Certain malicious files contain anti-VM/anti-sandbox to check for certain registry keys, processes, cpu instructions, mac addresses, etc in order to tell if the system is virtual. I am trying to make my own honeypot and wondering if there is a way I can prevent the antis from anti my VM. I use VMware Workstation 12.
[Question] Can I anti-anti VM/Sandbox? |
Can you elaborate a little on what you want?
![♦ [̲̅$̲̅(̲̅1000)̲̅$̲̅] ♦](https://hackforums.net/images/mobale/default_avatar.png){kind=avatar} (Oct 15, 2016 01:59 PM)Elitas Wrote: Can you elaborate a little on what you want? He is asking, if the malware has "Anti-VM/Anti-Sandboxie" can he trick his VM and/org Sandboxie into looking like a REAL PC, so the malware will still execute. (Oct 15, 2016 05:18 PM)♦ [̲̅$̲̅(̲̅1000)̲̅$̲̅] ♦ Wrote: He is asking, if the malware has "Anti-VM/Anti-Sandboxie" can he trick his VM and/org Sandboxie into looking like a REAL PC, so the malware will still execute. Yes, this is what I meant, sorry if I jumbled my question illegibly |
|
|
