False negative?

gmurrant

Our company has been getting frequent suspicious emails with attachments lately. Always from random senders, and always disguised as OneNote files. When we scan with BD they always appear safe - but I'm not convinced. I have zipped and uploaded here for analysis.

Sample attachment removed by @Flexx as per community guidelines.

Scott

Hi @gmurrant

Your file may be submitted here. It is against forum policies to post possible malware files on the forum.

https://www.bitdefender.com/consumer/support/answer/29358/

Regards,

Scott

Flexx

Sample has been shared with malware research team. The file submitted is indeed malicious. Below is the virustotal link.

https://www.virustotal.com/gui/file/fdb1fd4e0a1fbbe6ca480cdc6dd2e7df9a564ba27ca21bf07a442abfbf2ce291?nocache=1

Regards

Flexx

https://community.bitdefender.com/en/discussion/comment/321220#Comment_321220

As checked, the detection has been created for the shared samples by the malware researchers.

Regards