SilverFox 6X

神龟Turmi

下载：
https://wwtu.lanzouv.com/TS-250211-01

VT：
https://www.virustotal.com/gui/f ... 06eb5efba963220d472
https://www.virustotal.com/gui/f ... ea9e696e0ad209c82ec
https://www.virustotal.com/gui/f ... fd4bb928f7d97b914a6
https://www.virustotal.com/gui/f ... 7e0470b1fac49bf565d
https://www.virustotal.com/gui/f ... 96090f7e9dafcaa91de
https://www.virustotal.com/gui/f ... 478cac0bcf024fa7f7f
系列1处扫14
系列2处扫18
系列3处扫13




MB：
https://bazaar.abuse.ch/sample/9 ... 06eb5efba963220d472
https://bazaar.abuse.ch/sample/e ... ea9e696e0ad209c82ec
https://bazaar.abuse.ch/sample/f ... fd4bb928f7d97b914a6
https://bazaar.abuse.ch/sample/b ... 7e0470b1fac49bf565d
https://bazaar.abuse.ch/sample/0 ... 96090f7e9dafcaa91de
https://bazaar.abuse.ch/sample/b ... 478cac0bcf024fa7f7f

蛐蛐：
处扫机学KILL1X 未测试双击

lsop1349987

avast扫描4x双击2x

jijianan2007

EES  解压2X，扫描4X，清空

扫描日志
检测引擎的版本: 30695 (20250210)
日期: 2025/2/11  时间: 10:47:04
已扫描的磁盘、文件夹和文件: F:\sandboxie-plus\infected\drive\D\TS-250211-01-SilverFox\Setup64v7.3.9.msi;F:\sandboxie-plus\infected\drive\D\TS-250211-01-SilverFox\Setup64v9.3.4.msi;F:\sandboxie-plus\infected\drive\D\TS-250211-01-SilverFox\Setup64v1.3.8.msi;F:\sandboxie-plus\infected\drive\D\TS-250211-01-SilverFox\Setup64v3.2.8.msi
用户: DESKTOP-CBL9R8O\Administrator
F:\sandboxie-plus\infected\drive\D\TS-250211-01-SilverFox\Setup64v3.2.8.msi > MSI > Binary.Binary1 - Win64/Agent.FCM 特洛伊木马 的变量 - 已删除
F:\sandboxie-plus\infected\drive\D\TS-250211-01-SilverFox\Setup64v1.3.8.msi > MSI > Binary.Binary1 - Win64/Agent.FCM 特洛伊木马 的变量 - 已删除
F:\sandboxie-plus\infected\drive\D\TS-250211-01-SilverFox\Setup64v7.3.9.msi > MSI > Binary.Binary1 - Win64/Agent.FCM 特洛伊木马 的变量 - 已删除
F:\sandboxie-plus\infected\drive\D\TS-250211-01-SilverFox\Setup64v9.3.4.msi > MSI > Binary.Binary1 - Win64/Agent.FCM 特洛伊木马 的变量 - 已删除
已扫描的对象数: 104
检测数: 4
已清除的对象数: 4
完成时间: 10:47:08  总扫描时间: 4 秒 (00:00:04)

啊松

卡巴扫描miss all，懒得双击了，OP全检出


https://opentip.kaspersky.com/90 ... /results?tab=upload
https://opentip.kaspersky.com/EE ... /results?tab=upload
https://opentip.kaspersky.com/F7 ... /results?tab=upload
https://opentip.kaspersky.com/BE ... /results?tab=upload
https://opentip.kaspersky.com/0B ... /results?tab=upload
https://opentip.kaspersky.com/BA ... /results?tab=upload

PhozeAMTB

WD 解压2x双击4x

1073328164

迈克菲 kill all

hipoxiaxxx

FortiClient 扫描5X，剩余1X云沙盒检出，目前入库为W64/Agent.FCM!tr
1530432-8643564387.08.exe - W64/Agent.DML!tr
Setup64v1.3.8.msi - W64/Agent.FCM!tr
Setup64v3.2.8.msi - W64/Agent.FCM!tr
Setup64v9.3.4.msi - W64/Agent.FCM!tr
软件包1.0.1.exe - W64/Agent.DML!tr

吃瓜群众第123位

AhnLab KILL all

superLYT

SEP解压清空

123456aaaafsdeg