56 matches found
obfuscation_detection
Obfuscation Detection v2.4 Author: Tim Blazytko Automatically detect obfuscated code and other interesting code constructs Description: Obfuscation Detection is a Binary Ninja plugin to detect obfuscated code and interesting code constructs e.g., state machines in binaries. Given a binary, the...
Evasive_Malware_Book_Samples
Примеры из книги «Evasive Malware» Образцы, упомянутые в моей книге «Evasive Malware: A Field Guide to Detecting, Analyzing, and Defeating Advanced Threats» https://nostarch.com/evasive-malware Юридический отказ от ответственности Этот репозиторий предоставляется исключительно в образовательных и...
PMAT-labs
PMAT-labs 🔬 Добро пожаловать в лабораторные работы курса Practical Malware Analysis & Triage. 🔴 ПРЕДУПРЕЖДЕНИЕ 🔴 Внимательно прочитайте это перед продолжением. Этот репозиторий содержит живые образцы вредоносных программ для использования в курсе Practical Malware Analysis & Triage PMAT. Эти...
security-labs-pocs
Исследования Datadog Security Labs и код Proof of Concept Этот репозиторий содержит информацию, эксплойты, образцы вредоносных программ и скрипты от Datadog Security Labs. Цель Этот репозиторий предназначен для предоставления PoC-эксплойтов, образцов вредоносных программ и технических демонстраци...
malware-samples
malware-samples Коллекция образцов вредоносных программ и сопутствующей информации по их анализу, на которую, скорее всего, ссылаются с http://blog.inquest.net или https://twitter.com/inquest. Обязательно также посмотрите раздел Deep File Inspection DFI на https://labs.inquest.net. Там доступен...
Configuration_extractors
Конфигурационные экстракторы Vidar Stealer: Конфигурационный экстрактор был протестирован на следующих образцах: 37c74886ce85682039bced4a6423e233aebd962921d9a76008d19ff75483a52c 6956fb2dd65d6627c23b680d4149983017bcb8e8b8fc1d30a5210998ca8cf801...
dynmx
dynmx Prototype dynmx spoken dynamics is a signature-based detection approach for behavioural malware features based on Windows API call sequences. In a simplified way, you can think of dynmx as a sort of YARA for API call traces so called function logs originating from malware sandboxes. Hence,...
malware-samples
malware-samples 전 세계에서 내가 운영하는 여러 허니팟이 수집한 멀웨어 샘플 모음 주의: 이 저장소에는 실제 멀웨어가 포함되어 있습니다. 정확히 무엇을 하는지 알고 있지 않다면 PC에서 이러한 파일을 실행하지 마세요. 이 저장소에 포함된 모든 멀웨어 샘플은 전 세계 여러 위치에 설치된 허니팟들에 의해 수집되었습니다. 이것은 협업을 원하는 모든 사람들의 도움으로 내가 개발 중인 분산 허니팟 프로젝트의 결과입니다. MD5 값이나 smbxxx.tmp 같은 일반적인 이름을 가진 멀웨어는 업로드 시점에 virustotal에...
malware-samples
Образцы вредоносных программ Этот репозиторий предназначен для доступа к широкому спектру вредоносных файлов и других артефактов. Все образцы находятся в ZIP-архиве, защищённом паролем, с паролем: infected Упражнения по анализу вредоносных программ Помимо предоставления артефактов из образцов, я...
linux-malware-toolbox
Linux Malware Samples - Educational Repository ⚠️ IMPORTAN...
linux-malwares
Linux Malware Samples - Educational Repository ⚠️ IMPORTAN...
APThreatHunter: An Automated Planning-Based Threat Hunting Framework
Cyber attacks threaten economic interests, critical infrastructure, and public health and safety. To counter this, entities adopt cyber threat hunting, a proactive approach that involves formulating hypotheses and searching for attack patterns within organisational networks. Automating cyber thre...
EUVD-2015-8844
Malware in sbrugna...
MalEval Android Malware Evaluation Framework
This repository contains the source code of MalEval, an evaluation framework for Android malware behavior auditing, focusing on explaining and substantiating malicious behaviors. The framework provides expert-verified reports, curated metadata, and model outputs to enable reproducible evaluation ...
Secure Development of a Hooking-Based Deception Framework against Keylogging Techniques
Keyloggers remain a serious threat in modern cybersecurity, silently capturing user keystrokes to steal credentials and sensitive information. Traditional defenses focus mainly on detection and removal, which can halt malicious activity but do little to engage or mislead adversaries. In this pape...
FOG Ransomware Spread by Cybercriminals Claiming Ties to DOGE
This blog details our investigation of malware samples that conceal within them a FOG ransomware payload...
Dissecting a Clever Malware Sample for Optimized Detection and Protection
As part of our product lineup, we offer security monitoring and malware removal services to our Wordfence Care and Response customers. In case of a security incident, our incident response team will investigate the root cause, find and remove malware from your site, and help with other...
Can Business Cybersecurity Protection Outlay Offset Cybercrime Insurance?
What is cybercrime insurance? Business cybersecurity protection cybercrime insurance safeguards organizations from any financial losses relating to damage to or loss of information from, networks and IT systems. This may include reputation loss, the cost of business interruption, infringement of...
Cybercriminals Swarm Windows Utility Regsvr32 to Spread Malware
A Windows living-off-the-land binary LOLBin known as Regsvr32 is seeing a big uptick in abuse of late, researchers are warning, mainly spreading trojans like Lokibot and Qbot. LOLBins are legitimate, native utilities used daily in various computing environments, that cybercriminals use to evade...
US Cyber Command Links 'MuddyWater' Hacking Group to Iranian Intelligence
The U.S. Cyber Command USCYBERCOM on Wednesday officially confirmed MuddyWater's ties to the Iranian intelligence apparatus, while simultaneously detailing the various tools and tactics adopted by the espionage actor to burrow into victim networks. "MuddyWater has been seen using a variety of...