Stealer 15x

阿里小白帽

极速安全官方

======================================================================
AHMLv4 病毒扫描报告
======================================================================

模型版本:0.26.1.1
类型:测试版
扫描时间: 2026-07-24 23:09:37
扫描文件数: 11
恶意文件: 9
安全文件: 2
检测错误: 0

----------------------------------------
威胁等级分布
----------------------------------------
  高风险: 1
  低风险: 2
  中等风险: 8

----------------------------------------
恶意文件详情
----------------------------------------

[1] F:\JiSu_AX\Date\Virus\2026-07-24_1\SewerShellsBreedingSeason.exe
    文件名: SewerShellsBreedingSeason.exe
    文件大小: 211,836,416 字节
    SHA256: d9bf7db8e792c2059f26a8385a5b544f3cbdf0bf9c01748cf36dfa5a2bac16f9
    MD5: 21f8e4ef5ec6319c187d97687828415e
    威胁等级: MEDIUM
    综合评分: 64.5/100
    ML恶意概率: 69.8%
    签名评分: 52.0/100
    匹配家族: PUP.BundleInstaller
      - Trojan.Emotet: 47.0%
      - Worm.Kovter: 39.0%
      - Adware.Bundlore: 47.0%
      - PUP.BundleInstaller: 52.0%

[2] F:\JiSu_AX\Date\Virus\2026-07-24_1\svchost.exe
    文件名: svchost.exe
    文件大小: 1,129,544 字节
    SHA256: 8af4e6e45f784dd1a0ed74e89ec981668ae9fca1cf3f02ca4930fb7635922a24
    MD5: c4509c084e14ea7495a445a57b90733a
    威胁等级: MEDIUM
    综合评分: 72.9/100
    ML恶意概率: 70.0%
    签名评分: 79.7/100
    匹配家族: Worm.Kovter
      - Trojan.DarkTracer: 62.0%
      - Ransomware.Ryuk: 47.0%
      - Ransomware.DarkSide: 39.0%
      - Banker.IcedID: 55.0%
      - APT.Carbanak: 47.0%
      - APT.Lazarus: 47.0%
      - Downloader.Hancitor: 66.0%
      - Downloader.Gamarue: 47.0%
      - Worm.Sality: 66.0%
      - Worm.Kovter: 79.7%
      - Backdoor.Gh0st: 52.0%
      - Adware.Bundlore: 62.0%
      - Adware.MultiPlug: 52.0%
      - Exploit.MS08-067: 52.0%
      - Exploit.CobaltStrike: 60.0%
      - Exploit.Metasploit: 76.0%
      - Botnet.Mirai: 52.0%
      - Miner.XMRig: 79.7%
      - PUP.BundleInstaller: 52.0%
      - PUP.DriverBooster: 60.0%

[3] F:\JiSu_AX\Date\Virus\2026-07-24_1\Factura_Pago $989_465_87_pdf.exe
    文件名: Factura_Pago $989_465_87_pdf.exe
    文件大小: 1,584,128 字节
    SHA256: 22929fd615674a4e46fa8d2f845b19675d0328c687a136cd847a1f2411dd84d4
    MD5: e9a760bdd778e40a7ec3aa6d9e9861cc
    威胁等级: MEDIUM
    综合评分: 62.5/100
    ML恶意概率: 70.4%
    签名评分: 44.0/100
    匹配家族: Botnet.Mirai
      - Botnet.Mirai: 44.0%

[4] F:\JiSu_AX\Date\Virus\2026-07-24_1\234bc863e67a489ba507789f95585a50.exe
    文件名: 234bc863e67a489ba507789f95585a50.exe
    文件大小: 3,546,472 字节
    SHA256: 320980f087e1ea501ca0721d403e2345b901b7e4a28a41a12ad80085d84eb637
    MD5: fbcea4f53946bd07b4c1779e4b0afb24
    威胁等级: MEDIUM
    综合评分: 50.3/100
    ML恶意概率: 71.8%

