Revamp of malware folder + new samples

Original source code for; Dendroid, TinyBanker, litehttp, Mirai and AgentTesla.
2026-02-20 13:50:45 +00:00 · 2021-06-28 14:06:09 +03:00
parent 5def2149da
commit b013182f34
1358 changed files with 19 additions and 0 deletions
--- a/.gitignore
+++ b/.gitignore
@@ -13,6 +13,7 @@ $RECYCLE.BIN/
 Desktop.ini
 conf/eula_run.conf
 .git/
+dev_zone/

 # Egg
 logo/
--- a/conf/maldb.db
+++ b/conf/maldb.db
--- a/malware/Binaries/All.ElectroRAT/All.ElectroRAT.md5
+++ b/malware/Binaries/All.ElectroRAT/All.ElectroRAT.md5
@@ -0,0 +1 @@
+MD5 (All.ElectroRAT.zip) = 7ff8d31ad43f62f1c6876b725a1ebb1f
--- a/malwares/Binaries/Android.PegasusB/Android.PegasusB.pass
+++ b/malwares/Binaries/Android.PegasusB/Android.PegasusB.pass
--- a/malware/Binaries/All.ElectroRAT/All.ElectroRAT.shasum
+++ b/malware/Binaries/All.ElectroRAT/All.ElectroRAT.shasum
@@ -0,0 +1 @@
+dda14413450a11f336a8305cf274943d614905c3429d4f0efeffe6bf4b8b7bdc  All.ElectroRAT.zip
--- a/malware/Binaries/All.ElectroRAT/All.ElectroRAT.zip
+++ b/malware/Binaries/All.ElectroRAT/All.ElectroRAT.zip
--- a/malwares/Binaries/AndroRat_6Dec2013/AndroRat_6Dec2013.md5
+++ b/malwares/Binaries/AndroRat_6Dec2013/AndroRat_6Dec2013.md5
--- a/malwares/Binaries/AndroRat_6Dec2013/AndroRat_6Dec2013.pass
+++ b/malwares/Binaries/AndroRat_6Dec2013/AndroRat_6Dec2013.pass
--- a/malwares/Binaries/AndroRat_6Dec2013/AndroRat_6Dec2013.sha256
+++ b/malwares/Binaries/AndroRat_6Dec2013/AndroRat_6Dec2013.sha256
--- a/malwares/Binaries/AndroRat_6Dec2013/AndroRat_6Dec2013.zip
+++ b/malwares/Binaries/AndroRat_6Dec2013/AndroRat_6Dec2013.zip
--- a/malwares/Binaries/Android.PegasusB/Android.PegasusB.md5
+++ b/malwares/Binaries/Android.PegasusB/Android.PegasusB.md5
--- a/malwares/Binaries/Android.Skygofree/Android.Skygofree.pass
+++ b/malwares/Binaries/Android.Skygofree/Android.Skygofree.pass
--- a/malwares/Binaries/Android.PegasusB/Android.PegasusB.sha
+++ b/malwares/Binaries/Android.PegasusB/Android.PegasusB.sha
--- a/malwares/Binaries/Android.PegasusB/Android.PegasusB.zip
+++ b/malwares/Binaries/Android.PegasusB/Android.PegasusB.zip
--- a/malwares/Binaries/Android.Skygofree/Android.Skygofree.md5
+++ b/malwares/Binaries/Android.Skygofree/Android.Skygofree.md5
--- a/malwares/Binaries/Android.VikingHorde/Android.VikingHorde.pass
+++ b/malwares/Binaries/Android.VikingHorde/Android.VikingHorde.pass
--- a/malwares/Binaries/Android.Skygofree/Android.Skygofree.sha1
+++ b/malwares/Binaries/Android.Skygofree/Android.Skygofree.sha1
