I don't think this is related to VT. This is more related to the engines, how (in terms of time distribution) the trojans are detected across different engines, and somehow related to maths and statistics.
yea...but those working at VT work with malware....so they may be able to give you the answer