Reply to thread

Message: <blockquote data-quote="Trident" data-source="post: 1129006" data-attributes="member: 99014">You think you are downloading samples no older than 24 hours but when these samples were created, when were they distributed first and when exactly someone decided to upload them, these are 3 different dates/times.Using scripts usually is a viable way to test indeed, but you have very little information whether or not they really did something malicious, or the process just launched, detected something and did nothing. Sometimes you’d think that “executables are detected” but it will be an executable (specially if signed or inflated) that will evade detection.Furthermore, not everything on these portals is malicious. Often, some riskware/testware is uploaded.To really draw some viable conclusions, you need various portals and malware types.</blockquote>

Top