Overview
overview
10Static
static
10butterfly-...MB.pdf
windows7-x64
3butterfly-...MB.pdf
windows10-2004-x64
3butterfly-...B.docx
windows7-x64
4butterfly-...B.docx
windows10-2004-x64
1butterfly-...MB.odt
windows7-x64
4butterfly-...MB.odt
windows10-2004-x64
1butterfly-...MB.odp
windows7-x64
3butterfly-...MB.odp
windows10-2004-x64
1butterfly-...00.ods
windows7-x64
3butterfly-...00.ods
windows10-2004-x64
1butterfly-...MB.ppt
windows7-x64
3butterfly-...MB.ppt
windows10-2004-x64
1butterfly-...0.xlsx
windows7-x64
3butterfly-...0.xlsx
windows10-2004-x64
1butterfly-...x.html
windows7-x64
3butterfly-...x.html
windows10-2004-x64
3butterfly-...age.js
windows7-x64
3butterfly-...age.js
windows10-2004-x64
3butterfly-...r.html
windows7-x64
3butterfly-...r.html
windows10-2004-x64
3butterfly-...2.html
windows7-x64
3butterfly-...2.html
windows10-2004-x64
3butterfly-...x.html
windows7-x64
3butterfly-...x.html
windows10-2004-x64
3butterfly-...83.pdf
windows7-x64
3butterfly-...83.pdf
windows10-2004-x64
3butterfly-...ly.pdf
windows7-x64
3butterfly-...ly.pdf
windows10-2004-x64
3butterfly-...eck.sh
ubuntu-18.04-amd64
1butterfly-...eck.sh
debian-9-armhf
1butterfly-...eck.sh
debian-9-mips
1butterfly-...eck.sh
debian-9-mipsel
1Behavioral task
behavioral1
Sample
butterfly-master/data/file-example_PDF_1MB.pdf
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
butterfly-master/data/file-example_PDF_1MB.pdf
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
butterfly-master/data/file-sample_1MB.docx
Resource
win7-20240729-en
Behavioral task
behavioral4
Sample
butterfly-master/data/file-sample_1MB.docx
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
butterfly-master/data/file-sample_1MB.odt
Resource
win7-20240729-en
Behavioral task
behavioral6
Sample
butterfly-master/data/file-sample_1MB.odt
Resource
win10v2004-20240802-en
Behavioral task
behavioral7
Sample
butterfly-master/data/file_example_ODP_1MB.odp
Resource
win7-20240705-en
Behavioral task
behavioral8
Sample
butterfly-master/data/file_example_ODP_1MB.odp
Resource
win10v2004-20240802-en
Behavioral task
behavioral9
Sample
butterfly-master/data/file_example_ODS_5000.ods
Resource
win7-20240729-en
Behavioral task
behavioral10
Sample
butterfly-master/data/file_example_ODS_5000.ods
Resource
win10v2004-20240802-en
Behavioral task
behavioral11
Sample
butterfly-master/data/file_example_PPT_1MB.ppt
Resource
win7-20240708-en
Behavioral task
behavioral12
Sample
butterfly-master/data/file_example_PPT_1MB.ppt
Resource
win10v2004-20240802-en
Behavioral task
behavioral13
Sample
butterfly-master/data/file_example_XLSX_5000.xlsx
Resource
win7-20240708-en
Behavioral task
behavioral14
Sample
butterfly-master/data/file_example_XLSX_5000.xlsx
Resource
win10v2004-20240802-en
Behavioral task
behavioral15
Sample
butterfly-master/html/index.html
Resource
win7-20240705-en
Behavioral task
behavioral16
Sample
butterfly-master/html/index.html
Resource
win10v2004-20240802-en
Behavioral task
behavioral17
Sample
butterfly-master/include/indexPage.js
Resource
win7-20240704-en
Behavioral task
behavioral18
Sample
butterfly-master/include/indexPage.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral19
Sample
butterfly-master/notes/html/counter.html
Resource
win7-20240729-en
Behavioral task
behavioral20
Sample
butterfly-master/notes/html/counter.html
Resource
win10v2004-20240802-en
Behavioral task
behavioral21
Sample
butterfly-master/notes/html/counter2.html
Resource
win7-20240708-en
Behavioral task
behavioral22
Sample
butterfly-master/notes/html/counter2.html
Resource
win10v2004-20240802-en
Behavioral task
behavioral23
Sample
butterfly-master/notes/html/index.html
Resource
win7-20240708-en
Behavioral task
behavioral24
Sample
butterfly-master/notes/html/index.html
Resource
win10v2004-20240802-en
Behavioral task
behavioral25
Sample
butterfly-master/notes/papers/5357083.pdf
Resource
win7-20240708-en
Behavioral task
behavioral26
Sample
butterfly-master/notes/papers/5357083.pdf
Resource
win10v2004-20240802-en
Behavioral task
behavioral27
Sample
butterfly-master/notes/papers/DemystifyingRansomwareAttacks-ReverseEngineeringandDynamicMalwareAnaly.pdf
Resource
win7-20240704-en
Behavioral task
behavioral28
Sample
butterfly-master/notes/papers/DemystifyingRansomwareAttacks-ReverseEngineeringandDynamicMalwareAnaly.pdf
Resource
win10v2004-20240802-en
Behavioral task
behavioral29
Sample
butterfly-master/scripts/cppcheck.sh
Resource
ubuntu1804-amd64-20240729-en
Behavioral task
behavioral30
Sample
butterfly-master/scripts/cppcheck.sh
Resource
debian9-armhf-20240611-en
Behavioral task
behavioral31
Sample
butterfly-master/scripts/cppcheck.sh
Resource
debian9-mipsbe-20240611-en
Behavioral task
behavioral32
Sample
butterfly-master/scripts/cppcheck.sh
Resource
debian9-mipsel-20240611-en
General
-
Target
butterfly-master.zip
-
Size
49.2MB
-
MD5
31a67572863da9479f1fe6436a076e4e
-
SHA1
aff8b0db8148dde497bd6e34f8e2f130c0b7ae79
-
SHA256
34fe4e257529e5df019be2b77259266bce425e56675a58171f52191dfd85e9aa
-
SHA512
67a471f2ffa547ae023dee397e69240a9e6d4e0aa4abeb50dcdef7dadc9dd890a4ad2aaf4eaec56138229e0e8bd978e2c60f0234fae3d07ad8827882208ddfb5
-
SSDEEP
1572864:o4xXzYfb1jS/XYQLFPvEZJuZvHN6f9ofwf7:JXzYfbkfzLFHaJuZ/mce7
Malware Config
Extracted
Extracted
Signatures
-
HTTP links in PDF interactive object 2 IoCs
Detects HTTP links in interactive objects within PDF files.
