#APT #APT-C-08 #Bitter #蔓灵花 CHM 样本 5X

Shake2333

eset kill all

利刀1937

761773275

利刀1937 发表于 2024-8-7 12:40

好傢伙，ESET的庫

tihs

华为 金山毒霸 扫描双击miss


BD
Bitdefender 偵測到潛在惡意行為並封鎖所有相關應用程式。
偵測識別碼：SuspiciousBehavior.7325E3897E3582F5

TianTIng

奇安信 kill all 5x

inhh1

761773275 发表于 2024-8-7 13:19
好傢伙，ESET的庫

没有，ThreatBook什么都敢抄，之前还出来过Wacatec!ml这种WD的报法

骨灰级小白

实机，毛豆扫描全MISS双击全入沙

Nocria

IKARUS emptied.

1. [07.08.2024 14:26:18] On-demand scan started"TemporaryScan"
   
2. [07.08.2024 14:26:18] Found, 0.01s, SigName: "Trojan-Downloader.HTML.Agent", SigId: 5507967, Type: "VIRUS", File: "C:\Users\promi\Desktop\files\files\Official Letter Head - Beijing.chm"
   
3. [07.08.2024 14:26:18] Found, 0.01s, SigName: "Trojan-Downloader.HTML.Agent", SigId: 5507967, Type: "VIRUS", File: "C:\Users\promi\Desktop\files\files\Official Letter Head - Beijing_old.chm"
   
4. [07.08.2024 14:26:18] Found, 0.01s, SigName: "Trojan-Downloader.HTML.Agent", SigId: 5548560, Type: "VIRUS", File: "C:\Users\promi\Desktop\files\files\Meeting-Invite-For-RSVP_Ref54766.chm"
   
5. [07.08.2024 14:26:18] Found, 0.01s, SigName: "Trojan-Downloader.HTML.Agent", SigId: 5507967, Type: "VIRUS", File: "C:\Users\promi\Desktop\files\files\Policy Updates -2024.chm"
   
6. [07.08.2024 14:26:18] Found, 0.02s, SigName: "Trojan-Downloader.HTML.Agent", SigId: 5507967, Type: "VIRUS", File: "C:\Users\promi\Desktop\files\files\Policy Changes Review.chm"
   
7. [07.08.2024 14:26:18] On-demand scan FINISHED: "TemporaryScan"
   
8. [07.08.2024 14:26:18] ----------------------------------------------------
   
9. [07.08.2024 14:26:18] Directories scanned: 2
   
10. [07.08.2024 14:26:18] Files scanned: 5
    
11. [07.08.2024 14:26:18] Virus found: 5
    
12. [07.08.2024 14:26:18] ----------------------------------------------------
    

复制代码

利刀1937

761773275 发表于 2024-8-7 13:19
好傢伙，ESET的庫

抄好像还没抄全，ESET报了5个，微步就报了4个，都是同样的病毒，

761773275

利刀1937 发表于 2024-8-7 14:58
抄好像还没抄全，ESET报了5个，微步就报了4个，都是同样的病毒，

ESET是入庫殺，微步這個是拉黑