Home / Analysis / Malware / Malware Analysis / Pafish / Sandbox / Windows / Pafish - Tool to Detect Sandboxes and Analysis Environments in the Same Way as Malware Families Do

Pafish - Tool to Detect Sandboxes and Analysis Environments in the Same Way as Malware Families Do

| Post sponsored by FaradaySEC | Multiuser Pentest Environment

Pafish is a demonstration tool that employs several techniques to detect sandboxes and analysis environments in the same way as malware families do.
The project is open source, you can read the code of all anti-analysis checks.

Scope
The objective of this project is to collect usual tricks seen in malware samples. This allows us to study them, and test if our analysis environments are properly implemented.

Build
Pafish is written in C and can be built with MinGW (gcc + make).
Check out "How to build" for detailed instructions.

Author
Alberto Ortega (@a0rtega - profile)

You can also download the executable of the latest stable version.

Pafish - Tool to Detect Sandboxes and Analysis Environments in the Same Way as Malware Families Do Pafish - Tool to Detect Sandboxes and Analysis Environments in the Same Way as Malware Families Do Reviewed by Zion3R on 6:43 PM Rating: 5