https://netacoding.com/tags/av-evasion/ Recent content in AV-Evasion on Netacoding | Cybersecurity, Assembly & Network Research https://netacoding.com/img/logo-netacoding.png https://netacoding.com/img/logo-netacoding.png Hugo en-us Sat, 25 Apr 2026 00:00:00 +0000 https://netacoding.com/posts/language_malware-evasion/ Sat, 25 Apr 2026 00:00:00 +0000 https://netacoding.com/posts/language_malware-evasion/ Pure x64 Assembly eliminates compiler artifacts (GCC prologues, LLVM panic stubs, CRT startup code) that AV/EDR engines fingerprint. Empirical results: 0/65 VirusTotal detections, SROP injection and process_vm_writev invisible to behavioral sandbox. CMOV-based CFG flattening defeats heuristic graph analysis. Backed by Ianni et al. (SEBD 2019) on exotic compiler evasion. https://netacoding.com/posts/compressdpcm-rle/ Sat, 11 Apr 2026 00:00:00 +0000 https://netacoding.com/posts/compressdpcm-rle/ VESQER implements a DPCM+RLE hybrid compression pipeline in pure x64 Assembly with zero external dependencies — designed for C2 payload compression. DPCM delta-encodes byte-level differences to reduce entropy variance; RLE collapses repeated delta runs. Full algorithm design, x64 Assembly implementation, compression ratio analysis, and integration with fileless C2 payloads.