--- a/malwares/Binaries/Android.Skygofree/Android.Skygofree.zip
+++ b/malwares/Binaries/Android.Skygofree/Android.Skygofree.zip
--- a/malwares/Binaries/Android.Spy.49_iBanking_Feb2014/Android.Spy.49_iBanking_Feb2014.md5
+++ b/malwares/Binaries/Android.Spy.49_iBanking_Feb2014/Android.Spy.49_iBanking_Feb2014.md5
--- a/malwares/Binaries/Android.Spy.49_iBanking_Feb2014/Android.Spy.49_iBanking_Feb2014.pass
+++ b/malwares/Binaries/Android.Spy.49_iBanking_Feb2014/Android.Spy.49_iBanking_Feb2014.pass
--- a/malwares/Binaries/Android.Spy.49_iBanking_Feb2014/Android.Spy.49_iBanking_Feb2014.sha256
+++ b/malwares/Binaries/Android.Spy.49_iBanking_Feb2014/Android.Spy.49_iBanking_Feb2014.sha256
--- a/malwares/Binaries/Android.Spy.49_iBanking_Feb2014/Android.Spy.49_iBanking_Feb2014.zip
+++ b/malwares/Binaries/Android.Spy.49_iBanking_Feb2014/Android.Spy.49_iBanking_Feb2014.zip
--- a/malwares/Binaries/Android.VikingHorde/Android.VikingHorde.md5
+++ b/malwares/Binaries/Android.VikingHorde/Android.VikingHorde.md5
--- a/malwares/Binaries/FancyBear.GermanParliament/FancyBear.GermanParliament.pass
+++ b/malwares/Binaries/FancyBear.GermanParliament/FancyBear.GermanParliament.pass
--- a/malwares/Binaries/Android.VikingHorde/Android.VikingHorde.sha256
+++ b/malwares/Binaries/Android.VikingHorde/Android.VikingHorde.sha256
--- a/malwares/Binaries/Android.VikingHorde/Android.VikingHorde.zip
+++ b/malwares/Binaries/Android.VikingHorde/Android.VikingHorde.zip
--- a/malwares/Binaries/AntiExe.A/AntiExe.A.md5
+++ b/malwares/Binaries/AntiExe.A/AntiExe.A.md5
--- a/malwares/Binaries/AntiExe.A/AntiExe.A.pass
+++ b/malwares/Binaries/AntiExe.A/AntiExe.A.pass
--- a/malwares/Binaries/AntiExe.A/AntiExe.A.sha
+++ b/malwares/Binaries/AntiExe.A/AntiExe.A.sha
--- a/malwares/Binaries/AntiExe.A/AntiExe.A.zip
+++ b/malwares/Binaries/AntiExe.A/AntiExe.A.zip
--- a/malwares/Binaries/Artemis/Artemis.md5
+++ b/malwares/Binaries/Artemis/Artemis.md5
--- a/malwares/Binaries/Artemis/Artemis.pass
+++ b/malwares/Binaries/Artemis/Artemis.pass
--- a/malwares/Binaries/Artemis/Artemis.sha256
+++ b/malwares/Binaries/Artemis/Artemis.sha256
--- a/malwares/Binaries/Artemis/Artemis.zip
+++ b/malwares/Binaries/Artemis/Artemis.zip
--- a/malwares/Binaries/BAT.Drop/BAT.Drop.md5
+++ b/malwares/Binaries/BAT.Drop/BAT.Drop.md5
--- a/malwares/Binaries/BAT.Drop/BAT.Drop.pass
+++ b/malwares/Binaries/BAT.Drop/BAT.Drop.pass
--- a/malwares/Binaries/BAT.Drop/BAT.Drop.sha
+++ b/malwares/Binaries/BAT.Drop/BAT.Drop.sha
--- a/malwares/Binaries/BAT.Drop/BAT.Drop.zip
