Stealer 12x

xiaozhu009

https://pan.huang1111.cn/s/lam8khL
https://qfile.qq.com/q/Ysqsio9ne6

莒县小哥

卡巴杀7枚

scottxzt

MD扫描剩余5个，剔除非EXE文件，剩余2只，后续跟踪测试
攻击面减少
F:\20260415Stealer 12x\KittieCraft-Launcher.exe

MrDeep

nsetup.exe - a variant of Win64/Agent_AGen.MMO trojan  
mpclient.dll - a variant of WinGo/Kryptik.PR trojan  
6697857936_v.exe - a variant of WinGo/Kryptik.PO trojan  
update.exe - a variant of WinGo/Kryptik.PX trojan  
PV02211888221100021200-2210.js - PowerShell/TrojanDownloader.Agent.OCQ trojan  
Loader.exe - JS/Spy.Agent.UO trojan  
rmm.ps1 - PowerShell/TrojanDownloader.Agent.PUL trojan  
GaIaхis.exe - a variant of Win64/PSW.Agent.SX trojan  
upload-to-ftp_1776148703.ps1 - ESET LiveGuard trojan

雨冬Yura丶

ESU剩3个

UNknownOoo

火绒
扫描：捉6x

1. 病毒详情：
   
2. 风险路径：C:\Users\UnknownOoo\Downloads\20260415Stealer 12x\rmm.ps1, 病毒名：TrojanDropper/JS.Agent.cn, 病毒ID：3616f3d67394facd, 处理结果：暂不处理
   
3. 风险路径：C:\Users\UnknownOoo\Downloads\20260415Stealer 12x\PV02211888221100021200-2210.js, 病毒名：TrojanDownloader/PS.Agent.fu, 病毒ID：76b76b2c936143cc, 处理结果：暂不处理
   
4. 风险路径：C:\Users\UnknownOoo\Downloads\20260415Stealer 12x\nsetup.exe, 病毒名：TrojanDownloader/W64.Agent.dr, 病毒ID：bb1b14d3411cde72, 处理结果：暂不处理
   
5. 风险路径：C:\Users\UnknownOoo\Downloads\20260415Stealer 12x\6697857936_v.exe, 病毒名：Trojan/W64.Obfuscated.h!crit, 病毒ID：c0756a2068f3f51c, 处理结果：暂不处理
   
6. 风险路径：C:\Users\UnknownOoo\Downloads\20260415Stealer 12x\update.exe, 病毒名：Trojan/W64.Obfuscated.h!crit, 病毒ID：c0756a2068f3f51c, 处理结果：暂不处理
   
7. 风险路径：C:\Users\UnknownOoo\Downloads\20260415Stealer 12x\mpclient.dll, 病毒名：Trojan/W64.Obfuscated.g!crit, 病毒ID：01782ee7b421c39d, 处理结果：暂不处理
   

复制代码

xjwtzq

奇安信kill  7，拦截2

心醉咖啡

360

c199529

腾讯电脑管家18

miss 6x
---------------------
2026-4-16 00:53:11 MD5:b833947ab69cb8001741b96523681c34
20260415Stealer 12x\GaIaхis.exe [Win32.Trojan.W64.Njgl]
2026-4-16 00:53:11 MD5:e0b512bd013433872bb4b921fe8d7518
20260415Stealer 12x\mpclient.dll [Win32.Trojan.FalseSign.Kqil]
2026-4-16 00:53:11 MD5:2ad6f1c8c2e7cab480192ee9f1013055
20260415Stealer 12x\nsetup.exe [Win32.Trojan.ShellcodeRunner.Dplw]
2026-4-16 00:53:11 MD5:43ce2bc5cb0c4344377df6c197f57621
20260415Stealer 12x\PV02211888221100021200-2210.js [Win32.Trojan-Downloader.Downloader.Qcnw]
2026-4-16 00:53:11 MD5:65d42d78f365aa465745ecb6b2823290
20260415Stealer 12x\update.exe [Win32.Trojan.FalseSign.Zchl]
2026-4-16 00:53:11 MD5:20646cb5ac8c3d577648baa5c9a1bf5d
20260415Stealer 12x\rmm.ps1 [Win32.Trojan-Downloader.Downloader.Fflw]
---------------------

post88

AVAST 8X