resource yara_rule static1/unpack001/butterfly-master/data/file-example_PDF_1MB.pdf pdf_with_link_action static1/unpack003/zip_10MB/file-example_PDF_1MB.pdf pdf_with_link_action
Files
-
butterfly-master.zip.zip
-
butterfly-master/.gitignore
-
butterfly-master/CHANGELOG.md
-
butterfly-master/CMakeLists.txt
-
butterfly-master/Jenkinsfile
-
butterfly-master/LICENSE
-
butterfly-master/README.md
-
butterfly-master/architecture/README.md
-
butterfly-master/architecture/class_diagrams/README.md
-
butterfly-master/architecture/class_diagrams/argumentParser.puml
-
butterfly-master/architecture/class_diagrams/argumentParser.svg.xml
-
butterfly-master/architecture/class_diagrams/bflyExceptions.puml
-
butterfly-master/architecture/class_diagrams/bflyExceptions.svg.xml
-
butterfly-master/architecture/class_diagrams/browser.puml
-
butterfly-master/architecture/class_diagrams/browser.svg.xml
-
butterfly-master/architecture/class_diagrams/connManager.puml
-
butterfly-master/architecture/class_diagrams/connManager.svg.xml
-
butterfly-master/architecture/class_diagrams/crypto/README.md
-
butterfly-master/architecture/class_diagrams/crypto/aes.puml
-
butterfly-master/architecture/class_diagrams/crypto/aes.svg.xml
-
butterfly-master/architecture/class_diagrams/crypto/aesDecryptor.puml
-
butterfly-master/architecture/class_diagrams/crypto/aesDecryptor.svg.xml
-
butterfly-master/architecture/class_diagrams/crypto/aesEncryptor.puml
-
butterfly-master/architecture/class_diagrams/crypto/aesEncryptor.svg.xml
-
butterfly-master/architecture/class_diagrams/crypto/cryptoProcess.puml
-
butterfly-master/architecture/class_diagrams/crypto/cryptoProcess.svg.xml
-
butterfly-master/architecture/class_diagrams/crypto/cryptoSecurity.puml
-
butterfly-master/architecture/class_diagrams/crypto/cryptoSecurity.svg.xml
-
butterfly-master/architecture/class_diagrams/crypto/cryptoThread.puml
-
butterfly-master/architecture/class_diagrams/crypto/cryptoThread.svg.xml
-
butterfly-master/architecture/class_diagrams/crypto/decryptor.puml
-
butterfly-master/architecture/class_diagrams/crypto/decryptor.svg.xml
-
butterfly-master/architecture/class_diagrams/crypto/encryptor.puml
-
butterfly-master/architecture/class_diagrams/crypto/encryptor.svg.xml
-
butterfly-master/architecture/class_diagrams/crypto/hybrid.puml
-
butterfly-master/architecture/class_diagrams/crypto/hybrid.svg.xml
-
butterfly-master/architecture/class_diagrams/crypto/rsa.puml
-
butterfly-master/architecture/class_diagrams/crypto/rsa.svg.xml
-
butterfly-master/architecture/class_diagrams/crypto/rsaDecryptor.puml
-
butterfly-master/architecture/class_diagrams/crypto/rsaDecryptor.svg.xml
-
butterfly-master/architecture/class_diagrams/crypto/rsaEncryptor.puml
-
butterfly-master/architecture/class_diagrams/crypto/rsaEncryptor.svg.xml
-
butterfly-master/architecture/class_diagrams/directoryIterator.puml
-
butterfly-master/architecture/class_diagrams/directoryIterator.svg.xml
-
butterfly-master/architecture/class_diagrams/httpServerClient.puml
-
butterfly-master/architecture/class_diagrams/httpServerClient.svg.xml
-
butterfly-master/architecture/class_diagrams/sockets.puml
-
butterfly-master/architecture/class_diagrams/sockets.svg.xml
-
butterfly-master/architecture/component_diagrams/README.md
-
butterfly-master/architecture/component_diagrams/butterfly.puml
-
butterfly-master/architecture/component_diagrams/butterfly.svg.xml
-
butterfly-master/architecture/sequence_diagrams/README.md
-
butterfly-master/architecture/sequence_diagrams/aes.puml
-
butterfly-master/architecture/sequence_diagrams/aes.svg.xml
-
butterfly-master/architecture/sequence_diagrams/bflyServerApp.puml
-
butterfly-master/architecture/sequence_diagrams/bflyServerApp.svg.xml
-
butterfly-master/architecture/sequence_diagrams/decryption.puml
-
butterfly-master/architecture/sequence_diagrams/decryption.svg.xml
-
butterfly-master/architecture/sequence_diagrams/encryption.puml
-
butterfly-master/architecture/sequence_diagrams/encryption.svg.xml
