Click here to download all references as Bib-File.•

Enter keywords to filter the library entries below or Propose new Entry
2023-06-04 ⋅ Github (cocomelonc) ⋅ cocomelonc
Malware development trick - part 31: Run shellcode via SetTimer. Simple C++ example.
2023-05-21 ⋅ Github (0xThiebaut) ⋅ Maxime Thiebaut
PCAPeek
IcedID QakBot
2023-05-19 ⋅ Trend Micro ⋅ Jaromír Hořejší, Nitesh Surana
Rust-Based Info Stealers Abuse GitHub Codespaces
DeltaStealer
2023-05-10 ⋅ Github (MythicAgents) ⋅ Cody Thomas
Github Repository for Nimplant
Nimplant
2023-05-10 ⋅ Github (MythicAgents) ⋅ Cody Thomas
Github Repository for Poseidon
Poseidon Poseidon
2023-04-20 ⋅ Github (dodo-sec) ⋅ dodo-sec
An analysis of syscall usage in Cobalt Strike Beacons
Cobalt Strike
2023-04-14 ⋅ Github (Hildaboo) ⋅ Hildaboo
SHATTEREDGLASS Server Emulator
SHATTEREDGLASS
2023-04-01 ⋅ Github (dodo-sec) ⋅ dodo-sec
SmoothOperator
3CX Backdoor
2023-03-23 ⋅ ⋅ AhnLab ⋅ Vanish
Kimsuky group distributes malware disguised as a profile file (GitHub)
2023-03-21 ⋅ Github (rivitna) ⋅ Andrey Zhdanov
BlackCat v3 Decryptor Scripts
BlackCat BlackCat
2023-03-09 ⋅ Github (cocomelonc) ⋅ cocomelonc
Malware AV/VM evasion - part 13: encrypt/decrypt payload via Madryga. Simple C++ example.
2023-02-14 ⋅ Github (clairelevin) ⋅ Claire Levin
Writing a decryptor for Jaff ransomware
Jaff
2023-02-09 ⋅ Github (muha2xmad) ⋅ Muhammad Hasan Ali
Technical analysis of Godfather android malware
Godfather
2023-02-08 ⋅ K7 Security ⋅ Baran S
Play Store App Serves Coper Via GitHub
Coper
2023-01-11 ⋅ Github (DesktopECHO) ⋅ Daniel Milisic
T95-H616-Malware
BADBOX
2022-12-25 ⋅ Github (0day2) ⋅ 0day2
SapphireStealer
SapphireStealer
2022-12-25 ⋅ Github (MalGamy) ⋅ MalGamy
yara
Nokoyawa Ransomware
2022-12-12 ⋅ Github (MalGamy) ⋅ MalGamy
YARA rule for Vohuk ransomware
Vohuk
2022-12-09 ⋅ Secureworks ⋅ SecureWorks' Counter Threat Unit Research Team
Drokbk Malware Uses GitHub as Dead Drop Resolver
Drokbk
2022-12-03 ⋅ Github (kevoreilly) ⋅ Nikhil Hegde
Nighthawk DLL Payload Configuration Parser
Nighthawk