Evading Hash Signature

Created the Sunday 17 March 2019. Updated 6 months, 3 weeks ago.

AV are able to detect if it's a known malware by calculating the file hash, by changing a simple bit into the binary can sometimes allow the sample to evade hash detection. This technique is unlikely to work anymore.

Technique Identifier

U0516

Additional Resources

External Links

The resources provided below are associated links that will give you even more detailed information and research on current evasion technique. It is important to note that, while these resources may be helpful, it is important to exercise caution when following external links. As always, be careful when clicking on links from unknown sources, as they may lead to malicious content.

https://resources.infosecinstitute.com/antivirus-evasion-tools/