Stealer 20x

xiaozhu009

https://qfile.qq.com/q/eEuiLhZth6
https://pan.huang1111.cn/s/zMkXGiM

761773275

SEP16 扫描16x
执行2x

1. 检测到威胁 Trojan.Gen.MBT。文件 C:\Users\OTTO\Desktop\20260720Stealer 20x\KiddonsModMenu.exe 已隔离。
   
2. 检测到威胁 AGR.Terminate!g2。进程 BrochureCatalogs.exe 阻止。文件路径: C:\Users\OTTO\Desktop\20260720Stealer 20x\BrochureCatalogs.exe
   

复制代码

1. 检测到威胁 Trojan.Puwaders!ATN。文件 C:\Users\OTTO\Desktop\20260720Stealer 20x\SC29.exe 已隔离。
   
2. 检测到威胁 Trojan.Gen.MBT。文件 C:\Users\OTTO\Desktop\20260720Stealer 20x\KiddonsModMenu.exe 已隔离。
   

复制代码

Error50X

ESET 15X  卡巴14X

吃瓜群众第123位

趋势科技云端版 kill 8x

123456aaaafsdeg

anxiety520

BD AV/ATD剩余

WorldPlayer2018

包里的installer.msi我看了一下，VT，微步云沙箱还有我自己用procmon分析（用AI）都没有报恶意啊

ahhh

腾讯管家   6x

eis  16x

西瓜视频运气

ESSP 解压+扫描17x
没有测试运行

c199529

腾讯电脑管家18

miss 3x

---------------------
2026-7-23 01:39:13 MD5:2560f59d528a5c987abad0033cd64929 20260720Stealer 20x\AppVIsvSubsystems64.dll [Win64.Trojan.Agent.Rsmw]  [未修复]
2026-7-23 01:39:13 MD5:0b54de9a0562650c9c6c5c4f281d0c73 20260720Stealer 20x\Aura Proxy.exe [Win64.Trojan.Convagent.Qwhl]  [未修复]
2026-7-23 01:39:13 MD5:8c21b2fbded2faeb6db2e7a20c513cdb 20260720Stealer 20x\b59653f1e2b8dae784ca4211199d2887ea676d27e7af9d057a625cf9281c17e0.exe [Win32.Trojan.Generic.Dplw]  [未修复]
2026-7-23 01:39:13 MD5:e7e96a49f9be49af3c72b074e93aa9b1 20260720Stealer 20x\BrochureCatalogs.exe [Win32.Backdoor.Agent.Yfow]  [未修复]
2026-7-23 01:39:13 MD5:d02bccfb2b7d95abb002c40ec255fd16 20260720Stealer 20x\Erend
2026-7-23 01:39:13 MD5:7618b32070d5c890d0adfcca9ea4f279 20260720Stealer 20x\fcstfj05.at0.exe [Win32.Trojan.FalseSign.Kqil]  [未修复]
2026-7-23 01:39:13 MD5:f1a5a7b18758d3ad8ace68f3e2f44cfe 20260720Stealer 20x\Flawless.exe [Win64.Hacktool.Chromelevator.Mqil]  [未修复]
2026-7-23 01:39:13 MD5:99fbb8289955b03e16351bbe4501bba5 20260720Stealer 20x\GTR-TT.exe [Win64.Backdoor.Gsb.Jajl]  [未修复]
2026-7-23 01:39:13 MD5:948f10a6d3ada0e703600d313bed879d 20260720Stealer 20x\KiddonsModMenu.exe [Win32.Backdoor.Agent.Uimw]  [未修复]
2026-7-23 01:39:13 MD5:98e8eac5e8c51b358f25ed60c5f18b90 20260720Stealer 20x\Launcher (2).exe [Win64.Trojan.Convagent.Imnw]  [未修复]
2026-7-23 01:39:13 MD5:5f2082d92fecefb647b40b6c9a3c0311 20260720Stealer 20x\Launcher.exe [Win64.Trojan.Convagent.Pgil]  [未修复]
2026-7-23 01:39:13 MD5:2185a8e2f4b44deddef9fe6c3c878c96 20260720Stealer 20x\Xenoner.exe [Win32.Trojan.Agent.Dtgl]  [未修复]
2026-7-23 01:39:13 MD5:4e0ca3745f3539f6052b30dcd884e511 20260720Stealer 20x\Setup.exe [Js.Trojan.Agent.Xfow]  [未修复]
2026-7-23 01:39:13 MD5:3fc7c663175a0a9ac36429f19bad54bc 20260720Stealer 20x\mpclient.dll [Win64.Backdoor.Agent.Jflw]  [未修复]
2026-7-23 01:39:13 MD5:9e892eaf50cd90b5b3269a167f04a41f 20260720Stealer 20x\mpclient (2).dll [Win64.Backdoor.Agent.Fflw]  [未修复]
2026-7-23 01:39:13 MD5:6e861684c0cf129078c2e9c5edee446c 20260720Stealer 20x\Mod Menu.exe [Win64.Trojan.LummaStealer.Qzfl]  [未修复]
2026-7-23 01:39:13 MD5:8eae679cc828d54e1615ef8f18da1216 20260720Stealer 20x\libwin64.rpa [Win32.Trojan.Agent.Aplw]  [未修复]
---------------------