Skip to main content
buildradar
Sign in

reveng007/DarkWidow

@reveng007

Indirect Dynamic Syscall, SSN + Syscall address sorting via Modified TartarusGate approach + Remote Process Injection via APC Early Bird + Spawns a sacrificial Process as target process + (ACG+BlockDll) mitigation policy on spawned process + PPID spoofing + Api resolving from TIB + API hashing

↗ Open on GitHub
Stars
810
Forks
102
Language
C
License
MIT
Last push
7 months ago
C

Related intel (0)

No related intel yet

This repo has not appeared in any of the sources the radar tracks. The collector runs on a schedule — check back once it covers this repo.