Reply to thread

Message

<blockquote data-quote="Trident" data-source="post: 1046066" data-attributes="member: 99014">There is a difference within the detection engines and also, the final report (if certain number of stations are licensed) will include detailed information about why the file has been classified malicious. But nowhere it is mentioned that anti-evasion tactics are different and more sophisticated.A sandbox/emulator is only as good as its resistance to evasion is, as malware authors can check various hardware and software parameters to determine they run on VM. The Pafish project is one that heavily studied artefacts that could he checked to realise it is emulation.Evasions.checkpoint.com is based around this project but adds more on top.In conclusion, tools like Eset LiveGuard and Avast CyberCpature provide false sense of security. They display messages like “Good news from threat labs, the file is safe” when the malware most likely just exited and didn’t do anything. When you run it, it will be another story.</blockquote>

[QUOTE="Trident, post: 1046066, member: 99014"] There is a difference within the detection engines and also, the final report (if certain number of stations are licensed) will include detailed information about why the file has been classified malicious. But nowhere it is mentioned that anti-evasion tactics are different and more sophisticated. A sandbox/emulator is only as good as its resistance to evasion is, as malware authors can check various hardware and software parameters to determine they run on VM. The Pafish project is one that heavily studied artefacts that could he checked to realise it is emulation. Evasions.checkpoint.com is based around this project but adds more on top. In conclusion, tools like Eset LiveGuard and Avast CyberCpature provide false sense of security. They display messages like “Good news from threat labs, the file is safe” when the malware most likely just exited and didn’t do anything. When you run it, it will be another story. [/QUOTE]

Verification