PMAT-labs

PMAT-labs 🔬 Practical Malware Analysis & Triage コースのラボへようこそ。 🔴 警告 🔴 続行する前に注意深くお読みください。 このリポジトリには、Practical Malware Analysis & Triage PMAT コースで使用するための生のマルウェアサンプルが含まれています。これらのサンプルは、一般的なマルウェアの特性を模倣するために作成されたものか、実際に「野良で捕獲された」実世界のサンプルです。どちらのカテゴリも危険です。これらのサンプルは常に細心の注意を払って取り扱ってください。...

dynmx

dynmx Prototype dynmx spoken dynamics is a signature-based detection approach for behavioural malware features based on Windows API call sequences. In a simplified way, you can think of dynmx as a sort of YARA for API call traces so called function logs originating from malware sandboxes. Hence,...

Evasive_Malware_Book_Samples

来自《规避型恶意软件》一书的样本 本仓库中的样本引用自我的著作《规避型恶意软件：检测、分析与击败高级威胁的实地指南》 https://nostarch.com/evasive-malware 法律免责声明 本仓库仅用于教育和研究目的，并且仅与其所配套的已出版著作（《规避型恶意软件：检测、分析与击败高级威胁的实地指南》）相关。这些文件包含恶意软件样本或代码，如果被误用可能会造成危害。 通过访问或下载本仓库的任何内容，即表示您同意以下条款： 您将仅将材料用于合法的分析、研究或教育目的。 您有责任遵守所有适用的本地、国家和国际法律。...

security-labs-pocs

Investigación de Datadog Security Labs y Código de Prueba de Concepto Este repositorio contiene información, exploits, muestras de malware y scripts de Datadog Security Labs. Objetivo Este repositorio tiene como objetivo proporcionar exploits de prueba de concepto, muestras de malware y...

obfuscation_detection

Obfuscation Detection v2.4 Author: Tim Blazytko Automatically detect obfuscated code and other interesting code constructs Description: Obfuscation Detection is a Binary Ninja plugin to detect obfuscated code and interesting code constructs e.g., state machines in binaries. Given a binary, the...

malware-samples

malware-samples 本仓库收集了各类恶意软件样本及相关剖析信息，其中大部分可能引自 http://blog.inquest.net 或 https://twitter.com/inquest。请务必同时查看 https://labs.inquest.net 的深度文件检查（DFI）模块，它提供了一个可交互搜索的界面，可访问包含超过 50 万个可下载恶意软件诱饵样本的大型语料库。 CVE-2018-4878-Adobe-Flash-DRM-UAF-0day 14c58e38... 载体：Microsoft Excel 2007+ XLSX, JSON VT 报告...

Configuration_extractors

配置提取器 Vidar Stealer: 配置提取器已在以下样本上测试： 37c74886ce85682039bced4a6423e233aebd962921d9a76008d19ff75483a52c 6956fb2dd65d6627c23b680d4149983017bcb8e8b8fc1d30a5210998ca8cf801 3a7512884d5e269a6c9d74a0af38c0d4d4b95bdbe5c7cc8d8608e84a725d2134 bd6370870671ccc61bb9a7ae5d31abc446e893dce15eeaff13deeb64f9317926...

malware-samples

malware-samples 由我在全球管理的多个蜜罐捕获的恶意软件样本集合 注意：此存储库包含真实的恶意软件，除非你确切知道自己在做什么，否则请勿在电脑上执行这些文件。 此存储库中的所有恶意软件样本均由安装在全球不同地点的多个蜜罐收集。 这是一个分布式蜜罐项目的成果，我正在所有希望合作的人的帮助下开发该项目。 具有通用名称（如 MD5 值或 smbxxx.tmp）的恶意软件在上传时未被 VirusTotal 检测为恶意软件，但这并不意味着它不是恶意软件。 请随意下载、分析并逆向此存储库中的所有样本，但请让我知道你的调查结果。 所有 7z 和 zip...

malware-samples

恶意软件样本 本仓库旨在提供对各种恶意文件及其他工件的访问。 所有样本均存放在受密码保护的 ZIP 压缩包中，密码为： infected 恶意软件分析练习 除了提供样本中的工件外，我还会定期发布恶意软件分析练习。这些练习涵盖广泛的恶意软件分析主题，并附带详细的解决方案与分步讲解。 2022 十月：追踪 VBA 宏中的 Shellcode 执行 2021 十二月：Maldocs - 使用 Python 自动提取下载 URL 二月：Maldocs - Excel 4 宏（XLM 宏）入门 八月：Javascript - 去混淆 Turla JS 后门 2020 十二月：Maldocs - 使...

linux-malware-toolbox

Linux Malware Samples - Educational Repository ⚠️ IMPORTAN...

linux-malwares

Linux Malware Samples - Educational Repository ⚠️ IMPORTAN...

APThreatHunter: An Automated Planning-Based Threat Hunting Framework

Cyber attacks threaten economic interests, critical infrastructure, and public health and safety. To counter this, entities adopt cyber threat hunting, a proactive approach that involves formulating hypotheses and searching for attack patterns within organisational networks. Automating cyber thre...

EUVD-2015-8844

Malware in sbrugna...

MalEval Android Malware Evaluation Framework

This repository contains the source code of MalEval, an evaluation framework for Android malware behavior auditing, focusing on explaining and substantiating malicious behaviors. The framework provides expert-verified reports, curated metadata, and model outputs to enable reproducible evaluation ...

Secure Development of a Hooking-Based Deception Framework against Keylogging Techniques

Keyloggers remain a serious threat in modern cybersecurity, silently capturing user keystrokes to steal credentials and sensitive information. Traditional defenses focus mainly on detection and removal, which can halt malicious activity but do little to engage or mislead adversaries. In this pape...

FOG Ransomware Spread by Cybercriminals Claiming Ties to DOGE

This blog details our investigation of malware samples that conceal within them a FOG ransomware payload...

Dissecting a Clever Malware Sample for Optimized Detection and Protection

As part of our product lineup, we offer security monitoring and malware removal services to our Wordfence Care and Response customers. In case of a security incident, our incident response team will investigate the root cause, find and remove malware from your site, and help with other...

Can Business Cybersecurity Protection Outlay Offset Cybercrime Insurance?

What is cybercrime insurance? Business cybersecurity protection cybercrime insurance safeguards organizations from any financial losses relating to damage to or loss of information from, networks and IT systems. This may include reputation loss, the cost of business interruption, infringement of...

Cybercriminals Swarm Windows Utility Regsvr32 to Spread Malware

A Windows living-off-the-land binary LOLBin known as Regsvr32 is seeing a big uptick in abuse of late, researchers are warning, mainly spreading trojans like Lokibot and Qbot. LOLBins are legitimate, native utilities used daily in various computing environments, that cybercriminals use to evade...

US Cyber Command Links 'MuddyWater' Hacking Group to Iranian Intelligence

The U.S. Cyber Command USCYBERCOM on Wednesday officially confirmed MuddyWater's ties to the Iranian intelligence apparatus, while simultaneously detailing the various tools and tactics adopted by the espionage actor to burrow into victim networks. "MuddyWater has been seen using a variety of...