【开放测试】卡饭病毒样本包 20240715 第145期

1073328164

孤勇者 发表于 2024-7-15 20:38
miss样本发过来，我来上报

你不是测完了吗？直接把剩余样本报上去就行了

xcvbaby

毒霸安全终端:25X双击：0

Komeiji-Reimu

孤勇者 发表于 2024-7-15 20:38
miss样本发过来，我来上报

好的，目前是这些

https://ww0.lanzouj.com/iTANu24j9lfg

虽然卡巴支持因为我没花钱不理我，但是我发现在Opentip上重新上传进一步分析之后确实是有用，不过没有给我发邮件通知我，我之后改成gmai试试

Komeiji-Reimu

交流学习大猫咪 发表于 2024-7-15 20:45
MD+WOLF
下载被MD拦截，关闭MD后下载。
WOLF隔离了17个，然后开启MD后样本全部被清空。

wolf是什么，是惠普的杀毒软件吗

交流学习大猫咪

Komeiji-Reimu 发表于 2024-7-15 21:08
wolf是什么，是惠普的杀毒软件吗

是的，HP的杀毒软件，据说是OEM BD的。
https://bbs.kafan.cn/thread-2269662-1-1.html
https://bbs.kafan.cn/thread-2266338-1-1.html

hansyu

McAfee 扫描 28x+ 双击3x
missed 1x

孤勇者

Komeiji-Reimu 发表于 2024-7-15 21:04
好的，目前是这些

https://ww0.lanzouj.com/iTANu24j9lfg

我这边opentip也有回复，不过不多

孤勇者

1073328164 发表于 2024-7-15 20:59
你不是测完了吗？直接把剩余样本报上去就行了

密码忘了，白压缩了

Nocria

IKARUS - 28/32

1. [15.07.2024 21:45:01] On-demand scan started: "TemporaryScan {a39a5454-a251-4cfd-9c9c-ce1b7beb2872}"
   
2. [15.07.2024 21:45:01] Found, 0.00s, SigName: "Trojan.MSIL.Inject", SigId: 501438638, Type: "VIRUS", File: "C:\Users\promi\Desktop\32x (2024-07-15)\1\0178b79bd084c2597b2de4e62e61a88bb8359e4fcac2fe672bb887e0e52e5dbd.exe"
   
3. [15.07.2024 21:45:01] Found, 0.01s, SigName: "Trojan-PSW.Agent", SigId: 5442562, Type: "VIRUS", File: "C:\Users\promi\Desktop\32x (2024-07-15)\1\08b7620610fc30c54e5cc095a54ae6d2949f68b0f224c285283e1612c254ef65.exe"
   
4. [15.07.2024 21:45:01] Found, 0.05s, SigName: "Trojan-Ransom.LockBit", SigId: 5484172, Type: "VIRUS", File: "C:\Users\promi\Desktop\32x (2024-07-15)\1\0fb86a8ba8fdf57990c283080a671c1320cbcdfd0e8b5f5a250d9c38a6fce305.exe"
   
5. [15.07.2024 21:45:01] Found, 0.07s, SigName: "Trojan.Win32.Strab", SigId: 501624645, Type: "VIRUS", File: "C:\Users\promi\Desktop\32x (2024-07-15)\1\25898c73a877d87ba289bb4ab9585eb36eba9d27d47af678a86befdbf9aa938f.exe"
   
6. [15.07.2024 21:45:01] Found, 0.08s, SigName: "Trojan.Win32.Crypt", SigId: 501626425, Type: "VIRUS", File: "C:\Users\promi\Desktop\32x (2024-07-15)\1\2c2e949171d86da9b5c58901de2e4a99c4fe86fe92c47556f53b833ce77c503c.exe"
   
7. [15.07.2024 21:45:01] Found, 0.24s, SigName: "Trojan.Win32.Crypt", SigId: 501629334, Type: "VIRUS", File: "C:\Users\promi\Desktop\32x (2024-07-15)\1\2ef0f582367a7674aef245acb06977bf646419f1f8d05c7fb07881a6102f982e.exe"
   
8. [15.07.2024 21:45:01] Found, 0.34s, SigName: "Trojan-Spy.LummaStealer", SigId: 5487383, Type: "VIRUS", File: "C:\Users\promi\Desktop\32x (2024-07-15)\1\0e4fc438decc9723b89bd0e71b9ee30c1a8390e697d790b2d5ce96e94accd791.exe"
   
