timb-machine / linux-malware Public

Notifications You must be signed in to change notification settings
Fork 92
Star 1.1k

Code
Issues 780
Pull requests 1
Actions
Projects 1
Security
Insights

Additional navigation options

Code
Issues
Pull requests
Actions
Projects
Security
Insights

Issues: timb-machine/linux-malware

[Intel]: Example Intel

#16 opened Apr 19, 2022 by timb-machine

Open

Labels 175 Milestones 0

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Clear current search query, filters, and sorts

159 Open 0 Closed

Author

Filter by author

Label

Filter by label

Use alt + click/return to exclude labels

or ⇧ + click/return for logical OR

Projects

Filter by project

Milestones

Filter by milestone

Assignee

Filter by who’s assigned

Assigned to nobody

Sort

Sort by

Newest Oldest Most commented Least commented Recently updated Least recently updated Best match

Most reactions

Issues list

[Intel]: https://github.com/grisuno/LazyOwn missing:submodule missing:tag:JavaScript missing:tag:Non-persistentStorage missing:tag:RedirectionToNull missing:tag:T1001 missing:tag:T1003.008 missing:tag:T1005 missing:tag:T1007 missing:tag:T1021.002 missing:tag:T1021.004 missing:tag:T1027.002 missing:tag:T1037 missing:tag:T1048 missing:tag:T1053.003 missing:tag:T1053.006 missing:tag:T1057 missing:tag:T1059.006 missing:tag:T1070.003 missing:tag:T1070.004 missing:tag:T1071.001 missing:tag:T1071.002 missing:tag:T1078.003 missing:tag:T1083 missing:tag:T1098.004 missing:tag:T1222 missing:tag:T1491 missing:tag:T1518 missing:tag:T1543.002 missing:tag:T1546.004 missing:tag:T1548.001 missing:tag:T1548.003 missing:tag:T1552.003 missing:tag:T1552.004 missing:tag:T1560 missing:tag:T1567 missing:tag:T1573 missing:tag:T1574.007 missing:tag:T1590 missing:tag:T1602.001 missing:tag:wltm new

#812 opened Dec 6, 2024 by timb-machine

[Intel]: https://www.ncsc.gov.uk/static-assets/documents/malware-analysis-reports/pygmy-goat/ncsc-mar-pygmy-goat.pdf ignore:tag:T1021.004 ignore:tag:T1027.002 ignore:tag:T1053.003 ignore:tag:T1070.004 ignore:tag:T1083 ignore:tag:T1098.004 ignore:tag:T1491 ignore:tag:T1546.004 ignore:tag:T1552.004 ignore:tag:T1590 missing:tag:Non-persistentStorage missing:tag:T1005 missing:tag:T1574.006 missing:tag:wltm

#808 opened Dec 6, 2024 by timb-machine

[Intel]: https://github.com/tstromberg/sunlight good first issue

Good for newcomers

missing:tag:eBPF missing:tag:Non-persistentStorage missing:tag:RedirectionToNull missing:tag:T1005 missing:tag:T1021.004 missing:tag:T1048 missing:tag:T1053.003 missing:tag:T1057 missing:tag:T1070.004 missing:tag:T1071.001 missing:tag:T1098.004 missing:tag:T1548.003 missing:tag:T1552.004 missing:tag:T1567 missing:tag:T1573 missing:tag:wltm new

#794 opened Jan 31, 2024 by timb-machine

[Intel]: https://github.com/MegaManSec/SSH-Snake missing:tag:IRC missing:tag:Non-persistentStorage missing:tag:T1005 missing:tag:T1021.002 missing:tag:T1021.004 missing:tag:T1048 missing:tag:T1057 missing:tag:T1070.003 missing:tag:T1070.004 missing:tag:T1071.001 missing:tag:T1083 missing:tag:T1098.004 missing:tag:T1548.003 missing:tag:T1552.003 missing:tag:T1552.004 missing:tag:T1567 missing:tag:T1573 missing:tag:T1590 new

#791 opened Jan 30, 2024 by timb-machine

[Intel]: https://github.com/sad0p/d0zer missing:tag:Go missing:tag:Non-persistentStorage missing:tag:T1021.002 missing:tag:T1027.004 missing:tag:T1048 missing:tag:T1070.004 missing:tag:T1071.001 missing:tag:T1546.004 missing:tag:T1567 missing:tag:T1573 missing:tag:T1574.006 missing:tag:T1574.007 missing:tag:T1590 new