-
butterfly-master/architecture/sequence_diagrams/rsa.puml
-
butterfly-master/architecture/sequence_diagrams/rsa.svg.xml
-
butterfly-master/config/README.md
-
butterfly-master/config/app.h.in
-
butterfly-master/config/console.ini
-
butterfly-master/config/file.ini
-
butterfly-master/darwin.cmake
-
butterfly-master/data/README.md
-
butterfly-master/data/file-example_PDF_1MB.pdf.pdf
-
https://products.office.com/en-us/word
-
-
butterfly-master/data/file-sample_1MB.docx.docx office2007
-
butterfly-master/data/file-sample_1MB.odt.odt openoffice
-
butterfly-master/data/file_example_AVI_1920_2_3MG.avi
-
butterfly-master/data/file_example_CSV_5000.csv
-
butterfly-master/data/file_example_JPG_2500kB.jpg.jpg
-
butterfly-master/data/file_example_MP3_5MG.mp3
-
butterfly-master/data/file_example_MP4_1920_18MG.mp4
-
butterfly-master/data/file_example_ODP_1MB.odp.odp openoffice
-
butterfly-master/data/file_example_ODS_5000.ods.ods openoffice
-
butterfly-master/data/file_example_PNG_3MB.png.png
-
butterfly-master/data/file_example_PPT_1MB.ppt
-
butterfly-master/data/file_example_XLSX_5000.xlsx.xlsx office2007
-
butterfly-master/data/zip_10MB.zip.zip
-
zip_10MB/file-example_PDF_1MB.pdf.pdf
-
https://products.office.com/en-us/word
-
-
zip_10MB/file-sample_1MB.doc.doc windows office2003
-
zip_10MB/file_example_JPG_1MB.jpg.jpg
-
zip_10MB/file_example_ODS_5000.ods.ods openoffice
-
zip_10MB/file_example_PNG_2500kB.jpg.jpg
-
zip_10MB/file_example_PPT_1MB.ppt
-
zip_10MB/file_example_TIFF_10MB.tiff
-
butterfly-master/debugging/.gdbinit
-
butterfly-master/debugging/README.md
-
butterfly-master/docker/.gitattributes
-
butterfly-master/docker/README.md
-
butterfly-master/docker/debian/Dockerfile.debian11
-
butterfly-master/docker/debian/README.md
-
butterfly-master/docker/ubuntu/Dockerfile.ubuntu1804
-
butterfly-master/docker/ubuntu/Dockerfile.ubuntu2004
-
butterfly-master/docker/ubuntu/Dockerfile.ubuntu2204
-
butterfly-master/docker/ubuntu/README.md
-
butterfly-master/docker/ubuntu/boost_1_73_0.zip
-
butterfly-master/docker/windows/Dockerfile.windows
-
butterfly-master/docker/windows/README.md
-
butterfly-master/docs/README.md
-
butterfly-master/docs/butterfly
-
butterfly-master/html/README.md
-
butterfly-master/html/index.html.html .js polyglot
-
butterfly-master/images/README.md
-
butterfly-master/images/bflyServerApp_api.png.png
-
butterfly-master/images/bflyServerApp_index.png.png
-
butterfly-master/images/browser_encryption_page.png.png
-
butterfly-master/images/butterfly.png.png
-
butterfly-master/images/butterfly_red_background.png.png
-
butterfly-master/images/butterfly_small.png.png
-
butterfly-master/images/check_torproject.png.png
-
butterfly-master/images/firefox_tor_settings.png.png
-
butterfly-master/images/lock.png.png
-
butterfly-master/include/argumentParser.h
-
butterfly-master/include/bflyExceptions.h
-
butterfly-master/include/bflyParams.h
-
butterfly-master/include/bflyUtils.h
-
butterfly-master/include/fileExtensions.h
-
butterfly-master/include/httpMSGSchema.h
-
butterfly-master/include/httpRequest.h
-
butterfly-master/include/httpResponse.h
-
butterfly-master/include/indexPage.h.js
-
butterfly-master/include_linux/Isocket.h
-
butterfly-master/include_linux/browser.h
-
butterfly-master/include_linux/butterfly.h
-
butterfly-master/include_linux/connManager.h
-
butterfly-master/include_linux/crypto/aes.h
-
butterfly-master/include_linux/crypto/aesDecryptor.h
-
butterfly-master/include_linux/crypto/aesEncryptor.h
-
butterfly-master/include_linux/crypto/cryptoProcess.h
-
butterfly-master/include_linux/crypto/cryptoSecurity.h
-
butterfly-master/include_linux/crypto/cryptoThread.h
-
butterfly-master/include_linux/crypto/decryptor.h
-
butterfly-master/include_linux/crypto/encryptor.h
-
butterfly-master/include_linux/crypto/rsa.h
-
butterfly-master/include_linux/crypto/rsaDecryptor.h
-
butterfly-master/include_linux/crypto/rsaEncryptor.h
-
butterfly-master/include_linux/crypto/serverPublicKey.h
-
butterfly-master/include_linux/directoryIterator.h
