Countermeasures against malware that detects and bypasses virtual machines
Execution and analysis of malware on actual NUC hardware

Insec Security announced that Joe Security is launching 'Joe Sandbox A1,' the world's first appliance for precise malware analysis on bare metal (non-virtualized physical servers).

The Joe Sandbox A1 is a standalone device based on an ultra-compact NUC (Next Unit of Computing) PC form factor, equipped with Joe Sandbox Desktop (equipped with malware analysis capabilities for desktop and mobile devices).



Recently, malware easily detects and bypasses virtual machines used by sandboxes. A1 does not use virtual machines such as VirtualBox, VMware, or KVM, but analyzes malware directly on actual physical NUC hardware. In particular, it supports malware analysis on all networked operating systems using Hypervisor Based Inspection (HBI) technology.

In addition to the above, it provides analysis based on over 959 malicious behavior signatures to detect and classify various malicious activities. Notable features include the Yara method, dynamic VBA and JavaScript analysis, and HCA support.