🔒 I need help checking if a file is ratted or not i've been sent, its a .rar file, message me

[wispy coral]

Thanks.

[long nimbus]

@wispy coral

Python help channel opened

Remember to:

• Ask your Python question, not if you can ask or if there's an expert who can help.
• Show a code sample as text (rather than a screenshot) and the error message, if you've got one.
• Explain what you expect to happen and what actually happens.

:warning: Do not pip install anything that isn't related to your question, especially if asked to over DMs.

Closes after a period of inactivity, or when you send !close.

[scarlet swallow]

What u mean ratted?
U can start it in a virtual machine and see what happens

[wispy coral]

how

no like

idk if the file is trustworthy

like if i run it or some

will it destroy my pc

?

so im wondering if u could check it for me

[scarlet swallow]

Start it in a VM without wifi and nothing can get out of there

[wispy coral]

he sent it in a .rar file, is it safe for me

to

download it

idk how to do that

is it safe for me

to download it

the .rar file

without running anything

[scarlet swallow]

In a vm the vm can be dead but the host machine never will

[wispy coral]

idk what that means

could u check

the

.rar

on it/

[scarlet swallow]

Read on virtual machines i think thats what u want

[wispy coral]

yeah but

i cant code

nor read it

so

can u check it for me

[scarlet swallow]

Why?

[wispy coral]

wdym, why

bc im

starting out

with html

and

css

so

[scarlet swallow]

Ok i mean why cant u do it

All u need is to download something like virtualbox and an iso for the os u want to test on

Than start the iso in virtualbox

[wispy coral]

i dont know

how to even detect

a

rat

or code

?

[scarlet swallow]

Than on the virtual computer run the code

[wispy coral]

like i dont know nothing

yeah idk how to do allthat

n how to be safe

so im hoping someone

cna check the file for me

real quick

[scarlet swallow]

I can on ubuntu but im saying no prior knowledge needed to test just u have to wait a long time the first time starting ur vm

Can u like send me a link to it or something?

[wispy coral]

ikk

yeah but

look

[hasty lichen]

It's not 100% safe to use a vm

[wispy coral]

he sent me it like this wait

[hasty lichen]

How did you get the file?

[scarlet swallow]

I didn't know that good to know

[wispy coral]

is it safe to download it

?

[hasty lichen]

Probably not

[willow harbor]

use virus checker like https://www.virustotal.com/gui/home/upload

[wispy coral]

yeah but is it safe

to get the

.rar

[hasty lichen]

What did they said it does?

[wispy coral]

without executing it as an exe

discord raidbot or something

idk

python thing

idrk

can they get my stuff

if i download the .rar

[hasty lichen]

Yeah, it's rare, but viruses can use vulnerabilities in the environment to escape the vm 🙂

[willow harbor]

doubt he will get virus or whatever powerful enough to bypass VM

[hasty lichen]

Sure, but still, they might not detect it's a virus

[wispy coral]

so can i download the .rar

or how do i send it here

then

[cyan island]

as a rule of thumb, 99% of all skid scripts out there probably have malware

[hasty lichen]

If you just download it, probably not, but I wouldn't run it if I were you

[wispy coral]

not run it

alr

understood

[cyan island]

You might be able to send it to the two or three cybersec individuals that come around here, but generally this sort of thing borders closely to rule 5.

[wispy coral]

so

i have

the file

whatnow

[wispy coral]

could you

check the file

or

[cyan island]

I could check the script, but again, given the nature of what this software likely is (or what it intends to do), I will opt out because 1) while I may be able to provide some insight, I'm not a malware researcher but also 2...

From the context provided, this is also the kind of script that would not only border our rule 5 policy on term-infringing software pretty closely but is also the kind of vector an attacker would use to distribute something malicious. In general, as recommended, you check the software through either VirusTotal or a VM.

As another rule of thumb, if you suspect something is malicious, DO NOT RUN IT. And if it's too good to be true, it probably is.

That's my input.

[plucky jacinth]

@twin pike

[twin pike]

🗿

[wispy coral]

could u help

[wispy coral]

alright do I send it to you in dms?

[twin pike]

What is the context?

Someone sent you a random archive via DMs and its a raidbot?

[wispy coral]

no

someone sent me a .rar raidbot cuz i was asking what he was using so i can raid a server that posts minors nude

[plucky jacinth]

<@&831776746206265384>

[twin pike]

Not the best way to go about that.

Report the server to Discord, they take that stuff very seriously

[silver lynx]

!warn 1168968935853522997 never ask about this again. Read our #rules and #code-of-conduct

[long nimbus]

:incoming_envelope: :ok_hand: applied warning to @wispy coral.

[silver lynx]

!close

[long nimbus]

Python help channel closed

This help channel has been closed and it's no longer possible to send messages here. If your question wasn't answered, feel free to create a new post in #1035199133436354600. To maximize your chances of getting a response, check out this guide on asking good questions.