Yeah, I’ve tested samples from URLhaus.
Browser Protection &or Auto-Protect block samples.
for example:
7cd85c2320e7/2024-11-19T21:02:26.018Z
Threat name: ELF:Agent-BSC [Cryp]
Threat type: Cryptic - This threat is heavily disguised to hide its malicious actions.
Status: Aborted
Detected by: Browser Protection
Origin
Downloaded from: http://115.nn.n.103:38576/i
Activity
Path | Type | Status
http://115.nn.n.103:38576/i | URL | Blocked
==========================================
Download Intelligence → No event found