9. [15.07.2024 21:45:01] Found, 0.27s, SigName: "Trojan.Win32.Buzus", SigId: 3575040, Type: "VIRUS", File: "C:\Users\promi\Desktop\32x (2024-07-15)\1\39884fc02ed9a51ffcc9b298916be79307f15f1518b6ae2021dd07af0aeecb82.exe"
   
10. [15.07.2024 21:45:01] Found, 0.07s, SigName: "Trojan.MSIL.Agent", SigId: 5498852, Type: "VIRUS", File: "C:\Users\promi\Desktop\32x (2024-07-15)\1\3a72ecec34a29f53a1d73677a0e6f4c2e19087a32f1808f8f4ff643f62128d8a.exe"
    
11. [15.07.2024 21:45:01] Found, 0.05s, SigName: "Trojan.MSIL.Inject", SigId: 501624405, Type: "VIRUS", File: "C:\Users\promi\Desktop\32x (2024-07-15)\1\3bfcb4f798ba63a1d18887cb67c90e083d5561a58136a892bd9944528c707671.exe"
    
12. [15.07.2024 21:45:01] Found, 0.01s, SigName: "Trojan-Spy.MSIL.Redline", SigId: 5002524, Type: "VIRUS", File: "C:\Users\promi\Desktop\32x (2024-07-15)\1\4103411f7bb66a033f9f5ce35839ba08b2a27d169e188a911185790f3b78bbf5.exe"
    
13. [15.07.2024 21:45:01] Found, 0.01s, SigName: "Trojan.MSIL.Inject", SigId: 501435673, Type: "VIRUS", File: "C:\Users\promi\Desktop\32x (2024-07-15)\1\5297372fe85eea3ecc0d271b5567f2c7ee75bd3a04e745debddb04c9b05dae33.exe"
    
14. [15.07.2024 21:45:01] Found, 0.01s, SigName: "Trojan.Win32.Krypt", SigId: 501627335, Type: "VIRUS", File: "C:\Users\promi\Desktop\32x (2024-07-15)\1\68292f388207f8ec69774dbad429e67420881ce46ecfad55f23182ec3a8893e4.exe"
    
15. [15.07.2024 21:45:02] Found, 0.51s, SigName: "Trojan.Autoit", SigId: 5489483, Type: "VIRUS", File: "C:\Users\promi\Desktop\32x (2024-07-15)\1\0280cde4a65664a05361129dc1cfa10bc17b3fa9567103ce6eb9d07b06f8f160.exe"
    
16. [15.07.2024 21:45:02] Found, 0.12s, SigName: "Backdoor.AsyncRat", SigId: 5387450, Type: "VIRUS", File: "C:\Users\promi\Desktop\32x (2024-07-15)\1\7021c9cba6c224272f01d04450c6c31c93857a21feacfa4295a878a4d7b04378.exe"
    
17. [15.07.2024 21:45:02] Found, 0.01s, SigName: "Trojan.MSIL.Inject", SigId: 501622991, Type: "VIRUS", File: "C:\Users\promi\Desktop\32x (2024-07-15)\1\752f5cc5a7b0f986286d09e8288c0958bc1b798477ca0d09dc2658c7ab109060.exe"
    
18. [15.07.2024 21:45:02] Found, 0.07s, SigName: "Trojan-Spy.Keylogger.Snake", SigId: 5188733, Type: "VIRUS", File: "C:\Users\promi\Desktop\32x (2024-07-15)\1\97d29ffc3556069c807b5c0ae2e2b109ae329feafc912d64f8b7f437bea47d84.exe"
    
19. [15.07.2024 21:45:02] Found, 0.41s, SigName: "Trojan.Win32.Generic", SigId: 5282166, Type: "VIRUS", File: "C:\Users\promi\Desktop\32x (2024-07-15)\1\b13f23643fddce3f41b6908a00051b6688788668c81d698994c140bf6290c2d6.exe"
    
20. [15.07.2024 21:45:02] Found, 0.08s, SigName: "Trojan.BAT.AgentSetter", SigId: 501627224, Type: "VIRUS", File: "C:\Users\promi\Desktop\32x (2024-07-15)\1\b2a1d168dc4234e687d0969b6a1901ac7e69c0d4bb72a1a4c76ba67fa6a14f9d.bat"
    
