Malware Development 10 - Persistence via DLL Hijacking (Golang)

Introduction Hello hackers! Today we’ll be discussing one of the most used persistence techniques, the DLL Hijacking, which will allow us to execute malicious code in a persistent way so in case ...

Apr 30, 2023 Malware Development

Malware Development 9 - Protecting processes as blockdlls (Golang)

Introduction Hello again hackers! I’ve been traveling for a while in Austria but I am back now. Today we’ll explain how ACG works and what can we do to prevent external DLLs of injecting in our m...

Apr 27, 2023 Malware Development

Malware Development 8 - Shellcode Injection via EnumDesktopsW (Golang)

Introduction Hello friends! In this post we’ll be learning how to execute we can execute shellcode via Callback functions like EnumDesktopsW or SysEnumDesktops. I’ve already mentioned the callbac...

Apr 13, 2023 Malware Development

Malware Analysis 1 - Creating a PE parser, Shannon Entropy and more (Golang)

Introduction Hello hackers! Today we’ll be creating a CLI tool to analyze and extract PE files information as much as possible using github.com/Binject/debug/pe package. Explanation Parsing PE ...

Apr 11, 2023 Malware Analysis

Malware Development 7 - Persistence via autorun registry (Golang)

Introduction Hello my friends! This post will be a little bit shorter than usual but don’t worry because it will teach you a simple and well known persistence technique. Explanation A lot of ma...

Mar 31, 2023 Malware Development

Malware Development 6 - Analysis evasion via anti-sandboxing tricks (Golang)

Introduction Hello hackers! In this post we’ll discuss some of the main anti-sandboxing tricks and techniques to avoid malware analysis and sandboxing. Then we’ll write a Golang program based on ...

Mar 29, 2023 Malware Development

Malware Development 5 - Malware analysis evasion via Api Hashing (Golang)

Introduction Hello hackers! Today we’re going to see how real malware protect themselves from being analyzed using a technique called Api Hashing. Explanation First of all we should know what t...

Mar 27, 2023 Malware Development

Malware Development 4 - Dump lsass.exe process + AV/EDR evasion (Golang)

Introduction Hello dear hackers! Today we’ll dump LSASS.EXE process memory to obtain credentials and we also will be using some evasion techniques. Inspired by Dumpert (an awesome tool) Explanat...

Mar 24, 2023 Malware Development

Malware Development 3 - Persistence via Recycle Bin (Golang)

Introduction Hello dear hackers! Today we’re gonna see an effective technique to mantain access in Windows systems during red team operations just by modifying a registry key which interacts with...

Mar 13, 2023 Malware Development

Malware Development 2 - UuidFromString shellcode injection (Golang)

Introduction Hello hackers! I’m D3Ext and today we’ll learn an advanced shellcode injection technique used by Lazarus group which uses UuidFromStringA API call Explanation In this demo we’ll be...

Mar 12, 2023 Malware Development