3 ms·
It’s clearly suspicious and I wouldn’t advise opening these files (there’s no reason it should be a self-extracting executable instead of a standard ZIP file),
by Nextgrid 3y ago
It’s clearly suspicious and I wouldn’t advise opening these files (there’s no reason it should be a self-extracting executable instead of a standard ZIP file), but the VirusTotal report could also very well be a false-positive if malware makers used the same archiver program to create a self-extracting archive with their malware and AV engines ended up associating the self-extracting archive entrypoint (benign by itself) as associated with malware.
- psychphysic 3y agoAll else ignored the exe reaching out to a telegram server is reason enough to baulk.
- ImPostingOnHN 3y agoHas that happened with VirusTotal recently? It seems like a false false positive otherwise, encouraging folks to discount a true positive as a false positive