Reply to thread

Message

<blockquote data-quote="AlanOstaszewski" data-source="post: 775490" data-attributes="member: 64646">[USER=53544]@RoboMan[/USER] Please don&#039;t be angry with me. But I noticed a VERY BAD error during your test. (I also made this mistake earlier and many other testers in the HUB also make this mistake).In minute 1:49 you can see that the Virtualbox process is running (driver).Today you can assume that each sample checks earlier if it is in a virtual environment. So a &quot;smart&quot; sample in a virtual machine does not cause anything if it detects a virtual environment. If you install the virtualbox drivers and don&#039;t harden the virtual machine settings, you can assume that the sample won&#039;t do any bad things.And if the sample doesn&#039;t do bad things, Windows Defender and all other anti-virus software can&#039;t detect anything!You can run this program in your VM and send us the log. <a href="https://github.com/LordNoteworthy/al-khaser" target="_blank">LordNoteworthy/al-khaser</a></blockquote>

[QUOTE="AlanOstaszewski, post: 775490, member: 64646"] [USER=53544]@RoboMan[/USER] Please don't be angry with me. But I noticed a [B]VERY BAD[/B] error during your test. (I also made this mistake earlier and many other testers in the HUB also make this mistake). In minute 1:49 you can see that the Virtualbox process is running (driver). Today you can assume that each sample checks earlier if it is in a virtual environment. So a "smart" sample in a virtual machine does not cause anything if it detects a virtual environment. If you install the virtualbox drivers and don't harden the virtual machine settings, you can assume that the sample won't do any bad things. And if the sample doesn't do bad things, Windows Defender and all other anti-virus software can't detect anything! You can run this program in your VM and send us the log. [URL='https://github.com/LordNoteworthy/al-khaser']LordNoteworthy/al-khaser[/URL] [/QUOTE]

Verification