Hard Configurator - may 2019 report

[AlanOstaszewski]

Hard Configurator report for may 2019

1. Containment: KVM/QEMU
2. Windows: 10 LTSB
3. VPN: CyberGhost
4. Product: Windows SmartScreen (activated by Hard_Configurator with recommended SRP and restrictions)
5. Office: LibreOffice (standard settings)

Disclaimer: Experimental setup for testing effectiveness of Windows SmartScreen and script restrictions against 0-day malware samples. This test is suitable for users with above-average knowledge of Windows' built-in security features.

may 2019	Amount of samples	Samples that have harmed the system/ changed system configuration	Files aren't touched/encrypted
Malware Samples #13	13	0	yes
Malware Samples #23	23	0	yes
Mixed Threats #20 (10/05/2019)	20	0	yes

Hard_Configurator by @Andy Ful

 

[Av Gurus]

Do all those (malware) files have "Unblock" unchecked (picture)?

 

[Andy Ful]

Do all those (malware) files have "Unblock" unchecked (picture)?

View attachment 213324

You can test any EXE file after ticking "Unblock". If you run it normally, then SmartScreen will not be triggered. If you use "Run As SmartScreen or "Run By SmartScreen" the SmartScreen will be triggered, anyway. That is why I call this "Forced SmartScreen".

 

[Av Gurus]

I try to run (normal) i got block by admin but after that when i check Properties that options is not there any more.

 

[Andy Ful]

I try to run (normal) i got block by admin but after that when i check Properties that options is not there any more.

View attachment 213325

Using Unblock bypasses SmartScreen but not SRP. The "Run As SmartScreen" feature bypasses SRP, but obligatory forces SmartScreen.
Whatever you will do, you are protected.

 

[AlanOstaszewski]

Do all those (malware) files have "Unblock" unchecked (picture)?

View attachment 213324

Even if the question has already been answered: I recorded a short video where I show uncut downloading samples and their properties (a few things I had to censor).



tl;dr:
the samples don't have a mark of the web because I use 7-zip