VirusBlokAda: VBA32

2024: PT Sandbox Compatibility

To analyze malicious code, the PT Sandbox sandbox implements the functionality of a multiscaner, which uses both Positive Technologies' own expertise and third-party expertise. The updated antivirus in the sandbox delivery kit was the antivirus of the VBA32 Belarusian vendor VIRUSBLOKADA. Thus, PT Sandbox has become a sandbox that uses more than two malware protection tools out of the box. This means that the product, using the expertise of several vendors, receives even more information from different sources about emerging cyber threats. On September 18, 2024, representatives of Positive Technologies reported.

According to the company, three built-in antivirus engines for static analysis in PT Sandbox, as well as in PT MultiScanner, a virus threat protection system, allow for wider coverage of cyber threats. If the manufacturer of a certain antivirus software does not have time to update the virus database in time, the company will have a chance to identify it using signatures from other suppliers. This is confirmed, for example, by tests conducted by the information security product developer OPSWAT: one antivirus engine is able to detect about 45% of known malware, but if you connect more antiviruses, you can achieve almost 100% efficiency. The use of antivirus protection tools from various manufacturers is also a requirement of regulators. So, according to the order of the FSTEC of Russia dated December 25, 2017 No. 239, at the facilities of the critical information infrastructure of the first category of importance, it is necessary to use antiviruses from different manufacturers.

Positive Technologies and VIRUSBLOKADA products have been tested for compatibility. Thanks to the active participation of both PT Sandbox and PT MultiScanner development teams and VBA32 specialists, integration took place in the optimal time.

We have done a lot of work to expand the capabilities of PT Sandbox static analysis to detect malware, using the expertise of all antivirus solutions available on the Russian market. Vendor expertise optimizes the capabilities of PT Sandbox and PT MultiScanner. told Sergey Osipov, Head of Malware Protection, Positive Technologies

{{quote 'author
= shared Yuri Reznikov, Deputy Director of VIRUSBLOKADA|We are glad to cooperate with Positive Technologies. We hope that our cooperation will optimize the security of product users and give them additional capabilities in the fight against information security threats.}}

PT Sandbox is available with VBA32 starting with version 5.13.0. Antivirus is available to customers for free. To get it, you need to contact technical support.