README
¶
Percino
Evasive Golang Loader
Percino is a Golang loader that execute shellcode utilizing the process hollowing technique with anti-sandbox and anti-analysis measures. The shellcode is encrypted with the Triple DES (3DES) encryption algorithm.
Full EDR bypass with any C2 Framework. Tested with Cobalt Strike against MDE EDR.
Key Features:
- 3DES Encryption
- Sandbox Evasion
- Analysis Evasion
- Execution delay
- Process Hollowing
TIP: I recommended to sign the binary with CS
CS:
MSF:
Documentation
¶
There is no documentation for this package.
Source Files
Click to show internal directories.
Click to hide internal directories.