- Jan 6, 2022
- 435
You need any good analysts? If anyone does please reach out. Not kidding here. Talent needs to be properly used.
Mystic Stealer Bypassing Sandboxes
- Thread starter Sandbox Breaker
- Start date
- Feb 7, 2023
- 1,737
Let's see how it will go, I will definitely remember your offer.
- Jan 6, 2022
- 435
I've got a guy from Xcitium who just clicks "Yes or No".
I also have a guy who right clicks... Clicks Advanced Options... Then... Wait for it...
Max Settings... Then thinks he's secure.
- Feb 7, 2023
- 1,737
Definitely sounds like security there is well understood and top priority as well. Just like Xcitium understands malware. Let me link malware analysis from them here.I've got a guy from Xcitium who just clicks "Yes or No".
I also have a guy who right clicks... Clicks Advanced Options... Then... Wait for it...
Max Settings... Then thinks he's secure.
Error: the requested resource doesn't exist.
- Jan 6, 2022
- 435
- Jul 26, 2015
- 263
I could help with Sophos products: Got a full lab setup here with Sophos XGS Firewall Appliance and Sophos Intercept X Advanced with XDR for Threat-Hunting.
The Sandbox with Zero-Day Protection is quite good
The Sandbox with Zero-Day Protection is quite good
- Jan 6, 2022
- 435
Let's see if the British can flag Mystic.I could help with Sophos products: Got a full lab setup here with Sophos XGS Firewall Appliance and Sophos Intercept X Advanced with XDR for Threat-Hunting.
The Sandbox with Zero-Day Protection is quite good
- Feb 7, 2023
- 1,737
Never doubt us. But it's flagged by static and genome analysis, it has evaded the true sandbox.
Intelix Portal
- Jul 26, 2015
- 263
- Feb 25, 2017
- 2,504
On their new Analysis Platform Sophos Intelix it's flagged as malicious. Static and Dynamic.
- Feb 25, 2017
- 2,504
- Feb 7, 2023
- 1,737
I see only static features and file attributes. On the report nothing looks like the true behaviour of the file was reached. But nevertheless, it is detected.
- Jan 6, 2022
- 435
Wow. What the hell is with sandboxes today. This is why I run ChromeOS enterprise. I don't believe a SOC or vSOC should ever use Windows. Seems like those who really "know" agree with that .Never doubt us. But it's flagged by static and genome analysis, it has evaded the true sandbox.
Intelix Portal
intelix.sophos.com
- Feb 7, 2023
- 1,737
- Jul 26, 2015
- 263
- Feb 7, 2023
- 1,737
One thing I can straight away notice from 2 screenshots you've posted is that Sophos generates AWFUL lot of noise.
- Jan 6, 2022
- 435
- Jan 6, 2022
- 435
- Feb 7, 2023
- 1,737
Considering this is a pre-execution detection of known malware described in Sophos IDE, yeah. Insane doesn't even touch it.
