Reply to thread

Message

<blockquote data-quote="Shadowra" data-source="post: 1052880" data-attributes="member: 92939">Tried it quickly and was rather disappointed.The product is nice and so is the interface, but I noticed several problems.Note that I used an old malware pack to see how the software would behave.Here&#039;s what I noticed:- The interface is quite nice and clear. However, there are still translation problems. On one alert, I saw symbols in Chinese, which can be disturbing. The software tries to guide, but can make bad decisions.Example on this TDSS Rootkit once installed.[SPOILER=&quot;Rootkit&quot;]&nbsp;&nbsp; [ATTACH=full]277804[/ATTACH]&nbsp;&nbsp; [/SPOILER]- On the RATs, it&#039;s clearly bad...I quickly built a NanoCore-RAT which I encrypted with a crypter and selected to inject MSBuilder.exe and connect directly to one of my VPS servers. No reaction (I forgot to screen, sorry)- On this test, I decide to run PolyRanson, a Ransomware that also releases ViraLock. The software tries to block the launch of the Ransomware, but after 2 minutes of struggle, the Ransomware launches...[SPOILER=&quot;PolyRansom&quot;]&nbsp;&nbsp; [ATTACH=full]277805[/ATTACH]&nbsp; [/SPOILER]And to conclude, the software lacks maturity and has very few rules.On the other hand, it did block my JS, VBS and HTA attacks, and the same in PowerShell, but it lacks rules for other malware...I&#039;ll make a video about it later, but I strongly advise against using it on its own...Why not use it as a second protection with Microsoft Defender, for example.</blockquote>

[QUOTE="Shadowra, post: 1052880, member: 92939"] Tried it quickly and was rather disappointed. The product is nice and so is the interface, but I noticed several problems. Note that I used an old malware pack to see how the software would behave. Here's what I noticed: - The interface is quite nice and clear. However, there are still translation problems. On one alert, I saw symbols in Chinese, which can be disturbing. The software tries to guide, but can make bad decisions. Example on this TDSS Rootkit once installed. [SPOILER="Rootkit"] [ATTACH type="full"]277804[/ATTACH] [/SPOILER] - On the RATs, it's clearly bad... I quickly built a NanoCore-RAT which I encrypted with a crypter and selected to inject MSBuilder.exe and connect directly to one of my VPS servers. No reaction (I forgot to screen, sorry) - On this test, I decide to run PolyRanson, a Ransomware that also releases ViraLock. The software tries to block the launch of the Ransomware, but after 2 minutes of struggle, the Ransomware launches... [SPOILER="PolyRansom"] [ATTACH type="full"]277805[/ATTACH] [/SPOILER] And to conclude, the software lacks maturity and has very few rules. On the other hand, it did block my JS, VBS and HTA attacks, and the same in PowerShell, but it lacks rules for other malware... I'll make a video about it later, but I strongly advise against using it on its own... Why not use it as a second protection with Microsoft Defender, for example. [/QUOTE]

Verification