Scripts to aid analysis of files obfuscated with ScatterBee.
☆25Jan 6, 2023Updated 3 years ago
Alternatives and similar repositories for ScatterBee_Analysis
Users that are interested in ScatterBee_Analysis are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Steezy - Ghetto Yara Generation☆15Mar 27, 2023Updated 3 years ago
- Analyses in IDA/Hex-Rays☆87Apr 6, 2023Updated 3 years ago
- C2 Active Scanner☆59Jun 19, 2024Updated 2 years ago
- Deobfuscation library for PoisionPlug.SHADOW's ScatterBrain obfuscator☆82Mar 14, 2025Updated last year
- A collection of modules and scripts to help with analyzing Nim binaries☆85Oct 7, 2024Updated last year
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Unpacker for donut shellcode☆22Jun 20, 2020Updated 6 years ago
- Nim-IDA-FLIRT-Generator☆20Dec 5, 2023Updated 2 years ago
- Quick test for CVE-2023-26025 behaviours☆13Nov 29, 2023Updated 2 years ago
- Miscellanous scripts used for malware analysis☆22Oct 4, 2018Updated 7 years ago
- Example of an ELF parser to learn about the ELF format☆11Oct 6, 2024Updated last year
- Binary Ninja plugin for interacting with the OALabs HashDB service☆22Nov 1, 2024Updated last year
- Web access logs analyzer - provides an insight on how remote hosts behave☆15Sep 13, 2021Updated 4 years ago
- Royal Road RTF Weaponizer object decoder☆24Sep 26, 2024Updated last year
- Indicators of compromise, YARA rules, and Python scripts to supplement the SANS CTI Summit 2021 talk: "xStart when you're ready".☆14Jul 12, 2021Updated 5 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Plugin for ida pro that copies RVA under cursor to clipboard.☆18Jul 28, 2023Updated 3 years ago
- Repository of tools, YARA rules, and code-snippets from Stairwell's research team.☆23Jan 31, 2024Updated 2 years ago
- This repository contains various files linked to Operation Shadowhammer as it was originally discovered by Kaspersky Team.☆12Mar 27, 2019Updated 7 years ago
- ☆47Nov 10, 2025Updated 9 months ago
- A collection of shellcode hashes☆17Aug 15, 2018Updated 8 years ago
- Simple decrypter for Java AdWind, jRAT, jBifrost trojan☆17Jan 17, 2017Updated 9 years ago
- Emulates the VirusTotal "vt" YARA module for livehunt rule debugging/testing☆23May 29, 2023Updated 3 years ago
- Low budget VirusTotal Intelligence Cosplay☆20Jan 6, 2022Updated 4 years ago
- An npm package to defang and refang IoC☆13Jul 31, 2026Updated 2 weeks ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- ☆10Jan 30, 2022Updated 4 years ago
- Finds all first occurring string references near another reference☆20Dec 16, 2021Updated 4 years ago
- ☆32Apr 24, 2022Updated 4 years ago
- ☆24Oct 30, 2024Updated last year
- IDA Pro plugin for recognizing known hashes of API function names☆84May 12, 2022Updated 4 years ago
- ☆43Nov 5, 2018Updated 7 years ago
- ☆36Jan 11, 2023Updated 3 years ago
- Pure Go bindings for Zydis.☆17May 22, 2026Updated 2 months ago
- Yara Based Detection Engine for web browsers☆50Sep 5, 2021Updated 4 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Unpacking and decryption tools for the Emotet malware☆44Dec 5, 2021Updated 4 years ago
- Some IR notes☆17Jul 2, 2016Updated 10 years ago
- An automation plugin for Tiny-Tracer framework to trace and watch functions directly out of the executable's import table or trace logs (…☆127Jul 12, 2024Updated 2 years ago
- Write-ups of All types Bugs☆24Apr 13, 2022Updated 4 years ago
- Base service class from Assemblyline 4☆16Updated this week
- Python 3 library to build YARA rules.☆13Oct 24, 2021Updated 4 years ago
- ☆15Jun 5, 2019Updated 7 years ago