Malware Analysis

Awesome Malware Analysis resources.. Republished via Github Listings

Anonymizers

  1. 1 Anonymouse 2
  2. 2 VPN Software Solutions & Services For Business 1
  3. 3 Privoxy 2
  4. 4 Tor Project 0

Honeypots

  1. 1 Conpot 0
  2. 2 Dionaea 1
  3. 3 Glastopf 0
  4. 4 HoneyDrive 0
  5. 5 Kippo 0
  6. 6 Mnemosyne 0
  7. 7 Thug 2

Malware Corpora

  1. 1 http://support.clean-mx.de/clean-mx/viruses.php 2
  2. 2 Contagio 0
  3. 3 Exploit Database 4
  4. 4 MalShare 2
  5. 5 Maltrieve 0
  6. 6 MalwareDB 2
  7. 7 TheZoo 0
  8. 8 VirusShare 2

Tools

  1. 1 Combine 1
  2. 2 IntelMQ 1
  3. 3 IOC Editor 0
  4. 4 IOC writer 1
  5. 5 Massive octo spice 0
  6. 6 MISP 0
  7. 7 RiskIQ Community Edition 2
  8. 8 Threataggregator 1

Detection and Classification

  1. 1 AnalyzePE 3
  2. 2 Chkrootkit 1
  3. 3 ClamAV 1
  4. 4 ExifTool 1
  5. 5 Hashdeep 0
  6. 6 Loki 0
  7. 7 Malfunction 0
  8. 8 MASTIFF 0

Online Scanners and Sandboxes

  1. 1 Anubis 4
  2. 2 AVCaesar 4
  3. 3 Cryptam 2
  4. 4 Cuckoo Sandbox 1
  5. 5 Cuckoo modified 2
  6. 6 Drakvuf 1
  7. 7 Hybrid Analysis 0
  8. 8 IRMA 0

Other Resources

  1. 1 Autoshun 1
  2. 2 CI Army 0
  3. 3 "Critical Stack Intel" 0
  4. 4 CRDF Threat Center 0
  5. 5 Cybersecurity Solutions, Services & Training 0
  6. 6 fireeye IOCs 0
  7. 7 Hpfeeds 0
  8. 8 SANS Internet Storm Center 0

Domain Analysis

  1. 1 Desenmascara 0
  2. 2 Dig 0
  3. 3 IPinfo 0
  4. 4 SenderBase 0
  5. 5 Spamcop 0
  6. 6 SpamHaus 0
  7. 7 Sucuri SiteCheck 0
  8. 8 TekDefense 1

Browser Malware

  1. 1 Firebug 1
  2. 2 Java Decompiler 0
  3. 3 Java_IDX_Parser 0
  4. 4 JSDetox 1
  5. 5 Jsunpack-n 0
  6. 6 Malzilla 0
  7. 7 RABCDAsm 0
  8. 8 SWFTOOLS 0

Documents and Shellcode

  1. 1 AnalyzePDF 1
  2. 2 diStorm 0
  3. 3 JavaScript Beautifier 0
  4. 4 Libemu 0
  5. 5 Malpdfobj 0
  6. 6 OfficeMalScanner 0
  7. 7 Olevba 0
  8. 8 Origami PDF 0

Deobfuscation

  1. 1 Balbuzard 3
  2. 2 de4dot 1
  3. 3 ex_pe_xor 1
  4. 4 iheartxor 1
  5. 5 NoMoreXOR 1
  6. 6 unxor 0
  7. 7 XorBruteforcer 0
  8. 8 XORSearch & XORStrings 0

File Carving

  1. 1 Bulk extractor 0
  2. 2 EVTXtract 0
  3. 3 Foremost 0
  4. 4 Hachoir 0
  5. 5 Scalpel 1

Debugging and Reverse Engineering

  1. 1 Bokken 0
  2. 2 dnSpy 0
  3. 3 Evan's Debugger (EDB) 0
  4. 4 GDB 0
  5. 5 hackers-grep 0
  6. 6 IDA Pro 0
  7. 7 Immunity Debugger 0
  8. 8 ltrace 0

Memory Forensics

  1. 1 DAMM 1
  2. 2 Find AES 0
  3. 3 Muninn 1
  4. 4 Rekall 1
  5. 5 TotalRecall 0
  6. 6 VolDiff 0
  7. 7 Volatility 0
  8. 8 WinDbg 0

Network

  1. 1 The Bro Network Security Monitor 5
  2. 2 CapTipper 0
  3. 3 Chopshop 0
  4. 4 Fiddler 0
  5. 5 Hale 1
  6. 6 INetSim 0
  7. 7 Malcom 0
  8. 8 Mitmproxy 0

Books

  1. 1 Malware Analyst's Cookbook and DVD 1
  2. 2 Practical Malware Analysis 2
  3. 3 The Art of Memory Forensics 0
  4. 4 The IDA Pro Book 1

Windows Artifacts

  1. 1 AChoir 1
  2. 2 Python-evt 0
  3. 3 Williballenthin 0
  4. 4 RegRipper 1

Storage and Workflow

  1. 1 Aleph 0
  2. 2 CRITs 1
  3. 3 Malwarehouse 3
  4. 4 MISP 0
  5. 5 Viper 0

Other

  1. 1 APTnotes 3
  2. 2 The Honeynet Project 0
  3. 3 Malicious Software 1
  4. 4 Google Custom Search 2
  5. 5 Windows Incident Response 0
  6. 6 /r/csirt_tools 1
  7. 7 /r/Malware 2
  8. 8 /r/ReverseEngineering 1

Miscellaneous

  1. 1 DC3 MWCP 0
  2. 2 Pafish 0
  3. 3 REMnux 0
  4. 4 Santoku Linux 1

Twitter

  1. 1 https://twitter.com/Hexacorn 2
  2. 2 https://twitter.com/attrc 1
  3. 3 https://twitter.com/botherder 0
  4. 4 https://twitter.com/mephux 0
  5. 5 https://twitter.com/hiddenillusion 0
  6. 6 https://twitter.com/jekil 0
  7. 7 https://twitter.com/skier_t 0
  8. 8 https://twitter.com/lennyzeltser 0

Incident Response

  1. 1 davehull/Kansa 1
  2. 2 google/grr 0
Confirm
Follow page
Suggest
Message Arjan Pronk
Report link