Telekom Security Malware Analysis Repository Logo

Telekom Security Malware Analysis Repository

0
Free
Visit Website

This repository comprises scripts, signatures, and additional IOCs of our blog posts at the telekom.com blog as well as of our Twitter account. 2021-05-17: Let’s set ice on fire: Hunting and detecting IcedID infections (IcedID) 2021-07-14: LOCKDATA Auction – Another leak marketplace showing the recent shift of ransomware operators (CryLock) 2021-09-14: Flubot's Smishing Campaigns under the Microscope (Flubot/Teabot) 2021-10-29: #YARA rule for hunting XOR encrypted #PlugX / #Korplug payloads(PlugX) 2022-01-14: #100DaysOfYara Detect Hacktools that modify RDP settings (Hacktools) 2022-03-11: SystemBC YARA rule and extractor (SystemBC) 2022-03-18: #100DaysOfYara Detect Vatet Loader in backedoored Rufus([Defray777])(https://github.com/telekom-security/malware_analysis/tree/main/defray777) 2022-09-02: Raspberry Robin(IOCs)

FEATURES

ALTERNATIVES

A command-line program for finding secrets and sensitive information in textual data and Git history.

Valkyrie is a sophisticated file verdict system that enhances malware detection through behavioral analysis and extensive file feature examination.

Automated blind-xss search for Burp Suite

A program to extract IOCs from text files using regular expressions

A minimal, consistent API for building integrations with malware sandboxes

VxSig is a tool to automatically generate AV byte signatures from similar binaries.

Debugger and .NET assembly editor with advanced debugging features.

Scans running processes for potentially malicious implants and dumps them.