ayoubfaouzi / al-khaser

Public malware techniques used in the wild: Virtual Machine, Emulation, Debuggers, Sandbox detection.
GNU General Public License v2.0
5.94k stars 1.18k forks source link

Parent process hijacking (CreateProcess/ProcThreadAttribute) #248

Open ayoubfaouzi opened 2 years ago