Sandy is a Sandbox Enumeration tool that can be used to extract information from a sandbox virtual machine. All of the info gets packaged in a TXT file which then gets send to the user with the use of Discord Webhooks
/!\ Keep in mind that the tool will only work on sandboxes that allows web traffic to reach its destination
- All the running processes
- Operating System Version
- CPU Model
- Hostname
- Installed Software
- UAC Status
- Screenshot of the desktop
You will need to edit the main.py script and add your own Discord Webhook URL. Then you will need to package the script manually into an EXE with the use of tools like PyInstaller, Py2Exe, PyArmor, Nuitka etc.
The last thing you have to do is to upload the EXE into any sandbox analysis environment you want. If the sandbox environment allows web traffic to normally reach its destination, then Sandy will extract the information and send it to the user.