Reply to thread

Message

<blockquote data-quote="danb" data-source="post: 1015877" data-attributes="member: 62850">Thank you for the samples!&nbsp; I see they have already been analyzed, but here are the results for RedLine in case anyone is interested...[ATTACH=full]271471[/ATTACH][ATTACH=full]271472[/ATTACH]as [USER=93786]@ScandinavianFish[/USER] pointed out, files that are artificially inflated to files sizes greater than 500 MB can be problematic for cloud analysis (including WLC).&nbsp; From what I have seen and read, most malware samples have tiny file sizes so they are quick and the download is not interrupted.&nbsp; I think the stat is something like 90% of all malware is less than 1 MB.&nbsp; Thankfully VoodooAi properly detected both samples in this case.&nbsp; But the problem is that there just are not that many large malware samples in the wild to add to the VoodooAi training data set.&nbsp; So I am guessing that ML / Ai is much smarter than we think <img src="data:image/gif;base64,R0lGODlhAQABAIAAAAAAAP///yH5BAEAAAAALAAAAAABAAEAAAIBRAA7" class="smilie smilie--sprite smilie--sprite110" alt=";)" title="Wink&nbsp; &nbsp; ;)" loading="lazy" data-shortname=";)" />.We could increase the WLC file size limit from 500 MB to 2,000 MB, I am going to check into that.&nbsp; Thank you guys!</blockquote>

[QUOTE="danb, post: 1015877, member: 62850"] Thank you for the samples! I see they have already been analyzed, but here are the results for RedLine in case anyone is interested... [ATTACH type="full" alt="RedLine1.PNG"]271471[/ATTACH] [ATTACH type="full" alt="RedLine2.PNG"]271472[/ATTACH] as [USER=93786]@ScandinavianFish[/USER] pointed out, files that are artificially inflated to files sizes greater than 500 MB can be problematic for cloud analysis (including WLC). From what I have seen and read, most malware samples have tiny file sizes so they are quick and the download is not interrupted. I think the stat is something like 90% of all malware is less than 1 MB. Thankfully VoodooAi properly detected both samples in this case. But the problem is that there just are not that many large malware samples in the wild to add to the VoodooAi training data set. So I am guessing that ML / Ai is much smarter than we think ;). We could increase the WLC file size limit from 500 MB to 2,000 MB, I am going to check into that. Thank you guys! [/QUOTE]

Verification