【开放测试】卡饭病毒样本包 20250222 第257期

UNknownOoo

X-Sec
扫描：剩 10x

aikafans

火绒

病毒库时间：2025-02-22 15:49
开始时间：2025-02-22 22:00
总计用时：00:00:33
扫描对象：224
扫描文件：56
发现风险：42
已处理风险：42

netweb

test

eset kill 50x miss 6x

wywt123

啊松 发表于 2025-2-22 20:33
卡巴OP就检出一个，剩下的全部干净

没有冰盾这样的hips的卡巴是拦不住的

打包扔给global的Technical Support了

Update:
global支持比国内支持效率差好多，不知道是不是周末的原因
一天过去了终于回复了邮件

Dear customer,

Greetings!

We've forwarded your inquiry to our virus analyst and will get back to you as soon as we hear from them.

Thank you, and have a nice day!
Ali || Customer Service Representative

superLYT

EIS如图剩余八个，SEP如图剩余六个，SEP双击后拦截powershell和cmd

petr0vic

drweb 11/56




ikarus
Scanned 56
Found 41

1. C:\Users\User\Desktop\infected2025022201\1165b73a583c54757f610bd01ea80fd452b862c9469d8fea9396c618ae8a9cb0.exe ->          detected: Trojan.SuspectCRC!E2
   
2. C:\Users\User\Desktop\infected2025022201\03db317496b7dd1ba3e1652cefa60a58ae0bcd77815b5f733a617c5f5bd2b108.cmd ->          detected: Trojan.PowerShell.Agent!E2
   
3. C:\Users\User\Desktop\infected2025022201\521e3d88e05aee3eeb9a7862a5eafcdf2aec090493b1a2ad9ef783f6c1d04985.bat ->          detected: Trojan.PowerShell.Agent!E2
   
4. C:\Users\User\Desktop\infected2025022201\5538ddcea5fe9ec20d83e02c397c12a7d2b9eab511137c748b792b2a2c67bb30.bat ->          detected: Trojan.PowerShell.Agent!E2
   
5. C:\Users\User\Desktop\infected2025022201\5c0199c75fc7299513cd1e49eaf62399e386b78a6a4b95d59364e0f90b65b376.vbs ->          detected: Trojan.VBS.GuLoader!E2
   
6. C:\Users\User\Desktop\infected2025022201\02ea909472b02d4082afcce0ee69be1f66e4c4cbbee62885b8e4fed94e2a7a49.cmd ->          detected: Trojan.PowerShell.Agent!E2
   
7. C:\Users\User\Desktop\infected2025022201\6cb3daa7cad4ebfa9d700393eee6dd9f0cf659b50e7583fa204d5d21da51b740.cmd ->          detected: Trojan.PowerShell.Agent!E2
   
8. C:\Users\User\Desktop\infected2025022201\718e99a3b8afb1af4300164926c56c1f3db874d032d0d16c818d87b8bcc0730e.cmd ->          detected: Trojan.PowerShell.Agent!E2
   
9. C:\Users\User\Desktop\infected2025022201\7X2K9L4M8P.lnk ->          detected: Trojan-Downloader.LNK.Agent!E2
   
10. C:\Users\User\Desktop\infected2025022201\80e51cbe87d3e6d4f1c70fead492dd56f8d49e4136d9c5b084a751df0ca494d8.cmd ->          detected: Trojan.PowerShell.Agent!E2
    
11. C:\Users\User\Desktop\infected2025022201\8c5ed8446ba0aaca2368cf30362be21cfcb68c7bc05d552e96ed2e53f2075178.cmd ->          detected: Trojan.PowerShell.Agent!E2
    
12. C:\Users\User\Desktop\infected2025022201\9acad41e50d3cefc6e127d7cdb882b227153a6ad449a3aaabb8ba289bb492f92.dll ->          detected: Virus.Win32.CobaltStrike!E2
    
13. C:\Users\User\Desktop\infected2025022201\9cde1e34a44696400797e1e8dca2aed51febe2b021505a57383b53e2f44bf052.vbe ->          detected: Trojan.VBS.GuLoader!E2
    
14. C:\Users\User\Desktop\infected2025022201\78163eb63a6e05a92952c8e6d484a68089eee7f2bd21586a1bd7c257bb9fa69a.vbs ->          detected: Trojan.VBS.GuLoader!E2
    
15. C:\Users\User\Desktop\infected2025022201\b775fc04d70d61a645458b457e9e5dbb03bbc47a13e0fe2e83d19df33521eb5a.wsf ->          detected: Trojan.Win32.Casdet!E2
    
16. C:\Users\User\Desktop\infected2025022201\bacf4975004d1c5d21bb49ed198df0abf731f6bb066759a8d1e83c6e0968abb3.cmd ->          detected: Trojan.PowerShell.Agent!E2
    
