Thenightstalkerr
Active Member
- Joined
- August 26, 2024
- Messages
- 89
- Reaction score
- 3
- Points
- 8
- Thread Author
-
- #1
ADVANCED TECHNIQUES FOR STATIC/ML and runtime analysis evasion
STARTUP PERSISTENCE
POLYMORPHIC STUB TO PREVENT SIGNATURE-BASED DETECTION
WORKING AMSI/ETW BYPASS
OPTION FOR LIVING OFF THE LAND TO USE LEGITIMATE MICROSOFT HOST BINARIES.
Tested with multiple rats such as xworm all which achieved 0 detections (FUD) on virustotal.
many updates and improvements to come.
dm for more info
STARTUP PERSISTENCE
POLYMORPHIC STUB TO PREVENT SIGNATURE-BASED DETECTION
WORKING AMSI/ETW BYPASS
OPTION FOR LIVING OFF THE LAND TO USE LEGITIMATE MICROSOFT HOST BINARIES.
Tested with multiple rats such as xworm all which achieved 0 detections (FUD) on virustotal.
many updates and improvements to come.
dm for more info