LummaStealer

Eset小粉絲

https://wormhole.app/9Z4nx#uasLyaPkCgKmTod79T799A

VT: 1

VT: 1

Thank you for your submission.
The detection for this threat will be included in the next update of detection engine, expected version: 30233.

Set-up.exe - Win32/Spy.LummaStealer.I trojan
Set-up.exe - Win32/Spy.LummaStealer.I trojan

Regards,

ESET Malware Response Team

xmt12

360 自动鉴定安全

1. XAS扫描日志
   
2. 扫描开始时间:2024/11/16 20:29:02
   
3. 
   
4. 主程序版本:3.0.4 病毒库版本:17721(2024.11.16)
   
5. 特征库个数：17358
   
6. 黑md5个数：2332455
   
7. 白md5个数：150459
   
8. 
   
9. 危险文件:
   
10. ---------
    
11. 
    
12. D:/用户文件/2/桌面/Sample (1)\1\Set-up.exe[XAS启发引擎][HEUR/Malicious(score=400)]
    
13. D:/用户文件/2/桌面/Sample (1)\2\Set-up.exe[XAS启发引擎][HEUR/Trojan.FalseSign]
    
14. 
    
15. 总文件数:2
    
16. 病毒文件个数:2
    
17. 查杀率:100.0%
    
18. 扫描结束时间:2024/11/16 20:29:08

复制代码

hhjjjjjj123

卡巴全歼

御坂14857号

Loyisa

MD ASR

LTSC1809

文件夹1：md杀
文件夹2：卡巴云黑（pdm的bazon.a都是ksn红了 但是没被uds这种拉黑 只要双击马上进程已终止然后报这个，并不是真的主防规则杀的）

Fadouse

S1 Kill All

ongarabazanade

桔梗想见雪

LTSC1809 发表于 2024-11-16 21:16
文件夹1：md杀
文件夹2：卡巴云黑（pdm的bazon.a都是ksn红了 但是没被uds这种拉黑 只要双击马上进程已终止 .你开了md和卡巴，md可是占用大户呀

bbszy

bd

Potentially malicious application blocked
now

Feature:
Advanced Threat Defense

You must restart your device to finalize the cleaning process.
Application Set-up.exe has been detected as potentially malicious and was blocked.
Application path: C:\Users\V\Downloads\1\Set-up.exe
Command line parameters: "C:\Users\V\Downloads\1\Set-up.exe"
Detection ID: SuspiciousBehavior.81C5CC302FF72E5F

Potentially malicious application blocked
now

Feature:
Advanced Threat Defense

You must restart your device to finalize the cleaning process.
Application Set-up.exe has been detected as potentially malicious and was blocked.
Application path: C:\Users\V\Downloads\2\Set-up.exe
Command line parameters: "C:\Users\V\Downloads\2\Set-up.exe"
Detection ID: SuspiciousBehavior.81C5CC3049195419