CobaltStrike 1x

Fadouse

KES UDS Kill

1. Event: Malicious object detected
   
2. Component: File Threat Protection
   
3. Result description: Detected
   
4. Type: Trojan
   
5. Name: UDS:Backdoor.Win32.Cobalt.gen
   
6. Precision: Exactly
   
7. Threat level: High
   
8. Object type: File
   
9. Object name: f8dc9d4.exe
   
10. Object path: E:\Code\Virus\f8dc9d4
    
11. SHA256 of an object: 2DD168F6F7FF603EFB5FCE1574D7F0DF9C0C1F49910001728FD0E9C19FF7EA2E
    
12. MD5 of an object: 5DAB03F926AF24532C72793D41AC182B
    
13. Reason: Cloud Protection

复制代码

GDHJDSYDH

EIS扫描miss，沙盒内运行后EIS阻止访问网址，样本自退

biue

腾讯电脑管家 1X