diff --git a/conf/index.csv b/conf/index.csv index 381d719..5a32e9c 100644 --- a/conf/index.csv +++ b/conf/index.csv @@ -1,13 +1,13 @@ 1,Source/Original/Dokan_Dec2008/Dokan_Dec2008,botnet,Dokan,unknown,unknown,c,00/12/2008,x86,win32,0 -3,Source/Original/ShadowBotv3_March2007/ShadowBotv3_March2007,botnet,ShadowBot,3,unknown,cpp,Mar-07,x86,win32,0 +3,Source/Original/ShadowBotv3_March2007/ShadowBotv3_March2007,botnet,ShadowBot,3,unknown,cpp,מרץ-07,x86,win32,0 4,Source/Original/rBot0.3.3_May2004/rBot0.3.3_May2004,botnet,rBot,0.3.3,unknown,cpp,00/05/2004,x86,win32,0 -5,Source/Original/ZeuS2.0.8.9_Feb2013/ZeuS2.0.8.9_Feb2013,botnet,ZeuS,2.0.8.9,unknown,c,Feb-13,x86,win32,1 +5,Source/Original/ZeuS2.0.8.9_Feb2013/ZeuS2.0.8.9_Feb2013,botnet,ZeuS,2.0.8.9,unknown,c,פבר-13,x86,win32,1 6,Source/Original/X0R-USB_Jan2009/X0R-USB_Jan2009,virus,X0R-USB-Virus,unknown,unknown,c,00/01/2009,x86,win32,0 7,Source/Original/LoexBot1.3_Sep2008/LoexBot1.3_Sep2008,botnet,LoexBot,1.3,unknown,cpp,00/09/2008,x86,win32,0 -8,Source/Original/ZunkerBot1.4.5_Sep2007/ZunkerBot1.4.5_Sep2007,botnet,ZunkerBot,1.4.5,unknown,php,Sep-07,x86,win32,0 +8,Source/Original/ZunkerBot1.4.5_Sep2007/ZunkerBot1.4.5_Sep2007,botnet,ZunkerBot,1.4.5,unknown,php,ספט-07,x86,win32,0 9,Source/Original/DopeBotv0.22_UnCrippled_Feb2007/DopeBotv0.22_UnCrippled_Feb2007,botnet,DopeBot-UnCrippled,0.22,unknown,cpp,00/02/2007,x86,win32,0 -10,Source/Original/vbBot_Jan2007/vbBot_Jan2007,botnet,vbBot,unknown,unknown,vb,Jan-07,x86,win32,0 -11,Source/Original/xTBot0.0.2_2Feb2002/xTBot0.0.2_2Feb2002,botnet,xTBot,0.0.2,unknown,cpp,Feb-02,x86,win32,0 +10,Source/Original/vbBot_Jan2007/vbBot_Jan2007,botnet,vbBot,unknown,unknown,vb,ינו-07,x86,win32,0 +11,Source/Original/xTBot0.0.2_2Feb2002/xTBot0.0.2_2Feb2002,botnet,xTBot,0.0.2,unknown,cpp,פבר-02,x86,win32,0 12,Source/Original/VBS.Win32.Vabian/VBS.Win32.Vabian,VBS-Worm,VBS.Win32.Vabian,botnet,unknown,vb,unknown,x86,win32,0 13,Source/Original/DopeBotv0.22_CrippledFeb2007/DopeBotv0.22_CrippledFeb2007,botnet,DopeBot-Crippled,0.22,unknown,cpp,00/02/2007,x86,win32,0 14,Source/Original/Win32.MiniPig_Nov2006/Win32.MiniPig_Nov2006,Worm,Win32.MiniPig,virus,unknown,c,00/11/2006,x86,win32,0 @@ -28,11 +28,11 @@ 29,Binaries/Trojan.Dropper.Gen/Trojan.Dropper.Gen,trojan,Dropper,Unknown,Unknown,bin,00/01/2014,x86,win32,0 30,Binaries/Trojan.NSIS.Win32/Trojan.NSIS.Win32,trojan,NSIS,Unknown,Unknown,bin,00/01/2014,x86,win32,0 31,Binaries/Trojan.Win32.Bechiro.BCD/Trojan.Win32.Bechiro.BCD,trojan,Bechiro,BCD,Unknown,bin,00/01/2014,x86,win32,0 -32,Binaries/AndroRat_6Dec2013/AndroRat_6Dec2013,botnet,AndroRat,Dec-13,Unknown,java,06/12/2013,x86,win32,0 -33,Binaries/CryptoLocker_22Jan2014/CryptoLocker_22Jan2014,ransomeware,CryptoLocker,Jan-14,Unknown,bin,22/01/2014,x86,win32,1 +32,Binaries/AndroRat_6Dec2013/AndroRat_6Dec2013,botnet,AndroRat,דצמ-13,Unknown,java,06/12/2013,x86,win32,0 +33,Binaries/CryptoLocker_22Jan2014/CryptoLocker_22Jan2014,ransomeware,CryptoLocker,ינו-14,Unknown,bin,22/01/2014,x86,win32,1 34,Binaries/njRAT-v0.6.4/njRAT-v0.6.4,botnet,njRAT,0.6.4,Unknown,bin,00/09/2013,x86,win32,0 -35,Binaries/ZeusBankingVersion_26Nov2013/ZeusBankingVersion_26Nov2013,botnet,Zeus - zBot,Nov-13,Unknown,bin,23/11/2013,x86,win32,1 -36,Source/Original/NullBot_Dec2006/NullBot_Dec2006,botnet,NullBot,Dec-06,Unknown,cpp,00/12/2006,x86,win32,0 +35,Binaries/ZeusBankingVersion_26Nov2013/ZeusBankingVersion_26Nov2013,botnet,Zeus - zBot,נוב-13,Unknown,bin,23/11/2013,x86,win32,1 +36,Source/Original/NullBot_Dec2006/NullBot_Dec2006,botnet,NullBot,דצמ-06,Unknown,cpp,00/12/2006,x86,win32,0 37,Binaries/Artemis,trojan,Artemis,Unknown,Unknown,bin,00/00/0000,x86,win32,0 38,Binaries/Somoto,apt,Somoto,unknown,unknown,bin,00/00/0000,x86,win32,0 39,Binaries/Variant.Kazy,trojan,Variant.Kazy,unknown,unknown,bin,00/00/0000,x86,win32,0 @@ -61,3 +61,9 @@ 62,Binaries/ZeroLocker,ransomware,Zerolocker,A,Unknown,bin,09/08/2014,x86,win32,0 63,Sources/Original/TinyBanker_Jan2012,botnet,Tiny Banker,A,Russia,asm,00/01/2012,x86,win32,0 64,Source/Original/XtremeRAT_March2009,botnet,XtremeRat,Unknown,Unknown,c,00/03/2009,x86,win32,0 +65,Binaries/Win32.Reveton,ransomeware,Reveton,Y,unknown,bin,Unknown,x86,win32,0 +66,Binaries/Trojan.Bladabindi,trojan,Bladabindi,unknown,bin,00/07/2013,x86,win32,0 +67,Source/Original/Win32.Remhead,rootkit,Remhead AKA n00bkit,unknown,c,unknown,x86,win32,0 +68,Source/Original/ExploitKit.Blackhole.100,exploitkit,Blackhole,unknown,HodLuM & Paunch,php,00/08/10,web,win32,0 +69,Source/Original/ExploitKit.Blackhole.102,exploitkit,Blackhole,unknown,HodLuM & Paunch,php,20/11/10,web,win32,0 +70,Source/Original/AryanRAT_March2010,botnet,AryanRAT,0.5,unknown,cpp,07/03/2010,x86,win32,0 \ No newline at end of file diff --git a/malwares/Binaries/Tojan.Loadmoney/Trojan.Loadmoney.md5 b/malwares/Binaries/Tojan.Loadmoney/Trojan.Loadmoney.md5 deleted file mode 100644 index a81f6fc..0000000 --- a/malwares/Binaries/Tojan.Loadmoney/Trojan.Loadmoney.md5 +++ /dev/null @@ -1 +0,0 @@ -6c42954257ef80cc72266400236ea63c diff --git a/malwares/Binaries/Trojan.Bladabindi/Trojan.Bladabindi.md5 b/malwares/Binaries/Trojan.Bladabindi/Trojan.Bladabindi.md5 new file mode 100644 index 0000000..863a4cb --- /dev/null +++ b/malwares/Binaries/Trojan.Bladabindi/Trojan.Bladabindi.md5 @@ -0,0 +1 @@ +434254111fbe2b2a287aed9211375384 Trojan.Bladabindi.zip diff --git a/malwares/Binaries/Tojan.Loadmoney/Trojan.Loadmoney.pass b/malwares/Binaries/Trojan.Bladabindi/Trojan.Bladabindi.pass similarity index 100% rename from malwares/Binaries/Tojan.Loadmoney/Trojan.Loadmoney.pass rename to malwares/Binaries/Trojan.Bladabindi/Trojan.Bladabindi.pass diff --git