#782 opened Jan 29, 2024 by timb-machine

[Intel]: https://github.com/MatheuZSecurity/D3m0n1z3dShell good first issue

Good for newcomers

missing:tag:Non-persistentStorage missing:tag:T1005 missing:tag:T1027.002 missing:tag:T1037.004 missing:tag:T1048 missing:tag:T1071.001 missing:tag:T1222 missing:tag:T1548.001 missing:tag:T1548.003 missing:tag:T1560 missing:tag:T1567 missing:tag:T1573 missing:tag:T1574.006 new

#773 opened Jan 17, 2024 by timb-machine

[Intel]: https://github.com/89luca89/pakkero missing:tag:IRC missing:tag:Non-persistentStorage missing:tag:ProcessTreeSpoofing missing:tag:T1005 missing:tag:T1027.002 missing:tag:T1048 missing:tag:T1053.007 missing:tag:T1057 missing:tag:T1059.006 missing:tag:T1070.004 missing:tag:T1071.001 missing:tag:T1083 missing:tag:T1491 missing:tag:T1546.004 missing:tag:T1548.003 missing:tag:T1567 missing:tag:T1573 missing:tag:T1574.006 missing:tag:T1574.007 missing:tag:T1590 missing:tag:T1609 missing:tag:T1610 new

#718 opened Jul 14, 2023 by timb-machine

[Intel]: https://reveng007.github.io/blog/2022/03/08/reveng_rkit_detailed.html missing:tag:IRC missing:tag:Non-persistentStorage missing:tag:RedirectionToNull missing:tag:T1005 missing:tag:T1021.002 missing:tag:T1048 missing:tag:T1057 missing:tag:T1070.004 missing:tag:T1071.001 missing:tag:T1083 missing:tag:T1491 missing:tag:T1546.004 missing:tag:T1567 missing:tag:T1573 missing:tag:T1590

#705 opened Jun 26, 2023 by timb-machine

[Intel]: https://github.com/aviat/passe-partout missing:tag:Non-persistentStorage missing:tag:RedirectionToNull missing:tag:T1003.007 missing:tag:T1005 missing:tag:T1021.004 missing:tag:T1048 missing:tag:T1055.008 missing:tag:T1057 missing:tag:T1070.004 missing:tag:T1071.001 missing:tag:T1083 missing:tag:T1098.004 missing:tag:T1215 missing:tag:T1491 missing:tag:T1548.003 missing:tag:T1552.004 missing:tag:T1553.004 missing:tag:T1567 missing:tag:T1573 missing:tag:T1590 missing:tag:T1622 new

#704 opened Jun 25, 2023 by timb-machine

[Intel]: https://github.com/liamg/traitor missing:tag:Non-persistentStorage missing:tag:T1001 missing:tag:T1005 missing:tag:T1048 missing:tag:T1071.001 missing:tag:T1083 missing:tag:T1222 missing:tag:T1548.001 missing:tag:T1548.003 missing:tag:T1567 missing:tag:T1573 missing:tag:T1590 new

#687 opened Jun 14, 2023 by timb-machine

[Intel]: https://seanpesce.blogspot.com/2023/05/bypassing-selinux-with-initmodule.html missing:tag:Auditd missing:tag:Non-persistentStorage missing:tag:T1005 missing:tag:T1021.004 missing:tag:T1027.004 missing:tag:T1083 missing:tag:T1215 missing:tag:T1548.003 missing:tag:T1562.001

#683 opened May 31, 2023 by timb-machine

[Intel]: https://www.mandiant.com/sites/default/files/2022-03/wp-linux-endpoint-hardening.pdf missing:tag:Auditd missing:tag:Non-persistentStorage missing:tag:RedirectionToNull missing:tag:T1003.008 missing:tag:T1005 missing:tag:T1007 missing:tag:T1021.002 missing:tag:T1021.004 missing:tag:T1037 missing:tag:T1037.004 missing:tag:T1048 missing:tag:T1053.003 missing:tag:T1053.006 missing:tag:T1057 missing:tag:T1069 missing:tag:T1070.002 missing:tag:T1070.003 missing:tag:T1070.004 missing:tag:T1071.001 missing:tag:T1078.003 missing:tag:T1083 missing:tag:T1215 missing:tag:T1222 missing:tag:T1491 missing:tag:T1518 missing:tag:T1543.002 missing:tag:T1548.001 missing:tag:T1548.003 missing:tag:T1552.003 missing:tag:T1556.003 missing:tag:T1562.001 missing:tag:T1562.004 missing:tag:T1567 missing:tag:T1573 missing:tag:T1590 new

