FakeAPP 45X

hsks

I am watching you（bushi）
测样本之前记得改一下样本的名字（



突然想如果我加入了病毒测试组，每天发这类包，会不会劝退很多人（
估计传个几小时吧（
本期看点：msc downloader（
突然好奇这是不是真的0day（
https://f.ws59.cn/f/ektw847sx14
https://www.123pan.com/s/FJUmjv-CcqN.html
https://wormhole.app/zRd78#YkJTVdZWhbUmM-hw2496gw
https://share.weiyun.com/ykVc72LI
https://pan.huang1111.cn/s/5XB4BUl
https://pan.xiaomuxi.cn/s/QyLfM

ANY.LNK

微软解压+扫描结果

1. 2024-07-12T14:40:14.746Z Version: Product 4.18.24050.7 Service 4.18.24050.7 Engine 1.1.24060.5 AS 1.415.58.0 AV 1.415.58.0
   
2. 2024-07-12T16:40:28.067Z DETECTION Trojan:Win32/Malgent!MSR file:C:\Users\A.LINK\Downloads\7.12 (1)\HelloWorld(1).exe
   
3. 2024-07-12T16:40:29.360Z DETECTION Trojan:Script/Wacatac.B!ml file:C:\Users\A.LINK\Downloads\7.12 (1)\Fly[过滤].msi
   
4. 2024-07-12T16:40:43.555Z DETECTION Trojan:Win32/Fauppod!ml file:C:\Users\A.LINK\Downloads\7.12 (1)\Setup安装.msi
   
5. 2024-07-12T16:40:57.926Z DETECTION Trojan:Win32/Wacatac.B!ml file:C:\Users\A.LINK\Downloads\7.12 (1)\SignalSetup.exe
   
6. 2024-07-12T16:41:06.022Z DETECTION PUA:Win32/Softcnapp file:C:\Users\A.LINK\Downloads\7.12 (1)\helloworld.exe
   
7. 2024-07-12T16:41:15.549Z DETECTION Trojan:Win32/Wacatac.B!ml file:C:\Users\A.LINK\Downloads\7.12 (1)\aicoin-latestx64.exe
   
8. 2024-07-12T16:41:56.382Z DETECTION Program:Win32/Wacapew.C!ml file:C:\Users\A.LINK\Downloads\7.12 (1)\短信接码客户端-安装包.exe
   
9. 2024-07-12T16:42:12.817Z DETECTION Trojan:Win32/Wacatac.B!ml file:C:\Users\A.LINK\Downloads\7.12 (1)\quickq-setup.exe
   
10. 2024-07-12T16:56:06.788Z DETECTION Trojan:Win32/Malgent containerfile:C:\Users\A.LINK\Downloads\7.12 (1)\ToDesk-anzhuang.msi
    
11. 2024-07-12T16:56:06.788Z DETECTION Trojan:Win32/Malgent file:C:\Users\A.LINK\Downloads\7.12 (1)\ToDesk-anzhuang.msi->disk1.cab->__1
    
12. 2024-07-12T16:56:06.800Z DETECTION Trojan:Win32/Wacatac.B!ml containerfile:C:\Users\A.LINK\Downloads\7.12 (1)\letes-test.msi
    
13. 2024-07-12T16:56:06.800Z DETECTION Trojan:Win32/Wacatac.B!ml containerfile:C:\Users\A.LINK\Downloads\7.12 (1)\WPS Office_PPT_PDF-_WINX64_5.2.08.msi
    
14. 2024-07-12T16:56:06.800Z DETECTION Trojan:Win32/Wacatac.B!ml file:C:\Users\A.LINK\Downloads\7.12 (1)\letes-test.msi->disk1.cab->qbcore.dll
    
15. 2024-07-12T16:56:06.800Z DETECTION Trojan:Win32/Wacatac.B!ml file:C:\Users\A.LINK\Downloads\7.12 (1)\WPS Office_PPT_PDF-_WINX64_5.2.08.msi->_896E7F96EC599D44B23AC7FDD9C1FDBA->_4DDDF927E1934F22B9C3C5D130736586
    
16. 2024-07-12T16:56:06.819Z DETECTION Backdoor:Win32/Lotok.ASDN!MTB containerfile:C:\Users\A.LINK\Downloads\7.12 (1)\dz-xiuxiuX64-setup.msi
    
17. 2024-07-12T16:56:06.819Z DETECTION Backdoor:Win32/Lotok.ASDN!MTB containerfile:C:\Users\A.LINK\Downloads\7.12 (1)\i4Tools-Setup-Setup-installer-LDZ.msi
    
18. 2024-07-12T16:56:06.819Z DETECTION Backdoor:Win32/Lotok.ASDN!MTB file:C:\Users\A.LINK\Downloads\7.12 (1)\dz-xiuxiuX64-setup.msi->disk1.cab->instaddzer.exe
    
19. 2024-07-12T16:56:06.821Z DETECTION Backdoor:Win32/Lotok.ASDN!MTB file:C:\Users\A.LINK\Downloads\7.12 (1)\i4Tools-Setup-Setup-installer-LDZ.msi->disk1.cab->instaddzer.exe

复制代码

算了，如果双击的话，就找特定的文件吧，

目前进度，提取文件中……

hsks

真的会有人测吗

QVM360

不要在病毒测试组发太大的包
链接呢？

hsks

QVM360 发表于 2024-7-12 22:06
不要在病毒测试组发太大的包
链接呢？

正在传

御坂14857号

EIS开双潜均衡扫描kill 25x
云信誉一个都杀不了，未双击

biue

腾讯电脑管家 9X

hsks

QVM360 发表于 2024-7-12 22:06
不要在病毒测试组发太大的包
链接呢？

好了

DisaPDB

360 盲猜一手10以下 懒得双击了
果不其然

hsks

DisaPDB 发表于 2024-7-12 23:04
360 盲猜一手10以下 懒得双击了
果不其然

过不去的坎（