-
butterfly-master/include_linux/httpClient.h
-
butterfly-master/include_linux/httpServer.h
-
butterfly-master/include_linux/logger.h
-
butterfly-master/include_linux/socket.h
-
butterfly-master/include_linux/tcpSocket.h
-
butterfly-master/include_linux/torSocket.h
-
butterfly-master/include_windows/butterfly.h
-
butterfly-master/linux.cmake
-
butterfly-master/masterkeys/1024/README.md
-
butterfly-master/masterkeys/1024/SPrivateRSA.pem
-
butterfly-master/masterkeys/1024/SPublic.pem
-
butterfly-master/masterkeys/2048/README.md
-
butterfly-master/masterkeys/2048/SPrivateRSA.pem
-
butterfly-master/masterkeys/2048/SPublic.pem
-
butterfly-master/masterkeys/4096/README.md
-
butterfly-master/masterkeys/4096/SPrivateRSA.pem
-
butterfly-master/masterkeys/4096/SPublic.pem
-
butterfly-master/masterkeys/512/README.md
-
butterfly-master/masterkeys/512/SPrivateRSA.pem
-
butterfly-master/masterkeys/512/SPublic.pem
-
butterfly-master/masterkeys/README.md
-
butterfly-master/masterkeys/SPrivateRSA.pem
-
butterfly-master/masterkeys/SPublic.pem
-
butterfly-master/notes/README.md
-
butterfly-master/notes/bfly_files/README.md
-
butterfly-master/notes/email.txt
-
butterfly-master/notes/file_extensions/README.md
-
butterfly-master/notes/file_extensions/file_extensions.txt
-
butterfly-master/notes/html/counter.html.js
-
butterfly-master/notes/html/counter2.html.html .js polyglot
-
butterfly-master/notes/html/image2base64.txt
-
butterfly-master/notes/html/index.html.html .js polyglot
-
butterfly-master/notes/httpserver/README.md
-
butterfly-master/notes/hybrid/README.md
-
butterfly-master/notes/keysizes/README.md
-
butterfly-master/notes/openssl_cli/.gitignore
-
butterfly-master/notes/openssl_cli/5357083.pdf.bfly
-
butterfly-master/notes/openssl_cli/AES.bin
-
butterfly-master/notes/openssl_cli/CPrivateRSA.bin
-
butterfly-master/notes/openssl_cli/README.md
-
butterfly-master/notes/openssl_cli/RSA.bin
-
butterfly-master/notes/openssl_cli/aes/5357083.pdf.bfly
-
butterfly-master/notes/openssl_cli/aes/AES.bin.unencrypted
-
butterfly-master/notes/openssl_cli/aes/README.md
-
butterfly-master/notes/openssl_cli/rsa/AES.bin
-
butterfly-master/notes/openssl_cli/rsa/CPrivateRSA.bin
-
butterfly-master/notes/openssl_cli/rsa/README.md
-
butterfly-master/notes/openssl_cli/rsa/RSA.bin
-
butterfly-master/notes/papers/5357083.pdf.pdf
-
http://www.vinransomware.com/blog/jigsaw-ransomware-demysti
-
https://blog.malwarebytes.com/threat-analysis/2016/03/cerber-ransomware-new-but-mature/[41]L.Abrams,
-
https://blog.malwarebytes.com/threat-analysis/2016/6/zcrypt-ransomware/[37]L.Abrams,
-
https://doi.org/10.1007/s11416-008-0092-2[16]K.Savage,P.Coogan,andH.Lau,
-
https://github.com/aguinet/wannakey[47]L.Dorrendorf,Z.Gutterman,andB.Pinkas,
-
https://msdn.microsoft.com/en-us/library/ms867086.aspx[25]2018.[Online].Available:https://minotr.net/[26]2018.[Online].Available:http://vxvault.net/[27]2018.[Online].Available:http://thezoo.morirt.com/[28]2018.[Online].Available:https://cuckoosandbox.org/
-
https://researchcenter.paloaltonetworks.com/2016/03/new-os-x-ransomware-keranger-infected-transmission-bittorrent-client-installer/[36]
-
https://www.bleepingcomputer.com/news/security/decryptor-for-the-apocalypse-ransomware-released-by-emsisoft/[43]M.Ward,
-
https://www.bleepingcomputer.com/news/security/desucrypt-ransomware-in-the-wild-with-deuscrypt-and-decryptable-insane-variants/[33]J.Wyke,S.E.T.Team,andA.Ajjan,
-
https://www.bleepingcomputer.com/news/security/emsisoft-releases-a-decrypter-for-hydracrypt-and-umbrecrypt-ransomware/[38]S.Mans
-
https://www.bleepingcomputer.com/news/security/the-new-raa-ransomware-is-created-entirely-using-javascript/[42]||,
-
https://www.carbonblack.com/2016/03/25/threat-alert-powerware-new-ransomware-written-in-powershell-targets-organizations-via-microsoft-word/
-
https://www.welivesecurity.com/2016/09/13/how-encryption-molded-crypto-ransomware/[14]A.L.Young,
-
