ryancor / CryptoWall_Analysis
CryptoWall 3.0 Ransomware Reversing Documentation & Scripts
☆17Updated 3 years ago
Related projects ⓘ
Alternatives and complementary repositories for CryptoWall_Analysis
- ☆23Updated 4 years ago
- Converts exported results of CAPA tool from .json format to another formats supporting by different tools.☆22Updated 2 years ago
- A repository where I share my injection implemintations☆29Updated 4 years ago
- Sp00fer blog post -☆25Updated 2 years ago
- Generates YARA rules to detect malware using API hashing☆17Updated 3 years ago
- Parser for a custom executable format from Hidden Bee malware (first stage)☆39Updated 2 months ago
- This repo contains all the code that will be referred at https://scriptdotsh.com by Paranoid Ninja☆45Updated 4 years ago
- Adapt practically persistence steadiness strategies working at Windows 10 utilized by sponsored nation-state threat actors, as Turla, Pro…☆20Updated 3 years ago
- This tool parses NTDLL.DLL, extracts all the syscall numbers and helps in making direct syscalls, in order to help evasion.☆15Updated 2 years ago
- This tool compares a targets patch levels against the Microsoft vulnerability database in order to detect potential missing patches on th…☆15Updated 3 years ago
- Windows GPU rootkit PoC by Team Jellyfish☆35Updated 9 years ago
- Data from analysis of the custom sample from the chapter "Practical Analysis and Test"☆12Updated 4 years ago
- A small library helping to parse commandline parameters (for C/C++)☆53Updated last year
- Liberating dem proprietary APT implants☆21Updated 4 years ago
- Scans through registry hives outputting entropy values for key/values, dumps binary contents to files...we are looking for those "fileles…☆11Updated 5 years ago
- Universal Malware Sample Encryption☆10Updated 10 months ago
- Another Portable Executable files analysing stuff☆18Updated 13 years ago
- Cross-platform malware development library for anti-analysis techniques☆24Updated 3 years ago
- Dumping credentials through windbg and pykd☆38Updated last year
- A simple injector that uses LoadLibraryA☆16Updated 4 years ago
- Here are some of my malware reversing papers that I will be publishing☆31Updated 2 years ago