21. [15.07.2024 21:45:02] Found, 0.03s, SigName: "Trojan.MSIL.Inject", SigId: 501623972, Type: "VIRUS", File: "C:\Users\promi\Desktop\32x (2024-07-15)\1\bb29aeb6ceecc37829b40e36f91a4620d7e0aae16b1ceea70bb70135e11172bd.exe"
    
22. [15.07.2024 21:45:02] Found, 0.01s, SigName: "Trojan.BAT.AgentSetter", SigId: 501627250, Type: "VIRUS", File: "C:\Users\promi\Desktop\32x (2024-07-15)\1\c8e5a24a6d2fa68d7976457a19576b381e6211202500af5280b0f3b256446bf5.bat"
    
23. [15.07.2024 21:45:02] Found, 0.02s, SigName: "Trojan.NSIS.Agent", SigId: 501626049, Type: "VIRUS", File: "C:\Users\promi\Desktop\32x (2024-07-15)\1\c9736cdc4ade9fddb9b293e0366f182f972154d98169b58e532b7905c310bf97.exe"
    
24. [15.07.2024 21:45:02] Found, 0.01s, SigName: "Trojan.MSIL.Inject", SigId: 501624204, Type: "VIRUS", File: "C:\Users\promi\Desktop\32x (2024-07-15)\1\d58780d1d574bfe77c6f9cfad1cf4b51522231b2699081befd5bbd15f7309aa0.exe"
    
25. [15.07.2024 21:45:03] Found, 0.63s, SigName: "Trojan-Dropper.Agent", SigId: 2773335, Type: "VIRUS", File: "C:\Users\promi\Desktop\32x (2024-07-15)\1\de19e0163af15585c305f845b90262aee3c2bdf037f9fc733d3f1b379d00edd0.exe"
    
26. [15.07.2024 21:45:03] Found, 0.63s, SigName: "Trojan.Win32.Crypt", SigId: 501626428, Type: "VIRUS", File: "C:\Users\promi\Desktop\32x (2024-07-15)\1\e886016e48bf0e3cd100d627678f345743509fd5f57f3c9b182f2833352bd451.exe"
    
27. [15.07.2024 21:45:03] Found, 0.02s, SigName: "Trojan.BAT.AgentSetter", SigId: 501627326, Type: "VIRUS", File: "C:\Users\promi\Desktop\32x (2024-07-15)\1\f0f496eccc61594c53ded581b6683a77072f607ab018ec0a770a0aa7c7f45ff4.bat"
    
28. [15.07.2024 21:45:03] Found, 0.01s, SigName: "Trojan-Ransom.LockBit", SigId: 5484172, Type: "VIRUS", File: "C:\Users\promi\Desktop\32x (2024-07-15)\1\f28599b06560617bccdfb56acc841f3e642ff51b9956632fcc4204f026711e23.exe"
    
29. [15.07.2024 21:45:04] Found, 2.64s, SigName: "Trojan.Win32.Crypt", SigId: 5503297, Type: "VIRUS", File: "C:\Users\promi\Desktop\32x (2024-07-15)\1\7c7cded8d1c0784881859ed03340d81c24ea9bf5d9972963cedf0e40b9856a0c.exe"
    
30. [15.07.2024 21:45:04] On-demand scan FINISHED: "TemporaryScan {a39a5454-a251-4cfd-9c9c-ce1b7beb2872}"
    
31. [15.07.2024 21:45:04] ----------------------------------------------------
    
32. [15.07.2024 21:45:04] Directories scanned: 2
    
33. [15.07.2024 21:45:04] Files scanned: 32
    
34. [15.07.2024 21:45:04] Virus found: 28
    
35. [15.07.2024 21:45:04] ----------------------------------------------------
    

复制代码

________________________________________

EMSISOFT - 17/32

1. Emsisoft Anti-Malware - Version 2024.7
   
2. Last update: 2024/7/15 21:43:46
   
3. 
   
4. Scan settings:
   
5. 
   
6. Scan type: Custom Scan
   
7. Objects: C:\Users\promi\Desktop\32x (2024-07-15)
   
8. 
   
9. Detect PUPs: On
   
10. Scan archives: On
    
11. Scan mail archives: Off
    
12. ADS Scan: On
    
13. 
    
