x5 (2024-03-26)

显示全部楼层 · 发表于 2024-3-26 15:10:34

https://krakenfiles.com/view/8ftX4P5IA5/file.html

复制代码

显示全部楼层 · 发表于 2024-3-26 15:35:22

显示全部楼层 · 发表于 2024-3-26 15:36:26

本帖最后由 anxiety520 于 2024-3-26 17:31 编辑

Kaspersky
Scan only:
2.vbs -HEUR:Trojan.VBS.Agent.gen (Machine Learning)
Double-click:
1.bat, 2.bat -HEUR:Trojan.Win32.Generic (AMSI Protection: Expert Analysis)
1.xla Corrupted.
3.exe -PDM:Exploit.Win32.Generic (SW: AEP)

About 3.exe: I can't repeat the detection in 21.17 Kaspersky.

显示全部楼层 · 发表于 2024-3-26 15:49:49

显示全部楼层 · 发表于 2024-3-26 15:50:24

本帖最后由 coolcfan 于 2024-3-26 16:34 编辑

CheckPoint Harmony Optimized Policy

Scan only: killed 4
1.xla (threat emulation),
3.exe, 01.bat, 02.bat (reputation)

显示全部楼层 · 发表于 2024-3-26 15:57:00

祸兮福所倚发表于 2024-3-26 15:49

小a忠实用户！

显示全部楼层 · 发表于 2024-3-26 16:10:33

网页拦截

显示全部楼层 · 发表于 2024-3-26 16:10:56

Qihoo360 scan 0x

显示全部楼层 · 发表于 2024-3-26 16:54:24

miss all
infected

too bad....

显示全部楼层 · 发表于 2024-3-26 17:40:11

本帖最后由 Fadouse 于 2024-3-26 17:42 编辑

Kaspersky & ESSP Scan & Execute Kill 4x Miss 1x (.xla)

Scan 3x

Event: Malicious object detected
User: LAPTOP\Fadouse
User type: Initiator
Application name: smartscreen.exe
Application path: C:\Windows\System32
Component: File Anti-Virus
Result description: Detected
Type: Trojan
Name: HEUR:Trojan.VBS.Agent.gen
Precision: Heuristic Analysis
Threat level: High
Object type: File
Object name: 2.vbs
Object path: E:\Code\Virus
MD5 of an object: BBADED0A8091B76257DC4880C9EF59DC
Reason: Machine learning
Databases release date: Today, 3/26/2024 12:02:00 PM

复制代码

Time;Scanner;Object type;Object;Detection;Action;User;Information;Hash;First seen here
3/26/2024 5:37:27 PM;Real-time file system protection;file;E:\Code\Virus\01.bat;PowerShell/Kryptik.HJ trojan;cleaned by deleting;LAPTOP\Fadouse;Event occurred on a new file created by the application: C:\Program Files\Bandizip\Bandizip.exe (AB7C5C3728A1B132444C69A31DA61541F2BF4B25).;892A03611E263A0C759E6E3E4061CB5A9602D10C;3/26/2024 5:37:01 PM
3/26/2024 5:37:31 PM;Real-time file system protection;file;E:\Code\Virus\02.bat;PowerShell/Kryptik.HJ trojan;cleaned by deleting;LAPTOP\Fadouse;Event occurred on a new file created by the application: C:\Program Files\Bandizip\Bandizip.exe (AB7C5C3728A1B132444C69A31DA61541F2BF4B25).;BBD58248744300663A731B187009CCD9F3DBA061;3/26/2024 5:37:01 PM

复制代码

ESSP Execute 1x(AMSI)

Time;Scanner;Object type;Object;Detection;Action;User;Information;Hash;First seen here
3/26/2024 5:38:38 PM;AMSI scanner;file;script;a variant of MSIL/GenKryptik.GUIA trojan;blocked;LAPTOP\Fadouse;;5464F608297AAA3519AAACFA587B5A4EF276E644;

复制代码

[病毒样本] x5 (2024-03-26)

本帖子中包含更多资源

本帖子中包含更多资源

评分

评分

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源