CobaltStrike 1x

显示全部楼层 · 发表于 2024-1-27 18:04:45

复制代码

360ESC miss

显示全部楼层 · 发表于 2024-1-27 18:24:38

G DATA执行（Sandboxie中），BEAST杀。

G DATA INTERNET SECURITY has prevented malicious software from running on your system.
The malicious program was identified by BEAST (Behavior Monitoring) as: Verdict.Malware
The following processes were therefore terminated by G DATA for security reasons:
----------------------------------------------------------------
C:\Users\wangl\Downloads\SysCall\SysCall.exe
C:\Users\wangl\Downloads\SysCall\SysCall.exe
C:\Program Files\Sandboxie-Plus\SbieSvc.exe (PID 5056)
----------------------------------------------------------------
The following programs responsible were moved to Quarantine by G DATA:
----------------------------------------------------------------
C:\Users\wangl\Downloads\SysCall\SysCall.exe
----------------------------------------------------------------
Further information:
Module: FileCloud
File: C:\Users\wangl\Downloads\SysCall\SysCall.exe
Sha256: 7216B93ABD71D30ABA0B17006C6D9E0F7E496F93C3C67D49391E1C55C3203D37
Md5: 83AC65B811643C43273D34EBB001E30B
Size: 1084673
Ref: ef999792-0144-40c4-8847-3b0afffce9e7

复制代码

显示全部楼层 · 发表于 2024-1-27 18:29:19

Avast-kill

显示全部楼层 · 发表于 2024-1-27 18:34:43

火绒 1x

显示全部楼层 · 发表于 2024-1-27 18:45:25

kaspersky kill

显示全部楼层 · 发表于 2024-1-27 18:51:58

本帖最后由 LSPLDD 于 2024-1-27 18:59 编辑

BD
Gen:Suspicious.Cloud.8.c9Z@amxaDtc

ESET扫描+双击miss(已出外联)

显示全部楼层 · 发表于 2024-1-27 19:04:14

微软入库Trojan:Win64/CobaltStrike.AO!MTB

显示全部楼层 · 发表于 2024-1-27 19:09:12

蜘蛛、智量miss

显示全部楼层 · 发表于 2024-1-27 19:36:36

Avira扫描杀

显示全部楼层 · 发表于 2024-1-27 19:38:57

ESSP云黑

[病毒样本] CobaltStrike 1x