magicsword-io / LOLDrivers

Living Off The Land Drivers
https://www.loldrivers.io/
Apache License 2.0
1.04k stars 123 forks source link

Add Malicious Driver TfSysMon #177

Closed rahulwt closed 3 months ago

rahulwt commented 5 months ago

Hey there,

I came across this https://github.com/BlackSnufkin/BYOVD/tree/main/TfSysMon-Killer, being used by one of the ransomware group to kill EDR service.

Could you add this to the list? https://www.virustotal.com/gui/file/1c1a4ca2cbac9fe5954763a20aeb82da9b10d028824f42fff071503dcbe15856

MHaggis commented 5 months ago

Absolutely! Thank you for contributing!