[5] F:\JiSu_AX\Date\Virus\2026-07-24_1\sigh-file.exe
    文件名: sigh-file.exe
    文件大小: 22,359,735 字节
    SHA256: 65f5aa9baac25a6c89274f569cdb5ce8f99324801d972516418bff5bcf8ef28f
    MD5: baeafbe6c9378d2e47e87802f3cd50d1
    威胁等级: HIGH
    综合评分: 76.5/100
    ML恶意概率: 69.8%
    签名评分: 92.0/100
    匹配家族: Trojan.Emotet
      - Trojan.Emotet: 92.0%
      - Trojan.DarkTracer: 62.0%
      - Ransomware.Ryuk: 77.0%
      - Ransomware.LockBit: 79.7%
      - APT.Carbanak: 47.0%
      - Downloader.Hancitor: 47.0%
      - Worm.Sality: 66.0%
      - Worm.Kovter: 92.0%
      - Infostealer.Azorult: 66.0%
      - Adware.Bundlore: 77.0%
      - Adware.MultiPlug: 52.0%
      - Exploit.MS08-067: 52.0%
      - Exploit.Metasploit: 76.0%
      - Botnet.Mirai: 52.0%
      - Miner.XMRig: 62.0%
      - Miner.WannaMine: 52.0%
      - Locker.BadRabbit: 76.0%
      - PUP.BundleInstaller: 72.0%
      - PUP.DriverBooster: 60.0%

[6] F:\JiSu_AX\Date\Virus\2026-07-24_1\Setup (2).exe
    文件名: Setup (2).exe
    文件大小: 1,417,904 字节
    SHA256: 516253e18a40301f846afdf0f2f6ec98a22e48be04e937524df274ca34b7e70f
    MD5: 5972fa47bf42e4c83e049e9503096483
    威胁等级: MEDIUM
    综合评分: 73.4/100
    ML恶意概率: 72.3%
    签名评分: 76.0/100
    匹配家族: Exploit.Metasploit
      - Trojan.DarkTracer: 39.0%
      - Downloader.Hancitor: 47.0%
      - Worm.Sality: 66.0%
      - Worm.Kovter: 47.0%
      - Infostealer.Azorult: 47.0%
      - Exploit.Metasploit: 76.0%
      - Miner.XMRig: 47.0%

[7] F:\JiSu_AX\Date\Virus\2026-07-24_1\audiodg.exe.bin
    文件名: audiodg.exe.bin
    文件大小: 3,594,752 字节
    SHA256: 17fbc65bafa2b976c9613a5939da5a1c1646ac2e819ff19917c83315f499d9db
    MD5: 92941d8bab148917770ccd2e3caf9f5c
    威胁等级: MEDIUM
    综合评分: 51.7/100
    ML恶意概率: 73.9%

[8] F:\JiSu_AX\Date\Virus\2026-07-24_1\ChivalryofDesire.exe
    文件名: ChivalryofDesire.exe
    文件大小: 209,008,640 字节
    SHA256: cceedf51a2542a2bda75f340a399f67ea6f26d7e1f37f1f131b88a948b7460c2
    MD5: d9dc43f6083ee4947d399ead7f34827f
    威胁等级: MEDIUM
    综合评分: 64.5/100
    ML恶意概率: 69.8%
    签名评分: 52.0/100
    匹配家族: PUP.BundleInstaller
      - Trojan.Emotet: 47.0%
      - Worm.Kovter: 39.0%
      - Adware.Bundlore: 47.0%
      - PUP.BundleInstaller: 52.0%

[9] F:\JiSu_AX\Date\Virus\2026-07-24_1\Setup.exe
    文件名: Setup.exe
    文件大小: 800,350,720 字节
    SHA256: 4aad1fa75be34a4bda3b5c7a86ccb9232dc4e93c1ea7262bfe740cb5b68e9fc6
    MD5: 6a4549184e651336203d12d2a2870a34
    威胁等级: MEDIUM
    综合评分: 63.9/100
    ML恶意概率: 71.2%
    签名评分: 47.0/100
    匹配家族: Miner.XMRig
      - Miner.XMRig: 47.0%

