Malpedia Library

2013-07-19 ⋅ BlackHat ⋅ Jason Geffner
End-to-End Analysis of a Domain Generating Algorithm Malware Family
SuppoBox

2013-05-30 ⋅ CIRCL ⋅ CIRCL
Analysis of a stage 3 Miniduke sample
MiniDuke

2013-05-29 ⋅ CIRCL ⋅ CIRCL
Malware analysis report of a Backdoor.Snifula variant
Snifula

2013-03-29 ⋅ Computer Incident Response Center Luxembourg ⋅ CIRCL
Analysis Report (TLP:WHITE) Analysis of a PlugX variant (PlugX version 7.0)
PlugX

2012-12-15 ⋅ R136a1
Disclosure of another 0day malware - Analysis of 2nd Dropper and 3rd Dropper (Part 2)
Sedreco

2012-12-12 ⋅ Artem Baranov
Analysis of VirTool:WinNT/Exforel.A rootkit

2012-12-05 ⋅ Contagiodump Blog ⋅ Mila Parkour
OSX/Dockster.A and Win32/Trojan.Agent.AXMO Samples, pcaps, OSX malware analysis tools
Dockster

2012-10-23 ⋅ Trend Micro ⋅ James T. Bennett, Nart Villeneuve
Detecting APT Activity with Network Traffic Analysis
Enfal Gh0stnet Nitro sykipot taidoor

2012-09-28 ⋅ Dancho Danchev's Blog ⋅ Dancho Danchev
Dissecting 'Operation Ababil' - an OSINT Analysis
Cyber fighters of Izz Ad-Din Al Qassam

2012-08-23 ⋅ Trend Micro ⋅ Threat Research Team
The Taidoor Campaign: AN IN-DEPTH ANALYSIS
taidoor Taidoor

2012-08-03 ⋅ Contagio Dump ⋅ Andre DiMino
Cridex Analysis using Volatility
Feodo

2012-08-02 ⋅ Andre M. DiMino
Cridex Analysis using Volatility
Feodo

2012-07-22 ⋅ Malware.lu ⋅ Malware.lu
Xtreme RAT analysis
Xtreme RAT

2012-04-20 ⋅ StopMalvertising ⋅ Kimberly
Analysis of DarkMegi aka NpcDark
DarkMegi

2012-04-16 ⋅ SANS ⋅ Rong Hwa Chong
Detailed Analysis Of Sykipot (Smartcard Proxy Variant)
APT4

2012-02-01 ⋅ Contagio Dump ⋅ Mila Parkour
TDL4 - Purple Haze (Pihar) Variant - sample and analysis
Alureon

2012-01-12 ⋅ Contagio Dump ⋅ Mila Parkour
Blackhole Ramnit - samples and analysis
Ramnit

2011-10-14 ⋅ SANS ⋅ Frankie Fu Kay Li
A Detailed Analysis of an Advanced Persistent Threat Malware
ProjectWood

2011-10-13 ⋅ Frankie Fu Kay Li
A Detailed Analysis of an Advanced Persistent Threat Malware
woody

2011-10-07 ⋅ Contagiodump Blog ⋅ Mila Parkour
Rustock samples and analysis links. Rustock.C, E, I, J and other variants
Rustock