Name	Name	Last commit message	Last commit date
Latest commit pedramamini added 769 related hashes to 26de80e3bbbe1f053da4131ca7a405644b7443356… May 24, 2018 16b79e1 · May 24, 2018 History 15 Commits
2018-04-Common-Malware-Carrier	2018-04-Common-Malware-Carrier	added final payload	Apr 19, 2018
2018-04-GandCrab-Swarm	2018-04-GandCrab-Swarm	added GandCrab Swarm Samples	Apr 17, 2018
2018-05-Agent-Tesla-Open-Directory	2018-05-Agent-Tesla-Open-Directory	add agent-tesla samples & update readme	May 22, 2018
CVE-2018-4878-Adobe-Flash-DRM-UAF-0day	CVE-2018-4878-Adobe-Flash-DRM-UAF-0day	added PoC from morphisec	Feb 9, 2018
miscellaneous	miscellaneous	added 769 related hashes to 26de80e3bbbe1f053da4131ca7a405644b7443356…	May 24, 2018
LICENSE	LICENSE	Initial commit	Feb 7, 2018
README.md	README.md	Update README.md	May 23, 2018

Repository files navigation

malware-samples

A collection of malware samples and relevant dissection information, most probably referenced from http://blog.inquest.net or https://twitter.com/inquest.

CVE-2018-4878-Adobe-Flash-DRM-UAF-0day
- 14c58e38... Carrier: Microsoft Excel 2007+ XLSX, JSON VT Report
- 3b1395f6... Carrier: Composite Document File V2 Document DOC, JSON VT Report
- 88d7aa16... Stage-1: Macromedia Flash data, version 32 SWF, JSON VT Report, Decompiled ActionScript
- 1a326925... Stage-2: (0day) Macromedia Flash data (compressed), version 32 SWF, JSON VT Report, Decompiled ActionScript
- e1546323... Payload: (ROKRAT) PE32 executable (GUI) Intel 80386, for MS Windows PE, JSON VT Report
2018-04-GandCrab-Swarm
- Document Carrier: DOC
- Document Dropper Macro: VBA
- Additional Extracted Macros: VBAs
- Obfuscated JavaScript payloads: JS
2018-05-Agent-Tesla-Open-Directory
- Agent Tesla Payload 1: EXE
- Agent Tesla Payload 2: EXE
- Agent Tesla Payload 3: EXE
- Web Panel: ZIP
Miscelleanous
- 2018-05-22 Interesting Macro Obfuscation
  - 26de80e3bbbe1f053da4131ca7a405644b7443356ec97d48517f1ab86d5f1ca5.doc
  - 26de80e3bbbe1f053da4131ca7a405644b7443356ec97d48517f1ab86d5f1ca5.macro