Malpedia Library

2018-10-05 ⋅ _
Post 0x17.2: Analyzing Turla’s Keylogger
KSL0T

2018-10-01 ⋅ Twitter (@James_inthe_box) ⋅ James_inthe_box
Tweet on DGA using TLD xyz
MakLoader

2018-08-30 ⋅ Twitter (@mesa_matt) ⋅ Matthew Mesa
Tweet on PsiX
PsiX

2018-07-18 ⋅ Twitter (@anit_anubhav) ⋅ Ankit Anubhav
Tweet on Huawai Router Hacker Anarchy
Owari

2018-07-06 ⋅ Rhyolite
BI_D Ransomware
BI_D Ransomware

2018-06-15 ⋅ Medium woj_ciech ⋅ Wojciech
Betabot still alive with multi-stage packing
BetaBot

2018-05-03 ⋅ Twitter (@thor_scanner) ⋅ Nextron Systems
Empire Downloader
Empire Downloader

2018-03-30 ⋅ Github (Psychotropos) ⋅ Ioannis Profetis
hajime_hashes
Hajime

2018-03-21 ⋅ Twitter (@anyrun_app) ⋅ ANY.RUN
Tweet on Bandios / Colony
Colony

2018-01-01 ⋅ nao_sec blog ⋅ nao_sec
Analyzing Ramnit used in Seamless campaign
Ramnit

2017-12-24 ⋅ Twitter (@juanandres_gs) ⋅ Juan Andrés Guerrero-Saade
Tweet on Turla Penquin
Penquin Turla

2017-12-19 ⋅ Trustwave ⋅ Simon Kenin
BrickerBot mod_plaintext Analysis
BrickerBot

2017-12-15 ⋅ hasherezade
Unpacking Magniber ransomware with PE-sieve (former: 'hook_finder')
Magniber

2017-10-29 ⋅ quangnh89
Sality Configuration Extractor (sality_extractor.py)
Sality

2017-10-26 ⋅ Twitter (@siri_urz) ⋅ S!Ri
Tweet on PDB path
Zezin

2017-10-20 ⋅ 360 netlab ⋅ GenShen Ye
IoT_reaper: A Rappid Spreading New IoT Botnet
IoT Reaper

2017-08-18 ⋅ Twitter (@VK_intel) ⋅ Vitali Kremez
Tweet on extracted config from Gootkit
SnatchLoader

2017-08-02 ⋅ Trend Micro ⋅ Michael Villanueva
A Look at JS_POWMET, a Completely Fileless Malware
Powmet

2017-05-12 ⋅ Github (chrisjd20) ⋅ chrisjd20
powershell_web_backdoor
powershell_web_backdoor

2017-01-17 ⋅ Twitter (@malware_traffic) ⋅ Brad Duncan
Tweet on Vreikstadi Malspam
Vreikstadi