远控后门1X

ジ蓅暒划过づ

• VT首发2个报毒VirusTotal - File - c7f7467468ff31acef0ea15d0017a9788ba7c019e62a07ac9c951fca841c581d
• 卡巴扫描MISS KSN未知
• 样本：333.zip - 蓝奏云
  

谈谈MEMZ

Cortex XDR 执行杀
Apex 白加黑？

1. Application Information:
   
2. Source process ID: 9260
   
3. Source process name: cmd.exe
   
4. Source application location: C:\Windows\System32\cmd.exe
   
5. Source process command line: "C:\Windows\system32\cmd.EXE" /c start "" "C:\Users\User\AppData\Roaming\SunLoginsDetail\chome_leate_win7-11_v1770095461.696662\Apex.exe"
   
6. Source application version: 10.0.20348.2849 (WinBuild.160101.0800)
   
7. Source application publisher: Microsoft Corporation
   
8. Source application signers: Microsoft Corporation,Microsoft Corporation,Microsoft Corporation,Microsoft Corporation
   
9. Source process user name: N/A\User
   
10. 
    
11. 
    
12. Prevention Information:
    
13. Prevention date: 2026年2月3日
    
14. Prevention time: 15:39:02
    
15. OS version: 10.0.20348
    
16. Component: AI Powered Shellcode Protection
    
17. Cortex XDR code: C04000C0
    
18. Prevention description: 检测到恶意 Shellcode 威胁
    
19. Verdict: 0
    
20. Quarantined: False
    
21. Post-Detected: False
    
22. Rule name: x64_ml_shellcode.6
    
23. Remote actor causality ID: AdyU4CpdiI8AACQsAAAAAA==

复制代码

猥琐大叔

Error50X

看似首发2个报毒，实际1个

Myrenaser

红伞扫描击杀

GreatMOLA

莒县小哥

AMD_Ryzen

BEST 双击 ATC

jijianan2007

360双击kill

Xopii

ESET  不能删除这个 ，扫描查不出来 ， 运行之后也只是查杀内存中的病毒