【开放测试】卡饭病毒样本包 20241108 第186期

shakeroneal

ESM信创解压+扫描kill 10X，剩余18X1, 2024-11-08 15:44:47, /home/thtf/音乐/infected20241108/75530bc6d82bcce7a0f36f3f707597f3ed060099971f3ca158754b9b75a5a6d9.msi>>!_StringData, Trojan.Runner/VBS!1.10528, 自定义查杀, 1731051862, 木马, 清除;
2, 2024-11-08 15:44:42, /home/thtf/音乐/infected20241108/0d898ef9bf140debb77ed147446e38f49275c0fba6c712df30fbb0e9b5fd74d6.msi>>!_StringData, Trojan.Runner/VBS!1.10528, 自定义查杀, 1731051862, 木马, 清除;
3, 2024-11-08 15:44:36, /home/thtf/音乐/infected20241108/4f64451c2511e27839dfb9107563bd00b9d56c109aff4f9d9c25479a103ff7e6.xlsx>>xl/externalLinks/externalLink1.xml, Exploit.DDEExec/OFFICE!1.ADFB, 自定义查杀, 1731051862, 病毒, 清除;
4, 2024-11-08 15:43:44, /home/thtf/音乐/infected20241108/e2305cd89df6e5a5c83dd60ceb1626f8b21902f9e80a57ad632e663a00c9ec27.exe>>A-CABINET-409>>si046773.exe, Trojan.ShellCodeRunner!1.F244, 文件监控, 1730940104, 木马, 清除;
5, 2024-11-08 15:43:44, /home/thtf/音乐/infected20241108/e2305cd89df6e5a5c83dd60ceb1626f8b21902f9e80a57ad632e663a00c9ec27.exe>>A-CABINET-409>>un509302.exe>>A-CABINET-409>>rk016801.exe, Spyware.Redline!8.1309C, 文件监控, 1730940104, 木马, 清除;
6, 2024-11-08 15:43:44, /home/thtf/音乐/infected20241108/e2305cd89df6e5a5c83dd60ceb1626f8b21902f9e80a57ad632e663a00c9ec27.exe>>A-CABINET-409>>un509302.exe>>A-CABINET-409>>un021064.exe>>A-CABINET-409>>qu201833.exe, Trojan.ShellCodeRunner!1.F244, 文件监控, 1730940104, 木马, 清除;
7, 2024-11-08 15:43:44, /home/thtf/音乐/infected20241108/e2305cd89df6e5a5c83dd60ceb1626f8b21902f9e80a57ad632e663a00c9ec27.exe>>A-CABINET-409>>un509302.exe>>A-CABINET-409>>un021064.exe>>A-CABINET-409>>pr677527.exe, Trojan.ShellCodeRunner!1.F244, 文件监控, 1730940104, 木马, 清除;
8, 2024-11-08 15:43:28, /home/thtf/音乐/infected20241108/b7c5aa78574c544298235266f7dffcaff0b1e8d1ebe954b21419da84409f3576.exe>>A-CABINET-409>>465490573.exe, Trojan.Kryptik!1.E4D1, 文件监控, 1730940104, 木马, 清除;
9, 2024-11-08 15:43:28, /home/thtf/音乐/infected20241108/b7c5aa78574c544298235266f7dffcaff0b1e8d1ebe954b21419da84409f3576.exe>>A-CABINET-409>>De053912.exe>>A-CABINET-409>>303191083.exe, Downloader.Deyma!8.1093B, 文件监控, 1730940104, 木马, 清除;
10, 2024-11-08 15:43:28, /home/thtf/音乐/infected20241108/b7c5aa78574c544298235266f7dffcaff0b1e8d1ebe954b21419da84409f3576.exe>>A-CABINET-409>>De053912.exe>>A-CABINET-409>>Gu610776.exe>>A-CABINET-409>>280067371.exe, Trojan.Kryptik!1.E4D1, 文件监控, 1730940104, 木马, 清除;
11, 2024-11-08 15:43:27, /home/thtf/音乐/infected20241108/ab7eaf46d8291c84ee6db67c5798236b2d008b2891fde304733a8493f407dbd1.exe, Trojan.Kryptik!1.E370, 文件监控, 1730940104, 木马, 清除;
12, 2024-11-08 15:43:27, /home/thtf/音乐/infected20241108/a4e98da4183d53bd56f3d43db9296691df2872b586738f94a09a6350618c5bb9.exe>>A-CABINET-409>>dSgnY63.exe, Trojan.ShellCodeRunner!1.F244, 文件监控, 1730940104, 木马, 清除;
13, 2024-11-08 15:43:27, /home/thtf/音乐/infected20241108/a4e98da4183d53bd56f3d43db9296691df2872b586738f94a09a6350618c5bb9.exe>>A-CABINET-409>>tice3417.exe>>A-CABINET-409>>c91HF65.exe, Trojan.ShellCodeRunner!1.F244, 文件监控, 1730940104, 木马, 清除;
14, 2024-11-08 15:43:27, /home/thtf/音乐/infected20241108/a4e98da4183d53bd56f3d43db9296691df2872b586738f94a09a6350618c5bb9.exe>>A-CABINET-409>>tice3417.exe>>A-CABINET-409>>b6986KO.exe, Trojan.Disabler!8.B58, 文件监控, 1730940104, 木马, 清除;
15, 2024-11-08 15:43:27, /home/thtf/音乐/infected20241108/9b6513c282471d14987262c82d374990b1e4eb768edc7f3deeaea455460f3c28.exe, Trojan.ShellCodeRunner!1.F244, 文件监控, 1730940104, 木马, 清除;
16, 2024-11-08 15:43:26, /home/thtf/音乐/infected20241108/886b30581422564abf853a8b8cc69bfb54f7ff4003a23da7cd234e8fa9086dac.exe>>A-CABINET-409>>ziiB1462.exe>>A-CABINET-409>>kp917092.exe, Trojan.Kryptik!1.E4D1, 文件监控, 1730940104, 木马, 清除;
17, 2024-11-08 15:43:26, /home/thtf/音乐/infected20241108/886b30581422564abf853a8b8cc69bfb54f7ff4003a23da7cd234e8fa9086dac.exe>>A-CABINET-409>>ziiB1462.exe>>A-CABINET-409>>it008176.exe, Trojan.Disabler!8.B58, 文件监控, 1730940104, 木马, 清除;
18, 2024-11-08 15:43:26, /home/thtf/音乐/infected20241108/6ee58be9c45d2dde9b0ed9cf3839a3b2b42b98aaac5b6f0b1d959102abea6143.exe>>A-CABINET-409>>i9369849.exe, Downloader.Deyma!8.1093B, 文件监控, 1730940104, 木马, 清除;
19, 2024-11-08 15:43:26, /home/thtf/音乐/infected20241108/6ee58be9c45d2dde9b0ed9cf3839a3b2b42b98aaac5b6f0b1d959102abea6143.exe>>A-CABINET-409>>x0046453.exe>>A-CABINET-409>>h5234076.exe, Trojan.Disabler!8.B58, 文件监控, 1730940104, 木马, 清除;
20, 2024-11-08 15:43:25, /home/thtf/音乐/infected20241108/52e24f63eb5333c50be7274f75f8bd2672abbebacded171bb597f7a941f80c3a.exe, Trojan.Amadey!8.11DFB, 文件监控, 1730940104, 木马, 清除;
21, 2024-11-08 15:43:23, /home/thtf/音乐/infected20241108/2ba9d9c410468afd5e63f7b1c8bc842d3a518e2fe425fcd4564500ec24151ec1.exe, Malware.Lmir!8.E96A, 文件监控, 1730940104, 病毒, 清除;

