Executive Summary

This vulnerability exists in the Windows behavioral analysis engine of Hatching Triage Sandbox on Windows 10 build 2004 and Windows 10 LTSC 2021. It allows a submitted malware sample to evade detection by recursively spawning many child processes, which generates a high volume of logs and exhausts system resources. This causes denial-of-analysis, meaning key malicious behaviors like PowerShell execution and reverse shell activity may not be recorded or reported, misleading analysts and compromising the integrity and availability of sandbox analysis results.

Useful 0 Not Useful 0

Impact Analysis

This vulnerability can impact you by allowing malware to evade detection during sandbox analysis, potentially leading to undetected malicious activity. It can cause denial-of-analysis by exhausting system resources, resulting in incomplete or misleading analysis reports. This compromises the reliability of malware detection and may allow harmful actions to go unnoticed.

Useful 0 Not Useful 0