Simple Anti-Sandbox Technique: Where's The Mouse?, (Fri, Feb 23rd)

Malware samples have plenty of techniques to detect if they are running in a “safe” environment. By safe, I mean a normal computer with a user between the keyboard and the chair, programs running, etc. These techniques are based on checking the presence of specific processes, registry keys, or files. The hardware can also be a good indicator (are some devices present or not?)

Article Link: https://isc.sans.edu/diary/rss/30684

1 post - 1 participant

Read full topic

chair computer detect environment etc files keyboard keys malware mouse normal presence processes registry running safe sandbox simple techniques