According to Seculert, the new Dyre sample they’ve analyzed is designed to check the number of processor cores on the infected machine. Since most modern PCs have at least two cores, a single core could indicate the presence of a sandbox. That is because sandboxes are usually configured to use only one core in order to save resources.
latest insights
seculert blog
Dyre Banking Trojan Counts Processor Cores to Detect Sandboxes
According to Seculert, the new Dyre sample they’ve analyzed is designed to check the number of processor cores on the infected machine. Since most modern PCs have at least two cores, a single core could indicate the presence of a sandbox. That is because sandboxes are usually configured to use only one core in order to save resources.
categories
- chevron_right In the Media (82)
- chevron_right News & Media (82)
- chevron_right Resources (17)
- chevron_right Press Releases (12)
- chevron_right Webinars (9)
- chevron_right Blog (5)
- chevron_right White Papers (4)
- chevron_right Reports (3)
- chevron_right 2015 (2)
- chevron_right Events (2)
- chevron_right Product (2)
- chevron_right 451 Report (1)
- chevron_right Black Hat, Security Analytics (1)
- chevron_right Brochures & Datasheets (1)
- chevron_right Gateway Attack Detection (1)
- chevron_right In the News (1)
- chevron_right Javelin (1)
- chevron_right Javelin Attack Simulator (1)
- chevron_right Uncategorized (1)
social widget
recent post
-
An Acquisition is Akin to a Rollercoaster Ride
Feb 15, 2017 9:32:37 PM -
Let’s Hack an Election, Shall We?
Nov 2, 2016 1:55:28 AM -
Nymaim: Deep Technical Dive - Adventures in Evasive Malware
Oct 11, 2016 3:30:00 PM
Dyre Banking Trojan Counts Processor Cores to Detect Sandboxes
Posted by
Liora on May 1, 2015 4:44:58 PM
Topics: News & Media, In the Media