- Feb 19, 2015
- 47
A quick question regarding uploading malware samples to the virus exchange.
So far, all samples that I've posted to the virus exchange, at the time of posting them, were very fresh samples (not necessarily zero-days, but, active within 24 hours of my posting them), but, I also have quite a number of older samples that I'd found prior to my joining here at MalwareTips (I've joined quite recently); Specifically, I'm thinking about a small set that are between one and two years old and which I believe are still active in the wild (the scan history for these files on Virus Total indicates regular checks of these files over the course of that time, the latest of them being about a week back), and which have a current detection ratio (as per indicated on Virus Total) of around ~30/56 to ~40/56 (so, mostly pretty good and mostly pretty covered, but with a small selection of vendors still not detecting them).
It is stated within the guidelines for posting samples to the virus exchange that samples shouldn't be older than 30 days ("Please DO NOT post malware samples that are older than 30 days"). These older samples that I'm specifically thinking of; As per following the guidelines and based upon what else I've written here about them, should I not bother about them, or would it still be worthwhile submitting them?
So far, all samples that I've posted to the virus exchange, at the time of posting them, were very fresh samples (not necessarily zero-days, but, active within 24 hours of my posting them), but, I also have quite a number of older samples that I'd found prior to my joining here at MalwareTips (I've joined quite recently); Specifically, I'm thinking about a small set that are between one and two years old and which I believe are still active in the wild (the scan history for these files on Virus Total indicates regular checks of these files over the course of that time, the latest of them being about a week back), and which have a current detection ratio (as per indicated on Virus Total) of around ~30/56 to ~40/56 (so, mostly pretty good and mostly pretty covered, but with a small selection of vendors still not detecting them).
It is stated within the guidelines for posting samples to the virus exchange that samples shouldn't be older than 30 days ("Please DO NOT post malware samples that are older than 30 days"). These older samples that I'm specifically thinking of; As per following the guidelines and based upon what else I've written here about them, should I not bother about them, or would it still be worthwhile submitting them?