Drew AllemanOffensive Security

Blog / Red Team / Avast CyberCapture

Avast CyberCapture

Techniques for detecting Avast CyberCapture sandboxes through window classes and distinctive strings in process memory.

complete· 2 parts

  1. Part 1: Detecting Avast CyberCapture Using Window Classes

    2026-08-02

    Detect Avast CyberCapture sandboxes by enumerating window class names before running sensitive payloads in red-team malware research.

  2. Part 2: Detecting Avast CyberCapture Using Strings In Memory

    2026-08-04

    Detect Avast CyberCapture by scanning process memory for distinctive strings as a companion technique to window-class checks.