Samples x21

Hibike

https://f.ws59.cn/f/dje8kvnlqt5

欢迎分流

anxiety520

123分流
https://www.123pan.com/s/C7S0jv-FS4ih.html 提取码:4726 永久有效

UNknownOoo

分流：https://share.weiyun.com/qrOSuHbm


X-Sec
扫描：14x

1. ---------------------
   
2. 2024/03/03 18:19:47 Threat Detected: C:\Users\UnknownOoo\Downloads\Compressed\Kakutori\21d2af8f.jar -- [rame-cloud] Trojan.Undefined!8.1327C
   
3. 2024/03/03 18:19:53 Threat Detected: C:\Users\UnknownOoo\Downloads\Compressed\Kakutori\137f811a.exe -- [rame-tfe] Trojan.Dnoper!8.10CB3
   
4. 2024/03/03 18:19:54 Threat Detected: C:\Users\UnknownOoo\Downloads\Compressed\Kakutori\35fcdf3a.exe -- [rame-rdm.msil2] Malware.Obfus/MSIL@AI.90
   
5. 2024/03/03 18:19:54 Threat Detected: C:\Users\UnknownOoo\Downloads\Compressed\Kakutori\34fbf4f0.exe -- [rame-cloud] Trojan.Kryptik!8.8
   
6. 2024/03/03 18:20:01 Threat Detected: C:\Users\UnknownOoo\Downloads\Compressed\Kakutori\4f66ddef.exe -- [rame-tfe] Trojan.RedLine!8.120FD
   
7. 2024/03/03 18:20:02 Threat Detected: C:\Users\UnknownOoo\Downloads\Compressed\Kakutori\72b92683.dll -- [rame-cloud] Trojan.Agent!8.B1E
   
8. 2024/03/03 18:20:04 Threat Detected: C:\Users\UnknownOoo\Downloads\Compressed\Kakutori\8956b3a0.exe -- [rame-cloud] Trojan.Kryptik!8.8
   
9. 2024/03/03 18:20:04 Threat Detected: C:\Users\UnknownOoo\Downloads\Compressed\Kakutori\80441fcf.exe -- [rame-cloud] Backdoor.Agent!8.C5D
   
10. 2024/03/03 18:20:04 Threat Detected: C:\Users\UnknownOoo\Downloads\Compressed\Kakutori\9c621294.exe -- [rame-classic] Dropper.Agent!1.F3A7
    
11. 2024/03/03 18:20:05 Threat Detected: C:\Users\UnknownOoo\Downloads\Compressed\Kakutori\b8aeea3f.exe -- [rame-rdm.msil2] Malware.Obfus/MSIL@AI.85
    
12. 2024/03/03 18:20:05 Threat Detected: C:\Users\UnknownOoo\Downloads\Compressed\Kakutori\b3c3f0ce.exe -- [rame-cloud] Trojan.Scar!8.33F
    
13. 2024/03/03 18:20:05 Threat Detected: C:\Users\UnknownOoo\Downloads\Compressed\Kakutori\c7a0810f.jar -- [rame-cloud] Dropper.Agent/JAVA!8.133F4
    
14. 2024/03/03 18:20:06 Threat Detected: C:\Users\UnknownOoo\Downloads\Compressed\Kakutori\d46c6abe.exe -- [rame-cloud] Trojan.Kryptik!8.8
    
15. 2024/03/03 18:20:07 Threat Detected: C:\Users\UnknownOoo\Downloads\Compressed\Kakutori\オートイット\d.au3 -- [rame-cloud] Trojan.Injector!8.C4

复制代码

puxinqin

解压 火绒杀了14个，火绒扫描又杀1个，15个。EMSI扫描剩余的miss

DisaPDB

KSOS 扫描20x

tjsh

河众：落地+扫描：10x

Fadouse

ESSP + Kaspersky Plus 扫描+双击实际剩余如图

DisaPDB

Fadouse 发表于 2024-3-3 18:25
ESSP + Kaspersky Plus 扫描+双击实际剩余如图
但是其中“フエディニ”文件夹中文件貌似是steam本体啊

tier0_s.dll才是黑dll

Fadouse

DisaPDB 发表于 2024-3-3 18:26
tier0_s.dll才是黑dll

谢谢提醒，没注意对比原文件

Eset小粉絲

Mirror
https://transfer.sh/get/znE2mTAP6u/Kakutori.zip

文件夹里的EXE好像利用白的dll运毒？