Blake De Garza
@1337Tech0 followers281 downloads4 copies8 likes137 views
7 detections
Filters
Last updated
All Time
Detection languages
7
Categories
2
2
1
1
1
Platforms
2
1
MITRE Techniques
2
2
2
2
1
Detects Nighthawk-like x64 DLL implant (WinHTTP+RPC+injection, detour sections, export DllExecute)
PE32 i386 .NET DLL with exact 3-section layout + GZip/MemoryStream + P/Invoke + F5Utility artifacts
Detects Zeus/Zbot with WinInet+Winsock, PStore creds, and Crypto/PFX usage
RAR SFX-based dropper that extracts a JS payload (DarkWatchman-style)
Detects 7ev3n ransomware variant with embedded ransom note and behavioral API usage
ICEEVENT: MSVC x64 thunk/prologue patterns + distinctive 'Servcie' error strings
Detects potential_APT-style process hollowing on Linux using syscall stubs and string camouflage