Malpedia Library

2020-09-07 ⋅ Github (pan-unit42) ⋅ Brad Duncan
Collection of recent Dridex IOCs
Cutwail Dridex

2020-08-31 ⋅ Github (ics-iot-bootcamp) ⋅ Ali Rıza Şahinkaya, Can Atakan Işık, Rıdvan Ethem Canavar
Cerberus Banking Trojan Research
Cerberus

2020-08-23 ⋅ Github (Insane-Forensics) ⋅ Insane-Forensics
Dispatches from Drovorub: Network Threat Hunting for Russia GRU GTsSS' Malware at Scale

2020-08-19 ⋅ Github (lgandx) ⋅ Laurent Gaffie
Responder/MultiRelay
Responder

2020-08-05 ⋅ Github (mauronz) ⋅ Francesco Muroni
Emotet API+string deobfuscator (v0.1)
Emotet

2020-07-22 ⋅ Github (hausec) ⋅ Ryan Hausknecht
Github Repository for PowerZure
PowerZure

2020-07-22 ⋅ SUCURI ⋅ Denis Sinegubko
Skimmers in Images & GitHub Repos
magecart

2020-07-13 ⋅ Github (1d8) ⋅ 1d8
Remcos RAT Macro Dropper Doc
Remcos

2020-07-10 ⋅ Github (eset) ⋅ Matías Porolli
Evilnum — Indicators of Compromise
EVILNUM More_eggs EVILNUM TerraStealer

2020-07-09 ⋅ Github (krautface) ⋅ krautface
Gist with observed grelos skimmer
grelos

2020-06-30 ⋅ Github (elastic) ⋅ Elastic
Detection Rules by Elastic

2020-06-26 ⋅ Github (Bleeping) ⋅ Lawrence Abrams
Ransom .exx notes
RansomEXX

2020-06-25 ⋅ Github (7h3w4lk3r) ⋅ The Walker
Github Repository of PYBACK
pyback

2020-06-22 ⋅ Github (StrangerealIntel) ⋅ Twitter (@Arkbird_SOLG)
FTcode targets European countries
FTCODE

2020-06-17 ⋅ Github (f0wl) ⋅ Marius Genheimer
deICEr: A Go tool for extracting config from IcedID second stage Loaders
IcedID

2020-06-09 ⋅ Github (citizenlab) ⋅ CitizenLab
Dark Basin Indicators of Compromise
Dark Basin

2020-06-09 ⋅ Github (Sentinel-One) ⋅ Gal Kristal
CobaltStrikeParser
Cobalt Strike

2020-06-05 ⋅ ⋅ NSFOCUS ⋅ NSFOCUS
供应链攻击事件——针对Github中Java项目的定向攻击
Octopus Scanner

2020-06-05 ⋅ Github (DanusMinimus) ⋅ Dan Lisichkin
Zero2Auto - Netwalker Walk through
Mailto

2020-05-28 ⋅ Github Security Lab ⋅ Alvaro Muñoz
The Octopus Scanner Malware: Attacking the open source supply chain
Octopus Scanner