Skip to content
This repository was archived by the owner on Nov 16, 2023. It is now read-only.

Files

Latest commit

 

History

History

Campaigns

Folders and files

NameName
Last commit message
Last commit date

parent directory

..
Bazacall
Bazacall
 
 
Bazarloader
Bazarloader
 
 
Jupyter-Solarmaker
Jupyter-Solarmaker
 
 
LemonDuck
LemonDuck
 
 
Log4J
Log4J
 
 
Macaw Ransomware
Macaw Ransomware
 
 
Qakbot
Qakbot
 
 
StrRAT malware
StrRAT malware
 
 
Sysrv-botnet
Sysrv-botnet
 
 
ZLoader
ZLoader
 
 
APT Baby Shark.txt
APT Baby Shark.txt
 
 
APT29 thinktanks.txt
APT29 thinktanks.txt
 
 
Abuse.ch Recent Threat Feed.md
Abuse.ch Recent Threat Feed.md
 
 
Abusing settingcontent-ms.txt
Abusing settingcontent-ms.txt
 
 
Bear Activity GTR 2019.txt
Bear Activity GTR 2019.txt
 
 
Cloud Hopper.txt
Cloud Hopper.txt
 
 
DofoilNameCoinServerTraffic.txt
DofoilNameCoinServerTraffic.txt
 
 
Dopplepaymer In-Memory Malware Implant.txt
Dopplepaymer In-Memory Malware Implant.txt
 
 
Dragon Fly.txt
Dragon Fly.txt
 
 
Elise backdoor.txt
Elise backdoor.txt
 
 
Equation Group C2 Communication.txt
Equation Group C2 Communication.txt
 
 
Hurricane Panda activity.txt
Hurricane Panda activity.txt
 
 
Judgement Panda exfil activity.txt
Judgement Panda exfil activity.txt
 
 
MacOceanLotusBackdoor.txt
MacOceanLotusBackdoor.txt
 
 
MacOceanLotusDropper.txt
MacOceanLotusDropper.txt
 
 
OceanLotus registry activity.txt
OceanLotus registry activity.txt
 
 
Ransomware hits healthcare - Alternate Data Streams use.txt
Ransomware hits healthcare - Alternate Data Streams use.txt
 
 
Ransomware hits healthcare - Backup deletion.txt
Ransomware hits healthcare - Backup deletion.txt
 
 
Ransomware hits healthcare - Cipher.exe tool deleting data.txt
Ransomware hits healthcare - Cipher.exe tool deleting data.txt
 
 
Ransomware hits healthcare - Clearing of system logs.txt
Ransomware hits healthcare - Clearing of system logs.txt
 
 
Ransomware hits healthcare - Possible compromised accounts.txt
Ransomware hits healthcare - Possible compromised accounts.txt
 
 
Ransomware hits healthcare - Robbinhood activity.txt
Ransomware hits healthcare - Robbinhood activity.txt
 
 
Ransomware hits healthcare - Turning off System Restore.txt
Ransomware hits healthcare - Turning off System Restore.txt
 
 
Ransomware hits healthcare - Vulnerable Gigabyte drivers.txt
Ransomware hits healthcare - Vulnerable Gigabyte drivers.txt
 
 
Threat actor Phosphorus masquerading as conference organizers.md
Threat actor Phosphorus masquerading as conference organizers.md
 
 
WastedLocker Downloader.md
WastedLocker Downloader.md
 
 
apt sofacy zebrocy.txt
apt sofacy zebrocy.txt
 
 
apt sofacy.txt
apt sofacy.txt
 
 
apt ta17 293a ps.txt
apt ta17 293a ps.txt
 
 
apt tropictrooper.txt
apt tropictrooper.txt
 
 
apt unidentified nov 18.txt
apt unidentified nov 18.txt
 
 
c2-lookup-from-nonbrowser[Nobelium].md
c2-lookup-from-nonbrowser[Nobelium].md
 
 
c2-lookup-response[Nobelium].md
c2-lookup-response[Nobelium].md
 
 
cobalt-strike-invoked-w-wmi.md
cobalt-strike-invoked-w-wmi.md
 
 
compromised-certificate[Nobelium].md
compromised-certificate[Nobelium].md
 
 
confluence-weblogic-targeted.md
confluence-weblogic-targeted.md
 
 
cypherpunk-exclusive-commands.md
cypherpunk-exclusive-commands.md
 
 
cypherpunk-remote-exec-w-psexesvc.md
cypherpunk-remote-exec-w-psexesvc.md
 
 
detect-cyzfc-activity.md
detect-cyzfc-activity.md
 
 
fireeye-red-team-tools-CVEs [Nobelium].md
fireeye-red-team-tools-CVEs [Nobelium].md
 
 
fireeye-red-team-tools-HASHs [Nobelium].md
fireeye-red-team-tools-HASHs [Nobelium].md
 
 
known-affected-software-orion[Nobelium].md
known-affected-software-orion[Nobelium].md
 
 
launching-base64-powershell[Nobelium].md
launching-base64-powershell[Nobelium].md
 
 
launching-cmd-echo[Nobelium].md
launching-cmd-echo[Nobelium].md
 
 
locate-dll-created-locally[Nobelium].md
locate-dll-created-locally[Nobelium].md
 
 
locate-dll-loaded-in-memory[Nobelium].md
locate-dll-loaded-in-memory[Nobelium].md
 
 
oceanlotus-apt32-files.md
oceanlotus-apt32-files.md
 
 
oceanlotus-apt32-network.md
oceanlotus-apt32-network.md
 
 
possible-affected-software-orion[Nobelium].md
possible-affected-software-orion[Nobelium].md
 
 
robbinhood-driver.md
robbinhood-driver.md
 
 
robbinhood-evasion.md
robbinhood-evasion.md
 
 
snip3-aviation-targeting-emails.md
snip3-aviation-targeting-emails.md
 
 
snip3-detectsanboxie-function-call.md
snip3-detectsanboxie-function-call.md
 
 
snip3-encoded-powershell-structure.md
snip3-encoded-powershell-structure.md
 
 
snip3-malicious-network-connectivity.md
snip3-malicious-network-connectivity.md
 
 
snip3-revengerat-c2-exfiltration.md
snip3-revengerat-c2-exfiltration.md