Will the study of harmfulness be interesting?

Question

Malware

I appeal to all habrausers.

You may be aware that SafeZone provides training on how to help victims of malware .

The third course of study provides for an independent study of the harmfulness of files. A relatively new direction, but already now several participants are approaching release.
ateliers.

In the plan - at the end of the training, ask the participants to analyze some actual infection, which was not considered in detail by viruslabs in their open reviews.

At the same time, the participant must describe in detail how and with what the analysis was carried out, what was found and what it can cause.

Of course, no one will claim the professionalism of specially trained virus analysts, so to speak - information and research from advanced users.

The question is: would it be interesting to publish such reports here, in the "Viruses and antiviruses" section? Or is it a habrasociety “with a mustache themselves”, and is it better to read the opinion of professionals than without five minutes of students?

Please speak up, if I expressed something incomprehensibly - I will try to explain. Your answers and opinions are important so that the link topics in Habré are the most desirable and interesting for readers.

Answer 1

Publish, of course. We'll see and discuss there.

Answer 2

Sometimes I have fun by finding viruses (in spam / when searching for something I need / on my friends' computers) and launching a virtual machine with ida, but it quickly gets boring, because nothing sensible has yet been found, and some “viruses” were so crooked that they had to be patched to run >_< (for example, one virus looked for hosts in Windows along the path %WINDIR%\etc\hosts).
And on the question - write (especially if something worthwhile, and not just another creation of shkolota).

Answer 3

I'll add a small digression. Due to the specifics of the preparation, the analysis will shift more towards the functional plane than the “technical execution” of the malware.