[clamav-users] ClamAV malware report: include info from Malwr?

Matteo Dessalvi m.dessalvi at gsi.de
Wed Nov 16 14:58:38 UTC 2016


Sure, I can use other sites too. My question was:
would the folks at ClamAV benefit from these
analysis?

I don't know how much automated the submission
process is: I guess it will anyhow run an analysis
on the submitted file, so maybe including these
links is not particularly useful to decide if the
submitted sample has to be included in the
signatures or not (assuming there's an actual
human being which will make the final decision
at the end).

Regards,
    Matteo

On 11/16/2016 03:35 PM, Steve Basford wrote:
> On Wed, November 16, 2016 1:56 pm, Matteo Dessalvi wrote:
>
>> It ended up to be just the first step in order to download the
>> real malware:
>>
>> https://malwr.com/analysis/MzVkNzAzYjBiOTJhNDlmODhkZjRiY2EwY2EwOWZhZWE/
> I Guess you could post links to other sites too...
>
> eg:
>
> https://www.hybrid-analysis.com/sample/42afe1bfcf2ec48aa2fb293b637d8df2033504ec98fe5944167187f19899ddb4?environmentId=100
>
> https://virustotal.com/en/file/2586f39b57bd74439b539abe51b686389526047c806f059413602767f98d864d/analysis/
>
>





More information about the clamav-users mailing list