14. Scan start:        2024/7/15 21:47:26
    
15. C:\Users\promi\Desktop\32x (2024-07-15)\1\0fb86a8ba8fdf57990c283080a671c1320cbcdfd0e8b5f5a250d9c38a6fce305.exe         detected: Trojan.Ransom.PIC (B) [krnl.xmd]
    
16. C:\Users\promi\Desktop\32x (2024-07-15)\1\0280cde4a65664a05361129dc1cfa10bc17b3fa9567103ce6eb9d07b06f8f160.exe         detected: Trojan.Generic.36536648 (B) [krnl.xmd]
    
17. C:\Users\promi\Desktop\32x (2024-07-15)\1\0178b79bd084c2597b2de4e62e61a88bb8359e4fcac2fe672bb887e0e52e5dbd.exe         detected: Trojan.GenericKD.73487917 (B) [krnl.xmd]
    
18. C:\Users\promi\Desktop\32x (2024-07-15)\1\08b7620610fc30c54e5cc095a54ae6d2949f68b0f224c285283e1612c254ef65.exe         detected: Gen:Variant.Zusy.546982 (B) [krnl.xmd]
    
19. C:\Users\promi\Desktop\32x (2024-07-15)\1\39884fc02ed9a51ffcc9b298916be79307f15f1518b6ae2021dd07af0aeecb82.exe         detected: Trojan.Ransom.LockBit.L (B) [krnl.xmd]
    
20. C:\Users\promi\Desktop\32x (2024-07-15)\1\3a72ecec34a29f53a1d73677a0e6f4c2e19087a32f1808f8f4ff643f62128d8a.exe         detected: Gen:Variant.Jalapeno.640 (B) [krnl.xmd]
    
21. C:\Users\promi\Desktop\32x (2024-07-15)\1\4103411f7bb66a033f9f5ce35839ba08b2a27d169e188a911185790f3b78bbf5.exe         detected: Gen:Variant.Ransom.Samas.1 (B) [krnl.xmd]
    
22. C:\Users\promi\Desktop\32x (2024-07-15)\1\5297372fe85eea3ecc0d271b5567f2c7ee75bd3a04e745debddb04c9b05dae33.exe         detected: Trojan.GenericKD.73488429 (B) [krnl.xmd]
    
23. C:\Users\promi\Desktop\32x (2024-07-15)\1\7021c9cba6c224272f01d04450c6c31c93857a21feacfa4295a878a4d7b04378.exe         detected: Trojan.Agent (A) [313818]
    
24. C:\Users\promi\Desktop\32x (2024-07-15)\1\6da4696b804777582ae586a4e9f42f6c18ccf540222d70dcf3374ee291e674e5.exe         detected: Trojan.Generic.36525039 (B) [krnl.xmd]
    
25. C:\Users\promi\Desktop\32x (2024-07-15)\1\68292f388207f8ec69774dbad429e67420881ce46ecfad55f23182ec3a8893e4.exe         detected: Gen:Heur.Kysler.1 (B) [krnl.xmd]
    
26. C:\Users\promi\Desktop\32x (2024-07-15)\1\97d29ffc3556069c807b5c0ae2e2b109ae329feafc912d64f8b7f437bea47d84.exe         detected: Trojan.GenericKD.73495800 (B) [krnl.xmd]
    
27. C:\Users\promi\Desktop\32x (2024-07-15)\1\b13f23643fddce3f41b6908a00051b6688788668c81d698994c140bf6290c2d6.exe         detected: Trojan.GenericKD.72984579 (B) [krnl.xmd]
    
28. C:\Users\promi\Desktop\32x (2024-07-15)\1\c8e5a24a6d2fa68d7976457a19576b381e6211202500af5280b0f3b256446bf5.bat         detected: Trojan.GenericKD.73464835 (B) [krnl.xmd]
    
29. C:\Users\promi\Desktop\32x (2024-07-15)\1\de19e0163af15585c305f845b90262aee3c2bdf037f9fc733d3f1b379d00edd0.exe         detected: Trojan.Patched.BU (B) [krnl.xmd]
    
30. C:\Users\promi\Desktop\32x (2024-07-15)\1\f0f496eccc61594c53ded581b6683a77072f607ab018ec0a770a0aa7c7f45ff4.bat         detected: Trojan.GenericKD.73461860 (B) [krnl.xmd]
    
31. C:\Users\promi\Desktop\32x (2024-07-15)\1\f28599b06560617bccdfb56acc841f3e642ff51b9956632fcc4204f026711e23.exe         detected: Trojan.Ransom.PIC (B) [krnl.xmd]
    
32. 
    
33. Scanned        156
    
34. Found        17
    
35. Scanning files... Done!
    
36. 
    
