CheckSandBoxEnv

📌 Overview

This is a simple script that can be compiled into a DLL that can detect SandBox environnements based on DLLs and Modules present on the system.

🔗 Research References:

• Trend Micro: Pikabot Spam Wave
• MITRE ATT&CK: Pikabot Campaign (C0037)
• Evasions

---

⚠️ Disclaimer

🚨 This project is for educational purposes only. It does not contain malicious code but simulates anti-analysis techniques used by real malware. Use responsibly in authorized research environments.

---

🔧 Compilation (Using x86_64-w64-mingw32-gcc on Linux)

To compile the DLL on a Linux system:

x86_64-w64-mingw32-gcc -shared -o CheckSandBox.dll CheckSandBox.c -Wall

✔ This generates CheckSandBox.dll, which can be executed on Windows.

---

🚀 Running the DLL

To execute the DLL on Windows, run:

rundll32.exe CheckSandBox.dll,sandboxdetection

and you should see a text file output.txt

---

👨‍💻 Created for cybersecurity research & education. Use responsibly! 🚀