龟包 240215 16X

显示全部楼层 · 发表于 2024-2-16 01:38:14

下载：
https://malware.camp/Turtle/TurtleSUSP-240215.zip
分流：
https://mirrors-s1.malware.camp/Turtle/TurtleSUSP-240215.zip
https://mirrors-s2.malware.camp/Turtle/TurtleSUSP-240215.zip
https://mirrors-s3.malware.camp/Turtle/TurtleSUSP-240215.zip
龟包列表：
https://malware.camp/Turtle/

这个直连分享平台后续我自己当小白鼠没问题之后是会开放出来的，到时候就不需要被那些丢人网盘折磨了哦，敬请期待

ClamAV：

6/16

显示全部楼层 · 发表于 2024-2-16 07:15:44

江民静态11x：

显示全部楼层 · 发表于 2024-2-16 08:31:19

sep剩余两个一个打开错误一个打开拦截本体不杀

显示全部楼层 · 发表于 2024-2-16 09:53:39

火绒
扫描：8X

扫描文件：16
发现风险：8
已处理风险：8
病毒详情：
风险路径：C:\Users\UnknownOoo\Downloads\Compressed\TurtleSUSP-240215\TS-240215-05-Meterpreter-1e8a40.exe, 病毒名：Backdoor/Meterpreter.fb, 病毒ID：efdcac05e77da52e, 处理结果：已处理，删除文件
风险路径：C:\Users\UnknownOoo\Downloads\Compressed\TurtleSUSP-240215\TS-240215-13-Storm-514743.exe, 病毒名：TrojanDropper/Agent.jl, 病毒ID：b8cdb17cfd85395a, 处理结果：已处理，删除文件
风险路径：C:\Users\UnknownOoo\Downloads\Compressed\TurtleSUSP-240215\TS-240215-06-DCRAT-da287c.exe, 病毒名：HEUR:Trojan/Distool.a, 病毒ID：46ad91b2a9c808c8, 处理结果：已处理，删除文件
风险路径：C:\Users\UnknownOoo\Downloads\Compressed\TurtleSUSP-240215\TS-240215-12-Berbew-8d66d7.exe, 病毒名：Worm/Mimail.a, 病毒ID：4e96b616a2af8041, 处理结果：已处理，删除文件
风险路径：C:\Users\UnknownOoo\Downloads\Compressed\TurtleSUSP-240215\TS-240215-16-Expiro-f6126c3.exe, 病毒名：Virus/Expiro.q@U, 病毒ID：f9ca53445d898fbf, 处理结果：已处理，删除文件
风险路径：C:\Users\UnknownOoo\Downloads\Compressed\TurtleSUSP-240215\TS-240215-15-Trickbot-49be4c.dll, 病毒名：VirTool/Obfuscator.vx, 病毒ID：2daa8506c82ce489, 处理结果：已处理，删除文件
风险路径：C:\Users\UnknownOoo\Downloads\Compressed\TurtleSUSP-240215\TS-240215-01-UnknownRAT-a52cd4.exe, 病毒名：Backdoor/PS.ReverseShell.d, 病毒ID：6bcd40c0dfa0ca94, 处理结果：已处理，删除文件
风险路径：C:\Users\UnknownOoo\Downloads\Compressed\TurtleSUSP-240215\TS-240215-14-AgentTesla-629c02.exe, 病毒名：Trojan/W64.CoinMiner.cf, 病毒ID：36bf5231acbd7ba5, 处理结果：已处理，删除文件

复制代码

X-Sec
扫描：13X

---------------------
2024/02/16 09:52:23 Threat Detected: C:\Users\UnknownOoo\Downloads\Compressed\TurtleSUSP-240215\TS-240215-01-UnknownRAT-a52cd4.exe -- [rame-cloud] Trojan.ReverseShell/PS!8.139E2
2024/02/16 09:52:24 Threat Detected: C:\Users\UnknownOoo\Downloads\Compressed\TurtleSUSP-240215\TS-240215-03-CobaltStrike-7b43c6.exe -- [rame-tfe] Trojan.Kryptik!8.8
2024/02/16 09:52:24 Threat Detected: C:\Users\UnknownOoo\Downloads\Compressed\TurtleSUSP-240215\TS-240215-04-CobaltStrike-f1eb1d.exe -- [rame-tfe] Trojan.Kryptik!8.8
2024/02/16 09:52:25 Threat Detected: C:\Users\UnknownOoo\Downloads\Compressed\TurtleSUSP-240215\TS-240215-05-Meterpreter-1e8a40.exe -- [rame-classic] Trojan.Kryptik/x64!1.A2F4
2024/02/16 09:52:25 Threat Detected: C:\Users\UnknownOoo\Downloads\Compressed\TurtleSUSP-240215\TS-240215-06-DCRAT-da287c.exe -- [rame-cloud] Exploit.UAC!8.107CD
2024/02/16 09:52:26 Threat Detected: C:\Users\UnknownOoo\Downloads\Compressed\TurtleSUSP-240215\TS-240215-07-AgentTesla-b1836d.exe -- [rame-cloud] Trojan.Undefined!8.1327C
2024/02/16 09:52:27 Threat Detected: C:\Users\UnknownOoo\Downloads\Compressed\TurtleSUSP-240215\TS-240215-09-AgentTesla-9a00b8.exe -- [rame-rdm.msil2] Malware.Obfus/MSIL@AI.88
2024/02/16 09:52:28 Threat Detected: C:\Users\UnknownOoo\Downloads\Compressed\TurtleSUSP-240215\TS-240215-11-Berbew-56cd0e.exe -- [rame-classic] Backdoor.Berbew!1.AE0A
2024/02/16 09:52:28 Threat Detected: C:\Users\UnknownOoo\Downloads\Compressed\TurtleSUSP-240215\TS-240215-10-AgentTelsa-1177a5.exe -- [rame-cloud] Trojan.Injector/NSIS!8.1294D
2024/02/16 09:52:28 Threat Detected: C:\Users\UnknownOoo\Downloads\Compressed\TurtleSUSP-240215\TS-240215-12-Berbew-8d66d7.exe -- [rame-classic] Backdoor.Berbew!1.AF13
2024/02/16 09:52:29 Threat Detected: C:\Users\UnknownOoo\Downloads\Compressed\TurtleSUSP-240215\TS-240215-14-AgentTesla-629c02.exe -- [rame-tfe] Trojan.Agent!8.B1E
2024/02/16 09:52:29 Threat Detected: C:\Users\UnknownOoo\Downloads\Compressed\TurtleSUSP-240215\TS-240215-13-Storm-514743.exe -- [rame-classic] Dropper.Agent!1.C6A3
2024/02/16 09:52:30 Threat Detected: C:\Users\UnknownOoo\Downloads\Compressed\TurtleSUSP-240215\TS-240215-15-Trickbot-49be4c.dll -- [rame-tfe] Trojan.Kryptik!8.8

