FUD MAC Loader , with Indirect syscall dynamic syscall , get function address from the peb, function hash comparaison . Tested on Sentinel1 & Crowdstrike , no prevention/detection
unleashedmen / rugal_loader Goto Github PK
View Code? Open in Web Editor NEWFUD MAC Loader , with Indirect syscall dynamic syscall , get function address from the peb , function hash comparaison . Tested on Sentinel1 & Crowdstrike , no prevention/detection