Malpedia Library

2021-08-25 ⋅ Github (StrangerealIntel) ⋅ StrangerealIntel
FIN7 still active

2021-07-23 ⋅ Github (Lastline-Inc) ⋅ Pavankumar Chaudhari, Quentin Fois
YARA rules, IOCs and Scripts for extracting IcedID C2s
IcedID

2021-07-18 ⋅ Github (mvt-project) ⋅ mvt-project
Mobile Verification Toolkit

2021-07-18 ⋅ Github (AmnestyTech) ⋅ Amnesty International
NSO Group Pegasus Indicator of Compromise
Chrysaor

2021-07-05 ⋅ Github (f0wl) ⋅ Marius Genheimer
REvil Linux Configuration Extractor
REvil

2021-07-02 ⋅ Github (fwosar) ⋅ Fabian Wosar
REvil configuration dump used in Kaseya attack
REvil

2021-06-28 ⋅ Github (Finch4) ⋅ Finch
Delta Ransomware Analysis

2021-06-04 ⋅ Github (NightfallGT) ⋅ NightfallGT
MercurialGrabber Github Repository
MercurialGrabber

2021-06-01 ⋅ Github (Albocoder) ⋅ Erin Avllazagaj
Inside commercial malware sandboxes

2021-05-20 ⋅ Github (microsoft) ⋅ Microsoft
Microsoft 365 Defender Hunting Queries for hunting multiple threat actors' TTPs and malwares
STRRAT OceanLotus BabyShark Elise Revenge RAT WastedLocker Zebrocy

2021-05-18 ⋅ Github (Finch4) ⋅ Finch
Analysis of MountLocker
Mount Locker

2021-05-17 ⋅ Github (telekom-security) ⋅ Deutsche Telekom Security GmbH
icedid_analysis
IcedID

2021-04-25 ⋅ Nightwatch Cybersecurity ⋅ Nightwatch Cybersecurity
Supply Chain Attacks via GitHub.com Releases

2021-04-22 ⋅ Github (@cecio) ⋅ @red5heep
EMOTET: a State-Machine reversing exercise
Emotet

2021-04-20 ⋅ Github (fireeye) ⋅ FireEye, Mandiant
FireEye Mandiant PulseSecure Exploitation Countermeasures

2021-04-12 ⋅ Github (NightfallGT) ⋅ NightfallGT
Nitro Ransomware - Proof of Concept
Nitro

2021-04-06 ⋅ Github (FrenchCisco) ⋅ FrenchCisco
Github Repository: RATel
RATel

2021-04-03 ⋅ Github (carbreal) ⋅ Carlos Brendel
Hubnr Botnet
Hubnr

2021-03-27 ⋅ Github (StrangerealIntel) ⋅ Twitter (@Arkbird_SOLG)
Terraloader: Congrats, you have a new fake job!
TerraLoader

2021-03-18 ⋅ Github (ph4ntonn) ⋅ ph4ntonn
Github repository for STOWAWAY
STOWAWAY