I'm learning malware analysis. I'm looking for malware samples that terminate themselves when recognize working on a VM or sandbox.
Thanks.
Reverse Engineering Stack Exchange is a question and answer site for researchers and developers who explore the principles of a system through analysis of its structure, function, and operation. It only takes a minute to sign up.
Sign up to join this communityI'm learning malware analysis. I'm looking for malware samples that terminate themselves when recognize working on a VM or sandbox.
Thanks.
For learning purposes, I would recommend you the following Github projects to start with:
Paranoid Fish by a0rtega
https://github.com/a0rtega/pafish
Al-Khaser v0.60 by Noteworthy
https://github.com/LordNoteworthy/al-khaser
or
Colection by AlicanAkyol
https://github.com/AlicanAkyol/sems
Grab one you like, compile and analyze.
In case you look for in the wild samples, you should look at Andromeda\Gamarue bot. It have a plenty of anti tricks, including anti-VM, anti-Sandbox, anti-research etc.
https://github.com/a0rtega/pafish is old but it is good tool. https://github.com/AlicanAkyol/sems is current. You can use it.