https://www.wired.com/2016/05/4-ways-protect-ransomware-youre-target/8G.O'GormanandG.McDonald,Ransomware:Agrowingmen-ace.SymantecCorporation,2012.9A.YoungandM.Yung,
-
https://zeltser.com/malicious-ip-blocklists/[22]J.KatzandY.Lindell,Introductiontomoderncryptography.CRCpress,2014.[23]J.R.Vacca,Computerandinformationsecurityhandbook.Newnes,2012.[24]R.Coleridge,
- Show all
-
-
butterfly-master/notes/papers/DemystifyingRansomwareAttacks-ReverseEngineeringandDynamicMalwareAnalysisofWannaCryforNetworkandInformationSecurity.pdf.pdf
-
https://www.researchgate.net/?enrichId=rgreq-fa3e910846c9dbd075cfa7b38288aa6f-XXX&enrichSource=Y292ZXJQYWdlOzMyMzIwMjkxNDtBUzo1OTQ1MDQ1MDM1NDk5NTJAMTUxODc1MjMyNzMwNQ%3D%3D&el=1_x_1&_esc=publicationCoverPdf
-
https://www.researchgate.net/institution/Gdansk-University-of-Technology?enrichId=rgreq-fa3e910846c9dbd075cfa7b38288aa6f-XXX&enrichSource=Y292ZXJQYWdlOzMyMzIwMjkxNDtBUzo1OTQ1MDQ1MDM1NDk5NTJAMTUxODc1MjMyNzMwNQ%3D%3D&el=1_x_6&_esc=publicationCoverPdf
-
https://www.researchgate.net/institution/Mulungushi_University?enrichId=rgreq-fa3e910846c9dbd075cfa7b38288aa6f-XXX&enrichSource=Y292ZXJQYWdlOzMyMzIwMjkxNDtBUzo1OTQ1MDQ1MDM1NDk5NTJAMTUxODc1MjMyNzMwNQ%3D%3D&el=1_x_6&_esc=publicationCoverPdf
-
https://www.researchgate.net/profile/Aaron_Zimba?enrichId=rgreq-fa3e910846c9dbd075cfa7b38288aa6f-XXX&enrichSource=Y292ZXJQYWdlOzMyMzIwMjkxNDtBUzo1OTQ1MDQ1MDM1NDk5NTJAMTUxODc1MjMyNzMwNQ%3D%3D&el=1_x_10&_esc=publicationCoverPdf
-
https://www.researchgate.net/profile/Aaron_Zimba?enrichId=rgreq-fa3e910846c9dbd075cfa7b38288aa6f-XXX&enrichSource=Y292ZXJQYWdlOzMyMzIwMjkxNDtBUzo1OTQ1MDQ1MDM1NDk5NTJAMTUxODc1MjMyNzMwNQ%3D%3D&el=1_x_4&_esc=publicationCoverPdf
-
https://www.researchgate.net/profile/Aaron_Zimba?enrichId=rgreq-fa3e910846c9dbd075cfa7b38288aa6f-XXX&enrichSource=Y292ZXJQYWdlOzMyMzIwMjkxNDtBUzo1OTQ1MDQ1MDM1NDk5NTJAMTUxODc1MjMyNzMwNQ%3D%3D&el=1_x_5&_esc=publicationCoverPdf
-
https://www.researchgate.net/profile/Aaron_Zimba?enrichId=rgreq-fa3e910846c9dbd075cfa7b38288aa6f-XXX&enrichSource=Y292ZXJQYWdlOzMyMzIwMjkxNDtBUzo1OTQ1MDQ1MDM1NDk5NTJAMTUxODc1MjMyNzMwNQ%3D%3D&el=1_x_7&_esc=publicationCoverPdf
-
https://www.researchgate.net/profile/Luckson_Simukonda?enrichId=rgreq-fa3e910846c9dbd075cfa7b38288aa6f-XXX&enrichSource=Y292ZXJQYWdlOzMyMzIwMjkxNDtBUzo1OTQ1MDQ1MDM1NDk5NTJAMTUxODc1MjMyNzMwNQ%3D%3D&el=1_x_4&_esc=publicationCoverPdf
-
https://www.researchgate.net/profile/Luckson_Simukonda?enrichId=rgreq-fa3e910846c9dbd075cfa7b38288aa6f-XXX&enrichSource=Y292ZXJQYWdlOzMyMzIwMjkxNDtBUzo1OTQ1MDQ1MDM1NDk5NTJAMTUxODc1MjMyNzMwNQ%3D%3D&el=1_x_5&_esc=publicationCoverPdf
-
https://www.researchgate.net/profile/Luckson_Simukonda?enrichId=rgreq-fa3e910846c9dbd075cfa7b38288aa6f-XXX&enrichSource=Y292ZXJQYWdlOzMyMzIwMjkxNDtBUzo1OTQ1MDQ1MDM1NDk5NTJAMTUxODc1MjMyNzMwNQ%3D%3D&el=1_x_7&_esc=publicationCoverPdf
-
https://www.researchgate.net/profile/Mumbi_Chishimba?enrichId=rgreq-fa3e910846c9dbd075cfa7b38288aa6f-XXX&enrichSource=Y292ZXJQYWdlOzMyMzIwMjkxNDtBUzo1OTQ1MDQ1MDM1NDk5NTJAMTUxODc1MjMyNzMwNQ%3D%3D&el=1_x_4&_esc=publicationCoverPdf
-
https://www.researchgate.net/profile/Mumbi_Chishimba?enrichId=rgreq-fa3e910846c9dbd075cfa7b38288aa6f-XXX&enrichSource=Y292ZXJQYWdlOzMyMzIwMjkxNDtBUzo1OTQ1MDQ1MDM1NDk5NTJAMTUxODc1MjMyNzMwNQ%3D%3D&el=1_x_5&_esc=publicationCoverPdf
-
https://www.researchgate.net/profile/Mumbi_Chishimba?enrichId=rgreq-fa3e910846c9dbd075cfa7b38288aa6f-XXX&enrichSource=Y292ZXJQYWdlOzMyMzIwMjkxNDtBUzo1OTQ1MDQ1MDM1NDk5NTJAMTUxODc1MjMyNzMwNQ%3D%3D&el=1_x_7&_esc=publicationCoverPdf
-
https://www.researchgate.net/project/Cloud-Computing-Security-Reliability?enrichId=rgreq-fa3e910846c9dbd075cfa7b38288aa6f-XXX&enrichSource=Y292ZXJQYWdlOzMyMzIwMjkxNDtBUzo1OTQ1MDQ1MDM1NDk5NTJAMTUxODc1MjMyNzMwNQ%3D%3D&el=1_x_9&_esc=publicationCoverPdf
-
https://www.researchgate.net/project/Security-Models-for-Financial-Cyber-crime-Fraud?enrichId=rgreq-fa3e910846c9dbd075cfa7b38288aa6f-XXX&enrichSource=Y292ZXJQYWdlOzMyMzIwMjkxNDtBUzo1OTQ1MDQ1MDM1NDk5NTJAMTUxODc1MjMyNzMwNQ%3D%3D&el=1_x_9&_esc=publicationCoverPdf