17. C:\Users\User\Desktop\infected2025022201\bbab0591b8b099ff5fabdb683b6e9a1750d023ca76f4b186f4970b1bd14ea6f8.cmd ->          detected: Trojan.PowerShell.Agent!E2
    
18. C:\Users\User\Desktop\infected2025022201\c1a43327139a95eb02b0ff2614ff1fe80b4af9a66ef8ed08ac9699b8e4fd3025.bat ->          detected: Trojan.PowerShell.Agent!E2
    
19. C:\Users\User\Desktop\infected2025022201\c6a77ae46d699b1d0735ce98b6e12d8432ce74519af74b766a2906a084cf8430.bat ->          detected: Trojan.PowerShell.Agent!E2
    
20. C:\Users\User\Desktop\infected2025022201\Aura.exe ->          detected: Trojan.MSIL.Krypt!E2
    
21. C:\Users\User\Desktop\infected2025022201\e71762a44de54b211b0f7f51c5a33c4b6fbd0ed530ef4f3930f16bf329a290b2.cmd ->          detected: Trojan.PowerShell.Agent!E2
    
22. C:\Users\User\Desktop\infected2025022201\e9debed340fa0316e0e51059248c2c1e77ef6351efd07f4a384e253989f946f5.bat ->          detected: Trojan.PowerShell.Agent!E2
    
23. C:\Users\User\Desktop\infected2025022201\f2264387079776fe5baf8ffc6fc0bf5064a4f3eebdecdafe9282832b6044ee08.vbs ->          detected: Trojan.PowerShell.Agent!E2
    
24. C:\Users\User\Desktop\infected2025022201\f360c9a25233782be36e31a6b0abd717f352220e670f925163696a5736b992b3.cmd ->          detected: Trojan.PowerShell.Agent!E2
    
25. C:\Users\User\Desktop\infected2025022201\Amd_Driver.exe ->          detected: Trojan.SuspectCRC!E2
    
26. C:\Users\User\Desktop\infected2025022201\e0b1538cea43e9616e8bcd558a543c33c76265ef522b09b3887dc90297829c9b.bat ->          detected: Trojan.PowerShell.Agent!E2
    
27. C:\Users\User\Desktop\infected2025022201\Client-built.bat ->          detected: Trojan.BAT.Crypt!E2
    
28. C:\Users\User\Desktop\infected2025022201\d3b48f4eb2f39340f42975627c4cbbb6998f6aebe442272b7cbd4f02c2e34092.bat ->          detected: Trojan.PowerShell.Agent!E2
    
29. C:\Users\User\Desktop\infected2025022201\IOE24JkfKK42m_protected1.exe ->          detected: PUA.Themida!E2
    
30. C:\Users\User\Desktop\infected2025022201\loader.exe ->          detected: Trojan.Win64.Pyinstaller!E2
    
31. C:\Users\User\Desktop\infected2025022201\libvlc.dll ->          detected: Trojan.Win64.Agent!E2
    
32. C:\Users\User\Desktop\infected2025022201\PO-1798654646.js ->          detected: Trojan-Downloader.JS.Agent!E2
    
33. C:\Users\User\Desktop\infected2025022201\CHEMICAL LIST.exe ->          detected: Trojan.MSIL.Crypt!E2
    
34. C:\Users\User\Desktop\infected2025022201\Ningbo - Invoices - Past Due.exe ->          detected: Trojan.MSIL.Crypt!E2
    
35. C:\Users\User\Desktop\infected2025022201\UfTsdJAFJzpJ1Dy.exe ->          detected: Trojan.MSIL.Agent!E2
    
36. C:\Users\User\Desktop\infected2025022201\rAntephialtic.exe -> script.nsi         detected: Trojan.NSIS.Injector!E2
    
37. C:\Users\User\Desktop\infected2025022201\rAntephialtic.exe ->          detected: Trojan.NSIS.Injector!E2
    
38. C:\Users\User\Desktop\infected2025022201\DocumentosCobro.exe -> script.nsi         detected: Trojan.NSIS.Injector!E2
    
39. C:\Users\User\Desktop\infected2025022201\DocumentosCobro.exe ->          detected: Trojan.NSIS.Injector!E2
    
40. C:\Users\User\Desktop\infected2025022201\JUSTIFICANTEDETRANSFERENCIA.exe -> script.nsi         detected: Trojan.NSIS.Injector!E2
    
41. C:\Users\User\Desktop\infected2025022201\JUSTIFICANTEDETRANSFERENCIA.exe ->          detected: Trojan.NSIS.Injector!E2
    

复制代码

wwwab

北京时间 2025-02-23 10:00 转为开放测试。

biue

腾讯电脑管家 56X

awsl10000次

wywt123 发表于 2025-2-22 22:58
打包扔给global的Technical Support了

Update:

两天（按回复算的话一天）过去了...

仍然miss...