+++ b/malwares/Binaries/BAT.Drop/BAT.Drop.zip
--- a/malwares/Binaries/BAT.Pot.A/BAT.Pot.A.md5
+++ b/malwares/Binaries/BAT.Pot.A/BAT.Pot.A.md5
--- a/malwares/Binaries/BAT.Pot.A/BAT.Pot.A.pass
+++ b/malwares/Binaries/BAT.Pot.A/BAT.Pot.A.pass
--- a/malwares/Binaries/BAT.Pot.A/BAT.Pot.A.sha
+++ b/malwares/Binaries/BAT.Pot.A/BAT.Pot.A.sha
--- a/malwares/Binaries/BAT.Pot.A/BAT.Pot.A.zip
+++ b/malwares/Binaries/BAT.Pot.A/BAT.Pot.A.zip
--- a/malwares/Binaries/BAT.Skul/BAT.Skul.md5
+++ b/malwares/Binaries/BAT.Skul/BAT.Skul.md5
--- a/malwares/Binaries/BAT.Skul/BAT.Skul.pass
+++ b/malwares/Binaries/BAT.Skul/BAT.Skul.pass
--- a/malwares/Binaries/BAT.Skul/BAT.Skul.sha
+++ b/malwares/Binaries/BAT.Skul/BAT.Skul.sha
--- a/malwares/Binaries/BAT.Skul/BAT.Skul.zip
+++ b/malwares/Binaries/BAT.Skul/BAT.Skul.zip
--- a/malwares/Binaries/Backdoor.MSIL.Tyupkin/Backdoor.MSIL.Tyupkin.md5
+++ b/malwares/Binaries/Backdoor.MSIL.Tyupkin/Backdoor.MSIL.Tyupkin.md5
--- a/malwares/Binaries/Backdoor.MSIL.Tyupkin/Backdoor.MSIL.Tyupkin.pass
+++ b/malwares/Binaries/Backdoor.MSIL.Tyupkin/Backdoor.MSIL.Tyupkin.pass
--- a/malwares/Binaries/Backdoor.MSIL.Tyupkin/Backdoor.MSIL.Tyupkin.sha256
+++ b/malwares/Binaries/Backdoor.MSIL.Tyupkin/Backdoor.MSIL.Tyupkin.sha256
--- a/malwares/Binaries/Backdoor.MSIL.Tyupkin/Backdoor.MSIL.Tyupkin.zip
+++ b/malwares/Binaries/Backdoor.MSIL.Tyupkin/Backdoor.MSIL.Tyupkin.zip
--- a/malwares/Binaries/BlackEnergy2.1/BlackEnergy2.1.md5
+++ b/malwares/Binaries/BlackEnergy2.1/BlackEnergy2.1.md5
--- a/malwares/Binaries/BlackEnergy2.1/BlackEnergy2.1.pass
+++ b/malwares/Binaries/BlackEnergy2.1/BlackEnergy2.1.pass
--- a/malwares/Binaries/BlackEnergy2.1/BlackEnergy2.1.sha256
+++ b/malwares/Binaries/BlackEnergy2.1/BlackEnergy2.1.sha256
--- a/malwares/Binaries/BlackEnergy2.1/BlackEnergy2.1.zip
+++ b/malwares/Binaries/BlackEnergy2.1/BlackEnergy2.1.zip
--- a/malwares/Binaries/Brain.A/Brain.A.md5
+++ b/malwares/Binaries/Brain.A/Brain.A.md5
--- a/malwares/Binaries/Brain.A/Brain.A.pass
+++ b/malwares/Binaries/Brain.A/Brain.A.pass
--- a/malwares/Binaries/Brain.A/Brain.A.sha
+++ b/malwares/Binaries/Brain.A/Brain.A.sha
--- a/malwares/Binaries/Brain.A/Brain.A.zip
+++ b/malwares/Binaries/Brain.A/Brain.A.zip
--- a/malwares/Binaries/Careto_Feb2014/Careto_Feb2014.md5
+++ b/malwares/Binaries/Careto_Feb2014/Careto_Feb2014.md5
--- a/malwares/Binaries/Careto_Feb2014/Careto_Feb2014.pass
+++ b/malwares/Binaries/Careto_Feb2014/Careto_Feb2014.pass
--- a/malwares/Binaries/Careto_Feb2014/Careto_Feb2014.sha256
