here are zcodec, setup-Zlob, and MediaCodec, same over and over again.
put some strong heuristic at those POLYMorphic samples .. or else all thus variant will NEVER be detected by BD2009.
/applications/core/interface/file/attachment.php?id=3915" data-fileid="3915" rel="">AAA_New_UNKNOWN_malware_s.rar