Skip to content

Yet another C++ Cobalt Strike beacon dropper with Ntdll unhooking, PPID spoofing and custom Process hollowing

active 2024-01-172026-02-28 (UTC)

Complete coverage26,535 / 26,535 hourly files (100%) · 2 absent upstream2023-08-152026-08-24 (UTC)
Events
251
Pushes
24
Pull requests
0
Issues
9
Stars
173
Forks
34

Activity over time

Daily event counts in the loaded window

Line chart, 774 days from 2024-01-17 to 2026-02-28. Pushes: 24 total, peak 4 in a day. Pull requests: 0 total, peak 0 in a day. Issues: 9 total, peak 2 in a day. Comments: 10 total, peak 4 in a day. Stars: 173 total, peak 14 in a day.

  • Pushes
  • Pull requests
  • Issues
  • Comments
  • Stars

Stars, PRs, issues and forks are under-captured in the later part of this window. GH Archive progressively stopped capturing non-push events during 2026 — −95% or worse by the end of the window. Every series here except Pushes fades for that reason, so a decline above reflects the archive, not this repository. Pushes stay reliable throughout, so read them, and the contributor counts derived from them, as the real signal. Data health has the measurements.

Top contributors

Pushes, PRs, issues, reviews and comments — stars and forks excluded, so this is contribution rather than popularity

ContributorContributionsPushesPRsComments
ProcessusT302404
Mav3r1ck0x14002
badboycxcc3001
dridri912002
CHOWHWID2001
spblue44221000
YaBoiFluffie1000

Recent activity

Latest issues, pull requests and releases

  • Issue#6YaBoiFluffie2025-05-28 20:59
    Links are dead
  • Issue#5spblue44222025-04-09 06:04
    Static IV Usage in AES Encryption
  • Issue comment#4Mav3r1ck0x12024-03-29 11:44
    Can't Get Project to Build
  • Issue#4Mav3r1ck0x12024-03-29 11:44
    Can't Get Project to Build
  • Issue comment#4Mav3r1ck0x12024-03-28 19:53
    Can't Get Project to Build
  • Issue#4Mav3r1ck0x12024-03-28 19:19
    Can't Get Project to Build
  • Issue comment#3CHOWHWID2024-02-17 15:20
    Question (je suis debutant )
  • Issue comment#3ProcessusT2024-02-15 09:40
    Question (je suis debutant )
  • Issue#3ProcessusT2024-02-15 09:40
    Question (je suis debutant )
  • Issue#3CHOWHWID2024-02-13 16:12
    Question (je suis debutant )
  • Issue comment#2ProcessusT2024-02-12 13:27
    artifact.cna
  • Issue#2ProcessusT2024-02-12 13:27
    artifact.cna
  • Issue comment#1ProcessusT2024-02-02 11:25
    What's this? Shellcode Loader and new Beacon?
  • Issue comment#1badboycxcc2024-02-02 09:45
    What's this? Shellcode Loader and new Beacon?
  • Issue#1badboycxcc2024-02-02 09:45
    What's this? Shellcode Loader and new Beacon?
  • Issue#1badboycxcc2024-02-02 09:42
    What's this? Shellcode Loader and new Beacon?

Totals cover only the window loaded into ClickHouse and count events, not GitHub's lifetime totals — 173 stars here means stars gained during the window, not the repo's star count.