Solutions Overview

Solution Search

Solution Author SHA256 Difficulty Tags Likes Posted
Extractor for custom PyInstaller executables as seen in PDFly or PDFClick struppigel 09474277051fc387a9b43f7f08a9bf4f6817c24768719b21f9f7163d9c5c8f74 advanced
packed custom wrapper evilai pdf converter pyinstaller
01 Feb 2026
The Wolf in AutoIt’s Clothing - How Vidar Hides in Plain Sight para0x0dise eee8a68511bd00ff98425cf9e9bd12873a5e742548fe7e2b72add7ff8dbabb24 advanced
packed autoit cypherit
31 Jan 2026
Zpaq to .NET Downloader to Injector DLL Unpacking struppigel c2c466e178b39577912c9ce989cf8a975c574d5febe15ae11a91bbb985ca8d2e medium
string deobfuscation packed .net injector stage 2 encrypted purecrypter
27 Jan 2026
Zpaq to .NET Downloader to Injector DLL Unpacking struppigel 1c33eef0d22dc54bb2a41af485070612cd4579529e31b63be2141c4be9183eb6 easy
loader stage 1 bloated zpaq
27 Jan 2026
Malicious .docx Analysis ge0lev 29325e23a684f782db14a1bf0dc56c65228e666d1f561808413a735000de3515 easy
loader msoffice external template openxml
26 Jan 2026
Malicious MS Office Files Without Macros struppigel 29325e23a684f782db14a1bf0dc56c65228e666d1f561808413a735000de3515 easy
loader msoffice external template openxml
25 Jan 2026
Malicious MS Office Files Without Macros struppigel 56f5623daa470bee190ae0ecd961be8e6df71c8da1ccf7b268fe876b84c183d9 easy
loader msoffice openxml vsto add-in
25 Jan 2026
Malicious .docx Analysis ge0lev 56f5623daa470bee190ae0ecd961be8e6df71c8da1ccf7b268fe876b84c183d9 easy
loader msoffice openxml vsto add-in
24 Jan 2026
Finding the next stage in a Word Document abusing VSTO functionality 0xdeluks 56f5623daa470bee190ae0ecd961be8e6df71c8da1ccf7b268fe876b84c183d9 easy
loader msoffice openxml vsto add-in
20 Jan 2026
[Samplepedia Solution] Unveiling the Layers: Analyzing a Multi-Stage APT-Style Loader m4n0w4r 5544e6c66cbf6503cddef2797acbff4fb81ededaef2334a596e6484cfaa0b8e8 medium
dll sideloading packed shellcode
19 Jan 2026
Use Babel to Deobfuscate JavaScript Malware larsborn 1bc77b013c83b5b075c3d3c403da330178477843fc2d8326d90e495a61fbb01f advanced
js obfuscated ast control flow gootloader
18 Jan 2026
.NETReactor Deobfuscation and Configuration Extraction of AgentTesla struppigel 45dc4518fbf43bf4611446159f72cdbc37641707bb924bd2a52644a3af5bab76 medium
.net obfuscated .netreactor agenttesla stage 3
16 Jan 2026
Solution Jot Notes (rough, will pretty-up later) nanoamano 55901c2d5489d6ac5a0671971d29a31f4cdfa2e03d56e18c1585d78547a26396 easy
string deobfuscation .net rat almondrat
16 Jan 2026
Programmatically NOP the Current Selection in Ghidra larsborn 0b38ca277bbb042d43bd1f17c4e424e167020883526eb2527ba929b2f0990a8f easy
obfuscation
13 Jan 2026
API Hashing in the Zloader malware larsborn 4029f9fcba1c53d86f2c59f07d5657930bd5ee64cca4c5929cbd3142484e815a medium
string deobfuscation
13 Jan 2026
String Obfuscation in the Hamweq IRC-bot larsborn 4eb33ce768def8f7db79ef935aabf1c712f78974237e96889e1be3ced0d7e619 easy
string deobfuscation
13 Jan 2026
Zloader String Obfuscation larsborn 4029f9fcba1c53d86f2c59f07d5657930bd5ee64cca4c5929cbd3142484e815a medium
string deobfuscation
13 Jan 2026
Page 2 of 4