+++ b/malwares/Binaries/Careto_Feb2014/Careto_Feb2014.sha256
--- a/malwares/Binaries/Careto_Feb2014/Careto_Feb2014.zip
+++ b/malwares/Binaries/Careto_Feb2014/Careto_Feb2014.zip
--- a/malwares/Binaries/Cascade.1701.W/Cascade.1701.W.md5
+++ b/malwares/Binaries/Cascade.1701.W/Cascade.1701.W.md5
--- a/malwares/Binaries/Cascade.1701.W/Cascade.1701.W.pass
+++ b/malwares/Binaries/Cascade.1701.W/Cascade.1701.W.pass
--- a/malwares/Binaries/Cascade.1701.W/Cascade.1701.W.sha
+++ b/malwares/Binaries/Cascade.1701.W/Cascade.1701.W.sha
--- a/malwares/Binaries/Cascade.1701.W/Cascade.1701.W.zip
+++ b/malwares/Binaries/Cascade.1701.W/Cascade.1701.W.zip
--- a/malwares/Binaries/Catapillar.E/Catapillar.E.md5
+++ b/malwares/Binaries/Catapillar.E/Catapillar.E.md5
--- a/malwares/Binaries/Catapillar.E/Catapillar.E.pass
+++ b/malwares/Binaries/Catapillar.E/Catapillar.E.pass
--- a/malwares/Binaries/Catapillar.E/Catapillar.E.sha
+++ b/malwares/Binaries/Catapillar.E/Catapillar.E.sha
--- a/malwares/Binaries/Catapillar.E/Catapillar.E.zip
+++ b/malwares/Binaries/Catapillar.E/Catapillar.E.zip
--- a/malwares/Binaries/Civil_War.282/Civil_War.282.md5
+++ b/malwares/Binaries/Civil_War.282/Civil_War.282.md5
--- a/malwares/Binaries/Civil_War.282/Civil_War.282.pass
+++ b/malwares/Binaries/Civil_War.282/Civil_War.282.pass
--- a/malwares/Binaries/Civil_War.282/Civil_War.282.sha
+++ b/malwares/Binaries/Civil_War.282/Civil_War.282.sha
--- a/malwares/Binaries/Civil_War.282/Civil_War.282.zip
+++ b/malwares/Binaries/Civil_War.282/Civil_War.282.zip
--- a/malwares/Binaries/Coll.CozyBear/Coll.CozyBear.md5
+++ b/malwares/Binaries/Coll.CozyBear/Coll.CozyBear.md5
--- a/malwares/Binaries/Coll.CozyBear/Coll.CozyBear.pass
+++ b/malwares/Binaries/Coll.CozyBear/Coll.CozyBear.pass
--- a/malwares/Binaries/Coll.CozyBear/Coll.CozyBear.sha
+++ b/malwares/Binaries/Coll.CozyBear/Coll.CozyBear.sha
--- a/malwares/Binaries/Coll.CozyBear/Coll.CozyBear.zip
+++ b/malwares/Binaries/Coll.CozyBear/Coll.CozyBear.zip
--- a/malwares/Binaries/Coll.DarkHydrus/Coll.DarkHydrus.md5
+++ b/malwares/Binaries/Coll.DarkHydrus/Coll.DarkHydrus.md5
--- a/malwares/Binaries/Coll.DarkHydrus/Coll.DarkHydrus.pass
+++ b/malwares/Binaries/Coll.DarkHydrus/Coll.DarkHydrus.pass
--- a/malwares/Binaries/Coll.DarkHydrus/Coll.DarkHydrus.sha
+++ b/malwares/Binaries/Coll.DarkHydrus/Coll.DarkHydrus.sha
--- a/malwares/Binaries/Coll.DarkHydrus/Coll.DarkHydrus.zip
+++ b/malwares/Binaries/Coll.DarkHydrus/Coll.DarkHydrus.zip
--- a/malwares/Binaries/CryptoLocker_10Sep2013/CryptoLocker_10Sep2013.md5
