topic Re: Polymorphic virus cannot be detected in wildfire in Advanced Threat Prevention Discussions

Polymorphic virus cannot be detected in wildfire

AjaySinghIT — Wed, 13 Oct 2021 08:14:33 GMT

The polymorphic virus is not detected by Palo alto's wildfire and it gave it verdict as benign which not safe as the virus contains code for PowerShell exploit.

Here is the link for the scan result:

https://www.virustotal.com/gui/file/677b16ab91657bb6a161fe8edbb5b358988f03eb2974f8f895eaf9734da0d730/detection

Re: Polymorphic virus cannot be detected in wildfire

OtakarKlier — Wed, 13 Oct 2021 18:23:56 GMT

Hello,

I would say open a support case for this.

Regards,

Re: Polymorphic virus cannot be detected in wildfire

ymiyashita — Fri, 15 Oct 2021 02:39:41 GMT

Thank you for reporting this. Currently, Palo Alto Networks is working on the coverage.

Re: Polymorphic virus cannot be detected in wildfire

mivaldi — Wed, 27 Oct 2021 21:23:05 GMT

We've worked on our detection logic in WildFire to improve coverage of these samples. Thank you for reporting the issue.

Re: Polymorphic virus cannot be detected in wildfire

Daniel06 — Wed, 24 Nov 2021 11:20:10 GMT

Everything is very open with a clear description of the issues. It was truly informative. Your website is very helpful. Many thanks for sharing!