龟包 240126 11X

神龟Turmi

https://turtlesusp.run/samples/0 ... rtleSUSP-240126.zip

ClamAV（0.13.0-rc2）：

6/11

Malwarebytes：

11/11

PYAS_Security

PYAS Kill 8x 火绒 Kill 7x

UNknownOoo

X-Sec
扫描：ALL

1. Basic Info:
   
2. ---------------------
   
3. Program Version: 3.2.0.0
   
4. Rising Virus Database Version: 25.00.34.13
   
5. X-Sec Heuristic Engine: Enabled
   
6. Rising Antivirus Engine: Enabled
   
7. Rising Cloud Engine: Enabled
   
8. Backup Before Resolve: Enabled
   
9. ---------------------
   
10. Targets:
    
11. ---------------------
    
12. C:\Users\UnknownOoo\Downloads\Compressed\TurtleSUSP-240126
    
13. ---------------------
    
14. 2024/01/26 10:07:50 Threat Detected: C:\Users\UnknownOoo\Downloads\Compressed\TurtleSUSP-240126\TurtleSUSP-240126-01-Gh0st-6a7146.exe -- [rame-classic] Backdoor.Gh0st!1.DF86
    
15. 2024/01/26 10:07:50 Threat Detected: C:\Users\UnknownOoo\Downloads\Compressed\TurtleSUSP-240126\TurtleSUSP-240126-02-CobaltStrike-b82405.exe -- [rame-classic] Trojan.ShellCodeRunner!1.F13B
    
16. 2024/01/26 10:07:51 Threat Detected: C:\Users\UnknownOoo\Downloads\Compressed\TurtleSUSP-240126\TurtleSUSP-240126-04-AgentTesla-458915.exe -- [rame-cloud] Spyware.AgentTesla!8.10E35
    
17. 2024/01/26 10:07:51 Threat Detected: C:\Users\UnknownOoo\Downloads\Compressed\TurtleSUSP-240126\TurtleSUSP-240126-03-Meterpreter-6bb660.exe -- [rame-classic] HackTool.Swrort!1.6477
    
18. 2024/01/26 10:07:52 Threat Detected: C:\Users\UnknownOoo\Downloads\Compressed\TurtleSUSP-240126\TurtleSUSP-240126-06-AgentTesla-4e6802.exe -- [rame-cloud] Trojan.Generic!8.C3
    
19. 2024/01/26 10:07:52 Threat Detected: C:\Users\UnknownOoo\Downloads\Compressed\TurtleSUSP-240126\TurtleSUSP-240126-05-AgentTesla-9481ac.exe -- [rame-cloud] Trojan.Leonem!8.15E05
    
20. 2024/01/26 10:07:53 Threat Detected: C:\Users\UnknownOoo\Downloads\Compressed\TurtleSUSP-240126\TurtleSUSP-240126-07-AgentTesla-192b0d.exe -- [rame-cloud] Trojan.Injector!8.C4
    
21. 2024/01/26 10:07:53 Threat Detected: C:\Users\UnknownOoo\Downloads\Compressed\TurtleSUSP-240126\TurtleSUSP-240126-08-AgentTesla-3207d6.exe -- [rame-cloud] Trojan.Injector!8.C4
    
22. 2024/01/26 10:07:54 Threat Detected: C:\Users\UnknownOoo\Downloads\Compressed\TurtleSUSP-240126\TurtleSUSP-240126-10-NJRat-9947d3.exe -- [rame-classic] Backdoor.njRAT!1.C5D1
    
23. 2024/01/26 10:07:54 Threat Detected: C:\Users\UnknownOoo\Downloads\Compressed\TurtleSUSP-240126\TurtleSUSP-240126-09-Umbral-5aafc1.exe -- [rame-tfe] Stealer.Agent!8.C2
    
24. 2024/01/26 10:07:55 Threat Detected: C:\Users\UnknownOoo\Downloads\Compressed\TurtleSUSP-240126\TurtleSUSP-240126-11-NJRat-93469b.exe -- [rame-classic] Backdoor.njRAT!1.9E49
    

复制代码

mmmaoo

江民静态Kill ALL：

GreatMOLA

G DATA (Both engines) 扫描11x



Cy 静态11x


DI 11x

祸兮福所倚

清空

真小读者

咖啡 11X

1094947421

GDHJDSYDH

EIS监控kill 10x，KFA补漏kill 1x，总计kill all

384也7492374

S1 静态 all