Files
Whitecat18 28e7fac1d3 Upload
Rust-for-Malware-Development is an collection of proof of concepts with techniques and advanced evasion methods
2026-06-06 14:53:10 +05:30
..
2026-06-06 14:53:10 +05:30
2026-06-06 14:53:10 +05:30

Evasion

Welcome to the Evasion directory of Rust-for-Malware-Development. PoCs that try to tell whether the code is running on a real user's PC or inside a sandbox or analyst VM — and quietly back off when they are not on a real host.

  • CPU_FAN_DETECTION: Queries WMI for a working CPU fan. Most sandboxes and VMs do not expose one, so a missing fan is a strong hint that the code is being analysed rather than executed by a real user. Works only on physical PCs.

How to Use

git clone https://github.com/Whitecat18/Rust-for-Malware-Development.git
cd Rust-for-Malware-Development/Evasion

Each sub-folder is its own Cargo project. Build with cargo build --release.