Telekom Security malware analysis
- Repository
- https://github.com/telekom-security/malware_analysis
- Commit
- 755efb66586f53fea34926f78a8d2054a8e8e74b
- Retrieved
- 2026-09-27
- Licence
- No licence (all rights reserved)
- Published
- Metadata
- Why
- No LICENSE file in the repository and no licence statement in its README (checked 2026-09-29). Without a grant, the rules are all rights reserved: metadata and an upstream link only.
Rules from Telekom Security malware analysis
- TELEKOM_SECURITY_Win_Systembc_20220311Metadata only
Detects unpacked SystemBC module
Suspicious / huntingTelekom Security malware analysis· Thomas Barabosch, Deutsche Telekom Security· 2022-03-11 - TELEKOM_SECURITY_Crylock_BinaryMetadata only
Detects CryLock ransomware v2.3.0.0
MalwareTelekom Security malware analysis· Thomas Barabosch, Telekom Security· 2021-06-28 - TELEKOM_SECURITY_Win_Iceid_Core_202104Metadata only
2021 Bokbot / Icedid core
MalwareTelekom Security malware analysis· Thomas Barabosch, Telekom Security· 2021-04-12 - TELEKOM_SECURITY_Win_Iceid_Core_Ldr_202104Metadata only
2021 loader for Bokbot / Icedid core (license.dat)
MalwareTelekom Security malware analysis· Thomas Barabosch, Telekom Security· 2021-04-13 - TELEKOM_SECURITY_Get_Windows_Proxy_ConfigurationMetadata only
Queries Windows Registry for proxy configuration
Suspicious / huntingTelekom Security malware analysis· Thomas Barabosch, Deutsche Telekom Security· 2022-01-14 - TELEKOM_SECURITY_Fake_Gzip_Bokbot_202104Metadata only
fake gzip provided by CC
GenericTelekom Security malware analysis· Thomas Barabosch, Telekom Security· 2021-04-20 - TELEKOM_SECURITY_Crylock_HtaMetadata only
Detects CryLock ransomware how_to_decrypt.hta ransom note
MalwareTelekom Security malware analysis· Thomas Barabosch, Telekom Security· 2021-06-28