#LummaStealer 1x

DisaPDB

1. 
   
2. 扫描内容
   
3. ----------------------
   
4. C:\Users\Administrator\Desktop\mal1\AbRoot.dll
   
5. C:\Users\Administrator\Desktop\mal1\AdTree.dll
   
6. C:\Users\Administrator\Desktop\mal1\ObjectDock.exe.config
   
7. C:\Users\Administrator\Desktop\mal1\SdAppServices_x64.dll
   
8. C:\Users\Administrator\Desktop\mal1\Setup.exe
   
9. C:\Users\Administrator\Desktop\mal1\tfbovu
   
10. C:\Users\Administrator\Desktop\mal1\ydb
    
11. 
    
12. 白名单设置
    
13. ----------------------
    
14. 
    
15. 扫描结果
    
16. ======================
    
17. 
    
18. 危险文件：4个
    
19. ----------------------------------------------------------------
    
20. C:\Users\Administrator\Desktop\mal1\ObjectDock.exe.config d2a735f9f8b0a9eaee60cfdfe8c3fe91 70,0,70,2000,256,1,100,0 ERT=2_0_0_1,11_100_2000_256 [云安全引擎][木马-Trojan.Generic][隔离文件][处理成功]
    
21. C:\Users\Administrator\Desktop\mal1\SdAppServices_x64.dll 3a41cea63705fdbdc8c0c7e509cfc7f3 70,3,70,2000,256,1,100,0 ERT=2_0_0_1,11_100_2000_256 [云安全引擎][木马-Trojan.Generic][隔离文件][处理成功]
    
22. C:\Users\Administrator\Desktop\mal1\tfbovu 330fe9d523acf5b76c3371ed1589689c 70,0,70,2000,256,1,100,0 ERT=2_0_0_1,11_100_2000_256 [云安全引擎][木马-Trojan.Generic][隔离文件][处理成功]
    
23. C:\Users\Administrator\Desktop\mal1\ydb 95bbad583595e36c2ef72dc15e0ba735 70,0,70,2000,256,1,100,0 ERT=2_0_0_1,11_100_2000_256 [云安全引擎][木马-Trojan.Generic][隔离文件][处理成功]

复制代码

360 全部拉黑 双击放行后照常拦截进程镂空。

心醉咖啡

金山毒霸扫描miss

安全测评

白加黑创建了choise.exe，然后再利用白进程启动和注入explorer.exe

biue

腾讯电脑管家 1X

yaokai815

瑞星 0x