龟包 240313 15X

神龟Turmi

下载：
https://malware.camp/Turtle/TurtleSUSP-240313.zip
分流：
https://mirrors-s1.malware.camp/Turtle/TurtleSUSP-240313.zip
https://mirrors-s2.malware.camp/Turtle/TurtleSUSP-240313.zip
https://mirrors-s3.malware.camp/Turtle/TurtleSUSP-240313.zip
龟包列表：
https://malware.camp/Turtle/

t0kenzero

cylance All

hansyu

ESET 解压清空

神龟Turmi

hansyu 发表于 2024-3-13 21:03
ESET 解压清空

发晚了 刚去摸了一会儿
如果7点多就发应该是漏两个（

mmmaoo

江民 13x：

DisaPDB

360占位~话说之前裸连龟站都能秒下的现在只有500k/s惹

取名字难

puxinqin

15个文件，解压火绒杀12个，火绒扫描再杀1个，剩下2个。EMSI扫描再杀1个，双击再杀1个，剩下0个

UNknownOoo

X-Sec
扫描：14X

1. ---------------------
   
2. 2024/03/13 21:14:15 Threat Detected: C:\Users\UnknownOoo\Downloads\Compressed\TurtleSUSP-240313\TS-240313-02-AgentTesla-3015b1.scr -- [rame-tfe] Downloader.Seraph!8.111C6
   
3. 2024/03/13 21:14:16 Threat Detected: C:\Users\UnknownOoo\Downloads\Compressed\TurtleSUSP-240313\TS-240313-03-AgentTesla-d71c41.exe -- [rame-cloud] Trojan.Injector/NSIS!8.1294D
   
4. 2024/03/13 21:14:16 Threat Detected: C:\Users\UnknownOoo\Downloads\Compressed\TurtleSUSP-240313\TS-240313-01-Remcos-ccf727.exe -- [rame-rdm.msil2] Malware.Obfus/MSIL@AI.90
   
5. 2024/03/13 21:14:17 Threat Detected: C:\Users\UnknownOoo\Downloads\Compressed\TurtleSUSP-240313\TS-240313-05-AgentTesla-8e7049.exe -- [rame-rdm.msil2] Malware.Obfus/MSIL@AI.100
   
6. 2024/03/13 21:14:18 Threat Detected: C:\Users\UnknownOoo\Downloads\Compressed\TurtleSUSP-240313\TS-240313-04-AgentTesla-7f77cc.exe -- [rame-rdm.msil2] Malware.Obfus/MSIL@AI.90
   
7. 2024/03/13 21:14:19 Threat Detected: C:\Users\UnknownOoo\Downloads\Compressed\TurtleSUSP-240313\TS-240313-07-Stealc-dcb66b.exe -- [rame-cloud] Stealer.Stealerc!8.17BE0
   
8. 2024/03/13 21:14:21 Threat Detected: C:\Users\UnknownOoo\Downloads\Compressed\TurtleSUSP-240313\TS-240313-09-Cred-cdc32a.exe -- [rame-cloud] Trojan.Kryptik!8.8
   
9. 2024/03/13 21:14:24 Threat Detected: C:\Users\UnknownOoo\Downloads\Compressed\TurtleSUSP-240313\TS-240313-10-Creal-6f4c79.exe -- [rame-cloud] Spyware.Agent!8.C6
   
10. 2024/03/13 21:14:25 Threat Detected: C:\Users\UnknownOoo\Downloads\Compressed\TurtleSUSP-240313\TS-240313-11-Redline-a85188.exe -- [rame-cloud] Trojan.Kryptik!8.8
    
11. 2024/03/13 21:14:29 Threat Detected: C:\Users\UnknownOoo\Downloads\Compressed\TurtleSUSP-240313\TS-240313-12-Redline-0225da.exe -- [rame-cloud] Trojan.Kryptik!8.8
    
12. 2024/03/13 21:14:30 Threat Detected: C:\Users\UnknownOoo\Downloads\Compressed\TurtleSUSP-240313\TS-240313-13-RisePro-d89dc9.exe -- [rame-rdm.msil2] Malware.Obfus/MSIL@AI.92
    
13. 2024/03/13 21:14:30 Threat Detected: C:\Users\UnknownOoo\Downloads\Compressed\TurtleSUSP-240313\TS-240313-14-Lumma-e5c8fc.exe -- [rame-tfe] Spyware.Agent!8.C6
    
