Author Topic: Malware submissions  (Read 2174 times)

0 Members and 1 Guest are viewing this topic.

wildman424

  • Guest
Malware submissions
« on: October 22, 2011, 11:27:04 AM »
avast!: all
OS: all

   
Trojan.Banker

File name: Calculations.exe
Submission date: 2011-10-22 05:08:59 (UTC)
First seen: 2011-10-20 23:10:22
Last seen : 2011-10-22 05:08:59
VT Results: 22/ 43 (51.2%)
MD5: 896844c546b9d9d493ef0020ca9bb981
http://www.virustotal.com/file-scan/report.html?id=a550af7e152a14405577c720077a2193c8d7cf6bcbbe571818929ad83672bbc4-1319260139

======

Backdoor:Win32/Hupigon.CK

File name: 10.exe
Submission date: 2011-10-22 07:47:07 (UTC)
First seen: 2011-10-21 14:21:20
Last seen : 2011-10-22 07:47:07
Result: 18/ 43 (41.9%)
MD5: 9c128b0dc4110d7c834cd606fe608fa7
http://www.virustotal.com/file-scan/report.html?id=419514e38425946efa95832e6bc895dbdb546f8b255ca9141ffe744bb683dd13-1319269627

this file may also be tainted with Virut ????

=======

files submitted: 22.10.2011 11:24
Ticket ID: ABK-315577

Online DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 89159
  • No support PMs thanks
Re: Malware submissions
« Reply #1 on: October 22, 2011, 02:23:09 PM »
Your VT links don't appear to work, they are just opening the default VT submissions page. So I don't know if that is an isue at VT or a problem with the links.

These seem to work: http://www.virustotal.com/file-scan/report.html?id=a550af7e152a14405577c720077a2193c8d7cf6bcbbe571818929ad83672bbc4-1319159757
http://www.virustotal.com/file-scan/report.html?id=419514e38425946efa95832e6bc895dbdb546f8b255ca9141ffe744bb683dd13-1319206880

Send the sample/s to avast as a Undetected Malware:
Open the chest and right click in the Chest and select Add, navigate to where you have the sample and add it to the chest (see image). Once in the chest, right click on the file and select 'Submit to virus lab...' complete the form and submit, the file will be uploaded during the next update. Note: manually adding to the chest doesn't remove them from the original location, so they still have to be dealt with in that location.
Or
Send the sample to virus (at) avast (dot) com zipped and password protected with the password in email body, a link to this topic might help and undetected malware in the subject.

EDIT: addition of VT URLs, based on MD5s.
« Last Edit: October 22, 2011, 02:27:26 PM by DavidR »
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.4.6112 (build 24.4.9067.762) UI 1.0.803/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

wildman424

  • Guest
Re: Malware submissions
« Reply #2 on: October 22, 2011, 09:31:52 PM »
Your VT links don't appear to work, they are just opening the default VT submissions page. So I don't know if that is an isue at VT or a problem with the links.

These seem to work: http://www.virustotal.com/file-scan/report.html?id=a550af7e152a14405577c720077a2193c8d7cf6bcbbe571818929ad83672bbc4-1319159757
http://www.virustotal.com/file-scan/report.html?id=419514e38425946efa95832e6bc895dbdb546f8b255ca9141ffe744bb683dd13-1319206880

Send the sample/s to avast as a Undetected Malware:
Open the chest and right click in the Chest and select Add, navigate to where you have the sample and add it to the chest (see image). Once in the chest, right click on the file and select 'Submit to virus lab...' complete the form and submit, the file will be uploaded during the next update. Note: manually adding to the chest doesn't remove them from the original location, so they still have to be dealt with in that location.
Or
Send the sample to virus (at) avast (dot) com zipped and password protected with the password in email body, a link to this topic might help and undetected malware in the subject.

EDIT: addition of VT URLs, based on MD5s.

sorry bout the VT links, the first one works but the second one seems to be broken. the VT links you posted based on the MD5's are correct.

these two samples have been submitted through support Ticket ID: ABK-315577 & Ticket ID: RFB-173666


Online DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 89159
  • No support PMs thanks
Re: Malware submissions
« Reply #3 on: October 22, 2011, 10:23:28 PM »
But does your support ticket allow for the attachment of the samples ?

If not then the physical sample should be sent as outlined.
Or
- There is an on-line contact form, http://www.avast.com/contact-form.php?loadStyles for:  * Sales inquiries; Technical issues; Website issues; Report false virus alert in file; Report false virus alert on website; Undetected Malware; Press (Media), issues.

If reporting a undetected malware, then select that option and using the Browse... button, navigate to the file.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.4.6112 (build 24.4.9067.762) UI 1.0.803/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security