a/malwares/Binaries/Trojan.Bladabindi/Trojan.Bladabindi.sha256 b/malwares/Binaries/Trojan.Bladabindi/Trojan.Bladabindi.sha256 new file mode 100644 index 0000000..dc562be --- /dev/null +++ b/malwares/Binaries/Trojan.Bladabindi/Trojan.Bladabindi.sha256 @@ -0,0 +1 @@ +8057f113df215814bffa638f50c5b4a45668a8c5399eaa584882b3afdab7d706 Trojan.Bladabindi.zip diff --git a/malwares/Binaries/Trojan.Bladabindi/Trojan.Bladabindi.zip b/malwares/Binaries/Trojan.Bladabindi/Trojan.Bladabindi.zip new file mode 100644 index 0000000..56be51a Binary files /dev/null and b/malwares/Binaries/Trojan.Bladabindi/Trojan.Bladabindi.zip differ diff --git a/malwares/Binaries/Trojan.Loadmoney/Tojan.Loadmoney.md5 b/malwares/Binaries/Trojan.Loadmoney/Tojan.Loadmoney.md5 new file mode 100644 index 0000000..c531434 --- /dev/null +++ b/malwares/Binaries/Trojan.Loadmoney/Tojan.Loadmoney.md5 @@ -0,0 +1 @@ +b44418afb1bd4d88d9b515392dfb4e81 Tojan.Loadmoney.zip diff --git a/malwares/Binaries/Trojan.Loadmoney/Trojan.Loadmoney.pass b/malwares/Binaries/Trojan.Loadmoney/Trojan.Loadmoney.pass new file mode 100644 index 0000000..cba4e8b --- /dev/null +++ b/malwares/Binaries/Trojan.Loadmoney/Trojan.Loadmoney.pass @@ -0,0 +1 @@ +infected diff --git a/malwares/Binaries/Tojan.Loadmoney/Trojan.Loadmoney.sha256 b/malwares/Binaries/Trojan.Loadmoney/Trojan.Loadmoney.sha256 similarity index 100% rename from malwares/Binaries/Tojan.Loadmoney/Trojan.Loadmoney.sha256 rename to malwares/Binaries/Trojan.Loadmoney/Trojan.Loadmoney.sha256 diff --git a/malwares/Binaries/Tojan.Loadmoney/Tojan.Loadmoney.zip b/malwares/Binaries/Trojan.Loadmoney/Trojan.Loadmoney.zip similarity index 100% rename from malwares/Binaries/Tojan.Loadmoney/Tojan.Loadmoney.zip rename to malwares/Binaries/Trojan.Loadmoney/Trojan.Loadmoney.zip diff --git a/malwares/Binaries/Win32.Reveton.Y/Win32.Reveton.Y.md5 b/malwares/Binaries/Win32.Reveton.Y/Win32.Reveton.Y.md5 new file mode 100644 index 0000000..d22d6b5 --- /dev/null +++ b/malwares/Binaries/Win32.Reveton.Y/Win32.Reveton.Y.md5 @@ -0,0 +1 @@ +a4ddc950732f827525bceceab231e145 Reveton.zip diff --git a/malwares/Binaries/Win32.Reveton.Y/Win32.Reveton.Y.pass b/malwares/Binaries/Win32.Reveton.Y/Win32.Reveton.Y.pass new file mode 100644 index 0000000..cba4e8b --- /dev/null +++ b/malwares/Binaries/Win32.Reveton.Y/Win32.Reveton.Y.pass @@ -0,0 +1 @@ +infected diff --git a/malwares/Binaries/Win32.Reveton.Y/Win32.Reveton.Y.sha256 b/malwares/Binaries/Win32.Reveton.Y/Win32.Reveton.Y.sha256 new file mode 100644 index 0000000..5c02fe5 --- /dev/null +++ b/malwares/Binaries/Win32.Reveton.Y/Win32.Reveton.Y.sha256 @@ -0,0 +1 @@ +2742dabe9b34592d64b25eb33eb56d44921afa21e795a98d26cb8fef76df255a Reveton.zip diff --git a/malwares/Binaries/Win32.Reveton.Y/Win32.Reveton.Y.zip b/malwares/Binaries/Win32.Reveton.Y/Win32.Reveton.Y.zip new file mode 100644 index 0000000..fab8f29 