8x（6.27）

QVM360

哪来的这么多高质量样本，可以告诉我吗

likexcm

火绒1x

likexcm

数字 2x
剩余双击未杀
已上传

likexcm

瑞星ESM 3x
双击清除 1x：2024po.exe

momli

华为and天守

微信

McAfee 扫描3X

驭龙

ESET杀四个，监控云杀一个
Log
Scan Log
Version of detection engine: 29464P (20240627)
Date: 2024/6/27  Time: 21:14:02
Scanned disks, folders and files: D:\virus\8x
D:\virus\8x\[D]2024年移动合作方人员出入管理门禁安装程序.exe - ML/Augur trojan - cleaned by deleting [1]
D:\virus\8x\test.exe » CONFUSEREX » deobfuscated.exe - ML/Augur trojan - cleaned by deleting [1]
D:\virus\8x\最新系统上线对接材料信息_1282137129312371283.exe - a variant of Win64/Agent.DYU trojan - cleaned by deleting [1]
D:\virus\8x\点击此处安装语言包.exe - a variant of Win32/Agent.BO potentially unwanted application - action selection postponed until scan completion
D:\virus\8x\点击此处安装语言包.exe - a variant of Win32/Agent.BO potentially unwanted application - deleted
Number of scanned objects: 19
Number of detections: 4
Number of cleaned objects: 4
Time of completion: 21:14:57  Total scanning time: 55 sec (00:00:55)

2024/6/27 21:16:51;D:\virus\8x\深圳市市场监督管理局拟录用人员-关于李振被录用的一些疑问-准考证号：555026300316.exe
1.2 MB
Suspicious Object
D8A397385F2650D9E3BF1486CF76B13EAC435F54

东南大学

CS杀3余5

1. 2024po.exe
   
2. 最新系统上线对接材料信息_1282137129312371283.exe
   
3. 点击此处安装语言包.exe
   
4. 票925452362131助手.exe
   
5. 考勤异常信息统计结果查询工具.exe

复制代码

BitterLotus

BEST 1+3 = 4x

1. HyperDetect 机器学习检测到威胁. 文件已删除。C:\Users\Desktop\8x\test.exe 是恶意软件 Gen:Illusion.Wrangler.Sabr.1.2.1010200
   
2. 
   
3. 高级威胁防护阻止了一个恶意进程。进程路径: C:\Users\Desktop\8x\2024po.exe. 威胁名称: ATC.Generic.ShellCode.Donut.Marte.4.059A45D3.
   
4. 高级威胁防护阻止了一个恶意进程。进程路径: C:\Users\Desktop\8x\点击此处安装语言包.exe. 威胁名称: ATC.AI:Upatre.45841.6494C9BB1F.
   
5. 高级威胁防护阻止了一个恶意进程。进程路径: C:\Users\Desktop\8x\最新系统上线对接材料信息_1282137129312371283.exe. 威胁名称: ATC.SuspiciousBehavior.26070F692CF995B6.

复制代码

DeepInstinct 3+3 = 6x

杀衍生物：

1. 最新系统上线对接材料信息_1282137129312371283.exe
   
2. 点击此处安装语言包.exe

复制代码

剩下两个不知道跑起来没有

likexcm

AnhLab 0x
Clamav 0x
AnhLab扫描时占用了大量上行去上传未知文件，应该很快就会发现