GitHub repository: CPT-Jack-A-Castle/r77-rootkit
Description: Fileless ring 3 rootkit with installer and persistence that hides processes, files, network connections, etc.