Binary files /dev/null and b/malwares/Binaries/Win32.Reveton.Y/Win32.Reveton.Y.zip differ diff --git a/malwares/Source/Original/AryanRAT_March2010/AryanRAT_March2010.md5 b/malwares/Source/Original/AryanRAT_March2010/AryanRAT_March2010.md5 new file mode 100644 index 0000000..480dad9 --- /dev/null +++ b/malwares/Source/Original/AryanRAT_March2010/AryanRAT_March2010.md5 @@ -0,0 +1 @@ +2acabca7302b2d446b84eb5bbb8e6277 AryanRAT_March2010.zip diff --git a/malwares/Source/Original/AryanRAT_March2010/AryanRAT_March2010.pass b/malwares/Source/Original/AryanRAT_March2010/AryanRAT_March2010.pass new file mode 100644 index 0000000..cba4e8b --- /dev/null +++ b/malwares/Source/Original/AryanRAT_March2010/AryanRAT_March2010.pass @@ -0,0 +1 @@ +infected diff --git a/malwares/Source/Original/AryanRAT_March2010/AryanRAT_March2010.sha256 b/malwares/Source/Original/AryanRAT_March2010/AryanRAT_March2010.sha256 new file mode 100644 index 0000000..fd96d93 --- /dev/null +++ b/malwares/Source/Original/AryanRAT_March2010/AryanRAT_March2010.sha256 @@ -0,0 +1 @@ +9df1632d4750b98a57d2a963d48bb5126f27c7f4a1c295c978d8ee6c0951a484 AryanRAT_March2010.zip diff --git a/malwares/Source/Original/AryanRAT_March2010/AryanRAT_March2010.zip b/malwares/Source/Original/AryanRAT_March2010/AryanRAT_March2010.zip new file mode 100644 index 0000000..7924fcd Binary files /dev/null and b/malwares/Source/Original/AryanRAT_March2010/AryanRAT_March2010.zip differ diff --git a/malwares/Source/Original/ExploitKit.BlackHole.100/ExploitKit.BlackHole.100.md5 b/malwares/Source/Original/ExploitKit.BlackHole.100/ExploitKit.BlackHole.100.md5 new file mode 100644 index 0000000..1fa37b9 --- /dev/null +++ b/malwares/Source/Original/ExploitKit.BlackHole.100/ExploitKit.BlackHole.100.md5 @@ -0,0 +1 @@ +2dba8a41e7861063678efd8893655bce ExploitKit.BlackHole.100.zip diff --git a/malwares/Source/Original/ExploitKit.BlackHole.100/ExploitKit.BlackHole.100.pass b/malwares/Source/Original/ExploitKit.BlackHole.100/ExploitKit.BlackHole.100.pass new file mode 100644 index 0000000..cba4e8b --- /dev/null +++ b/malwares/Source/Original/ExploitKit.BlackHole.100/ExploitKit.BlackHole.100.pass @@ -0,0 +1 @@ +infected diff --git a/malwares/Source/Original/ExploitKit.BlackHole.100/ExploitKit.BlackHole.100.sha256 b/malwares/Source/Original/ExploitKit.BlackHole.100/ExploitKit.BlackHole.100.sha256 new file mode 100644 index 0000000..b06e30c --- /dev/null +++ b/malwares/Source/Original/ExploitKit.BlackHole.100/ExploitKit.BlackHole.100.sha256 @@ -0,0 +1 @@ +0cb13275aa7ee368338a97664a269b06ef65a4f0349847672b05138576674705 ExploitKit.BlackHole.100.zip diff --git a/malwares/Source/Original/ExploitKit.BlackHole.100/ExploitKit.BlackHole.100.zip b/malwares/Source/Original/ExploitKit.BlackHole.100/ExploitKit.BlackHole.100.zip new file mode 100644 index 0000000..c78dcad