Self-Made Fortran Malware Analysis

Status
Not open for further replies.
Shadowra said:
Why do all the malware analysis topics become a platform for promoting Comodo through their fans?...
There's plenty of software out there, some of which has protected...
Click to expand...
I know sir it's malware analysis topic, I just normally asked ( normal enquiry )
 
  • Like
Reactions: Shadowra
anirbandutta01 said:
Again no verified badge. I don't know what's my fault? Sometimes it's showing verified sometimes not It was just normal enquiry not promoting Comodo. @Jack I'm sorry if I'm worng.
Click to expand...

No, don't worry :)
It's just that I too often see Comodo fans polluting topics with their favorite antivirus :)
 
  • Like
  • Wow
Reactions: roger_m, Captain Awesome, CloudyDefense and 1 other person
Okay I think it's quite debatable topic that which antivirus will performs well at analyzing unknown apps. I don't want to mention any name but all we know which antivirus softwares really performs very well.
 
  • Like
  • +Reputation
Reactions: Game Of Thrones and Shadowra
anirbandutta01 said:
Okay I think it's quite debatable topic that which antivirus will performs well at analyzing unknown apps. I don't want to mention any name but all we know which antivirus softwares really performs very well.
Click to expand...
yeah, the one which some say its name some not, it's like the you know who in Harry Potter world. The K one... much less damage to the system and controlled the situation.
 
  • Like
Reactions: Captain Awesome, harlan4096 and anirbandutta01
Changed hash and while most of the AV's miss it at least with static detection, Firefox (Google Safe Browsing) got me protected
Screenshot 2024-12-26 212934.png
😄
 
  • Like
  • HaHa
Reactions: Captain Awesome, simmerskool, harlan4096 and 3 others
Why did DeepInstinct not detect the modified file? It seems to me like their "AI detection" is just matching signatures and no analysis is taking place.
 
  • HaHa
Reactions: simmerskool
hybrid analysis Is my favorite since its interactive real time, and any.run if you get accepted to have an account
 
  • Like
Reactions: simmerskool

VirusTotal

VirusTotal
www.virustotal.com www.virustotal.com

Code: 
https://bazaar.abuse.ch/browse/tag/472b3c/
This malware uses Javascript and it popup now it's OUR pc message. It changes your admin rights (probably from user settings instead of my technique) so you can't run admin programs anymore. Part of NovaSentiel malware family. Currently it's no longer fully undetectable malware because it has 3 detections right now. I have the malware sample right now. It literally tries to disable your antivirus.
 
Last edited by a moderator:
XylentAntivirus said:
This malware uses Javascript and it popup now it's OUR pc message. It changes your admin rights (probably from user settings instead of my technique) so you can't run admin programs anymore. Part of NovaSentiel malware family. Currently it's no longer fully undetectable malware because it has 3 detections right now. I have the malware sample right now. It literally tries to disable your antivirus.
Click to expand...
FUD as of current time stamp.
  • Avira/F-Secure
  • Microsoft
 
  • Like
Reactions: HydraDragonAntivirus
Status
Not open for further replies.

You may also like...