+++ b/malwares/Binaries/CryptoLocker_10Sep2013/CryptoLocker_10Sep2013.md5
--- a/malwares/Binaries/CryptoLocker_10Sep2013/CryptoLocker_10Sep2013.pass
+++ b/malwares/Binaries/CryptoLocker_10Sep2013/CryptoLocker_10Sep2013.pass
--- a/malwares/Binaries/CryptoLocker_10Sep2013/CryptoLocker_10Sep2013.sha256
+++ b/malwares/Binaries/CryptoLocker_10Sep2013/CryptoLocker_10Sep2013.sha256
--- a/malwares/Binaries/CryptoLocker_10Sep2013/CryptoLocker_10Sep2013.zip
+++ b/malwares/Binaries/CryptoLocker_10Sep2013/CryptoLocker_10Sep2013.zip
--- a/malwares/Binaries/CryptoLocker_20Nov2013/CryptoLocker_20Nov2013.md5
+++ b/malwares/Binaries/CryptoLocker_20Nov2013/CryptoLocker_20Nov2013.md5
--- a/malwares/Binaries/CryptoLocker_20Nov2013/CryptoLocker_20Nov2013.pass
+++ b/malwares/Binaries/CryptoLocker_20Nov2013/CryptoLocker_20Nov2013.pass
--- a/malwares/Binaries/CryptoLocker_20Nov2013/CryptoLocker_20Nov2013.sha256
+++ b/malwares/Binaries/CryptoLocker_20Nov2013/CryptoLocker_20Nov2013.sha256
--- a/malwares/Binaries/CryptoLocker_20Nov2013/CryptoLocker_20Nov2013.zip
+++ b/malwares/Binaries/CryptoLocker_20Nov2013/CryptoLocker_20Nov2013.zip
--- a/malwares/Binaries/CryptoLocker_22Jan2014/CryptoLocker_22Jan2014.md5
+++ b/malwares/Binaries/CryptoLocker_22Jan2014/CryptoLocker_22Jan2014.md5
--- a/malwares/Binaries/CryptoLocker_22Jan2014/CryptoLocker_22Jan2014.pass
+++ b/malwares/Binaries/CryptoLocker_22Jan2014/CryptoLocker_22Jan2014.pass
--- a/malwares/Binaries/CryptoLocker_22Jan2014/CryptoLocker_22Jan2014.sha256
+++ b/malwares/Binaries/CryptoLocker_22Jan2014/CryptoLocker_22Jan2014.sha256
--- a/malwares/Binaries/CryptoLocker_22Jan2014/CryptoLocker_22Jan2014.zip
+++ b/malwares/Binaries/CryptoLocker_22Jan2014/CryptoLocker_22Jan2014.zip
--- a/malwares/Binaries/DOS.Yesmile/DOS.Yesmile.md5
+++ b/malwares/Binaries/DOS.Yesmile/DOS.Yesmile.md5
--- a/malwares/Binaries/DOS.Yesmile/DOS.Yesmile.pass
+++ b/malwares/Binaries/DOS.Yesmile/DOS.Yesmile.pass
--- a/malwares/Binaries/DOS.Yesmile/DOS.Yesmile.sha
+++ b/malwares/Binaries/DOS.Yesmile/DOS.Yesmile.sha
--- a/malwares/Binaries/DOS.Yesmile/DOS.Yesmile.zip
+++ b/malwares/Binaries/DOS.Yesmile/DOS.Yesmile.zip
--- a/malwares/Binaries/Dino/Dino.md5
+++ b/malwares/Binaries/Dino/Dino.md5
--- a/malwares/Binaries/Dino/Dino.pass
+++ b/malwares/Binaries/Dino/Dino.pass
--- a/Show More
+++ b/Show More
				`@@ -0,0 +1 @@`
				`MD5 (All.ElectroRAT.zip) = 7ff8d31ad43f62f1c6876b725a1ebb1f`
				`@@ -0,0 +1 @@`
				`dda14413450a11f336a8305cf274943d614905c3429d4f0efeffe6bf4b8b7bdc All.ElectroRAT.zip`