37. Scan end:        2024/7/15 21:47:32
    
38. Scan time:        0:00:06
    
39. 
    
40. C:\Users\promi\Desktop\32x (2024-07-15)\1\f28599b06560617bccdfb56acc841f3e642ff51b9956632fcc4204f026711e23.exe        Deleted: Trojan.Ransom.PIC (B)
    
41. C:\Users\promi\Desktop\32x (2024-07-15)\1\f0f496eccc61594c53ded581b6683a77072f607ab018ec0a770a0aa7c7f45ff4.bat        Deleted: Trojan.GenericKD.73461860 (B)
    
42. C:\Users\promi\Desktop\32x (2024-07-15)\1\de19e0163af15585c305f845b90262aee3c2bdf037f9fc733d3f1b379d00edd0.exe        Deleted: Trojan.Patched.BU (B)
    
43. C:\Users\promi\Desktop\32x (2024-07-15)\1\c8e5a24a6d2fa68d7976457a19576b381e6211202500af5280b0f3b256446bf5.bat        Deleted: Trojan.GenericKD.73464835 (B)
    
44. C:\Users\promi\Desktop\32x (2024-07-15)\1\b13f23643fddce3f41b6908a00051b6688788668c81d698994c140bf6290c2d6.exe        Deleted: Trojan.GenericKD.72984579 (B)
    
45. C:\Users\promi\Desktop\32x (2024-07-15)\1\97d29ffc3556069c807b5c0ae2e2b109ae329feafc912d64f8b7f437bea47d84.exe        Deleted: Trojan.GenericKD.73495800 (B)
    
46. C:\Users\promi\Desktop\32x (2024-07-15)\1\68292f388207f8ec69774dbad429e67420881ce46ecfad55f23182ec3a8893e4.exe        Deleted: Gen:Heur.Kysler.1 (B)
    
47. C:\Users\promi\Desktop\32x (2024-07-15)\1\6da4696b804777582ae586a4e9f42f6c18ccf540222d70dcf3374ee291e674e5.exe        Deleted: Trojan.Generic.36525039 (B)
    
48. C:\Users\promi\Desktop\32x (2024-07-15)\1\7021c9cba6c224272f01d04450c6c31c93857a21feacfa4295a878a4d7b04378.exe        Deleted: Trojan.Agent (A)
    
49. C:\Users\promi\Desktop\32x (2024-07-15)\1\5297372fe85eea3ecc0d271b5567f2c7ee75bd3a04e745debddb04c9b05dae33.exe        Deleted: Trojan.GenericKD.73488429 (B)
    
50. C:\Users\promi\Desktop\32x (2024-07-15)\1\4103411f7bb66a033f9f5ce35839ba08b2a27d169e188a911185790f3b78bbf5.exe        Deleted: Gen:Variant.Ransom.Samas.1 (B)
    
51. C:\Users\promi\Desktop\32x (2024-07-15)\1\3a72ecec34a29f53a1d73677a0e6f4c2e19087a32f1808f8f4ff643f62128d8a.exe        Deleted: Gen:Variant.Jalapeno.640 (B)
    
52. C:\Users\promi\Desktop\32x (2024-07-15)\1\39884fc02ed9a51ffcc9b298916be79307f15f1518b6ae2021dd07af0aeecb82.exe        Deleted: Trojan.Ransom.LockBit.L (B)
    
53. C:\Users\promi\Desktop\32x (2024-07-15)\1\08b7620610fc30c54e5cc095a54ae6d2949f68b0f224c285283e1612c254ef65.exe        Deleted: Gen:Variant.Zusy.546982 (B)
    
54. C:\Users\promi\Desktop\32x (2024-07-15)\1\0178b79bd084c2597b2de4e62e61a88bb8359e4fcac2fe672bb887e0e52e5dbd.exe        Deleted: Trojan.GenericKD.73487917 (B)
    
55. C:\Users\promi\Desktop\32x (2024-07-15)\1\0280cde4a65664a05361129dc1cfa10bc17b3fa9567103ce6eb9d07b06f8f160.exe        Deleted: Trojan.Generic.36536648 (B)
    
56. C:\Users\promi\Desktop\32x (2024-07-15)\1\0fb86a8ba8fdf57990c283080a671c1320cbcdfd0e8b5f5a250d9c38a6fce305.exe        Deleted: Trojan.Ransom.PIC (B)
    
57. 
    
58. Deleted:        17

复制代码