【开放测试】卡饭病毒样本包 第133期

神龟Turmi

样本下载：
https://share.weiyun.com/MaKBTKFH
https://k00.fr/ext494w5 | password: kafanm


样本数量：16
压缩包密码：infected

回帖格式不作要求

1094947421

华为9x

keen-qv

金山毒霸  4个

UNknownOoo

火绒5
扫描：8x

1. 扫描文件：16
   
2. 发现风险：8
   
3. 已处理风险：0
   
4. 病毒详情：
   
5. 风险路径：C:\Users\UnknownOoo\Downloads\Compressed\KF-133\TS-240623-08-Gh0stRAT.exe, 病毒名：Backdoor/Lotok.fs, 病毒ID：c284ccde13f78515, 处理结果：暂不处理
   
6. 风险路径：C:\Users\UnknownOoo\Downloads\Compressed\KF-133\TS-240623-09-CobaltStrike.exe, 病毒名：Trojan/ShellLoader.lz, 病毒ID：30969e48472e8357, 处理结果：暂不处理
   
7. 风险路径：C:\Users\UnknownOoo\Downloads\Compressed\KF-133\TS-240623-05-BlankGrabber.exe, 病毒名：Trojan/Python.ShellLoader.bj, 病毒ID：01c0753498629713, 处理结果：暂不处理
   
8. 风险路径：C:\Users\UnknownOoo\Downloads\Compressed\KF-133\TS-240623-06-UnknownStealer.exe, 病毒名：TrojanSpy/Python.Stealer.a, 病毒ID：ba3167efed338e68, 处理结果：暂不处理
   
9. 风险路径：C:\Users\UnknownOoo\Downloads\Compressed\KF-133\TS-240623-01-Creal.exe, 病毒名：TrojanSpy/Python.Stealer.p, 病毒ID：fe967f045e029b23, 处理结果：暂不处理
   
10. 风险路径：C:\Users\UnknownOoo\Downloads\Compressed\KF-133\TS-240623-03-Skuld.exe, 病毒名：TrojanSpy/Stealer.bp, 病毒ID：9ba9ecba85563484, 处理结果：暂不处理
    
11. 风险路径：C:\Users\UnknownOoo\Downloads\Compressed\KF-133\TS-240623-15-MetaSploit.exe, 病毒名：HVM:Trojan/Swrort.gen!A, 病毒ID：d6e29035d2489e60, 处理结果：暂不处理
    
12. 风险路径：C:\Users\UnknownOoo\Downloads\Compressed\KF-133\TS-240623-02-Empyrean.exe, 病毒名：TrojanSpy/Python.Stealer.f, 病毒ID：714b9da4a5f68218, 处理结果：暂不处理

复制代码

X-Sec
扫描：10x

1. ---------------------
   
2. 2024/06/23 17:14:22 Threat Detected: C:\Users\UnknownOoo\Downloads\Compressed\KF-133\TS-240623-01-Creal.exe -- [rame-classic] Stealer.Agent/PYC!1.F693
   
3. 2024/06/23 17:14:25 Threat Detected: C:\Users\UnknownOoo\Downloads\Compressed\KF-133\TS-240623-02-Empyrean.exe -- [rame-classic] Stealer.Empyrean/PYC!1.EACF
   
4. 2024/06/23 17:14:26 Threat Detected: C:\Users\UnknownOoo\Downloads\Compressed\KF-133\TS-240623-03-Skuld.exe -- [rame-classic] Trojan.Agent!1.F707
   
5. 2024/06/23 17:14:27 Threat Detected: C:\Users\UnknownOoo\Downloads\Compressed\KF-133\TS-240623-05-BlankGrabber.exe -- [rame-classic] Spyware.Agent/PYC!1.EA8F
   
6. 2024/06/23 17:14:31 Threat Detected: C:\Users\UnknownOoo\Downloads\Compressed\KF-133\TS-240623-06-UnknownStealer.exe -- [rame-cloud] Trojan.Kryptik!8.8
   
7. 2024/06/23 17:14:32 Threat Detected: C:\Users\UnknownOoo\Downloads\Compressed\KF-133\TS-240623-09-CobaltStrike.exe -- [rame-cloud] Trojan.Rozena!8.6D
   
8. 2024/06/23 17:14:34 Threat Detected: C:\Users\UnknownOoo\Downloads\Compressed\KF-133\TS-240623-11-Lumma.exe -- [rame-tfe] Stealer.Convagent!8.1326D
   
9. 2024/06/23 17:14:42 Threat Detected: C:\Users\UnknownOoo\Downloads\Compressed\KF-133\TS-240623-14-AsyncRAT.exe -- [rame-cloud] Trojan.AsyncRAT!8.197DF
   
10. 2024/06/23 17:14:44 Threat Detected: C:\Users\UnknownOoo\Downloads\Compressed\KF-133\TS-240623-08-Gh0stRAT.exe -- [rame-tfe] Backdoor.Agent!8.C5D
    
11. 2024/06/23 17:14:46 Threat Detected: C:\Users\UnknownOoo\Downloads\Compressed\KF-133\TS-240623-16-Sliver.elf -- [rame-classic] Backdoor.Sliver!1.FCA0

复制代码

hansyu

ESSP 解压 12x missed 4x
剩余的4个 ELG一个都没检出来，全是安全。

StarlitFuture

COMODO 2025 MISS ALL（大部分似乎都没跑起来）

莒县小哥

wd杀13枚

Eset小粉絲

Kaspersky 13/16

DisaPDB

编辑，取消测试