Serious Discussion Are antiviruses unimportant?

[Khushal]

I think it is a bug, the lack of emulation report.

It's engine like Kaspersky is unable to deobfuscate the sample and identify the attack pattern.

 

[Trident]

It's engine like Kaspersky is unable to deobfuscate the sample and identify the attack pattern.

It doesn’t use Kaspersky.

 

[Khushal]

It doesn’t use Kaspersky.

I meant that like Kaspersky's engine it failed to understand disassembly of sample. I know it uses twin engine, it's own and Sophos. Btw Sophos has failed this test as well.

 

[Divine_Barakah]

Anyone can try Emsisoft?

 

[Khushal]

Anyone can try Emsisoft?

B.B. fails , BD engine heuristics detects it.

 

[Divine_Barakah]

B.B. fails , BD engine heuristics detects it.

Is the executable signed?

 

[Khushal]

Avast ignores it, AVG would likely do the same.

They have added signature. I do appreciate their responsiveness whenever i send them the sample.

 

[Khushal]

Is the executable signed?

Nah

 

[Divine_Barakah]

Nah

I find this absurd. Emsisoft on my device generate an unacceptable number of FPs from BB and yet it failed this test. Nice.

 

[rashmi]

i can send if you want.

Can you send me the ransom sample? PM me.

 

[andytan]

Can you send me the ransom sample? PM me.

me as well please

 

[Dr. Wells]

I cant share anymore friends, sorry.

if mods allow me, i will share source code publicly.

 

[Khushal]

I meant that like Kaspersky's engine it failed to understand disassembly of sample. I know it uses twin engine, it's own and Sophos. Btw Sophos has failed this test as well.

Sophos has added signature.

 

[Dr. Wells]

@Trident @Shadowra @Khushal I have a theory about cloud based analyse;

As you can see, virustotal behavioral analyse cant analyse file because virus cant work if SmartAssembly not installed, then cloud based analyse can be late and if it's developed more or another way etc etc, Creating a virus that can make cloud-based analyse late and not need to another program to work can be possible.


Virus cant work without SmartAssembly so KSN cant run on their server so KSN Cant analyse or another cloud system.

 

[Khushal]

View attachment 285239

View attachment 285240


@Trident @Shadowra @Khushal I have a theory about cloud based analyse;

As you can see, virustotal behavioral analyse cant analyse file because virus cant work if SmartAssembly not installed, then cloud based analyse can be late and if it's developed more or another way etc etc, Creating a virus that can make cloud-based analyse late and not need to another program to work can be possible.


Virus cant work without SmartAssembly so KSN cant run on their server so KSN Cant analyse or another cloud system.

Kaspersky Threat Intelligence Portal

Kaspersky Threat Intelligence Portal allows you to scan files, domains, IP addresses, and URLs for threats, malware, viruses

opentip.kaspersky.com

 

[mlnevese]

McAfee seems to have evolved a lot this last year or so. Mainly after they released their cloud version. I think they want to play with the big boys once more...

 

[Divine_Barakah]

McAfee seems to have evolved a lot this last year or so. Mainly after they released their cloud version. I think they want to play with the big boys once more...

I'm planning to move to McAfee once my Emsisoft license runs out. McAfee is too light and not bloated, even if the interface is cluttered, you only have a couple of process running in Task Manager.

 

[rashmi]

The COMODO Firewall, The Deadpool of Cybersecurity, effortlessly contained it, with no antivirus swordplay necessary, ensuring RanSomWare RanNoWhere!

 

[Khushal]

Kaspersky Threat Intelligence Portal

Kaspersky Threat Intelligence Portal allows you to scan files, domains, IP addresses, and URLs for threats, malware, viruses

opentip.kaspersky.com

It has added detection few hours back. Here's the same old gibberish which i received on mail:
Hello,

New malicious software was found in the attached file. Its detection will be included in the next update.
Trojan-Ransom.MSIL.Agent
Thank you for your help.
Best regards, ____, Malware Analyst, Kaspersky

 

[Kongo]

Detected by Deep Instinct static analysis