#Fake #Telegram #Signed #telegre.org (2022-07-07)

Jirehlov1234

https://jirehlov.lanzouv.com/iCWWO07hjvid

https://www.virustotal.com/gui/f ... f77acf820/detection

VT初扫


eset和瑞星已经拉黑签名了

新下载链
https://tg-downs[.oss-cn-hongkong.aliyuncs.com/%E7%94%B5%E6%8A%A5%E4%B8%AD%E6%96%87-64%E4%BD%8D.exe

上一集：https://bbs.kafan.cn/thread-2238714-1-1.html

fzp070

卡巴斯基 扫描 未检测到威胁，KSN受信任

pal家族

刚才在vt上观察到卡巴半秒（半小时，算快吗？）拉黑了

wwwab

09:58

Hello,

This file is already detected by our internal bases:
Backdoor.Win32.Farfli.cbyp
Detection will be included in the next update.

kuroandsan

Norton miss

aboringman

360：0

rogersg

Microsoft Defender
扫描Miss

360
双击无反应


Kaspersky
断网双击一下

1. Event: Malicious object detected
   
2. Application: Telegram Installer
   
3. User: NT AUTHORITY\SYSTEM
   
4. User type: System user
   
5. Component: System Watcher
   
6. Result description: Detected
   
7. Type: Trojan
   
8. Name: PDM:Trojan.Win32.Generic
   
9. Threat level: High
   
10. Object type: Process
    
11. Object path: c:\users\admin\desktop
    
12. Object name: 电报中文-64位.exe
    
13. Reason: Databases
    
14. Databases release date: Today, 07/07/2022 08:28:00

复制代码

UNknownOoo

智量
扫描：拉黑
双击：MEMRAY:MalCode.A0（衍生物

谁谁谁

腾管16，miss

Ckq1997

奇安信 miss