Sandbox Detection

2024-08-05

Sandboxing is a dynamic detection method in which the scrutinized file (or sample) is executed within a contained environment (sandbox). The behavior of the file is observed and determined to be safe or malicious.

Many malware samples employ anti-sandbox techniques that will detect whether or not a sample is running within a sandbox and alter its execution flow accordingly.


No notes link to this note