Snippet List

Technique Language Author OS Creation Date
System Binary Proxy Execution: Rundll32 Delphi DarkCoderSc 5 months
APC injection FASM32 DarkCoderSc 1 year, 1 month
Reflective DLL injection Delphi DarkCoderSc 1 year, 7 months
SMB / Named Pipes Delphi DarkCoderSc 1 year, 10 months
SMB / Named Pipes C# DarkCoderSc 1 year, 10 months
Right-to-Left Override (RLO) Extension Spoofing PowerShell DarkCoderSc 1 year, 10 months
C2 via FTP(S) Delphi DarkCoderSc 2 years
C2 via FTP(S) C# DarkCoderSc 2 years
Shortcut Hiding Python DarkCoderSc 2 years, 6 months
APC injection Delphi DarkCoderSc 2 years, 9 months
APC injection Delphi DarkCoderSc 2 years, 9 months
Indicator Removal: Timestomp C# DarkCoderSc 2 years, 10 months
Process Hollowing, RunPE Delphi DarkCoderSc 3 years
ProcEnvInjection - Remote code injection by abusing process environment strings Delphi DarkCoderSc 3 years
DLL Injection via CreateRemoteThread and LoadLibrary Delphi DarkCoderSc 3 years
Checking Mouse Activity Delphi DarkCoderSc 3 years
Detecting Mac Address C# DarkCoderSc 3 years
NtQueryInformationProcess Delphi DarkCoderSc 3 years
NtQueryInformationProcess C# DarkCoderSc 3 years
File Melt C# DarkCoderSc 3 years
File Melt Delphi DarkCoderSc 4 years, 4 months
Detecting Active Services Delphi DarkCoderSc 4 years, 4 months
NTFS Files Attributes Delphi DarkCoderSc 4 years, 6 months
Code Cave Python DarkCoderSc 4 years, 7 months
NtQueryObject Delphi DarkCoderSc 4 years, 8 months
NtSetInformationThread Delphi DarkCoderSc 4 years, 9 months
IsDebuggerPresent Delphi DarkCoderSc 4 years, 9 months
NtSetDebugFilterState Delphi DarkCoderSc 4 years, 9 months
OutputDebugString Delphi DarkCoderSc 4 years, 9 months
SuspendThread Delphi DarkCoderSc 4 years, 9 months
Filter
Clear