goLazagne icon indicating copy to clipboard operation
goLazagne copied to clipboard

AV evasion question

Open vay3t opened this issue 3 years ago • 1 comments

for red team exercises with windows defender, do you suggest any way to evade the antivirus? I occupied garble but it still detects it as golazagne, therefore it gave me to understand that it can be detected by cgo libraries.

AV Detect: VirTool:Win32/Golazagne.A!MTB

vay3t avatar Jan 07 '22 17:01 vay3t

Hey @vay3t !

This is an interesting task, but I don't have enough free time to solve it. I will definitely notify you if this feature is implemented or recommendations are written.

kerbyj avatar May 20 '22 06:05 kerbyj