#675 opened May 21, 2023 by timb-machine

[Intel]: https://github.com/h3xduck/Umbra missing:tag:Non-persistentStorage missing:tag:T1005 missing:tag:T1021.002 missing:tag:T1048 missing:tag:T1071.001 missing:tag:T1215 missing:tag:T1518 missing:tag:T1548.003 missing:tag:T1567 missing:tag:T1573

#668 opened May 15, 2023 by timb-machine

[Intel]: https://www.deepinstinct.com/blog/bpfdoor-malware-evolves-stealthy-sniffing-backdoor-ups-its-game missing:tag:Non-persistentStorage missing:tag:T1005 missing:tag:T1021.002 missing:tag:T1048 missing:tag:T1057 missing:tag:T1070.004 missing:tag:T1071.001 missing:tag:T1491 missing:tag:T1562.004 missing:tag:T1567 missing:tag:T1573 missing:tag:T1590 new

#658 opened May 12, 2023 by timb-machine

[Intel]: https://www.welivesecurity.com/2023/04/20/linux-malware-strengthens-links-lazarus-3cx-supply-chain-attack/ missing:tag:Non-persistentStorage missing:tag:RedirectionToNull missing:tag:T1021.002 missing:tag:T1027.002 missing:tag:T1037 missing:tag:T1048 missing:tag:T1057 missing:tag:T1070.004 missing:tag:T1071.001 missing:tag:T1491 missing:tag:T1567 missing:tag:T1573

#655 opened May 7, 2023 by timb-machine

[Intel]: https://www.welivesecurity.com/wp-content/uploads/2021/10/eset_fontonlake.pdf missing:tactics missing:tag:Non-persistentStorage missing:tag:ProcessTreeSpoofing missing:tag:ProcessTreeSpoofingForking missing:tag:T1001 missing:tag:T1005 missing:tag:T1021.002 missing:tag:T1021.004 missing:tag:T1027.002 missing:tag:T1048 missing:tag:T1057 missing:tag:T1070.003 missing:tag:T1070.004 missing:tag:T1071.002 missing:tag:T1083 missing:tag:T1098.004 missing:tag:T1205 missing:tag:T1518 missing:tag:T1546.004 missing:tag:T1552.003 missing:tag:T1552.004 missing:tag:T1574.006 missing:tag:T1574.007 missing:tag:T1590 new

#641 opened Apr 20, 2023 by timb-machine

[Intel]: https://cujo.com/the-sysrv-botnet-and-how-it-evolved/ missing:tag:Non-persistentStorage missing:tag:T1005 missing:tag:T1021.001 missing:tag:T1021.002 missing:tag:T1027.002 missing:tag:T1048 missing:tag:T1053.003 missing:tag:T1057 missing:tag:T1070.003 missing:tag:T1070.004 missing:tag:T1071.001 missing:tag:T1083 missing:tag:T1205 missing:tag:T1491 missing:tag:T1518 missing:tag:T1552.003 missing:tag:T1560 missing:tag:T1562.004 missing:tag:T1567 missing:tag:T1573 missing:tag:T1590 new

#640 opened Apr 20, 2023 by timb-machine

[Intel]: https://www.uptycs.com/blog/cyber_espionage_in_india_decoding_apt_36_new_linux_malware missing:tag:Non-persistentStorage missing:tag:T1005 missing:tag:T1027.002 missing:tag:T1048 missing:tag:T1053.003 missing:tag:T1057 missing:tag:T1069 missing:tag:T1070.004 missing:tag:T1071.001 missing:tag:T1491 missing:tag:T1560 missing:tag:T1567 missing:tag:T1573 new

