I send a ransomware at the time 0 Av not able to identified.But now it got 15/56.I send the file to virus@avast[dot]com with password “virus”
VT link is:https://www.virustotal.com/en/file/1e5aaf36445c79f8b4211d6fe19a56bff43ebf964d8520d1f876eb1453e323ac/analysis/1443671461/
Pls any one from Avast! team can confirmed this?
In the latest VT results page you can read terms like PossibleThreat.P0 and many times you stumble on the term Generic and Packed. So it could be a generic detection and those detections are less decisive and the term packed could mean it is a packer detection that can come wrongly interpreted, so you see the detection for these reasons can be accident prone.
However I am not an Avast Team Member and just base my volunteer comment on the VT report info in from 59 minutes ago. Moreover it says there : “The file being studied follows the Open XML file format! More specifically, it is a Office Open XML Document file.” as it is a Microsoft Office Word detected. The file being studied is a compressed stream! Details about the compressed contents follow. 4 greens give,
This seems the latest word from an analysis done 19 hours ago: https://www.hybrid-analysis.com/sample/1e5aaf36445c79f8b4211d6fe19a56bff43ebf964d8520d1f876eb1453e323ac?environmentId=1
Sample was identified as clean by Antivirus engines Verdict there were suspicious indicators, Final Verdict:
no specific threat Threat Score: 6 / 100
1e5aaf36445c79f8b4211d6fe19a56bff43ebf964d8520d1f876eb1453e323ac
Submitted on September 30th 2015 13:57:21 (CDT) with target system Windows 7 32 bit
Report generated by VxStream Sandbox v2.50 © Payload Security
So I think you do not need any additional reaction here,
polonus