telekom-security/malware_analysis

Stars
108
Rank 321,259 (Top 7 %)
Language
Python
Created over 3 years ago
Updated 12 months ago

telekom-security/malware_analysis

telekom-security

There are no reviews yet. Be the first to send feedback to the community and the maintainers!

This repository contains analysis scripts, YARA rules, and additional IoCs related to our Telekom Security blog posts.

Telekom Security Malware Analysis Repository

This repository comprises scripts, signatures, and additional IOCs of our blog posts at the telekom.com blog as well as of our Twitter account.

2021-05-17: Let’s set ice on fire: Hunting and detecting IcedID infections (IcedID)
2021-07-14: LOCKDATA Auction – Another leak marketplace showing the recent shift of ransomware operators (CryLock)
2021-09-14: Flubot's Smishing Campaigns under the Microscope (Flubot/Teabot)
2021-10-29: #YARA rule for hunting XOR encrypted #PlugX / #Korplug payloads(PlugX)
2022-01-14: #100DaysOfYara Detect Hacktools that modify RDP settings (Hacktools)
2022-03-11: SystemBC YARA rule and extractor (SystemBC)
2022-03-18: #100DaysOfYara Detect Vatet Loader in backedoored Rufus([Defray777])(https://github.com/telekom-security/malware_analysis/tree/main/defray777)
2022-09-02: Raspberry Robin(IOCs)

tpotce

🍯 T-Pot - The All In One Multi Honeypot Platform 🐝

explo

Human and machine readable web vulnerability testing format

cve-2023-3519-citrix-scanner

Citrix Scanner for CVE-2023-3519

acquire-aws-ec2

A python script to acquire multiple aws ec2 instances in a forensically sound-ish way

tpotmobile

🛜 T-Pot Mobile - The All In One Wireless Honeypot Solution 🍯

PEBA

Python EWS Backend API

misp-warning-lists

listbot

🤖 Daily updated translation maps for T-Pot

smbwatch

emobility

Dockerized eMobility for use in T-Pot

ewsposter

collect logs and alerts from 27 honeypots and send it to backed (eg peba, geba), hpfeeds, influxdb or jSON file.

watchtower

Watchtower, monitoring your Slack workspaces.

BadIPFetch

API to fetch detected bad ip addresses from the DTAG early warning system

misp-releases

tpotce_archive

This repo holds all the glory of previous T-Pot repositories which have been merged last year.

officerscript

Officer Script is used to generate workforce schedule according to self defined rules

telekom-security.github.io

.github

Telekom Security

SafeSCARF-GitLab-Integration

SafeSCARF-GitLab-Integration