Share on

Bypass Antivirus Dynamic Analysis, 9 Years Later

REGISTER

Talk overview:

This talk will introduce multiple new Antivirus Emulator bypass techniques as well as evaluate older ones and various files formats.

Emeric will also go more in depth discussing the methodology in finding such techniques, and what are the intrinsic limits of payloads
analysis in general. The goal is to attempt to  provide technical answers to the question “Are antivirus emulators engine still as easy to
bypass?”

Passionate about all infosec subject, especially offensive security subjects, Emeric Nasi’s main research interests are security and mitigation bypass, malware writing, exploit weaponization. Emeric Nasi has been a speaker at OffensiveCon and SisSegV conferences and published some research on various topics such as “RedTeam With OneNote”, “MSDT DLL HIjack UAC bypass”, “Code Injection – Weaponize GhostWriting Injection”, etc. In 2014, Emeric published a paper called Bypass Antivirus Dynamic Analysis (you may find it here: https://blog.sevagas.com/Bypass-Antivirus-Dynamic-Analysis). This paper had a big visibility at the time and several researches refer it. Almost 10 years later, he will revisit this topic.
REGISTER
Emeric Nasi
Founder of BallisKit
Passionate about all infosec subject, especially offensive security subjects, Emeric Nasi's main research interests are security and mitigation bypass, malware writing, exploit weaponization. Emeric Nasi has been a speaker at OffensiveCon and SisSegV conferences and published some research on various topics such as "RedTeam With OneNote", "MSDT DLL HIjack UAC bypass", "Code Injection - Weaponize GhostWriting Injection", etc. In 2014, Emeric published a paper called Bypass Antivirus Dynamic Analysis (you may find it here: https://blog.sevagas.com/Bypass-Antivirus-Dynamic-Analysis). This paper had a big visibility at the time and several researches refer it. Almost 10 years later, he will revisit this topic.