Click here to download all references as Bib-File.•

Enter keywords to filter the library entries below or Propose new Entry
2021-10-26 ⋅ Github (vc0RExor) ⋅ Aaron Jornet
Babuk Ransomware
Babuk
2021-10-04 ⋅ Github (OALabs) ⋅ OALabs
Reverse engineered the Hancitor DLL and built a static config extractor
Hancitor
2021-10-03 ⋅ Github (0xjxd) ⋅ Joel Dönne
SquirrelWaffle - From Maldoc to Cobalt Strike
Cobalt Strike Squirrelwaffle
2021-09-08 ⋅ Juniper ⋅ Paul Kimayong
Aggah Malware Campaign Expands to Zendesk and GitHub to Host Its Malware
Agent Tesla
2021-08-25 ⋅ Github (StrangerealIntel) ⋅ StrangerealIntel
FIN7 still active
2021-07-23 ⋅ Github (Lastline-Inc) ⋅ Pavankumar Chaudhari, Quentin Fois
YARA rules, IOCs and Scripts for extracting IcedID C2s
IcedID
2021-07-18 ⋅ Github (mvt-project) ⋅ mvt-project
Mobile Verification Toolkit
2021-07-18 ⋅ Github (AmnestyTech) ⋅ Amnesty International
NSO Group Pegasus Indicator of Compromise
Chrysaor
2021-07-05 ⋅ Github (f0wl) ⋅ Marius Genheimer
REvil Linux Configuration Extractor
REvil
2021-07-02 ⋅ Github (fwosar) ⋅ Fabian Wosar
REvil configuration dump used in Kaseya attack
REvil
2021-06-28 ⋅ Github (Finch4) ⋅ Finch
Delta Ransomware Analysis
2021-06-04 ⋅ Github (NightfallGT) ⋅ NightfallGT
MercurialGrabber Github Repository
MercurialGrabber
2021-06-01 ⋅ Github (Albocoder) ⋅ Erin Avllazagaj
Inside commercial malware sandboxes
2021-05-20 ⋅ Github (microsoft) ⋅ Microsoft
Microsoft 365 Defender Hunting Queries for hunting multiple threat actors' TTPs and malwares
STRRAT OceanLotus BabyShark Elise Revenge RAT WastedLocker Zebrocy
2021-05-18 ⋅ Github (Finch4) ⋅ Finch
Analysis of MountLocker
Mount Locker
2021-05-17 ⋅ Github (telekom-security) ⋅ Deutsche Telekom Security GmbH
icedid_analysis
IcedID
2021-04-25 ⋅ Nightwatch Cybersecurity ⋅ Nightwatch Cybersecurity
Supply Chain Attacks via GitHub.com Releases
2021-04-22 ⋅ Github (@cecio) ⋅ @red5heep
EMOTET: a State-Machine reversing exercise
Emotet
2021-04-20 ⋅ Github (fireeye) ⋅ FireEye, Mandiant
FireEye Mandiant PulseSecure Exploitation Countermeasures
2021-04-12 ⋅ Github (NightfallGT) ⋅ NightfallGT
Nitro Ransomware - Proof of Concept
Nitro
Select families...