----------------------------------------
安全文件列表
----------------------------------------

[1] F:\JiSu_AX\Date\Virus\2026-07-24_1\lagcllewa.exe
    SHA256: e2499c68591bb516b200371504103da723bba6fc8dfac5855ed1bc6b7f506bf2
    综合评分: 48.7/100

[2] F:\JiSu_AX\Date\Virus\2026-07-24_1\TALIMAT.exe
    SHA256: 09a511feeb109ce18780160d2664e3c31cc33a39025f9ec25a677d21e793bdb1
    综合评分: 49.3/100

======================================================================
报告结束
======================================================================

c199529

腾讯电脑管家18

miss 2x

---------------------
2026-7-26 00:27:50 MD5:bd266bbdaf186bcfad1e6bb55c24ac7c 20260723Stealer 15x\234bc863e67a489ba507789f95585a50.exe [Win32.Trojan.FalseSign.Adhl]  [未修复]
2026-7-26 00:27:50 MD5:ea037e60c485d8fbd69132cc760d5041 20260723Stealer 15x\audiodg.exe.bin [Win32.Trojan.Stealer.Njgl]  [未修复]
2026-7-26 00:27:50 MD5:003252d3ae1b9e6a62bc815cb5c63c4d 20260723Stealer 15x\ChivalryofDesire.exe [Win32.Trojan.W64.Lcnw]  [未修复]
2026-7-26 00:27:50 MD5:e9a760bdd778e40a7ec3aa6d9e9861cc 20260723Stealer 15x\Factura_Pago $989_465_87_pdf.exe [Msil.Backdoor.Xworm.Etgl]  [未修复]
2026-7-26 00:27:50 MD5:825820fc81056e0cb65b2ef0dbffac08 20260723Stealer 15x\TALIMAT.exe [Msil.Trojan-Spy.Noon.Tzfl]  [未修复]
2026-7-26 00:27:50 MD5:c4509c084e14ea7495a445a57b90733a 20260723Stealer 15x\svchost.exe [Win32.Trojan.Agentb.Tdkl]  [未修复]
2026-7-26 00:27:50 MD5:9ad892cb16dcd20ce8be8601050b8365 20260723Stealer 15x\sigh-file.exe [Win32.Trojan.FalseSign.Rgil]  [未修复]
2026-7-26 00:27:50 MD5:182e6b5587d862b6161387dd6b03bcd4 20260723Stealer 15x\SewerShellsBreedingSeason.exe [Win32.Trojan.W64.Zimw]  [未修复]
2026-7-26 00:27:50 MD5:5972fa47bf42e4c83e049e9503096483 20260723Stealer 15x\Setup (2).exe [Win64.Trojan.LummaStealer.Rwhl]  [未修复]
2026-7-26 00:27:50 MD5:27111116c515ea89dc0fd1fc04398b07 20260723Stealer 15x\goodincomingthingsfromtheehartformebestforbetterplaces.hta [Win32.Trojan-Downloader.Downloader.Rwhl]  [未修复]
2026-7-26 00:27:50 MD5:ffcd7df5d0a6f7f219d4de000285be06 20260723Stealer 15x\Invoice #2776.js [Script.Trojan.Generic.Ssmw]  [未修复]
2026-7-26 00:27:50 MD5:8910f3fb3cc97edb835631c3a2085951 20260723Stealer 15x\Shipping documents.js [Script.Trojan.Generic.Najl]  [未修复]
2026-7-26 00:27:50 MD5:0ef837b9554e6d7a1f907de7cfd102b5 20260723Stealer 15x\Order #7909270.js [Script.Worm.Generic.Rsmw]  [未修复]
---------------------