#639 opened Apr 18, 2023 by timb-machine

[Intel]: https://blog.vibri.us/BeyondTrust-AD-Bridge-Open-Post-Exploitation/ missing:tag:Non-persistentStorage missing:tag:T1005 missing:tag:T1040 missing:tag:T1048 missing:tag:T1057 missing:tag:T1071.001 missing:tag:T1083 missing:tag:T1222 missing:tag:T1491 missing:tag:T1518 missing:tag:T1548.001 missing:tag:T1567 missing:tag:T1573 new

#635 opened Apr 9, 2023 by timb-machine

[Intel]: https://github.com/sandflysecurity/sandfly-entropyscan missing:tag:Non-persistentStorage missing:tag:T1005 missing:tag:T1027.002 missing:tag:T1048 missing:tag:T1053.003 missing:tag:T1057 missing:tag:T1070.004 missing:tag:T1071.001 missing:tag:T1083 missing:tag:T1491 missing:tag:T1567 missing:tag:T1573 missing:tag:T1574.006 new

#632 opened Apr 9, 2023 by timb-machine

[Intel]: https://asec.ahnlab.com/en/49769/ missing:tag:Non-persistentStorage missing:tag:RedirectionToNull missing:tag:T1005 missing:tag:T1021.002 missing:tag:T1027.002 missing:tag:T1048 missing:tag:T1053.003 missing:tag:T1057 missing:tag:T1070.003 missing:tag:T1070.004 missing:tag:T1071.001 missing:tag:T1491 missing:tag:T1546.004 missing:tag:T1552.003 missing:tag:T1560 missing:tag:T1567 missing:tag:T1573 new

#624 opened Mar 29, 2023 by timb-machine

[Intel]: https://blog.exatrack.com/melofee/ missing:tag:JavaScript missing:tag:Non-persistentStorage missing:tag:RedirectionToNull missing:tag:T1005 missing:tag:T1021.002 missing:tag:T1037 missing:tag:T1037.004 missing:tag:T1048 missing:tag:T1057 missing:tag:T1070.003 missing:tag:T1070.004 missing:tag:T1071.001 missing:tag:T1083 missing:tag:T1205 missing:tag:T1215 missing:tag:T1222 missing:tag:T1491 missing:tag:T1546.004 missing:tag:T1548.001 missing:tag:T1552.003 missing:tag:T1562.004 missing:tag:T1567 missing:tag:T1573 missing:tag:T1590

#620 opened Mar 28, 2023 by timb-machine

[Intel]: https://int0x33.medium.com/day-27-tiny-shell-48df6abb0d5d missing:tag:Non-persistentStorage missing:tag:RedirectionToNull missing:tag:T1003.008 missing:tag:T1005 missing:tag:T1021.002 missing:tag:T1027.002 missing:tag:T1048 missing:tag:T1057 missing:tag:T1070.003 missing:tag:T1070.004 missing:tag:T1071.001 missing:tag:T1546.004 missing:tag:T1552.003 missing:tag:T1560 missing:tag:T1567 missing:tag:T1573 missing:tag:T1574.006 new

#616 opened Mar 16, 2023 by timb-machine

[Intel]: https://www.elastic.co/guide/en/security/master/binary-executed-from-shared-memory-directory.html missing:tag:Non-persistentStorage missing:tag:T1005 missing:tag:T1048 missing:tag:T1053.007 missing:tag:T1070.003 missing:tag:T1071.001 missing:tag:T1491 missing:tag:T1546.004 missing:tag:T1552.003 missing:tag:T1567 missing:tag:T1573 missing:tag:T1609 missing:tag:T1610

#611 opened Feb 20, 2023 by timb-machine

[Intel]: https://github.com/sqall01/LSMS missing:tag:Non-persistentStorage missing:tag:T1003.008 missing:tag:T1005 missing:tag:T1007 missing:tag:T1048 missing:tag:T1053.003 missing:tag:T1053.006 missing:tag:T1070.004 missing:tag:T1071.001 missing:tag:T1078.003 missing:tag:T1098.004 missing:tag:T1543.002 missing:tag:T1567 missing:tag:T1573 missing:tag:T1574.006 missing:tag:T1620

#610 opened Jan 22, 2023 by timb-machine

Previous 1 2 3 4 5 6 7 Next

Previous Next

ProTip! Updated in the last three days: updated:>2024-12-28.

Provide feedback

Saved searches

Use saved searches to filter your results more quickly