[mothered]

Using a VM, an advanced method Is executing the given file (thus It runs In memory), take a memory snapshot and then perform a memory acquisition (dump) and save It onto the HDD In the form of a dump file.

The dump file can be analyzed thereafter for any malicious content.

[lsp]

Some awesome answers, thanks. VM sandbox escaping is an interesting subject.

[Blink]

As @Silence said, it is possible for malware to break out of VMs.

However, it should be noted that this behavior isn't found often.

[Courage]

As @Silence said, it is possible for malware to break out of VMs.

However, it should be noted that this behavior isn't found often.

Question, what malware does this? I haven't heard of this happening and I'm quite curious. Is there RATs that are capable of this, probably not commercial ones?

[Blink]

As @Silence said, it is possible for malware to break out of VMs.

However, it should be noted that this behavior isn't found often.

Question, what malware does this? I haven't heard of this happening and I'm quite curious. Is there RATs that are capable of this, probably not commercial ones?

https://web.archive.org/web/201302022233...-host.html
http://www.securityweek.com/vupen-method...tack-hosts
http://www.infoworld.com/article/2632990...ation.html


It's mostly hypothetical, so you'll rarely see it.

[alexfruir93]

Hi, here!
for what purpose do you use it? I think it's harmless, the main thing is to buy from a trusted seller with license.
There is a development of custom application development  for your purposes. Install on the computer application read the instructions and enjoy it with pleasure

[Bish0pQ]

Hi, here!
for what purpose do you use it? I think it's harmless, the main thing is to buy from a trusted seller with license.
There is a development of custom application development  for your purposes. Install on the computer application read the instructions and enjoy it with pleasure

If you click the username (https://sinister.ly/User-lsp) you can see that the user hasn't been online for almost more than 6 months. I don't know whether this is considered gravedigging, since you're adding information to the thread, but try to be careful cause you can get your warning level raised because of grave digging.