cuckoo-modified VS pafish

This sent me down the rabbit hole on defeating this... I cannot stand this sort of authoritarian horsesh...

Defeating malware's VM detection is very interesting.

Links for others if they're interested:

https://github.com/a0rtega/pafish collects all the best-known detection methods into a test suite.

This issue is interesting/has links for sure: https://github.com/spender-sandbox/cuckoo-modified/issues/45...

Pafish is what you asking for, but as u/ForceBlade wrote, you cannot win this game.

You can do it however that requires extensive Research. There are Things such as https://github.com/a0rtega/pafish That Help you get the First detection vectors sorted. However hate to say it but youll be better off actually coding a "Cheat" that Patches the vm Checks the Game does in Order to Play.

Yes. For example: https://github.com/a0rtega/pafish

You can check what thing are detected by using -> https://github.com/a0rtega/pafish Normally VM Exit and Virtual Input devices are detected. But it still works for 99% of the games.

I have been working on obfuscating my vm, the results are mixed... A good start is to use paranoid fish , tools gives you an idea how it detects vm's :)

So I suppose that it depends on the malware. Some malware doesn't want to take the chance of being reverse engineered, so when it's aware that it is in a virtual machine, it might shut down. pafish has functionality for working out whether-or-not it is running in a VMware instance.

Last time when I tried to run Valorant just BSoD the VM Everything else works (EAC, BE, Ricochet, etc...). You can test if your VM can be detected using this tool.

Does soft as pafish https://github.com/a0rtega/pafish will detect RDTSC VM exit on wraped WinVM?

You can use pafish to test vm detection methods. https://github.com/a0rtega/pafish