DissectMalware / XLMMacroDeobfuscatorLinks
Extract and Deobfuscate XLM macros (a.k.a Excel 4.0 Macros)
☆583Updated last year
Alternatives and similar repositories for XLMMacroDeobfuscator
Users that are interested in XLMMacroDeobfuscator are comparing it to the libraries listed below
Sorting:
- Standard collection of rules for capa: the tool for enumerating the capabilities of programs☆634Updated last week
- Analysis of malware and Cyber Threat Intel of APT and cybercriminals groups☆714Updated 2 years ago
- PowerShell script for deobfuscating encoded PowerShell scripts☆426Updated 4 years ago
- Volatility plugin for extracts configuration data of known malware☆490Updated last year
- Anti-virus artifacts. Listing APIs hooked by: Avira, BitDefender, F-Secure, MalwareBytes, Norton, TrendMicro, and WebRoot.☆748Updated 3 years ago
- Collection of private Yara rules.☆368Updated this week
- IOC from articles, tweets for archives☆317Updated last year
- Repository of YARA rules made by Trellix ATR Team☆612Updated 6 months ago
- ☆788Updated 2 years ago
- DRAKVUF Sandbox - automated hypervisor-level malware analysis system☆1,205Updated this week
- Evasions encyclopedia gathers methods used by malware to evade detection when run in virtualized environment. Methods are grouped into ca…☆433Updated last year
- c2 traffic☆190Updated 2 years ago
- A collection of YARA rules we wish to share with the world, most probably referenced from http://blog.inquest.net.☆385Updated 3 years ago
- Dynamic unpacker based on PE-sieve☆768Updated 2 weeks ago
- A VBA parser and emulation engine to analyze malicious macros.☆1,108Updated last year
- Malware repository component for samples & static configuration with REST API interface.☆366Updated last week
- Distributed malware processing framework based on Python, Redis and S3.☆440Updated 2 weeks ago
- Malduck is your ducky companion in malware analysis journeys☆344Updated 3 months ago
- MBC content in markdown☆476Updated 3 months ago
- Encyclopedia for Executables☆455Updated 3 years ago
- RDP Bitmap Cache parser☆567Updated 8 months ago
- YARA Rules I come across on the internet☆351Updated last year
- Live hunting of code injection techniques☆383Updated 6 years ago
- Imaginary C2 is a python tool which aims to help in the behavioral (network) analysis of malware. Imaginary C2 hosts a HTTP server which …☆448Updated 2 years ago
- Collection of malware persistence and hunting information. Be a persistent persistence hunter!☆181Updated 2 months ago
- Beta versions of my software☆263Updated 3 months ago
- Detect and respond to Cobalt Strike beacons using ETW.☆508Updated 3 years ago
- ☆513Updated 11 months ago
- ☆1,106Updated last year
- YARA malware query accelerator (web frontend)☆434Updated last week