恶意文件 1x

xiaozhu009

https://wwbxq.lanzouq.com/inYCh3lfxnef
dat.wsh：https://www.virustotal.com/gui/f ... e35f53d44ebf1e64f0e
oa.wsh：https://www.virustotal.com/gui/f ... 2d9b28c98638894ffea
cvv.js：https://www.virustotal.com/gui/f ... 20014608554caf10cd9final.bat：https://www.virustotal.com/gui/f ... ac4e8a50f79a8cf8f9b
dat.wsf：https://www.virustotal.com/gui/f ... 8b642a4cdc9ff33c4c2
dat.bat：https://www.virustotal.com/gui/f ... 0b30071e9?nocache=1
pun.py：https://www.virustotal.com/gui/f ... 7d36db895b4b7e26ae5

1. https://move-friendly-international-observed.trycloudflare.com/

复制代码

1. https://gore-francis-grad-pts.trycloudflare.com/

复制代码

1. http://lens-islands-talk-marshall.trycloudflare.com/

复制代码

大概就是.wsh-.wsf/.js-.bat-.py

浦北光

文件取消分享

心醉咖啡

360

WGC_ZY

ESSP：
3/24/2026 9:31:27 PM;Real-time file system protection;file;C:\Users\Zhang\Downloads\20260324窃密2x\dat.bat;PowerShell/TrojanDownloader.Agent.PQL trojan;cleaned by deleting

martin1230

卡巴斯基扫描杀，剩余文件:

Loyisa

奇安云镜 扫描2x

asdfnbbj

360扫描5个

莒县小哥

scottxzt

VT上微软还报二个，到我这里变哑巴

c199529

腾讯电脑管家18

---------------------
2026-3-26 00:33:49 MD5:53a24f02c0a966046a878856c42524ac
20260324窃密2x\final.bat [Bat.Trojan.Alien.jflw]
2026-3-26 00:33:49 MD5:9bea006a179a13a3155bcc75c1807da4
20260324窃密2x\ccv.js [Script.Trojan-Downloader.Generic.cdhl(aiScore=m)]
2026-3-26 00:33:49 MD5:3171410c3cf8e8d49d5cb3076a4ca2bb
20260324窃密2x\dat.bat [Win32.Trojan-Downloader.Downloader.Sgil]
2026-3-26 00:33:49 MD5:f85a8a077a074d3c3ef92f4d7ba4bdae
20260324窃密2x\dat.wsh [Win32.Trojan.Agent.wimw]
2026-3-26 00:33:49 MD5:be87abd9ec8bb80f46e5667b6de64c25
20260324窃密2x\dat.wsf [Script.Trojan.Generic.Pjgl]
2026-3-26 00:33:49 MD5:20c9131f25ab261fc21a16ffcff869b6
20260324窃密2x\kru.zip [Win32.Trojan.Inject.msmw]
2026-3-26 00:33:49 MD5:85c69598722d1327b8c02327edbceb08
20260324窃密2x\oa.wsh [Win32.Trojan.Agent.rsmw(aiScore=m)]
---------------------