Downloader 1x

显示全部楼层 · 发表于 2024-1-30 12:04:03

显示全部楼层 · 发表于 2024-1-30 12:09:20

红伞双击

显示全部楼层 · 发表于 2024-1-30 12:11:30

checkpoint 报毒同VT

显示全部楼层 · 发表于 2024-1-30 12:15:38

本帖最后由 hansyu 于 2024-1-30 12:22 编辑

ESET 下载器本体不杀
下载器和14x (2024-01-30)_病毒样本分享&分析区_安全区卡饭论坛 - 互助分享 - 大气谦和! (kafan.cn)
这个里面的569a3082.exe应该也是同源，创建的计划任务名字都一样。
杀云端配置
jli.dll - ESET LiveGuard 特洛伊木马

显示全部楼层 · 发表于 2024-1-30 12:26:24

蜘蛛阻止

显示全部楼层 · 发表于 2024-1-30 12:32:40

显示全部楼层 · 发表于 2024-1-30 12:34:19

江民静态Kill：

显示全部楼层 · 发表于 2024-1-30 12:41:20

显示全部楼层 · 发表于 2024-1-30 12:58:50

金山毒霸静态扫描miss

——————————————分割线————————————————

瑞星 kill

显示全部楼层 · 发表于 2024-1-30 14:19:11

G DATA BEAST (C2)

G DATA INTERNET SECURITY has prevented malicious software from running on your system.
The malicious program was identified by BEAST (Behavior Monitoring) as: Verdict.ContactedMaliciousHost
The following processes were therefore terminated by G DATA for security reasons:
----------------------------------------------------------------
C:\Users\wangl\Downloads\查询端口\查询端口.exe (PID 12536)
----------------------------------------------------------------
The following programs responsible were moved to Quarantine by G DATA:
----------------------------------------------------------------
C:\Users\wangl\Downloads\查询端口\查询端口.exe
----------------------------------------------------------------
Further information:
Module: CnC
Domain: sz1-1322151504.cos.ap-shanghai.myqcloud.com
Domain ip: 36.155.242.91
Ref: 85f03fc0-cb36-4f12-ad9f-a744caf5c4d9

复制代码

[病毒样本] Downloader 1x