SentineLabs / Cl0p-ELF-Decryptor
Python3 script which decrypts files encrypted by flawed Cl0p ELF variant.
☆15Updated last year
Alternatives and similar repositories for Cl0p-ELF-Decryptor:
Users that are interested in Cl0p-ELF-Decryptor are comparing it to the libraries listed below
- Tricard - Malware Sandbox Fingerprinting☆19Updated last year
- Collection of generic YARA rules☆15Updated 7 months ago
- Defeating Anti-Debugging Techniques for Malware Analysis☆13Updated 2 years ago
- Hash collisions and their exploitations☆9Updated 2 years ago
- ☆12Updated 3 years ago
- Speaking materials from conferences I've given☆9Updated 2 years ago
- Tool to decrypt the configuration of NanoCore and dump all used plugins☆11Updated 4 years ago
- Golang Shlyuz Implant Implementation☆12Updated last year
- 🚧 Currently transfering TLP:CLEAR rules from TLP:AMBER repository...☆22Updated 10 months ago
- Parser for Sdba memory pool tags☆17Updated 3 years ago
- D-Scan project for office document analysis and generating flow diagram of macro in documents. For demo visit☆29Updated 2 months ago
- ☆12Updated 2 years ago
- Registry hive parsing the async way☆20Updated 4 months ago
- Monitor malware scanning services for your payloads☆10Updated 3 years ago
- Malkom is an extensible and simple similarity graph generator for malware analysis aimed at helping analysts visualize and cluster sets o…☆16Updated last year
- Repository of tools, YARA rules, and code-snippets from Stairwell's research team.☆22Updated last year
- ☆24Updated 2 months ago
- reboot of https://github.com/Genetic-Malware/Ebowla in order to simplify / modernize the codebase and provide ongoing support☆22Updated 3 years ago
- Conceptual Methods for Finding Commonalities in Macho Files☆13Updated 10 months ago
- ☆22Updated 2 years ago
- Sources Codes of many Office Malwares☆16Updated 2 years ago
- Python 3 library to build YARA rules.☆13Updated 3 years ago
- Maltego transforms to pivot between PE files based on their VirusTotal codeblocks☆18Updated 3 years ago
- Yara rules☆20Updated last year
- Royal Road RTF Weaponizer object decoder☆24Updated 4 months ago
- just manipulatin these here tokens yes sir nothing weird☆22Updated 2 years ago
- Indicators of Normality☆12Updated 2 years ago
- A set of YARA rules for the AIL framework to detect leak or information disclosure☆38Updated 6 months ago
- Catalog Red Team techniques that cause popups in various macOS versions☆14Updated 2 months ago
- YARA Rule Strings Statistics Calculator and Malware Research Helper☆13Updated 3 years ago