Hardware information, such as CPU speed and RAM allotment, and networking configurations, such as the MAC and IP addresses of the host’s network interfaces, can indicate to malware that it’s operating in a lab environment. Additionally, malware can use these pieces of information to establish context within its operating environment. In this chapter, we’ll discuss the techniques that malware might use to gather this information and evade detection.
Hardware and Device Configurations
System hardware configurations can provide valuable information to a malware sample that it can use to determine ...
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month, and much more.
