Malware That Detects Sandbox

[BrianBosworth]

I've been reading articles about how far malware and rootkits have evolved. I had no idea that some of the more advanced ones can detect if it's running in a sandbox and thus shut down before it can be analyzed or scanned. Upon further research I found something that can detect this behavior but it only works if you're running Sandboxie. Here's a link to the article: Buster Sandbox Analyzer Makes Sandboxie Stronger | Raymond.CC Blog

I have enclosed snapshots of a crypter that can detect all of the top virtual environment softwares. Also, If anyone knows of other software that can defeat the stealth mode of malware in a sandboxed environment, please contribute your knowledge to this post.

[CS Curse]

This is bad news. I tought I was safe with my sandbox. By the sound of it, it won't be solved by an update of sandboxie. Still, a sandbox probably safer than no sandbox.

Edit: I was wondering... if you deleted the sandbox with the malware, the malware would be gone, right?

[anon]

Edit: I was wondering... if you deleted the sandbox with the malware, the malware would be gone, right?

Depends on what the malware is set to do. If it merely refuses to run inside a sandbox, just wipe it and it's gone... if it can bypass the sandbox and infect the rest of the system, that should speak for itself.