Kaspersky says Patcher isn't malware, but Intezer says it shares code with DarkHotel Spyware

[Studynx]

Free Automated Malware Analysis Service - powered by Falcon Sandbox (hybrid-analysis.com)

 

VirusTotal - File - e4152620b9c4b5ebb73678d6c8aedddd784a41f80412dcd1d89527e3160f756a

 

Malicious Generic Malware Macrium_Reflect-7.x_8.x-patch.exe - Intezer

 

 

What do I do?

[Berny]

@Studynx Welcome.

Please submit the object on KOT and ask for reanalyze.

[harlan4096]

That's a risky tool since it's a patcher -> crack / activator!

[Studynx]

On 1/2/2023 at 1:50 PM, harlan4096 said:

That's a risky tool since it's a patcher -> crack / activator!

So why does that make it a risky tool?

[Studynx]

On 1/2/2023 at 1:21 PM, Berny said:

@Studynx Welcome.

Please submit the object on KOT and ask for reanalyze.

Kaspersky Threat Intelligence Portal — Report — E4152620B9C4B5EBB73678D6C8AEDDDD784A41F80412DCD1...

[Berny]

@Studynx

Please “Submit to reanalyze” ?

[Studynx]

8 minutes ago, Berny said:

@Studynx

Please “Submit to reanalyze” ?

i did, how long till i get a reply

[Berny]

@Studynx 

It depends , my personal experience is between 2 hrs and 12 hrs/24 hrs.

[Studynx]

22 minutes ago, Berny said:

@Studynx 

It depends , my personal experience is between 2 hrs and 12 hrs/24 hrs.

Will I get the reply via email?

[Berny]

@Studynx

Yes, you will receive an email from a Kaspersky Virus Lab collaborator.

[Studynx]

On 1/14/2023 at 11:13 PM, Berny said:

@Studynx

Yes, you will receive an email from a Kaspersky Virus Lab collaborator.

I still haven't revceived anything

[Berny]

@Studynx  Please resubmit.

[Studynx]

4 hours ago, Berny said:

@Studynx  Please resubmit.

Done.

[Berny]

@Studynx

Without reply please contact Kaspersky Technical Support.

[Studynx]

5 hours ago, Berny said:

@Studynx

Without reply please contact Kaspersky Technical Support.

how do i contact them?

[Berny]

@Studynx

Please follow these steps 

→ https://support.kaspersky.com/b2c#contacts 
→ Contact us → Product help → E-mail → Contact Support
→ Request Type ? → Select "Malware"
→ Contact Support

[Studynx]

16 hours ago, Berny said:

@Studynx

Please follow these steps 

→ https://support.kaspersky.com/b2c#contacts 
→ Contact us → Product help → E-mail → Contact Support
→ Request Type ? → Select "Malware"
→ Contact Support

Still no response from support AT ALL. Are you guys playing a prank on me? Why am I paying you guys?

[harlan4096]

I resent the patcher file yesterday and got this reply:

 

Quote

Hello,

No malicious software was found in the attached file.

Best regards, D. S., Malware Analyst
39A/3 Leningradskoe Shosse, Moscow, 125212, Russia Tel./Fax: + 7 (495) 797 8700 http://www.kaspersky.com https://securelist.com
https://opentip.kaspersky.com/ - get insights about suspicious files, hashes, URLs, IP addresses or domain names

[Studynx]

2 hours ago, harlan4096 said:

I resent the patcher file yesterday and got this reply:

 

Why did they not help me tho? I appreciate your attempt very much, tyvm 

 

Literally these moronic customer helpdesk employees asked me to give them a screenshot of the error. I asked them WHAT error? This isn't about an error, this is about whether the file is malicious or not. I sent them the file in a ZIP format, I gave them the 3 links to the results: Intezer, VirusTotal, HybridAnalysis. They asked me for a screenshot of the error message. I told them again that there wasn't any. So I sent them a screenshot of the 3 test results each. Have yet to hear back from them. But at this point thanks to you, I don't require that any longer.

 

Can you please tell me how can I get the MALWARE SPECIALISTS to analyze the files I am curious of? Because helpdesk wasn't of any use to say the least. I have an active subscription to KTS, I paid for the license etc. 

[harlan4096]

Sent via KOTIP

[Studynx]

17 minutes ago, harlan4096 said:

Sent via KOTIP

That's what I did, too, yet somehow my ticket went to Helpdesk