复制代码

显示全部楼层 · 发表于 2024-2-16 10:39:05

显示全部楼层 · 发表于 2024-2-16 11:02:14

本帖最后由 tjsh 于 2024-2-16 11:10 编辑

10x深度

------------------------HEZHONG ANTIVIRUS SCAN LOG------------------------
开始于: 2024.2.16-11.4.35
病毒库版本: 2024.2.1 18:09
软件版本: 6.21
引擎版本: 6.18.2372
记录病毒数量: 165507
------------------------HEZHONG ANTIVIRUS SCAN LOG------------------------
扫描文件：C:/Users/tjsh/Desktop/TurtleSUSP-240215\TS-240215-01-UnknownRAT-a52cd4.exe ......-> 发现了：DL.Trojan.a
扫描文件：C:/Users/tjsh/Desktop/TurtleSUSP-240215\TS-240215-02-UnknownRAT-2d6184.exe ......-> 发现了：DL.Trojan.a
扫描文件：C:/Users/tjsh/Desktop/TurtleSUSP-240215\TS-240215-03-CobaltStrike-7b43c6.exe ......
扫描文件：C:/Users/tjsh/Desktop/TurtleSUSP-240215\TS-240215-04-CobaltStrike-f1eb1d.exe ......
扫描文件：C:/Users/tjsh/Desktop/TurtleSUSP-240215\TS-240215-05-Meterpreter-1e8a40.exe ......
扫描文件：C:/Users/tjsh/Desktop/TurtleSUSP-240215\TS-240215-06-DCRAT-da287c.exe ......-> 发现了：DL.Trojan.c
扫描文件：C:/Users/tjsh/Desktop/TurtleSUSP-240215\TS-240215-07-AgentTesla-b1836d.exe ......-> 发现了：DL.Trojan.a
扫描文件：C:/Users/tjsh/Desktop/TurtleSUSP-240215\TS-240215-08-AgentTesla-2a5b23.exe ......-> 发现了：DL.Trojan.a
扫描文件：C:/Users/tjsh/Desktop/TurtleSUSP-240215\TS-240215-09-AgentTesla-9a00b8.exe ......-> 发现了：DL.Trojan.b
扫描文件：C:/Users/tjsh/Desktop/TurtleSUSP-240215\TS-240215-10-AgentTelsa-1177a5.exe ......-> 发现了：DL.Trojan.a
扫描文件：C:/Users/tjsh/Desktop/TurtleSUSP-240215\TS-240215-11-Berbew-56cd0e.exe ......-> 发现了：DL.Trojan.b
扫描文件：C:/Users/tjsh/Desktop/TurtleSUSP-240215\TS-240215-12-Berbew-8d66d7.exe ......-> 发现了：DL.Trojan.a
扫描文件：C:/Users/tjsh/Desktop/TurtleSUSP-240215\TS-240215-13-Storm-514743.exe ......
扫描文件：C:/Users/tjsh/Desktop/TurtleSUSP-240215\TS-240215-14-AgentTesla-629c02.exe ......
扫描文件：C:/Users/tjsh/Desktop/TurtleSUSP-240215\TS-240215-15-Trickbot-49be4c.dll ......-> 发现了：DL.Trojan.a
扫描文件：C:/Users/tjsh/Desktop/TurtleSUSP-240215\TS-240215-16-Expiro-f6126c3.exe ......

复制代码

逆天的TS-240215-01-UnknownRAT-a52cd4.exe置信度高达1.0

CS一个没杀我的Yara死了是吧

来人试试Ankit史上查杀率超级无敌牛B的机器学习扫描器

显示全部楼层 · 发表于 2024-2-16 12:08:22

Dr.Web 扫描12x

Cy 静态13x

显示全部楼层 · 发表于 2024-2-16 12:22:34

Kaspersky Plus + ESSP 清空

显示全部楼层 · 发表于 2024-2-16 14:15:21

本帖最后由 Miostartos 于 2024-2-16 14:18 编辑

withsecure 扫描14/16
剩下A52和2D6，双击被DG阻断

显示全部楼层 · 发表于 2024-2-16 14:19:46

FSP 实时KILL 12x 剩余文件扫描miss

[病毒样本] 龟包 240215 16X

本帖子中包含更多资源

评分

本帖子中包含更多资源

评分

评分

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源