Emulating a native USB stick within vmware

-1

I use a sandbox to test malware any analyse it. One of the latest malware explicitly looks for USB-sticks to write code on it. What I'd need is a little (windows) tool to emulate/fake a USB stick within the Win7 that acts like the malware victim, so the malware "thinks" it's real. That fake should not be recognised as fake to easy as the malware will not run then. VMWare-tools usb-redirection is not an option as this implies VMWare tools installed and that is a nogo for the victim.

Thanks so much for your ideas... :-)

Cheers Marcus

Marcus

Posted 2018-11-17T12:42:38.310

Reputation: 1

Actually, anything that would do the job. The only constraint is, that it looks as real USB stick as possible to the malware. ;-) – Marcus – 2018-11-17T17:16:57.840

Thx, in linux it would be much easier, but the malware rules the OS to be windows. :-) – Marcus – 2018-11-20T11:32:09.473

Thanks Aulis, but as far as I understand the docs and the comments, this will not give me a USB mass storage device, but the malware looks for that kind of device. – Marcus – 2018-11-20T11:30:50.623

You're welcome. It is possible, but I think you should try it anyway. – Aulis Ronkainen – 2018-11-22T10:26:39.580

Emulating a native USB stick within vmware

Answers