AVLab.pl 19th edition of protection test against malicious software

[wat0114]

1. Download the potential threat, detonate it in the test sandbox, and confirm that it is malicious.

Isn't a lot of malware sandbox and/or VM-aware, so it just lies dormant when one attempts to launch it in these environments?

 

[Andy Ful]

Isn't a lot of malware sandbox and/or VM-aware, so it just lies dormant when one attempts to launch it in these environments?

The AV labs try to fool malware and malware creators try to fool AV labs. I think that @Adrian Ścibor and Malware Hub testers can say something more about this issue than I could.