Memory-analysis

Memory-analysis Contains tools to perform malware and forensic analysis in Memory. Plugins: Dyrescan.py - parses Dyreconfig in memory. Rat9002.py - parses 9002 rat config in memory. plugx.py - parses plugx config in memory modified to also parse config size: 0x170c. ghostrat.py - parses ghostrat...

Malicious code in irma-ubi79-sluey (npm)

Source: amazon-inspector db7063694f1735b6ca5d1e2a63d1c84007c2647c7d09953bffd5372846a9937d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in irma-tempe92-sukiwir (npm)

Source: amazon-inspector f6443b83bdb5aa5327be41a6443d6dc029043b9eb551773e76f0d6cd5aa189ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in irma-tomat77-miaww (npm)

Source: amazon-inspector 7e690dd98705e876c538f37ab58e1f90c9d2aa2487f987c8f7ac8d76293ee74d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in irma-tongseng77-riris (npm)

Source: amazon-inspector 20e6242f29026b47db03e28aad61e87d2b0e5378a710464890a10877c2797f44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in irma-tongseng74-breki (npm)

Source: amazon-inspector 6003934bb471936242aded2132aeaf7a0a2fe290b59a84a4ef3499f277d6ae2e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in irma-wajit24-breki (npm)

Source: amazon-inspector 2aa13fbce501219ea1f699cfcf88b8e13a628ba629abeaa2124a9229874792f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in irma-tempe6-sukiwir (npm)

Source: amazon-inspector 2c8db1aa74590881afc661d36c0e2748127136b8a9f88b927452578a17452493 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in irma-tiwul39-sukiwir (npm)

Source: amazon-inspector a50ed501877c2613dbef9a612be02fdb3c8e5f881e18b969609e07d54c881a3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in irma-ubi79-breki (npm)

Source: amazon-inspector ce477d2fbf94afe953b74c6b6a1758a49360a7d158a5721e5168b7455ea3f6fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in irma-ubi52-sukiwir (npm)

Source: amazon-inspector 42d78f61766c5c69bfe45a0fe456e2268b01d6d0178723dd83a1e59cc5bf8df3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in irma-tongseng90-riris (npm)

Source: amazon-inspector 41b581827a2988646e0d204f2021d3de226fb9503f90285a8e0c0d2e9d204b34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in irma-tongseng14-breki (npm)

Source: amazon-inspector ada11c27227b69e847150b278330e0b412f73e73b9bba127c36057e967d6f6f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in irma-tiwul3-wekto (npm)

Source: amazon-inspector 845fe4a41b57b6514db7b1db6f2b35fde0b05e16d3e522c3ddf6afaa318e219f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in irma-wajit98-breki (npm)

Source: amazon-inspector 9f2c3acd13a855924334de67d65c32912148819e79baba97880b747492ab3b5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in irma-wajit38-riris (npm)

Source: amazon-inspector 5e19195b22d5a2d51df558d86126acff30c99540b9d9232f3cadd9c62527767b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in irma-ubi85-breki (npm)

Source: amazon-inspector 3eda8536f4f27db9bb5552d981bdf74ec9e2fbe7fa7d2bf0dc01759b01b297ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in irma-wajit41-miaww (npm)

Source: amazon-inspector ed1dde3ba5debe3d9cecd7906a17e91e2a26db0b23010e39a626f599ab5a1736 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in irma-tongseng73-breki (npm)

Source: amazon-inspector 6a4bbef081ba3af9c37ff5e5021787de8689809d24cc4661fa6f419b4a1c9ef2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in irma-tongseng18-sluey (npm)

Source: amazon-inspector 4d17b06ebf237bbdfad472e33782aa0a81aad4c9186dc93f0eece8a115275dc1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...