GIAC
GREM · Question #172
How can malware attempt to detect and respond to being run in a virtual machine? (Choose Three)
The correct answer is A. Checking the MAC address for known VM vendor OUIs B. Looking for the presence of specific device drivers E. Enumerating running processes for VM-associated names. See the full explanation below for the reasoning.
Question
How can malware attempt to detect and respond to being run in a virtual machine? (Choose Three)
Options
- AChecking the MAC address for known VM vendor OUIs
- BLooking for the presence of specific device drivers
- CAttempting to write to known read-only memory locations
- DMeasuring the disk access time
- EEnumerating running processes for VM-associated names
How the community answered
(35 responses)- A71% (25)
- C20% (7)
- D9% (3)
Community Discussion
No community discussion yet for this question.