Reply to thread

Message

<blockquote data-quote="Shadowra" data-source="post: 997882" data-attributes="member: 92939">Hello,To answer quickly about MalwareBazaar, I use this site when I have to sample my packs.Only, as [USER=38832]@upnorth[/USER]&nbsp; says, many of them are broken or not malicious (they can say it&#039;s a RAT when it&#039;s a Putty clean...)Personally, I ALWAYS test and analyze my samples before use. I use VirusTotal, AnyRun and a dedicated VM.If the file does nothing, it goes in the trash. If vice versa, I integrate it.It takes me 1 hour of sampling, but at least I have quality samples.For F-Secure, I had already noticed this new detection during my video test.I&#039;ve also seen detection in Kwala during JS, either via DeepGuard or in the Cloud.I think they need to give it time. I don&#039;t think F-Secure only uses abuse.ch, I think they must have a network of Honeypot or others to fish for malware and improve detection.And I think [USER=86910]@struppigel[/USER] &#039;s detailed it well <img class="smilie smilie--emoji" loading="lazy" alt="😉" title="Winking face&nbsp; &nbsp; :wink:" src="https://cdn.jsdelivr.net/joypixels/assets/6.6/png/unicode/64/1f609.png" data-shortname=":wink:" /></blockquote>

[QUOTE="Shadowra, post: 997882, member: 92939"] Hello, To answer quickly about MalwareBazaar, I use this site when I have to sample my packs. Only, as [USER=38832]@upnorth[/USER] says, many of them are broken or not malicious (they can say it's a RAT when it's a Putty clean...) Personally, I ALWAYS test and analyze my samples before use. I use VirusTotal, AnyRun and a dedicated VM. If the file does nothing, it goes in the trash. If vice versa, I integrate it. It takes me 1 hour of sampling, but at least I have quality samples. For F-Secure, I had already noticed this new detection during my video test. I've also seen detection in Kwala during JS, either via DeepGuard or in the Cloud. I think they need to give it time. I don't think F-Secure only uses abuse.ch, I think they must have a network of Honeypot or others to fish for malware and improve detection. And I think [USER=86910]@struppigel[/USER] 's detailed it well 😉 [/QUOTE]

Verification