Snippet List

Technique Language Author OS Creation Date
Replication Through Removable Media Python 1d8 1 week, 4 days
QEMU CPU brand evasion C++ kernelwernel 1 month, 3 weeks
bochs CPU oversights evasion C++ kernelwernel 1 month, 4 weeks
Impair Defenses: Disable Windows Event Logging PowerShell 0x0d4y 2 months, 1 week
Impair Defenses: Disable Windows Event Logging bash 0x0d4y 2 months, 1 week
AppInit DLL Injection C 1d8 2 months, 1 week
Hide Artifacts: Hidden Window C 1d8 2 months, 1 week
VboxEnumShares C++ HoIIovv 2 months, 1 week
Odd Thread Count C++ kernelwernel 2 months, 1 week
Hyper-V Signature C++ kernelwernel 2 months, 1 week
NtDelayExecution C d4rksystem 2 months, 1 week
APC injection FASM32 DarkCoderSc 5 months, 1 week
Runtime Function Decryption Python irfan_eternal 7 months, 1 week
Retrieve HDD Information C++ HoIIovv 7 months, 1 week
BuildCommDCBAndTimeoutA C Huntress Research Team 7 months, 1 week
Reflective DLL injection Delphi DarkCoderSc 11 months, 1 week
SMB / Named Pipes Delphi DarkCoderSc 1 year, 2 months
SMB / Named Pipes C# DarkCoderSc 1 year, 2 months
Right-to-Left Override (RLO) Extension Spoofing PowerShell DarkCoderSc 1 year, 2 months
Virtualization/Sandbox Evasion: Time Based Evasion Golang Edode 1 year, 3 months
DLL Unhooking C++ External 1 year, 3 months
Shikata Ga Nai (SGN) bash Dreamkinn 1 year, 3 months
Process Reimaging C++ 一半人生 1 year, 3 months
Process Ghosting C++ 一半人生 1 year, 3 months
C2 via FTP(S) Delphi DarkCoderSc 1 year, 4 months
C2 via FTP(S) C# DarkCoderSc 1 year, 4 months
Checking Specific Folder Name C++ 一半人生 1 year, 5 months
VMCPUID C++ 一半人生 1 year, 5 months
Evasion using direct Syscalls C++ ghost_pepper108 1 year, 5 months
GetForegroundWindow Golang Edode 1 year, 6 months
Filter
Clear