14. 2024/03/13 21:14:34 Threat Detected: C:\Users\UnknownOoo\Downloads\Compressed\TurtleSUSP-240313\TS-240313-08-Rhadamanthys-d27319.exe -- [rame-tfe] Trojan.Rhadamanthys!8.178A1
    
15. 2024/03/13 21:14:38 Threat Detected: C:\Users\UnknownOoo\Downloads\Compressed\TurtleSUSP-240313\TS-240313-15-Gozi-4c7f46.exe -- [rame-rdm.msil2] Malware.Obfus/MSIL@AI.100

复制代码

火绒（没开高级启发
扫描：12x

1. 扫描文件：15
   
2. 发现风险：12
   
3. 已处理风险：0
   
4. 病毒详情：
   
5. 风险路径：C:\Users\Serendipity\Desktop\TurtleSUSP-240313\TS-240313-15-Gozi-4c7f46.exe, 病毒名：Trojan/MSIL.Heracles.a, 病毒ID：6e7428e33b8f70d2, 处理结果：暂不处理
   
6. 风险路径：C:\Users\Serendipity\Desktop\TurtleSUSP-240313\TS-240313-08-Rhadamanthys-d27319.exe, 病毒名：Trojan/Injector.bfj, 病毒ID：cdb1b62242a9f4df, 处理结果：暂不处理
   
7. 风险路径：C:\Users\Serendipity\Desktop\TurtleSUSP-240313\TS-240313-05-AgentTesla-8e7049.exe, 病毒名：HEUR:VirTool/MSIL.Obfuscator.gen!A, 病毒ID：3fda44dcb57a42be, 处理结果：暂不处理
   
8. 风险路径：C:\Users\Serendipity\Desktop\TurtleSUSP-240313\TS-240313-04-AgentTesla-7f77cc.exe, 病毒名：HEUR:VirTool/MSIL.Obfuscator.gen!A, 病毒ID：3fda44dcb57a42be, 处理结果：暂不处理
   
9. 风险路径：C:\Users\Serendipity\Desktop\TurtleSUSP-240313\TS-240313-01-Remcos-ccf727.exe, 病毒名：HEUR:VirTool/MSIL.Obfuscator.gen!A, 病毒ID：3fda44dcb57a42be, 处理结果：暂不处理
   
10. 风险路径：C:\Users\Serendipity\Desktop\TurtleSUSP-240313\TS-240313-11-Redline-a85188.exe, 病毒名：Trojan/Injector.bfs, 病毒ID：3f6df37acd8bc223, 处理结果：暂不处理
    
11. 风险路径：C:\Users\Serendipity\Desktop\TurtleSUSP-240313\TS-240313-12-Redline-0225da.exe, 病毒名：Trojan/Injector.bfs, 病毒ID：3f6df37acd8bc223, 处理结果：暂不处理
    
12. 风险路径：C:\Users\Serendipity\Desktop\TurtleSUSP-240313\TS-240313-02-AgentTesla-3015b1.scr, 病毒名：HEUR:TrojanDownloader/MSIL.Seraph.e, 病毒ID：f6da0cbc4c344621, 处理结果：暂不处理
    
13. 风险路径：C:\Users\Serendipity\Desktop\TurtleSUSP-240313\TS-240313-13-RisePro-d89dc9.exe, 病毒名：Trojan/MSIL.Agent.gq, 病毒ID：480de0f93d03ca55, 处理结果：暂不处理
    
14. 风险路径：C:\Users\Serendipity\Desktop\TurtleSUSP-240313\TS-240313-07-Stealc-dcb66b.exe, 病毒名：VirTool/Obfuscator.fq, 病毒ID：87f0b01289503335, 处理结果：暂不处理
    
15. 风险路径：C:\Users\Serendipity\Desktop\TurtleSUSP-240313\TS-240313-09-Cred-cdc32a.exe, 病毒名：Trojan/Python.ShellLoader.am, 病毒ID：51c6c6fbd085ac31, 处理结果：暂不处理
    
16. 风险路径：C:\Users\Serendipity\Desktop\TurtleSUSP-240313\TS-240313-10-Creal-6f4c79.exe, 病毒名：Ransom/LockFile.fl, 病毒ID：9b97d9df1e35b64c, 处理结果：暂不处理

复制代码

hansyu

神龟Turmi 发表于 2024-3-13 21:05
发晚了 刚去摸了一会儿
如果7点多就发应该是漏两个（

但是我的病毒库从下午1点到现在都没有更新过，而且全是特征报法，那可能流式更新了。