Malpedia Library

2018-06-15 ⋅ Medium woj_ciech ⋅ Wojciech
Betabot still alive with multi-stage packing
BetaBot

2018-05-03 ⋅ Twitter (@thor_scanner) ⋅ Nextron Systems
Empire Downloader
Empire Downloader

2018-03-30 ⋅ Github (Psychotropos) ⋅ Ioannis Profetis
hajime_hashes
Hajime

2018-03-21 ⋅ Twitter (@anyrun_app) ⋅ ANY.RUN
Tweet on Bandios / Colony
Colony

2018-01-01 ⋅ nao_sec blog ⋅ nao_sec
Analyzing Ramnit used in Seamless campaign
Ramnit

2017-12-24 ⋅ Twitter (@juanandres_gs) ⋅ Juan Andrés Guerrero-Saade
Tweet on Turla Penquin
Penquin Turla

2017-12-19 ⋅ Trustwave ⋅ Simon Kenin
BrickerBot mod_plaintext Analysis
BrickerBot

2017-12-15 ⋅ hasherezade
Unpacking Magniber ransomware with PE-sieve (former: 'hook_finder')
Magniber

2017-10-29 ⋅ quangnh89
Sality Configuration Extractor (sality_extractor.py)
Sality

2017-10-26 ⋅ Twitter (@siri_urz) ⋅ S!Ri
Tweet on PDB path
Zezin

2017-10-20 ⋅ 360 netlab ⋅ GenShen Ye
IoT_reaper: A Rappid Spreading New IoT Botnet
IoT Reaper

2017-08-18 ⋅ Twitter (@VK_intel) ⋅ Vitali Kremez
Tweet on extracted config from Gootkit
SnatchLoader

2017-08-02 ⋅ Trend Micro ⋅ Michael Villanueva
A Look at JS_POWMET, a Completely Fileless Malware
Powmet

2017-05-12 ⋅ Github (chrisjd20) ⋅ chrisjd20
powershell_web_backdoor
powershell_web_backdoor

2017-01-17 ⋅ Twitter (@malware_traffic) ⋅ Brad Duncan
Tweet on Vreikstadi Malspam
Vreikstadi

2017-01-01 ⋅ J from TechHelpList
Yara Rule for Ransom_Comodosec_mrcr1
ComodoSec

2016-10-20 ⋅ Twitter (@benkow_) ⋅ Benoît Ancel
Tweet on nexter91 Panel
Nexster Bot

2016-08-11 ⋅ BleepingComputer Forums ⋅ Michael Gillespie
Smrss32 (.encrypted) Ransomware Help & Support - _HOW_TO_Decrypt.bmp
Smrss32

2015-10-12 ⋅ th3l4b ⋅ PuN1sh_3r
Keybase Logger/Clipboard/CredsStealer campaign
KeyBase

2014-04-18 ⋅ Trend Micro ⋅ Alvin John Nieto
TROJ64_WOWLIK.VT
Alureon