LIUSHEN Anti-VM Check via psutil MAC OUI Comparison

Subhankar H@Andrewsec57

•updated Jul 8, 2026•1•0•1

Detects the use of the Python psutil library to query network interface MAC addresses in order to identify potential virtual machine environments, a technique often used by the LIUSHEN malware to evade sandbox analysis.