Hack Forums
[Question] Can I anti-anti VM/Sandbox? - Printable Version

+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Blackhat • Red Team • Offensive Security (https://hackforums.net/forumdisplay.php?fid=447)
+---- Forum: Keyloggers (https://hackforums.net/forumdisplay.php?fid=113)
+---- Thread: [Question] Can I anti-anti VM/Sandbox? (/showthread.php?tid=5433837)



[Question] Can I anti-anti VM/Sandbox? - SIM-2096295 - Oct 14, 2016

Certain malicious files contain anti-VM/anti-sandbox to check for certain registry keys, processes, cpu instructions, mac addresses, etc in order to tell if the system is virtual. I am trying to make my own honeypot and wondering if there is a way I can prevent the antis from anti my VM. I use VMware Workstation 12.


* - Elitas - Oct 15, 2016

Can you elaborate a little on what you want?


* - ♦ [̲̅$̲̅(̲̅1000)̲̅$̲̅] ♦ - Oct 15, 2016

(Oct 15, 2016 01:59 PM)xHackerPr0 Wrote:  Can you elaborate a little on what you want?


He is asking, if the malware has "Anti-VM/Anti-Sandboxie" can he trick his VM and/org Sandboxie into looking like a REAL PC, so the malware will still execute.


* - SIM-2096295 - Oct 15, 2016

(Oct 15, 2016 05:18 PM)♦ [̲̅$̲̅(̲̅1000)̲̅$̲̅] ♦ Wrote:  He is asking, if the malware has "Anti-VM/Anti-Sandboxie" can he trick his VM and/org Sandboxie into looking like a REAL PC, so the malware will still execute.

Yes, this is what I meant, sorry if I jumbled my question illegibly