Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

anti emulation tricks + geofencing alert #80

Open
decalage2 opened this issue Aug 28, 2019 · 0 comments
Open

anti emulation tricks + geofencing alert #80

decalage2 opened this issue Aug 28, 2019 · 0 comments

Comments

@decalage2
Copy link
Owner

The macro described in this article uses specific Excel functions to break emulation, and to only run on Japanese systems:
https://www.fortinet.com/blog/threat-research/excel-variable-targeting-japanese-users.html

It would be great to support those functions in vmonkey (if it's not already the case), and also to alert the user when a macro uses a geofencing trick (e.g. xlDate). In the latter case, maybe the vmonkey user could have an option to decide which country to emulate, or to run multiple emulations to test different countries in a row. (to find out which country is targeted)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

1 participant