eaglesquads/malware-research

Samples, research and documents about any kind of malware and misc source which should be released to the public

Collection of malware samples, research and guides to understand it and to practice, learn and build mechanism to defeat it.

Collection of Malware samples, research and guides to understand it and to practice, learn and build mechanism to defeat it.

Top 5

The following list are the top 5 most well-known Viruses created by security agencies, based on Mikko Hypponen research.

1. Stuxnet (2010, first cyber official weapon)
2. Petya/NotPetya (2017, most damage)
3. Fizzer (2003, first crimeware)
4. SQL Slammer (2003, fastest spreading)
5. Walker (1992, funny, typical)

All of them are already detected by Windows Defender.

Research

• YARA
• IOHACKERS ENCODED MALWARE IN A STRAND OF DNA
• Reverse Engineering Malware 102
• RIPSEC: Malware Analysis - CSCI 4976
• KernelMode.info
• https://zerosum0x0.blogspot.com/2017/04/doublepulsar-initial-smb-backdoor-ring.html
• https://countercept.com/our-thinking/analyzing-the-doublepulsar-kernel-dll-injection-technique/
• https://www.rapid7.com/db/modules/auxiliary/scanner/smb/smb_ms17_010
• https://cybersecuritybase.github.io/
• https://www.mediafire.com/folder/y952n2935ocnf/Documents
• https://github.com/onlurking/awesome-infosec
• http://github.com/juandecarrion/awesome-self-hosted
• https://github.com/paragonie/awesome-appsec
• https://jivoi.github.io/2015/06/19/oscp-prepare/
• https://jivoi.github.io/2015/07/03/offensive-security-bookmarks/
• https://github.com/kurobeats/pentest-bookmarks/
• http://ytxmrc3pcbv5464e.onion/files/

List of Malware Sources

• http://www.malwaredomainlist.com/mdl.php
• http://www.malwareblacklist.com/showMDL.php
• http://support.clean-mx.de/clean-mx/viruses.php
• http://malshare.com/ (registration required)
• http://malc0de.com/database/
• https://zeustracker.abuse.ch/monitor.php?browse=binaries
• http://malwaredb.malekal.com/ (registration required)
• http://blog.urlvoid.com/new-list-of-dangerous-websites-to-avoid
• http://www.scumware.org
• http://www.threatlog.com
• http://adminus.net (For sample requests use contact email adminus.xs(at)gmail(dot)com)
• http://jsunpack.jeek.org/?list=1 (RSS feed)
• http://www.malwareurl.com/ (free registration required)
• http://www.offensivecomputing.net/ (malware repository, free registration required to download)
• http://contagiodump.blogspot.com/2011/03/take-sample-leave-sample-mobile-malware.html (Mobile malware samples)
• http://virussign.com/downloads.html (registration required)
• http://www.nothink.org/viruswatch.php
• http://dashke.blogspot.com/
• http://malware.lu/ (registration required to download)
• http://www.nictasoft.com/ace/malware-urls/
• http://virusshare.com/
• http://freelist.virussign.com/freelist/
• http://malwared.malwaremustdie.org/index.php?page=1
• http://ytisf.github.io/theZoo/
• http://amtrckr.info/