Microsoft Defender and other Anti Virus software detect trojan:win32/wacatac.b!ml and other threats.
AmitSri
Posts: 1 New member
After securing the .net executable using the SmartAssembly 8.0 Software. Windows Defender detects "trojan:win32/wacatac.b!ml" in the upload executable. There are other executables as well, those are working fine and no threat detect in that.
We have scanned the executable using the online tool suggested in the following link. it detected other threats please check the attached screen shot. Please let us know the solution. We have also submitted the binary to Microsoft Defender Portal for review.
https://forum.red-gate.com/discussion/87927/antivirus-blocks-smart-assembly
https://www.virustotal.com/
We have scanned the executable using the online tool suggested in the following link. it detected other threats please check the attached screen shot. Please let us know the solution. We have also submitted the binary to Microsoft Defender Portal for review.
https://forum.red-gate.com/discussion/87927/antivirus-blocks-smart-assembly
https://www.virustotal.com/
Tagged:
Answers
All obfuscation software is periodically marked by automated protection patterns because bad actors often obfuscate their payloads to improve the odds it will bypass detection. The false positive typically only lasts a short time until they are updated.
If you scan it with another security product that uses different patterns it likely won't be flagged. Your diligence is much appreciated; if you remain concerned please hold off on using at first while the patterns are updated and MS review.