k-vitali

APT28-Zebrocy-Delphi-IDA-Decoder

This project is related to the APT28 Delphi Implant decoder IDA script.

apt28_zebrocy_autoit_resource

This is a repository with decoded AutoIt scripts and MISP objects .

apt_lazarus_toolkits

This repository contains various extractable for Lazarus.

cryptomix-clop-ransomware

Driver-Malware-Component

This is a project related to the signed malware with the kernel driver component meant to force delete protection software.

findcrypt-yara

IDA pro plugin to find crypto constants (and more)

Malware-Misc-RE

Miscellaneous Malware RE

operation-shadowhammer

This repository contains various files linked to Operation Shadowhammer as it was originally discovered by Kaspersky Team.

ramnit-re

This is a misc repo related to the Ramnit malware share.

TrickBot-share

This repository consists of various malware related RE code.

k-vitali/Malware-Misc-RE

Miscellaneous Malware RE

k-vitali/cryptomix-clop-ransomware

k-vitali/operation-shadowhammer

This repository contains various files linked to Operation Shadowhammer as it was originally discovered by Kaspersky Team.

k-vitali/TrickBot-share

This repository consists of various malware related RE code.

k-vitali/APT28-Zebrocy-Delphi-IDA-Decoder

This project is related to the APT28 Delphi Implant decoder IDA script.

k-vitali/Driver-Malware-Component

This is a project related to the signed malware with the kernel driver component meant to force delete protection software.

k-vitali/apt28_zebrocy_autoit_resource

This is a repository with decoded AutoIt scripts and MISP objects .

k-vitali/apt_lazarus_toolkits

This repository contains various extractable for Lazarus.

k-vitali/findcrypt-yara

IDA pro plugin to find crypto constants (and more)

k-vitali/ramnit-re

This is a misc repo related to the Ramnit malware share.

k-vitali/ISFBv2-share

This repository is related to ISFB v2 malware share and RE.

k-vitali/k-vitali.github.io

k-vitali/turla_toolkits