Microsoft Windows Defender / Backdoor_JS.Relvelshe.A Detection / Mitigation Bypass

Posted on 19 February 2024

Back in 2022, the researcher released a proof of concept to bypass the Backdoor:JS/Relvelshe.A detection in Windows Defender but it no longer works as it was mitigated. However, adding a simple javascript try catch error statement and eval'ing the hex string, it executes as of the time of this post.