Unclaimed project

Are you a maintainer of al-khaser? Claim this project to take control of your public changelog and roadmap.

Claim this project

Changelog

al-khaser

Public malware techniques used in the wild: Virtual Machine, Emulation, Debuggers, Sandbox detection.

ayoubfaouzi/al-khaser·

6.9k1.3kC++GPL-2.0

anti-analysisanti-debugginganti-disassemblyanti-emulationanti-sandboxanti-vm+5

Last updated 28 days ago

Jan 27, 2026

What's Changed

Add ollyice.exe, dedup joeboxserver.exe by @xtexx in https://github.com/ayoubfaouzi/al-khaser/pull/275
Fix NtSystemDebugControl STATUS_NOT_IMPLEMENTED cases by @asteria121 in https://github.com/ayoubfaouzi/al-khaser/pull/279
Add check for WAET ACPI table presence by @dmfrpro in https://github.com/ayoubfaouzi/al-khaser/pull/284
Added Cloud check and goto cleanup by @l...

Read full release & details

Sep 22, 2024

This release does not bring any new detection technique to what we already have before, it just allow us to properly start versioning this tool and allow people to download compiled binaries.

What's Changed

update readme by @LordNoteworthy in https://github.com/LordNoteworthy/al-khaser/pull/37
Noteworthy by @LordNoteworthy in https://github.com/LordNoteworthy/al-khaser/pull/38
Notew...

Read full release & details