SilverFox 3x

zhuzhu009

VT
VirusTotal - File - a63db2daf426ced44b66e30ec3b50697dab533dd087cf4e00a7b82f2c6371630
VirusTotal - File - e8d5be57e5bbcc4751e933089638415dddfb2b008b439a9d82db2c695de4604c
VirusTotal - File - d6a84954e038ddf4a0026705e0942fc003cfdc04e58f658a6bd9e89c37c57d18  vt=0！

MB
https://bazaar.abuse.ch/sample/d ... 8a6bd9e89c37c57d18/
https://bazaar.abuse.ch/sample/e ... 9d82db2c695de4604c/
https://bazaar.abuse.ch/sample/a ... e00a7b82f2c6371630/

anyrun
Analysis QQyisSetups64.exe (MD5: B4F00FBA3327488D4CB6FD36B2D567C6) Malicious activity - Interactive analysis ANY.RUN vt=0

Download
https://wormhole.app/Llkey#q0bOva-tkMqZY549SHK3OA
https://wwzq.lanzouq.com/iHCXD2jc6sha

123456aaaafsdeg

202125

Time;Scanner;Object type;Object;Detection;Action;User;Information;Hash;First seen here
12/29/2024 6:36:25 PM;Advanced memory scanner;file;Operating memory » QQyisSetups64.exe(35952);a variant of Win32/Farfli.DCO trojan;contained infected files;;;89D12A8AE5C6737C1929CDF6410097EF7A190977;

心醉咖啡

火绒扫描miss

jdsh

ESET

Kaspersky Anti-Ransomware Tool

biue

腾讯电脑管家 2X

xmt12

1. XAS扫描日志
   
2. 扫描开始时间:2024/12/31 16:18:28
   
3. 
   
4. 主程序版本:3.0.7 病毒库版本:1792(2024.12.31)
   
5. 特征库个数：17500
   
6. 黑md5个数：2334043
   
7. 白md5个数：150522
   
8. 
   
9. 危险文件:
   
10. ---------
    
11. 
    
12. D:/用户文件/2/桌面/原神启动器\1.msi[压缩包引擎][Trojan.Generic]
    
13. D:/用户文件/2/桌面/原神启动器\2.msi[压缩包引擎][Trojan.Generic]
    
14. D:/用户文件/2/桌面/原神启动器\QQyisSetups64.exe[XAS启发引擎][HEUR/Trojan.FalseSign]
    
15. 
    
16. 总文件数:3
    
17. 病毒文件个数:3
    
18. 查杀率:100.0%
    
19. 扫描结束时间:2024/12/31 16:18:36

复制代码

yaokai815

360 3x 瑞星 0x