Valak evasion DLL for Sliver implants. ChaCha20 encrypted sleep, synthetic callstack frames via indirect syscalls, HWBP AMSI/ETW bypass, FreshyCalls, CRT-free.
This commit is contained in:
Binary file not shown.
|
After Width: | Height: | Size: 829 KiB |
Reference in New Issue
Block a user