-
https://www.researchgate.net/publication/323202914
-
https://www.researchgate.net/publication/323202914_Demystifying_Ransomware_Attacks_Reverse_Engineering_and_Dynamic_Malware_Analysis_of_WannaCry_for_Network_and_Information_Security?enrichId=rgreq-fa3e910846c9dbd075cfa7b38288aa6f-XXX&enrichSource=Y292ZXJQYWdlOzMyMzIwMjkxNDtBUzo1OTQ1MDQ1MDM1NDk5NTJAMTUxODc1MjMyNzMwNQ%3D%3D&el=1_x_2&_esc=publicationCoverPdf
-
https://www.researchgate.net/publication/323202914_Demystifying_Ransomware_Attacks_Reverse_Engineering_and_Dynamic_Malware_Analysis_of_WannaCry_for_Network_and_Information_Security?enrichId=rgreq-fa3e910846c9dbd075cfa7b38288aa6f-XXX&enrichSource=Y292ZXJQYWdlOzMyMzIwMjkxNDtBUzo1OTQ1MDQ1MDM1NDk5NTJAMTUxODc1MjMyNzMwNQ%3D%3D&el=1_x_3&_esc=publicationCoverPdf
- Show all
-
-
butterfly-master/notes/papers/README.md
-
butterfly-master/notes/tor/README.md
-
butterfly-master/notes/types/README.md
-
butterfly-master/notes/types/WannaCry-encryption-process.png.png
-
butterfly-master/notes/types/cradlecore_features.png.png
-
butterfly-master/scripts/README.md
-
butterfly-master/scripts/cppcheck.sh.sh linux
-
butterfly-master/scripts/createFilesystem.py.py .sh linux
-
butterfly-master/scripts/suppressions.txt
-
butterfly-master/src/argumentParser.cpp
-
butterfly-master/src/fileExtensions.cpp
-
butterfly-master/src/httpMSGSchema.cpp
-
butterfly-master/src/httpRequest.cpp
-
butterfly-master/src/httpResponse.cpp
-
butterfly-master/src_linux/browser.cpp.js
-
butterfly-master/src_linux/butterfly.cpp
-
butterfly-master/src_linux/connManager.cpp
-
butterfly-master/src_linux/crypto/aes.cpp
-
butterfly-master/src_linux/crypto/aesDecryptor.cpp
-
butterfly-master/src_linux/crypto/aesEncryptor.cpp
-
butterfly-master/src_linux/crypto/cryptoProcess.cpp
-
butterfly-master/src_linux/crypto/cryptoSecurity.cpp
-
butterfly-master/src_linux/crypto/cryptoThread.cpp
-
butterfly-master/src_linux/crypto/decryptor.cpp.js
-
butterfly-master/src_linux/crypto/encryptor.cpp.js
-
butterfly-master/src_linux/crypto/rsa.cpp
-
butterfly-master/src_linux/crypto/rsaDecryptor.cpp
-
butterfly-master/src_linux/crypto/rsaEncryptor.cpp
-
butterfly-master/src_linux/directoryIterator.cpp
-
butterfly-master/src_linux/httpClient.cpp
-
butterfly-master/src_linux/httpServer.cpp.js
-
butterfly-master/src_linux/logger.cpp.js
-
butterfly-master/src_linux/main.cpp.js
-
butterfly-master/src_linux/socket.cpp
-
butterfly-master/src_linux/tcpSocket.cpp
-
butterfly-master/src_linux/torSocket.cpp
-
butterfly-master/src_windows/butterfly.cpp
-
butterfly-master/src_windows/main.cpp.js
-
butterfly-master/test/CMakeLists.txt
-
butterfly-master/test/README.md
-
butterfly-master/test/browserTest.cpp
-
butterfly-master/test/butterflyUnitTests.cpp
-
butterfly-master/test/connManagerTest.cpp
-
butterfly-master/test/crypto/5357083.pdf.pdf
-
http://www.vinransomware.com/blog/jigsaw-ransomware-demysti
-
https://blog.malwarebytes.com/threat-analysis/2016/03/cerber-ransomware-new-but-mature/[41]L.Abrams,
-
https://blog.malwarebytes.com/threat-analysis/2016/6/zcrypt-ransomware/[37]L.Abrams,
-
https://doi.org/10.1007/s11416-008-0092-2[16]K.Savage,P.Coogan,andH.Lau,
-
https://github.com/aguinet/wannakey[47]L.Dorrendorf,Z.Gutterman,andB.Pinkas,
-
https://msdn.microsoft.com/en-us/library/ms867086.aspx[25]2018.[Online].Available:https://minotr.net/[26]2018.[Online].Available:http://vxvault.net/[27]2018.[Online].Available:http://thezoo.morirt.com/[28]2018.[Online].Available:https://cuckoosandbox.org/
-
https://researchcenter.paloaltonetworks.com/2016/03/new-os-x-ransomware-keranger-infected-transmission-bittorrent-client-installer/[36]
-
https://www.bleepingcomputer.com/news/security/decryptor-for-the-apocalypse-ransomware-released-by-emsisoft/[43]M.Ward,
-
https://www.bleepingcomputer.com/news/security/desucrypt-ransomware-in-the-wild-with-deuscrypt-and-decryptable-insane-variants/[33]J.Wyke,S.E.T.Team,andA.Ajjan,
-
https://www.bleepingcomputer.com/news/security/emsisoft-releases-a-decrypter-for-hydracrypt-and-umbrecrypt-ransomware/[38]S.Mans