Binary files /dev/null and b/malwares/Source/Original/ExploitKit.BlackHole.100/ExploitKit.BlackHole.100.zip differ diff --git a/malwares/Source/Original/ExploitKit.BlackHole.102/ExploitKit.BlackHole.102.md5 b/malwares/Source/Original/ExploitKit.BlackHole.102/ExploitKit.BlackHole.102.md5 new file mode 100644 index 0000000..c67f223 --- /dev/null +++ b/malwares/Source/Original/ExploitKit.BlackHole.102/ExploitKit.BlackHole.102.md5 @@ -0,0 +1 @@ +b515d4f8b65dd6eb5570c04c6136e165 ExploitKit.BlackHole.102.zip diff --git a/malwares/Source/Original/ExploitKit.BlackHole.102/ExploitKit.BlackHole.102.pass b/malwares/Source/Original/ExploitKit.BlackHole.102/ExploitKit.BlackHole.102.pass new file mode 100644 index 0000000..cba4e8b --- /dev/null +++ b/malwares/Source/Original/ExploitKit.BlackHole.102/ExploitKit.BlackHole.102.pass @@ -0,0 +1 @@ +infected diff --git a/malwares/Source/Original/ExploitKit.BlackHole.102/ExploitKit.BlackHole.102.sha256 b/malwares/Source/Original/ExploitKit.BlackHole.102/ExploitKit.BlackHole.102.sha256 new file mode 100644 index 0000000..8b2537c --- /dev/null +++ b/malwares/Source/Original/ExploitKit.BlackHole.102/ExploitKit.BlackHole.102.sha256 @@ -0,0 +1 @@ +08c644da26cf8bae42044a52d3bb4f544e22a2786821167b7cb4a368556541c0 ExploitKit.BlackHole.102.zip diff --git a/malwares/Source/Original/ExploitKit.BlackHole.102/ExploitKit.BlackHole.102.zip b/malwares/Source/Original/ExploitKit.BlackHole.102/ExploitKit.BlackHole.102.zip new file mode 100644 index 0000000..7af6fc6 Binary files /dev/null and b/malwares/Source/Original/ExploitKit.BlackHole.102/ExploitKit.BlackHole.102.zip differ diff --git a/malwares/Source/Original/Win32.Remhead/Win32.Remhead.md5 b/malwares/Source/Original/Win32.Remhead/Win32.Remhead.md5 new file mode 100644 index 0000000..198ffb8 --- /dev/null +++ b/malwares/Source/Original/Win32.Remhead/Win32.Remhead.md5 @@ -0,0 +1 @@ +6ee37713470bc5c9e8044ffa0237b45f Win32.Remhead.zip diff --git a/malwares/Source/Original/Win32.Remhead/Win32.Remhead.pass b/malwares/Source/Original/Win32.Remhead/Win32.Remhead.pass new file mode 100644 index 0000000..cba4e8b --- /dev/null +++ b/malwares/Source/Original/Win32.Remhead/Win32.Remhead.pass @@ -0,0 +1 @@ +infected diff --git a/malwares/Source/Original/Win32.Remhead/Win32.Remhead.sha256 b/malwares/Source/Original/Win32.Remhead/Win32.Remhead.sha256 new file mode 100644 index 0000000..aafb5da --- /dev/null +++ b/malwares/Source/Original/Win32.Remhead/Win32.Remhead.sha256 @@ -0,0 +1 @@ +6f7e4c91969d5295b52f3aa8e9c2205611cbc033423c66159b5c790cf1aeee0e Win32.Remhead.zip diff --git a/malwares/Source/Original/Win32.Remhead/Win32.Remhead.zip b/malwares/Source/Original/Win32.Remhead/Win32.Remhead.zip new file mode 100644 index 0000000..4c30423 Binary files /dev/null and b/malwares/Source/Original/Win32.Remhead/Win32.Remhead.zip differ