Malware Collections

Im testing Sunbelt VIPREs detection rate. Ive found one archive of 6500 samples from 2008 and before and so far its not so good. All the files are 100% virus/malware and there is 0% chance of a false positive so what ever isnt detected will be submitted to them.

With default settings out of 6,345 files, VIPRE detected 3385 samples, leaving behind 2,960 infections. Total detection rate so far is 46.65%.

 

Probably from SSupdater
There is too many dead malware on this file.
All anti-malware vendors has this file, many user submitted it many times.
Maybe i am wrong, but i remember SSupdater posts, "do it yourself"...

 

So SSUpdater is a site?

I dont care if the files are detected or not. Im looking for large collections of 5,000+ that I can scan against and test the detection rate of VIPRE. What ever it doesnt detect Ill submit to Sunbelt.

 

Yeah many are dead I also tested their samples against many AV and not every files was detected despite being so old.

 

What is he talking about? I dont understand.

 

What didn't you understand

 

This. Is SSUpdater a website with a collection database I can download?

 

They have some DIY malware collections for people to test their AV's

 

You can download those malware samples if you want just sign in their forums

NOTE: They have outdated samples so possible you may search from MDL for your testing

 

Whats MDL? Can you PM me a link? I know we arent supposed to post the links in the forums. They dont have collections at MDL and its forbidden in the rules to ask for collections.

Wow thanks. Now where do I find them. Google isnt helping.

 

Nowadays the problem with malware collections is they take a lot of space so it´s a problem finding a place to host them and also it´s a problem the required time to upload.

A collection with just a few samples (around 5000) can take easily over 1 GB.

 

Just write SSupdater and you will find it

 

MDL is great, but I have not automated tools to collect samples from there. It takes a lot of effort to grab every sample from there.

 

~~ post moderated - inappropriate request removed ~~

 

I have 5995 Unique samples (Some Bit Old) and it takes about 350 MB...I haven't added my March, April and Latest May samples in it...

All these malwares are renamed by me according to their MD5...

 

Perhaps we should open up our own site with collected malware samples for testing purposes only.

 

By the way how you guys keep your samples safe?

I keep them safe by using the trailing steps:-

1. At first i change their name with their MD5 and convert them into non-executable format.
2. After that, i put all of them into RAR file with Password Protection.
3. After putting them into RAR file, i change the RAR file extension to .RA_
4. After changing the extension, i again put them into another RAR folder with Different Password.
5. And if necessary i put it into ISO file, and burn into CD or DVD.

Please share your steps....It will be helpful for all of us..

 

That would be an excellent "IDEA"

An IDEA can change your LIFE !!

 

I'm a tad bit more rock 'n roll when it comes to storing malware samples. I just archive them in .rar with a secure password.

 

Oh man !! You are really daring person ....

 

You bet!
As I am the only person using this computer I must be hardcore rock n roll!
Anyhow, I'm going to test Immunet 2.0 when it's pre-released within a few hours. Going to do all sort of weird stuff to it. I'm going to crash it totally until it's stable. Gonna be epic.

 

also see (4th post in particular)
https://www.wilderssecurity.com/showthread.php?p=1657452

 

I encrypt them and that is it.

 

BTW have you received the Link of Immunet 2.0?

 

Encrypt? Which encryption software you use?