Joe Security's Blog
Inside RevStealer's Sandbox-Aware Anti-Analysis System
IntroductionWe recently came across an interesting Joe Sandbox analysis on Joe Sandbox Cloud Basic that was confirmed as malicious but showed surprisingly little malicious behavior. Samples like this are often particularly interesting because limited activity does not necessarily mean that execution failed. In many cases, it indicates that the malware recognized characteristics of the analysis environment and deliberately suppressed its main functionality.In this blog post, we examine how RevStealer uses a score-based environment gate to identify analysis systems and decide whether execution should continue.
Read more...
Joe Reverser 2.1 Golden Eagle
We are proud to announce the release of Joe Reverser 2.1 “Golden Eagle”, the latest evolution of our agentic automated malware and phishing analyst.Joe Reverser is designed to help security analysts investigate complex malware, phishing campaigns, malicious documents, and web-based threats through autonomous analysis and reverse engineering. With Golden Eagle, we are expanding these capabilities even further and making Joe Reverser easier to integrate into automated analysis workflows.
Read more...
Joe Sandbox v45 - Green Opal
Today, we are proud to release Joe Sandbox 45 under the code name Green Opal! This release is packed with many new detection signatures and important features to improve Joe Sandbox.Our Joe Sandbox Cloud Pro, Basic, and OEM servers have recently been upgraded to Green Opal.If you wish to upgrade your on-premise Joe Sandbox installation, please follow the instructions in the chapter on "Updating" in the user guide which you find in our customer portal. 625 New Behavior and YARA SignaturesJoe Sandbox v45 comes with a significant number of new detection signatures.
Read more...
