+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Whitehat • Blue Team • Defensive Security (https://hackforums.net/forumdisplay.php?fid=448)
+---- Forum: Malware, Rat, and Virus Removal (https://hackforums.net/forumdisplay.php?fid=110)
+---- Thread: [Check-Up] Is any of these VirusTotal scans suspicious? (/showthread.php?tid=5641202)
Is any of these VirusTotal scans suspicious? - James Burnham - Jun 7, 2017
Scan no1: https://virustotal.com/el/file/45a6fae866ee62825777076661cfa631e576acb07347559e3a8ba476ad54a264/analysis/1496821230/
Scan no2: https://virustotal.com/el/file/4f858c3c7f2fabea2f493d9bd7c85f098836b535e43a06385f78cca125901133/analysis/
* - ɡringo - Jun 7, 2017
Scan the executable on hybrid analysis, it'll give you a better reading than just virustotal.
https://www.hybrid-analysis.com
* - 5chn4pp - Jun 7, 2017
50% of those are false, but I'd like to know where you got the files from, and scan them with hybrid analysis.
* - ᴍᴏᴋᴀ - Jun 7, 2017
Well it depends on what the files are if they are hacking stuff they are most likely to be false but then again they could be crypted.
* - James Burnham - Jun 7, 2017
These belong to a turboer.
Here is the hybrid-analysis: https://www.hybrid-analysis.com/sample/4f858c3c7f2fabea2f493d9bd7c85f098836b535e43a06385f78cca125901133?environmentId=100
What are your thoughts?
* - 5chn4pp - Jun 7, 2017
(Jun 7, 2017 07:45 AM)⚡ Mr. Burnham ⚡ Wrote: These belong to a turboer.
Here is the hybrid-analysis: https://www.hybrid-analysis.com/sample/4f858c3c7f2fabea2f493d9bd7c85f098836b535e43a06385f78cca125901133?environmentId=100
What are your thoughts?
It's labeled as Riskware.HackTool.Agent which is a potentially unwanted application. It's not likely it's malicious, but there is a chance, hence the usage of the word "riskware".
* - Aura - Jun 7, 2017
It's useless to upload .rar archive to VirusTotal.
Also:
Code
Generic CIL Executable (.NET, Mono, etc.) (63.1%)