

PYAS Kill 22x