dynmx

dynmx Prototype dynmx spoken dynamics is a signature-based detection approach for behavioural malware features based on Windows API call sequences. In a simplified way, you can think of dynmx as a sort of YARA for API call traces so called function logs originating from malware sandboxes. Hence,...

malware-samples

malware-samples Una raccolta di campioni di malware e relative informazioni di analisi, molto probabilmente citati da http://blog.inquest.net o https://twitter.com/inquest. Assicurati di dare un'occhiata anche alla sezione Deep File Inspection DFI di https://labs.inquest.net per un'interfaccia...

Configuration_extractors

Configurationextractors Vidar Stealer: L'estrattore di configurazione è stato testato sui seguenti campioni: 37c74886ce85682039bced4a6423e233aebd962921d9a76008d19ff75483a52c 6956fb2dd65d6627c23b680d4149983017bcb8e8b8fc1d30a5210998ca8cf801...

malware-samples

Campioni di Malware Questo repository ha lo scopo di fornire accesso a un'ampia varietà di file dannosi e altri artefatti. Tutti i campioni si trovano in un archivio ZIP protetto da password, la cui password è: infected Esercizi di Analisi del Malware Oltre a fornire artefatti provenienti dai...

security-labs-pocs

Datadog Security Labs Forschung und Proof-of-Concept-Code === Dieses Repository enthält Informationen, Exploits, Malware-Beispiele und Skripte von Datadog Security Labs. Ziel Dieses Repository soll Proof-of-Concept-Exploits, Malware-Beispiele und technische Demos bereitstellen, um der Community z...

malware-samples

malware-samples Una raccolta di campioni di malware intercettati da diversi honeypot che gestisco in tutto il mondo ATTENZIONE: Questo repository contiene malware reale, non eseguire nessuno di questi file sul tuo pc a meno che tu non sappia esattamente cosa stai facendo. Tutti i campioni di...

PMAT-labs

PMAT-labs 🔬 Willkommen zu den Labs für Practical Malware Analysis & Triage. 🔴 WARNUNG 🔴 Lesen Sie dies sorgfältig, bevor Sie fortfahren. Dieses Repository enthält aktive Malware-Beispiele zur Verwendung im Kurs Practical Malware Analysis & Triage PMAT. Diese Beispiele wurden entweder geschrieben,...

Evasive_Malware_Book_Samples

Amostras do livro "Evasive Malware" As amostras referenciadas no meu livro, Evasive Malware: A Field Guide to Detecting, Analyzing, and Defeating Advanced Threats https://nostarch.com/evasive-malware Aviso Legal Este repositório é fornecido apenas para fins educacionais e de pesquisa, em conexão...

obfuscation_detection

Obfuscation Detection v2.4 Author: Tim Blazytko Automatically detect obfuscated code and other interesting code constructs Description: Obfuscation Detection is a Binary Ninja plugin to detect obfuscated code and interesting code constructs e.g., state machines in binaries. Given a binary, the...

linux-malware-toolbox

Linux Malware Samples - Educational Repository ⚠️ IMPORTAN...

linux-malwares

Linux Malware Samples - Educational Repository ⚠️ IMPORTAN...

APThreatHunter: An Automated Planning-Based Threat Hunting Framework

Cyber attacks threaten economic interests, critical infrastructure, and public health and safety. To counter this, entities adopt cyber threat hunting, a proactive approach that involves formulating hypotheses and searching for attack patterns within organisational networks. Automating cyber thre...

EUVD-2015-8844

Malware in sbrugna...

MalEval Android Malware Evaluation Framework

This repository contains the source code of MalEval, an evaluation framework for Android malware behavior auditing, focusing on explaining and substantiating malicious behaviors. The framework provides expert-verified reports, curated metadata, and model outputs to enable reproducible evaluation ...

Secure Development of a Hooking-Based Deception Framework against Keylogging Techniques

Keyloggers remain a serious threat in modern cybersecurity, silently capturing user keystrokes to steal credentials and sensitive information. Traditional defenses focus mainly on detection and removal, which can halt malicious activity but do little to engage or mislead adversaries. In this pape...

FOG Ransomware Spread by Cybercriminals Claiming Ties to DOGE

This blog details our investigation of malware samples that conceal within them a FOG ransomware payload...

Dissecting a Clever Malware Sample for Optimized Detection and Protection

As part of our product lineup, we offer security monitoring and malware removal services to our Wordfence Care and Response customers. In case of a security incident, our incident response team will investigate the root cause, find and remove malware from your site, and help with other...

Can Business Cybersecurity Protection Outlay Offset Cybercrime Insurance?

What is cybercrime insurance? Business cybersecurity protection cybercrime insurance safeguards organizations from any financial losses relating to damage to or loss of information from, networks and IT systems. This may include reputation loss, the cost of business interruption, infringement of...

Cybercriminals Swarm Windows Utility Regsvr32 to Spread Malware

A Windows living-off-the-land binary LOLBin known as Regsvr32 is seeing a big uptick in abuse of late, researchers are warning, mainly spreading trojans like Lokibot and Qbot. LOLBins are legitimate, native utilities used daily in various computing environments, that cybercriminals use to evade...

US Cyber Command Links 'MuddyWater' Hacking Group to Iranian Intelligence

The U.S. Cyber Command USCYBERCOM on Wednesday officially confirmed MuddyWater's ties to the Iranian intelligence apparatus, while simultaneously detailing the various tools and tactics adopted by the espionage actor to burrow into victim networks. "MuddyWater has been seen using a variety of...