Doppelganger Cloning and Dumping LSASS to Evade Detection Andrea Varischio Yarix Var Group

Andrea Varischio, from Red Team Yarix, presented his Doppelganger project at Palsit HACKSTOP 2025 on 5 June!

Doppelganger is an advanced Red Teaming tool designed for stealthy LSASS dumping, even in environments protected by security solutions. During the talk, Andrea elaborated on the evasion techniques, the challenges encountered in development and how he managed to overcome the defences of modern Windows systems.