麒麟安全中心扫描剩余18X，kill7X

总剩余11X

1094947421

华为仅扫描26x



管家mini 16x

玛姆库特

（EIS+智量）实机，EIS扫描，剩下6x，3个xls测不了，其他双击
a398197c7a24b3d78255e8a7098efb8134e248dd838782996ac95589658e6841.msi 智量终止衍生，EIS拉黑主体。
a59d8dd20da457473a30a69c890a3689d0bfe8de3f2fd6cdf2007143e71cee32.msi 智量允许一堆弹窗，EIS杀衍生。
c3273c47f3aafa0f8de22d1e8ca24cafca867cb42104973c0e7d823a35b062ab.exe miss，自定义允许，安装完添加两个服务自启动。

yaokai815

腾管 19x

mmmaoo

江民：
样本数量总数为：28
总检出数量为：24
检出率为：85.71%

jijianan2007

F-Secure  解压剩11

裂空我爱杰

ongarabazanade 发表于 2024-11-8 13:33
Avast扫描+双击丨kill22X丨剩6X

我发现avast自从夺舍诺顿合并红伞跟avg后查杀率一路飙升。。。不管是卡饭样本区还是avc。。。确实猛男了啊avast，还免费

Fadouse

DI 24/26(排除2x双击自退)静态 22/28
Miss 6x

---

Sandboxie双击测试
e997c1f09bdc774395eef596be2d52797ff7f2633ebe09242c944860242e2ea7.exe -> 崩溃自退
c3273c47f3aafa0f8de22d1e8ca24cafca867cb42104973c0e7d823a35b062ab.exe -> 有效数字签名, Miss


a398197c7a24b3d78255e8a7098efb8134e248dd838782996ac95589658e6841.msi -> Miss
a59d8dd20da457473a30a69c890a3689d0bfe8de3f2fd6cdf2007143e71cee32.msi/75530bc6d82bcce7a0f36f3f707597f3ed060099971f3ca158754b9b75a5a6d9.msi -> DI Kill衍生物


0d898ef9bf140debb77ed147446e38f49275c0fba6c712df30fbb0e9b5fd74d6.msi -> 崩溃自退

Rukia

ESET KILL 23 MISS 6
双击测试第一个 成功防御