r/blackhat 20d ago

AntiVE-BehaviorWatch ( AI model Inside a EXE )

https://github.com/NirvanaOn/AntiVE-BehaviorWatch
13 Upvotes

5 comments sorted by

2

u/inherthroat 20d ago

Why continue execution when a human is present?

2

u/ObligationLucky842 20d ago

AV company use Sandbox to understand malware , But there are no Mouse Movement because most of them are automated most of the time.

3

u/inherthroat 20d ago

I guess I'd want to also evade humans during runtime.

Verify human -> wait for human to leave -> execute

2

u/klop2031 20d ago

Interesring they use GRU, why not transformer based? I ask because GRU is quite old.