0xCr0ssCrush

0xCr0ssCrush Two signed drivers. One dangerous kernel primitive. 0xCr0ssCrush is a Windows BYOVD research project covering the DCRCVDrv.sys and Alinubx.sys drivers abused by the Cruciferra malware-as-a-service loader: their interfaces, their kernel primitives, their provenance, and how to detect...