Archived
threat-research-and-intelligence
blackberry/threat-research-and-intelligenceBlackBerry Threat Research & Intelligence
curated-resourcesintrusion-detectionioc-management+3
blackberry/threat-research-and-intelligenceBlackBerry Threat Research & Intelligence
jkornev/hidden🇺🇦 Windows driver with usermode interface which can hide processes, file-system and registry objects, protect processes and etc
therealdreg/anticuckooA tool to detect and crash Cuckoo Sandbox
henriksb/extensionspooferSpoof file icons and extensions in Windows
s3n4t0r-0x0/rustywater-shellcode-dropperRustyWater represents the main payload and the backbone of the entire adversarial operation in Static Kitten group attacks.
secretsquirrel/recomposerRandomly changes Win32/64 PE Files for 'safer' uploading to malware and sandbox sites.
d4vinci/dr0p1t-frameworkA framework that create an advanced stealthy dropper that bypass most AVs and have a lot of tricks
nsmfoo/antivmdetectionScript to create templates to use with VirtualBox to make vm detection harder
zeromemoryex/bypass-sandbox-evasionC++ tool that patches Windows API calls to bypass sandbox RAM size checks, enabling malware to evade detection in isolated analysis environments.
nuclearphoenixx/fake-sandbox👁🗨 This script will simulate fake processes of analysis sandbox/VM software that some malware will try to avoid.
kiexitdispatcher/godefenderAnti Virtulization, Anti Debugging, AntiVM, Anti Virtual Machine, Anti Debug, Anti Sandboxie, Anti Sandbox, VM Detect package. Windows ONLY.
ldpreload/blacklotusBlackLotus UEFI Windows Bootkit
9emin1/charlottec++ fully undetected shellcode launcher ;)
d4rksystem/vboxcloakA PowerShell script that attempts to help malware analysts hide their Windows VirtualBox Windows VM's from malware that may be trying to evade…
zero2504/edr-ghostlockerAppLocker-Based EDR Neutralization
bombadil-systems/zombie-zipMalformed ZIP archive that evades antivirus detection by declaring Method=0 (stored) while containing DEFLATE-compressed payload.