-
https://www.bleepingcomputer.com/news/security/the-new-raa-ransomware-is-created-entirely-using-javascript/[42]||,
-
https://www.carbonblack.com/2016/03/25/threat-alert-powerware-new-ransomware-written-in-powershell-targets-organizations-via-microsoft-word/
-
https://www.welivesecurity.com/2016/09/13/how-encryption-molded-crypto-ransomware/[14]A.L.Young,
-
https://www.wired.com/2016/05/4-ways-protect-ransomware-youre-target/8G.O'GormanandG.McDonald,Ransomware:Agrowingmen-ace.SymantecCorporation,2012.9A.YoungandM.Yung,
-
https://zeltser.com/malicious-ip-blocklists/[22]J.KatzandY.Lindell,Introductiontomoderncryptography.CRCpress,2014.[23]J.R.Vacca,Computerandinformationsecurityhandbook.Newnes,2012.[24]R.Coleridge,
- Show all
-
-
butterfly-master/test/crypto/aesDecryptorTest.cpp
-
butterfly-master/test/crypto/aesEncryptorTest.cpp
-
butterfly-master/test/crypto/aesTest.cpp
-
butterfly-master/test/crypto/rsaDecryptorTest.cpp
-
butterfly-master/test/crypto/rsaEncryptorTest.cpp
-
butterfly-master/test/crypto/rsaTest.cpp
-
butterfly-master/test/directoryIteratorTest.cpp
-
butterfly-master/test/httpClientTest.cpp
-
butterfly-master/test/httpRequestTest.cpp
-
butterfly-master/test/httpResponseTest.cpp
-
butterfly-master/test/httpServerTest.cpp
-
butterfly-master/test/socketTest.cpp
-
butterfly-master/test/stubs/browser.cpp
-
butterfly-master/test/stubs/connManager.cpp
-
butterfly-master/test/stubs/torSocket.cpp
-
butterfly-master/test/tcpSocketTest.cpp
-
butterfly-master/test/torSocketTest.cpp
-
butterfly-master/ths/README.md
-
butterfly-master/tools/README.md
-
butterfly-master/tools/aesbfly/.gitignore
-
butterfly-master/tools/aesbfly/5357083.pdf.pdf
-
http://www.vinransomware.com/blog/jigsaw-ransomware-demysti
-
https://blog.malwarebytes.com/threat-analysis/2016/03/cerber-ransomware-new-but-mature/[41]L.Abrams,
-
https://blog.malwarebytes.com/threat-analysis/2016/6/zcrypt-ransomware/[37]L.Abrams,
-
https://doi.org/10.1007/s11416-008-0092-2[16]K.Savage,P.Coogan,andH.Lau,
-
https://github.com/aguinet/wannakey[47]L.Dorrendorf,Z.Gutterman,andB.Pinkas,
-
https://msdn.microsoft.com/en-us/library/ms867086.aspx[25]2018.[Online].Available:https://minotr.net/[26]2018.[Online].Available:http://vxvault.net/[27]2018.[Online].Available:http://thezoo.morirt.com/[28]2018.[Online].Available:https://cuckoosandbox.org/
-
https://researchcenter.paloaltonetworks.com/2016/03/new-os-x-ransomware-keranger-infected-transmission-bittorrent-client-installer/[36]
-
https://www.bleepingcomputer.com/news/security/decryptor-for-the-apocalypse-ransomware-released-by-emsisoft/[43]M.Ward,
-
https://www.bleepingcomputer.com/news/security/desucrypt-ransomware-in-the-wild-with-deuscrypt-and-decryptable-insane-variants/[33]J.Wyke,S.E.T.Team,andA.Ajjan,
-
https://www.bleepingcomputer.com/news/security/emsisoft-releases-a-decrypter-for-hydracrypt-and-umbrecrypt-ransomware/[38]S.Mans
-
https://www.bleepingcomputer.com/news/security/the-new-raa-ransomware-is-created-entirely-using-javascript/[42]||,
-
https://www.carbonblack.com/2016/03/25/threat-alert-powerware-new-ransomware-written-in-powershell-targets-organizations-via-microsoft-word/
-
https://www.welivesecurity.com/2016/09/13/how-encryption-molded-crypto-ransomware/[14]A.L.Young,
-
https://www.wired.com/2016/05/4-ways-protect-ransomware-youre-target/8G.O'GormanandG.McDonald,Ransomware:Agrowingmen-ace.SymantecCorporation,2012.9A.YoungandM.Yung,
-
https://zeltser.com/malicious-ip-blocklists/[22]J.KatzandY.Lindell,Introductiontomoderncryptography.CRCpress,2014.[23]J.R.Vacca,Computerandinformationsecurityhandbook.Newnes,2012.[24]R.Coleridge,
- Show all
-
-
butterfly-master/tools/aesbfly/CMakeLists.txt
-
butterfly-master/tools/aesbfly/README.md
-
butterfly-master/tools/aesbfly/include/aes.h
-
butterfly-master/tools/aesbfly/include/argumentParser.h
-
butterfly-master/tools/aesbfly/include/utils.h
-
butterfly-master/tools/aesbfly/src/aes.cpp
-
