topic Re: VirusTotal False positive - Go langage files in VirusTotal

VirusTotal False positive - Go langage files

GSoude — Fri, 07 May 2021 15:21:10 GMT

Hello

We are using Prisma-Cloud in our company and some of our custom-made binaries are detected by Palo-Alto WildFire as Malwares.
It may be linked to the fact those exe files are developed in Go. Go seems to be famous to mess-up with anti-malwares systems.

I have no idea how to submit those files for analysis to Palo-Alto.

Please find the VirusTotal reports:

Any help on this subject would be apreciated.

regards

Re: VirusTotal False positive - Go langage files

hisingh — Fri, 14 May 2021 22:43:25 GMT

Hello @GSoude

Both the files are marked as benign. please login virus total and rescan.

In the future, please open a support case with PaloAlto for False Positive, here is a link to KB : https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000Cm3aCAC

Himani

Re: VirusTotal False positive - Go langage files

GSoude — Mon, 17 May 2021 07:52:03 GMT

We are not using the Palo Alto Firewall but their Cloud Security solution (Prisma Cloud)
I had to connect to Palo Alto Wildfire portal and upload the samples. Within the portal I was able to declare the files as false positives.

Thanks

Re: VirusTotal False positive - Go langage files

hisingh — Mon, 17 May 2021 14:34:45 GMT

That is another process to submit FPs. Thank you for the verification.