New RAT Shows 'Snake' Campaign Still Active

Question

New RAT Shows 'Snake' Campaign Still Active: Researchers....
After analyzing the new threat, which they have dubbed "ComRAT,"
In version 3.26, the author changed the key and remove the known file name
This action can be an indication for the developer’s effort to hide this connection
ComRAT is more complex and cleverer. The malware is loaded into each and every process of the infected machine and the main part (payload) of the malware is only executed in explorer.exe. Furthermore, the C&C communication
blends into the usual browser traffic and the malware communicates to the browser by named pipe. It is by far a more complex userland design than Agent.BTZ.
MD5:
0ae421691579ff6b27f65f49e79e88f6    (dropper v3.26)
255118ac14a9e66124f7110acd16f2cd    (lib1 v3.26)
b407b6e5b4046da226d6e189a67f62ca    (lib2, v3.26)
8ebf7f768d7214f99905c99b6f8242dc    (dropper, unknown version)
9d481769de63789d571805009cbf709a    (dropper, unknown version)
83a48760e92bf30961b4a943d3095b0a    (lib 64-Bit, unknown version)
ea23d67e41d1f0a7f7e7a8b59e7cb60f    (lib 64-Bit; unknown version)
Command and control
weather-online.hopto.org
webonline.mefound.com
sportacademy.my03.com
easport-news.publicvm.com
new-book.linkpc.net
Questions :
We have analyzed all the MD5 values, but Microsoft FEP doesn’t have signature to Detect this Variant(but other AV vendors have detected this Variant).
So we need to know, when Microsoft will come with updated signature to detect this new variant??
Sample :
https://www.virustotal.com/en-gb/file/a89f27758bb6e207477f92527b2174090012e2ac23dfc44cdf6effd539c15ada/analysis/
Complete report of this malware below :
https://blog.gdatasoftware.com/blog/article/the-uroburos-case-new-sophisticated-rat-identified.html.

Answer 1

I checked the address of virustotal and it indicated that Microsoft will detect it as
Backdoor:Win32/Turla.Q , when look into details of this malware in Microsoft Malware Protection Center:
http://www.microsoft.com/security/portal/threat/encyclopedia/entry.aspx?Name=Backdoor%3aWin32%2fTurla.Q
It is known from Nov 13, 2014 and later on. So FEP should be able to detect it.
However, if you still believe there is a sample of this malware or any other malware which won't detect by FEP or any other Microsoft Anti-Malware products, you could submit sample to Microsoft Malware Protection Center:
https://www.microsoft.com/security/portal/submission/submit.aspx