Reply to thread

Message

<blockquote data-quote="gxt123" data-source="post: 1016898" data-attributes="member: 98247">Andrezj thank you for your response. Is there another sandbox you can recommend? By the way... is there really any added value in using a sandbox (I mean, I know there is, but in my case.... I don&#039;t really need the extra information it provides, like API sequences, hashes etc.). I just want a safe environment to install and analyse ransomware (but I will analyse it with my own detection system). In this case, is a sandbox still required or can I just install the ransomware samples in my virtualbox (Windows 7/10) and restrict internet access with NAT (or maybe I should install Windows as a guest in my host Ubuntu VM). I don&#039;t know.. I&#039;m a little confused <img src="data:image/gif;base64,R0lGODlhAQABAIAAAAAAAP///yH5BAEAAAAALAAAAAABAAEAAAIBRAA7" class="smilie smilie--sprite smilie--sprite109" alt=":)" title="Smile&nbsp; &nbsp; :)" loading="lazy" data-shortname=":)" />To be honest, I&#039;m a little afraid that ransomware can, without a sandboxed environment, escape from the virtual environment.</blockquote>

[QUOTE="gxt123, post: 1016898, member: 98247"] Andrezj thank you for your response. Is there another sandbox you can recommend? By the way... is there really any added value in using a sandbox (I mean, I know there is, but in my case.... I don't really need the extra information it provides, like API sequences, hashes etc.). I just want a safe environment to install and analyse ransomware (but I will analyse it with my own detection system). In this case, is a sandbox still required or can I just install the ransomware samples in my virtualbox (Windows 7/10) and restrict internet access with NAT (or maybe I should install Windows as a guest in my host Ubuntu VM). I don't know.. I'm a little confused :) To be honest, I'm a little afraid that ransomware can, without a sandboxed environment, escape from the virtual environment. [/QUOTE]

Verification