anti-emulation

There are 6 repositories under anti-emulation topic.

• LordNoteworthy / al-khaser

  Public malware techniques used in the wild: Virtual Machine, Emulation, Debuggers, Sandbox detection.

  anti-analysisanti-debugginganti-disassemblyanti-emulationanti-sandboxanti-vmav-bypasscode-injectionmalwaresandbox-evasiontiming-attacks
  Language:C++ 5561

• strazzere / anti-emulator

  Android Anti-Emulator

  androidemulatormalwareanti-emulationreverse-engineeringjava
  Language:Java 770

• CheckPointSW / Evasions

  Evasions encyclopedia gathers methods used by malware to evade detection when run in virtualized environment. Methods are grouped into categories for ease of searching and understanding. Also provided are code samples, signature recommendations and countermeasures within each category for the described techniques.

  evasionsanti-analysisanti-vmanti-emulationanti-sandboxmalwaresandbox-evasionvm-detect
  Language:HTML 362
• Fake-Sandbox-Artifacts

  NavyTitanium / Fake-Sandbox-Artifacts

  This script allows you to create various artifacts on a bare-metal Windows computer in an attempt to trick malwares that looks for VM or analysis tools

  antivmdetectionanti-analysisanti-vmanti-emulationmalware-researchanti-sandboxsandbox-detectiondeception-defense
  Language:Python 183

• bezzad / AntiDebugging

  .Net Framweork and .Net Core Anti Debugging to stop multiple malicious tools and hooks on your software.

  antidebugantidebuggingnet-antidebugantidumpanti-virtualmachineantivmanti-emulation
  Language:C# 33

• jnastarot / ice9

  ice9 - is anticheat based on usermode tricks and undocumented methods , builded as dll for loading trought the shibari framework

  anti-debugginganti-cheatanti-injectanti-emulation
  Language:C 19

• ntddk / blue

  Some anti QEMU trick used by in-the-wild malware.

  anti-analysisanti-debugginganti-sandboxanti-vmanti-emulationmalware
  Language:C++ 12