Malware That Detects Sandbox

I've been reading articles about how far malware and rootkits have evolved. I had no idea that some of the more advanced ones can detect if it's running in a sandbox and thus shut down before it can be analyzed or scanned. Upon further research I found something that can detect this behavior but it only works if you're running Sandboxie. Here's a link to the article: Buster Sandbox Analyzer Makes Sandboxie Stronger | Raymond.CC Blog

I have enclosed snapshots of a crypter that can detect all of the top virtual environment softwares. Also, If anyone knows of other software that can defeat the stealth mode of malware in a sandboxed environment, please contribute your knowledge to this post.

This is bad news. I tought I was safe with my sandbox. By the sound of it, it won't be solved by an update of sandboxie. Still, a sandbox probably safer than no sandbox.

Edit: I was wondering... if you deleted the sandbox with the malware, the malware would be gone, right?

Quote:

---

Originally Posted by CS Curse

Edit: I was wondering... if you deleted the sandbox with the malware, the malware would be gone, right?

---

Depends on what the malware is set to do. If it merely refuses to run inside a sandbox, just wipe it and it's gone... if it can bypass the sandbox and infect the rest of the system, that should speak for itself.