You can have Rising engine in this second opinion scanner. I use it for quite a while now. Really like it: X-Sec Antivirus
Self-Made Fortran Malware Analysis
- Thread starter HydraDragonAntivirus
- Start date
Malware Analysis Archive
140 Replies
21,298 Views
- Status
Exactly the results with checkpoint and every other av software as changing the hash the sample makes it undetected by every av software
I'm now thinking about K7 / K7 MAT...when will it detect such type of Malware attack?
very unlikely you can try
By changing the hash of the sample above as so far no av was able on detection so far with a fresh hash
Tried virus scope and sent to open tip both failed with a new hash
Testing it now on K7. Its very tricky for every AVs
With a new hash ?
As everyone detects the original one
Please share testing details
Not detecting by K7 antivirus at the moment but Data locker did block but not fully.
Attachments
Last edited:
Dreams&Visions
Level 2
Can someone fire it up against AppCheck AntiRansomware Free (signatureless additional layer)?
Why my post
Sure.
No luck with AppCheck! It failed without doing anything to protect.
Dreams&Visions
Level 2
Thank you for checking!No luck with AppCheck! It failed without doing anything to protect.
Did expect more from AppCheck actually!
No problem.
It's very hard. But latest they(appcheck free) should give some Popup that something is happening but not a single alert.
I hope K7 will add detection of the Malware. Let's seeNo problem.
Hum 
... the method of changing the hash just editing the exe, and adding for example 2 letters "xx" at the end of the code, and save, it is not the best way to do so, since it directly makes the executable unusable:
So no, the way of modifing the hash with Notepad is not valid, it should be via changing the programming code...
... the method of changing the hash just editing the exe, and adding for example 2 letters "xx" at the end of the code, and save, it is not the best way to do so, since it directly makes the executable unusable:So no, the way of modifing the hash with Notepad is not valid, it should be via changing the programming code...
You can submit the file to K7 for further analysis. Check it out. ( Check 2nd link also )
K7 file submission
K7 ticket for file submission
I know the drill...
already submitted today and they will do the deep analysis.
Have you submitted?I know the drill...
I submitted at 12 pm Indian Standard Time and
K7 already detected by Trojan(0001140e1). 
Attachments
Last edited:
Dreams&Visions
Level 2
We had the same ideaI submitted at 12 pm Indian Standard Time and
Surprised it's still the 24th in India
It's 26th here in Germany, 1 PM
Submission was done about 3 hours ago
- Status
Recently browsing
Members who viewed this thread in the last 5 minutes
You may also like...
-
Question Malicious Emulator? -
-
-
-
