Public malware techniques used in the wild: Virtual Machine, Emulation, Debuggers, Sandbox detection.

• UpdatedJan 12, 2025
• C++

Evasions encyclopedia gathers methods used by malware to evade detection when run in virtualized environment. Methods are grouped into categories for ease of searching and understanding. Also provided are code samples, signature recommendations and countermeasures within each category for the described techniques.

• UpdatedJul 10, 2024
• HTML

A tool to detect and crash Cuckoo Sandbox

• UpdatedJul 22, 2024
• C

.NET Project containing plenty of advanced techniques to detect various types of malicious actions on your software, with syscall support.

• UpdatedJan 26, 2025
• C#

This script allows you to create various artifacts on a bare-metal Windows computer in an attempt to trick malwares that looks for VM or analysis tools

• UpdatedJul 31, 2024
• Python

Detects virtual machines and malware analysis environments

• UpdatedOct 18, 2022
• C++

Detect virtual environment

• UpdatedApr 25, 2019
• C#

Anti Virtulization, Anti Debugging, AntiVM, Anti Virtual Machine, Anti Debug, Anti Sandboxie, Anti Sandbox, VM Detect package.

• UpdatedFeb 20, 2025
• Python

Some anti QEMU trick used by in-the-wild malware.

• UpdatedAug 14, 2015
• C++

• UpdatedOct 14, 2016

Some anti-sandbox techniques implemented in Golang.

• UpdatedMar 8, 2024
• Go

Binary obfuscation, anti-reversing, anti-debugging and av-bypass framework for Windows

• UpdatedMay 30, 2024
• Go

A pintool for protecting a sandbox application of common anti-virtualmachine and anti-sandbox detection techniques

• UpdatedJun 13, 2023
• C++

Apate performs anti-debugging, anti-VM and anti-sandbox tests, to see if your linux system is able to stay under the radar.

• UpdatedApr 27, 2022
• C

Effective cloud sandbox detection from ring 3

• UpdatedJan 17, 2024
• C

This repository contains the c# code which is using latest persistence technique and multiple anti-vm, anti-sandboxes techniques. Creating persistence by using WindowsApps folder, schtasks, powershell cmdlet (Get-Variable).

• UpdatedMay 18, 2024
• C#

Public malware techniques used in the wild: Virtual Machine, Emulation, Debuggers, Sandbox detection.

• UpdatedOct 20, 2021
• C++

#seccamp 2014 CTF softsec (Reverse 400pt)

• UpdatedAug 16, 2014
• C

Attempts to trick malware using techniques from NavyTitanium/Fake-Sandbox-Artifacts

• UpdatedJun 22, 2024
• Java

This repo consists of a malware attack strategy, using encoding and encryption algorithms. Inspiration was taken from the BEEP malware, but implementation is varied.

• UpdatedJun 13, 2024
• C++