Matt Wixey, Senior Associate, PwC talks about detecting and bypassing sandboxes at CRESTCon
Matt Wixey, Senior Associate, PwC talks about detecting and bypassing sandboxes at CRESTCon.
Summary
PwC red-team interview on custom malware that detects and bypasses organizational sandboxes during engagements. Tool checks for sandbox presence, exits if isolated, or attempts escape; tested against six antivirus emulators with successful detection.
Related talks
CREST Videos·36 min
Matt Wixey
SandGrox: Detecting and bypassing sandboxes - Matt Wixey, PwC:.
Black Hat·54 min
Silvio Cesare
Engineers explore architecture and security mechanisms for USA 2013 - Bugalyze.com - Detecting Bugs Using Decompilation and Data Flow Analysis.
botconf eu·40 min
Erwan Chevalier · Guillaume Couchard
Engineers explore architecture and security mechanisms for When a botnet cries: detecting botnets infection chains - Erwan Chevalier; Guillaume Couchard.