RansomCoinPublic

RansomCoin Extracción de metadatos e Indicadores de Compromiso embebidos de ransomware, de forma escalable y eficiente, con integraciones con Cuckoo. Idealmente, se ejecuta durante el análisis dinámico de Cuckoo, pero también puede usarse para análisis estático en grandes colecciones de ransomwar...

RansomCoin - A DFIR Tool To Extract Cryptocoin Addresses And Other Indicators Of Compromise From Binaries

Extracting metadata and hardcoded Indicators of Compromise from ransomware, in a scalable, efficient, way with cuckoo integrations. Ideally, is it run during cuckoo dynamic analysis, but can also be used for static analysis on large collections of ransomware. Designed to be fast, with low false...