Will XAMAS(Xcitium Automated Malware Analysis Service) be added to Xcitium Verdict Cloud?

84

hi @Nik

I got feedback from the team and they said that this is the normal behavior and there is no issues, those are PE file attributes and there might be some modification like, debug version, packer, crypted and so on. Also having a few suspicious attributes it doesn’t mean the file/sample needs to have final verdict as malware.

85

no i said that PE Sections are not suspicious like in 2016 or 2017 i have seen that it was SUSPICIOUS but now it doesnt work so pls fix it

86

I will check with the team for PE section

1 Like
87

also how can Xcitium rate this as Clean if its rated from SLA as Malicious???

image
image1366×768 98.7 KB

88

@Nik

kindly share the sha1 , our team will look into it and analyse and mark the file accordingly.

89

Regarding the PE section our Valkyrie team analysed the images and shared their feedback as " ndata it is a section which will contain the unpacked code from the installer , and entropy can also point to an installer or an packer, these are informational and not decisive when marking a sample as malware "

90

e7af06c555fa086172b595631de59bd006aae2c6 SHA1

91

no no no you did not understand me The latest PE Sections wont label as SUSPICIOUS and i saw in 2016 or 2017 it was SUSPICIOUS so thaths the problem that the team needs to fix

92

about XAMAS

image
image1366×768 117 KB

it works perfectly

1 Like
93

I conveyed to the Valkyrie team to validate the details and investigate further .

1 Like
94

@nivedithab and fix Static Analysis Overall Verdict and Analysis Problem

95

@QuickSilverST i have analysed ur sample called ada.exe Xcitium Cloud Verdict
image

96

@nivedithab also sub to @QuickSilverST JITech Solutions - YouTube

97

@nik
The team has informed that the issues will be fixed in the newer version of Verdict when it is released.

Regarding the malware file the team will be analysing it.

1 Like
98

So Static Analysis Overall Verdict and PE Sections and Analysis Problem will be fixed in the new version of Verdict Cloud

99

@nivedithab right the team said that?

100

as per the team the issue should be resolved in the newer version.

1 Like
101

and PE Sections will be also SUSPICIOUS in the new version of Verdict Cloud
wow nice @nivedithab thx

102

I will recheck with team again to ensure that the issues are resolved in newest version . I have already shared the screenshot and other details with the team

1 Like
103

image
image1366×768 92.2 KB

, could you check this file again from your end