butterfly-master/tools/aesbfly/src/argumentParser.cpp
-
butterfly-master/tools/aesbfly/src/main.cpp
-
butterfly-master/tools/httpbfly/CMakeLists.txt
-
butterfly-master/tools/httpbfly/README.md
-
butterfly-master/tools/httpbfly/include/argumentParser.h
-
butterfly-master/tools/httpbfly/include/bflyExceptions.h
-
butterfly-master/tools/httpbfly/include/bflyUtils.h
-
butterfly-master/tools/httpbfly/include/httpClient.h
-
butterfly-master/tools/httpbfly/include/httpMSGSchema.h
-
butterfly-master/tools/httpbfly/include/httpRequest.h
-
butterfly-master/tools/httpbfly/include/httpResponse.h
-
butterfly-master/tools/httpbfly/include/httpServer.h
-
butterfly-master/tools/httpbfly/include/socket.h
-
butterfly-master/tools/httpbfly/include/tcpSocket.h
-
butterfly-master/tools/httpbfly/src/argumentParser.cpp
-
butterfly-master/tools/httpbfly/src/httpClient.cpp
-
butterfly-master/tools/httpbfly/src/httpMSGSchema.cpp
-
butterfly-master/tools/httpbfly/src/httpRequest.cpp
-
butterfly-master/tools/httpbfly/src/httpResponse.cpp
-
butterfly-master/tools/httpbfly/src/httpServer.cpp
-
butterfly-master/tools/httpbfly/src/main.cpp
-
butterfly-master/tools/httpbfly/src/socket.cpp
-
butterfly-master/tools/httpbfly/src/tcpSocket.cpp
-
butterfly-master/tools/rsabfly/.gitignore
-
butterfly-master/tools/rsabfly/CMakeLists.txt
-
butterfly-master/tools/rsabfly/CPrivateRSA.pem
-
butterfly-master/tools/rsabfly/README.md
-
butterfly-master/tools/rsabfly/include/argumentParser.h
-
butterfly-master/tools/rsabfly/include/rsa.h
-
butterfly-master/tools/rsabfly/include/utils.h
-
butterfly-master/tools/rsabfly/src/argumentParser.cpp
-
butterfly-master/tools/rsabfly/src/main.cpp
-
butterfly-master/tools/rsabfly/src/rsa.cpp
-
butterfly-master/tools/tcpsockbfly/CMakeLists.txt
-
butterfly-master/tools/tcpsockbfly/README.md
-
butterfly-master/tools/tcpsockbfly/include/argumentParser.h
-
butterfly-master/tools/tcpsockbfly/include/bflyExceptions.h
-
butterfly-master/tools/tcpsockbfly/include/socket.h
-
butterfly-master/tools/tcpsockbfly/include/tcpSocket.h
-
butterfly-master/tools/tcpsockbfly/src/argumentParser.cpp
-
butterfly-master/tools/tcpsockbfly/src/main.cpp
-
butterfly-master/tools/tcpsockbfly/src/socket.cpp
-
butterfly-master/tools/tcpsockbfly/src/tcpSocket.cpp
-
butterfly-master/tools/torsockbfly/.gitignore
-
butterfly-master/tools/torsockbfly/CMakeLists.txt
-
butterfly-master/tools/torsockbfly/README.md
-
butterfly-master/tools/torsockbfly/include/argumentParser.h
-
butterfly-master/tools/torsockbfly/include/bflyExceptions.h
-
butterfly-master/tools/torsockbfly/include/socket.h
-
butterfly-master/tools/torsockbfly/include/torSocket.h
-
butterfly-master/tools/torsockbfly/src/argumentParser.cpp
-
butterfly-master/tools/torsockbfly/src/main.cpp
-
butterfly-master/tools/torsockbfly/src/socket.cpp
-
butterfly-master/tools/torsockbfly/src/torSocket.cpp
-
butterfly-master/webserver/.gitignore
-
butterfly-master/webserver/CHANGELOG.rst
-
butterfly-master/webserver/CPrivateRSA.json
-
butterfly-master/webserver/LICENSE
-
butterfly-master/webserver/MANIFEST.in
-
butterfly-master/webserver/README.md
-
butterfly-master/webserver/bflyServerApp/__init__.py
-
butterfly-master/webserver/bflyServerApp/aes_decryption.py
-
butterfly-master/webserver/bflyServerApp/apihandler.py
-
butterfly-master/webserver/bflyServerApp/decryption.py
-
butterfly-master/webserver/bflyServerApp/exceptions.py
-
butterfly-master/webserver/bflyServerApp/main.py
-
butterfly-master/webserver/bflyServerApp/router.py
-
butterfly-master/webserver/bflyServerApp/rsa_decryption.py
-
butterfly-master/webserver/bflyServerApp/test/test_aes_decryption.py
-
butterfly-master/webserver/bflyServerApp/test/test_decryption.py
-
butterfly-master/webserver/bflyServerApp/test/test_rsa_decryption.py
-
butterfly-master/webserver/bflyServerApp/utils/__init__.py
-
butterfly-master/webserver/bflyServerApp/utils/logger.py
-
butterfly-master/webserver/requirements.txt
-
butterfly-master/webserver/setup.py
-
butterfly-master/windows.cmake