Malpedia Library

2024-12-06 ⋅ Github (VenzoV) ⋅ VenzoV
Shellcode Loader Delivering XWorm
XWorm

2024-10-17 ⋅ Github (ssrdio) ⋅ Gregor Spagnolo
Analysis of BeaverTail & InvisibleFerret activity
BeaverTail InvisibleFerret

2024-10-03 ⋅ GitHub (dstepanic) ⋅ Daniel Stepanic
Getting Cozy with Milk and WARMCOOKIES
WarmCookie

2024-09-09 ⋅ Github (itaymigdal) ⋅ Itay Migdal
Poshito - New Telegram C2

2024-08-27 ⋅ Github (blacklotuslabs) ⋅ Black Lotus Labs
Taking the Crossroads: The Versa Director Zero-Day Exploitation (IOCs)
VersaMem

2024-08-22 ⋅ Github (X-ZIGZAG) ⋅ X-ZIGZAG
Github Repository for X-ZIGZAG
X-ZIGZAG

2024-07-14 ⋅ Github (Hildaboo) ⋅ Hildaboo
WannaCry Server Emulator
WannaCryptor

2024-06-25 ⋅ Hunt.io ⋅ Hunt.io
Good Game, Gone Bad: Xeno RAT Spread Via .gg Domains and GitHub
XenoRAT

2024-06-13 ⋅ IT Security Guru ⋅ Guru
Guest Blog: Ox Security on learning from the Recent GitHub Extortion Campaigns
Gitloker

2024-06-13 ⋅ Github (LambdaMamba) ⋅ Lena Yu
Implementation of C2 decryption
PrivateLoader

2024-06-13 ⋅ Github (LambdaMamba) ⋅ Lena Yu
Implementation of a Config Decryptor for Amadey
Amadey

2024-06-06 ⋅ Bleeping Computer ⋅ Sergiu Gatlan
New Gitloker attacks wipe GitHub repos in extortion scheme
Gitloker

2024-05-23 ⋅ Github (x-junior) ⋅ Mohamed Ashraf
String Decryptor for WarmCookie
WarmCookie

2024-05-23 ⋅ Github (x-junior) ⋅ Mohamed Ashraf
IDA Script for WarmCookie
WarmCookie

2024-05-19 ⋅ Github (Aegrah) ⋅ Ruben Groenewoud
PANIX - Persistence Against *NIX
PANIX

2024-05-05 ⋅ Github (VenzoV) ⋅ VenzoV
Latrodectus "littlehw"
Latrodectus

2024-04-12 ⋅ Github (kevoreilly) ⋅ Kevin O’Reilly
DoomedLoader YARA rule
SquidLoader

2024-04-11 ⋅ Github (jeFF0Falltrades) ⋅ Jeff Archer
Rat King Configuration Parser
AsyncRAT DCRat Quasar RAT Venom RAT

2024-04-10 ⋅ Github (KekraLoader) ⋅ IWcommunityFR
Leak of Epsilon Stealer's source code
Epsilon Stealer

2024-04-01 ⋅ Github (amlweems) ⋅ Anthony Weems
Analysis Repo with honeypot and backdoor patch for xzbot
xzbot