albertzsigovits / malware-notes
Notes and IoCs of fresh malware
☆57Updated 8 months ago
Alternatives and similar repositories for malware-notes:
Users that are interested in malware-notes are comparing it to the libraries listed below
- ☆66Updated 2 years ago
- Quick analysis focusing on most important of a Malware or a Threat☆40Updated last year
- Lazarus analysis tools and research report☆55Updated last year
- Further investigation in to APT campaigns disclosed by private security firms and security agencies☆85Updated 2 years ago
- Simple PowerShell script to enable process scanning with Yara.☆92Updated 2 years ago
- Hive v5 file decryption algorithm☆34Updated 2 years ago
- IOC Collection 2022☆57Updated 2 years ago
- Malware Samples that could be used for teaching students about malware analysis.☆53Updated 11 months ago
- My Malware Analysis Reports☆20Updated 2 years ago
- Yara Rules for Modern Malware☆74Updated last year
- Scripts and tools accompanying HP Threat Research blog posts and reports.☆50Updated 11 months ago
- Lupo - Malware IOC Extractor. Debugging module for Malware Analysis Automation☆106Updated 2 years ago
- C2 Active Scanner☆55Updated 9 months ago
- ☆33Updated last year
- ☆34Updated 2 years ago
- Pointer was developed for massive hunting and mapping Cobalt Strike servers exposed on the internet.☆65Updated 2 years ago
- This repository aims to collect and document indicators from the different C2's listed in the C2-Matrix☆72Updated 3 years ago
- Python based CLI for MalwareBazaar☆36Updated 4 months ago
- A Feature Rich Modular Malware Configuration Extraction Utility for MalDuck☆127Updated last year
- A Cobalt Strike Scanner that retrieves detected Team Server beacons into a JSON object☆165Updated 2 years ago
- A small utility to deal with malware embedded hashes.☆49Updated last year
- information about ransomware groups (Ransomware Analysis Notes)☆36Updated last year
- ☆65Updated 3 years ago
- Signature-based detection of malware features based on Windows API call sequences. It's like YARA for sandbox API traces!☆82Updated last year
- Python wrappers for mal_unpack☆35Updated last year
- SubCrawl is a modular framework for discovering open directories, identifying unique content through signatures and organizing the data w…☆51Updated 3 months ago
- Community Detection Signature Build and Distribution Pipeline for YARA, Suricata, Snort and Sigma☆27Updated last year
- Malware vulnerability intel tool for third-party attackers☆115Updated 5 months ago
- 100 Days of YARA to be updated with rules & ideas as the year progresses☆58Updated 2 years ago
- Rules Shared by the Community from 100 Days of YARA 2023☆76Updated last year