An Overview of Exploit Packs (Update 25) May 2015
I want to give special thanks to Kafeine L0NGC47, Fibon and Curt Shaffer for their help and update they made. Note the new Yara rules sheet / tab for yara rules for exploit kit. I also want to thank Kahu security, Kafeine, Malforsec and all security companies listed in References for their research. If you wish to be a contributor (be able to update/change the exploits or add yara rules), plea
16,800 clean and 11,960 malicious files for signature testing and research.
All files use the same password (scheme). Email me if you need the password. 16,800 CLEAN FILES EXE UTILITY FOR CLEAN EXE FILES XLS(X), DOC(X), RTF CLEAN MS OFFICE FILES AND RTF - 2000 FILES ZIP, 7Z, RAR CLEAN ARCHIVE FILES - 5500 FILES JAR CLEAN JAVA FILES - 100 FILES PDF PDF - 9000_files and PDF -100+with embed_3d_video_swf_ js (new link) MACH-O CLEAN OSX MACH-O FILES - 50 FILES 11,960 MALIC
CVE-2012-1875 links and samples
CVE-2012-1875 Internet Explorer 8 exploit has been publicly available from various sources for a few days. I am adding it here for reference. For analysis info, see the AlienVault link below and the Metasploit module and demo. P.S. In case you wonder, I have not stopped doing malware analysis, I still do, but as as a longer term offline project combined with studying/reading. I pause what I am do
DarkMegi rootkit - sample (distributed via Blackhole)
Update April 20, 2012 Kimberly wrote an excellent analysis of this sample. Please go to This is a "DarkMegie" rootkit sample, kindly donated by Hendrik Adrian. Just like described in the McAfee article "Darkmegi: This is Not the Rootkit You’re Looking For" by Craig Schmugar, it is anything but quiet and stealthy. In fact, it makes so many system changes that it is hard to cover it all in a quick p
Welcome to Contagio Exchange - community malware dump
Greetings, Contagio Exchange is meant to be a communal malware collection. Contagio mobile dump has been very successful and useful because researchers can upload their samples and download them without waiting for me to analyze or post it - directly from the mediafire box. Whenever I have time, I will moderate and post descriptions for the files and individual download links (in addition to the m
1
リリース、障害情報などのサービスのお知らせ
最新の人気エントリーの配信
処理を実行中です
j次のブックマーク
k前のブックマーク
lあとで読む
eコメント一覧を開く
oページを開く
Android Stels
DeepEnd Research - Library of Malware Traffic Patterns
Android Malware Eavesdrops on Users, Uses Google+ as Disguise
