银狐木马样本包 16X

不知起什么名

火绒 all
全部为HVM:TrojanDownloader/Lotok.aa报法

tjsh

火绒 动启All
河众 机器学习3x

傻猪猪米走鸡

ESET 6x


Time;Scanner;Object type;Object;Detection;Action;User;Information;Hash;First seen here
8/1/2024 3:22:56 PM;Real-time file system protection;file;C:\Users\alphabutt\Downloads\银狐木马样本包 16X\5febdaa6b5baf6fa915f5149d6eb9d8e\setup文书终端.exe;a variant of Win64/Agent_AGen.CAH trojan;cleaned by deleting;GALAXYFC24\alphabutt;Event occurred on a new file created by the application: C:\Program Files\7-Zip\7zG.exe (389C3269A14EA4F7C8446CB22F75C98525D946AD).;A7C85566B165DB36CE5F5B4E3B5315F44B4CD6C5;8/1/2024 3:22:50 PM
8/1/2024 3:23:01 PM;Real-time file system protection;file;C:\Users\alphabutt\Downloads\银狐木马样本包 16X\67dccbf4fac398b33048871eba45ca3e\2024_Setup.exe;a variant of Win64/Agent_AGen.CAH trojan;cleaned by deleting;GALAXYFC24\alphabutt;Event occurred on a new file created by the application: C:\Program Files\7-Zip\7zG.exe (389C3269A14EA4F7C8446CB22F75C98525D946AD).;7A7308B116A81A23ADBBCE6F9F9F9A1FDAE96EC9;8/1/2024 3:22:50 PM
8/1/2024 3:23:03 PM;Real-time file system protection;file;C:\Users\alphabutt\Downloads\银狐木马样本包 16X\83a9902b57503732abde1abc5ffaa0f3\XLS_Setup-5.exe;a variant of Win64/Agent_AGen.CAH trojan;cleaned by deleting;GALAXYFC24\alphabutt;Event occurred on a new file created by the application: C:\Program Files\7-Zip\7zG.exe (389C3269A14EA4F7C8446CB22F75C98525D946AD).;F22E54E81F5802E796C35D9C9E8F5B27E970F2BD;8/1/2024 3:22:50 PM
8/1/2024 3:23:06 PM;Real-time file system protection;file;C:\Users\alphabutt\Downloads\银狐木马样本包 16X\fd882dc17175e7de4dec6ef3bc641a7c\swc_13.0.0.2007_setup.exe;a variant of Win64/Agent_AGen.CAH trojan;cleaned by deleting;GALAXYFC24\alphabutt;Event occurred on a new file created by the application: C:\Program Files\7-Zip\7zG.exe (389C3269A14EA4F7C8446CB22F75C98525D946AD).;50798B4AD248236FA3DF5DF73455929F95630EEC;8/1/2024 3:22:50 PM
8/1/2024 3:23:08 PM;Real-time file system protection;file;C:\Users\alphabutt\Downloads\银狐木马样本包 16X\a87b464667e67dd226e8ae5e9dc00ba0\202407MD_setup.exe;a variant of Win64/Agent_AGen.CAH trojan;cleaned by deleting;GALAXYFC24\alphabutt;Event occurred on a new file created by the application: C:\Program Files\7-Zip\7zG.exe (389C3269A14EA4F7C8446CB22F75C98525D946AD).;B434B6AADF8DA0E1E0A5E116DD3B95E05F53AFD2;8/1/2024 3:22:50 PM
8/1/2024 3:23:13 PM;Real-time file system protection;file;C:\Users\alphabutt\Downloads\银狐木马样本包 16X\ee8885ea6f54389428ba3005d954cff9\2024_Setup.exe;a variant of Win64/Agent_AGen.CAH trojan;cleaned by deleting;GALAXYFC24\alphabutt;Event occurred on a new file created by the application: C:\Program Files\7-Zip\7zG.exe (389C3269A14EA4F7C8446CB22F75C98525D946AD).;42E9666AFBD7E261668CF792610225B9BEDE6E7D;8/1/2024 3:22:50 PM

ANY.LNK

微软目前仅解压+扫描0

keen-qv

00006666 发表于 2024-8-1 08:19
银狐木马一直都是国外杀软克星，静态免杀极强

也是国内杀软克星好吧，哈哈，我就没见过几次国内杀软能杀的，倒是国外eset查杀银狐能力不错

00006666

keen-qv 发表于 2024-8-1 15:50
也是国内杀软克星好吧，哈哈，我就没见过几次国内杀软能杀的，倒是国外eset查杀银狐能力不错

国内杀软会好一点，天天见到银狐，很多已经有做针对处理

inhh1

keen-qv 发表于 2024-8-1 15:50
也是国内杀软克星好吧，哈哈，我就没见过几次国内杀软能杀的，倒是国外eset查杀银狐能力不错

360拉黑快（

00006666

inhh1 发表于 2024-8-1 15:51
360拉黑快（

这个版本银狐，喜欢膨胀体积，QVM202专门报这种的，膨胀过头了就会被QVM报毒，我看前面回复，一半都是QVM报的

1073328164

keen-qv 发表于 2024-8-1 15:50
也是国内杀软克星好吧，哈哈，我就没见过几次国内杀软能杀的，倒是国外eset查杀银狐能力不错

不过这次这个样本包好像国内杀软响应更快，ESET一开始就检出了一个，自然扫描成绩不代表实际防护能力就是

keen-qv

心醉咖啡 发表于 2024-8-1 07:26
金山毒霸

毒霸下午四点扫描 4个，比一扫还少了一个，哈哈哈。剩余已反馈