Telekom Security malware analysis
- Dépôt
- https://github.com/telekom-security/malware_analysis
- Commit
- 755efb66586f53fea34926f78a8d2054a8e8e74b
- Récupéré le
- 2026-09-27
- Licence
- No licence (all rights reserved)
- Publication
- Métadonnées
- Justification
- No LICENSE file in the repository and no licence statement in its README (checked 2026-09-29). Without a grant, the rules are all rights reserved: metadata and an upstream link only.
Règles de Telekom Security malware analysis
- TELEKOM_SECURITY_Win_Systembc_20220311Métadonnées seules
Detects unpacked SystemBC module
Suspect / chasseTelekom Security malware analysis· Thomas Barabosch, Deutsche Telekom Security· 2022-03-11 - TELEKOM_SECURITY_Crylock_BinaryMétadonnées seules
Detects CryLock ransomware v2.3.0.0
MalwareTelekom Security malware analysis· Thomas Barabosch, Telekom Security· 2021-06-28 - TELEKOM_SECURITY_Win_Iceid_Core_202104Métadonnées seules
2021 Bokbot / Icedid core
MalwareTelekom Security malware analysis· Thomas Barabosch, Telekom Security· 2021-04-12 - TELEKOM_SECURITY_Win_Iceid_Core_Ldr_202104Métadonnées seules
2021 loader for Bokbot / Icedid core (license.dat)
MalwareTelekom Security malware analysis· Thomas Barabosch, Telekom Security· 2021-04-13 - TELEKOM_SECURITY_Get_Windows_Proxy_ConfigurationMétadonnées seules
Queries Windows Registry for proxy configuration
Suspect / chasseTelekom Security malware analysis· Thomas Barabosch, Deutsche Telekom Security· 2022-01-14 - TELEKOM_SECURITY_Fake_Gzip_Bokbot_202104Métadonnées seules
fake gzip provided by CC
GénériqueTelekom Security malware analysis· Thomas Barabosch, Telekom Security· 2021-04-20 - TELEKOM_SECURITY_Crylock_HtaMétadonnées seules
Detects CryLock ransomware how_to_decrypt.hta ransom note
MalwareTelekom Security malware analysis· Thomas Barabosch, Telekom Security· 2021-06-28