General

Malware Config

Signatures

Files

• mshtml.zip

  .zip

  Password: infected

• Challenge_FIles/Employee_W2_Form.docx

  .docx office2007
• Challenge_FIles/Employees_Contact_Audit_Oct_2021.docx

  .docx office2007
• Challenge_FIles/Work_From_Home_Survey.doc

  .docx .doc office2007
• Challenge_FIles/income_tax_and_benefit_return_2021.docx

  .docx office2007
• tools/numbers-to-string.py

  .py .sh linux
• tools/oledump_V0_0_60.zip

  .zip
• contains_pe_file.yara
• decoder_add1.py

  .py .sh linux
• decoder_ah.py

  .py .sh linux
• decoder_chr.py

  .py .sh linux
• decoder_rol1.py

  .py .sh linux
• decoder_xor1.py

  .py .sh linux
• maldoc.yara
• oledump.py

  .py .sh linux
• plugin_biff.py

  .py .sh linux
• plugin_clsid.py

  .py .sh linux
• plugin_dridex.py

  .py .sh linux
• plugin_hifo.py

  .py .sh linux
• plugin_http_heuristics.py

  .py .sh linux
• plugin_jumplist.py

  .py .sh linux
• plugin_linear.py

  .py .sh linux
• plugin_msg.py

  .py .sh linux
• plugin_msg_summary.py

  .py .sh linux
• plugin_msi.py

  .py .sh linux
• plugin_office_crypto.py

  .py .sh linux
• plugin_ppt.py

  .py .sh linux
• plugin_str_sub.py

  .py .sh linux
• plugin_stream_o.py

  .py .sh linux
• plugin_stream_sample.py

  .py .sh linux
• plugin_vba.py

  .py .sh linux
• plugin_vba_dco.py

  .py .sh linux
• plugin_vba_routines.py

  .py .sh linux
• plugin_vba_summary.py

  .py .sh linux
• plugin_vbaproject.py

  .py .sh linux
• plugin_version_vba.py

  .py .sh linux
• vba.yara
• tools/re-search.py

  .py .sh linux
• tools/reextra.py

  .py .sh linux
• tools/reextra.pyc
• tools/xmldump.py

  .py .sh linux
• tools/zipdump.py

  .py .sh linux