f0wl

MalwareLab_VM-Setup. Setup scripts for my Malware Analysis VMs

ezuri_unpack. Simple unpacking script for Ezuri ELF Crypter

blackCatConf. Configuration Extractor for BlackCat Ransomware

zipExec_unpack. Unpacking tool for the zipExec Crypter

yara_rules. A collection of yara rules that I created during analysis / for blog posts

configwalker. Netwalker Ransomware Config Extractor

REconfig-linux. Configuration Extractor for the Linux variant of REvil Ransomware

danaConfig. Static configuration extractor for DanaBot (main component)

configzone. Configuration Extractor for Warzone RAT

pidrivr. :car: :satellite: A wardriving companion featuring the RaspberryPi 3B+ and PaPiRus e-paper Display

inMediasREs. A static analysis tool built with Go and TermUI

fakematter. Command&Control emulator for BlackMatter ransomware (ESXi/Linux)

deICEr. A crude Config Extractor for IcedID second stage Loaders (Zero2Auto Week 0x02)

avaddon-strings. String Decrypter for Avaddon Ransomware

hanconfig. Static configuration extractor for Hancitor Loader

huan_unpack. Unpacking script for the Huan PE Crypter

configmatter-windows. Configuration Extractor for the Windows variant of BlackMatter Ransomware

de4dot. .NET deobfuscator and unpacker.

Detection. YARA

configmatter-linux. Static configuration extractor for the ESXI/Linux variant of BlackMatter Ransomware

f0wl. Special Repository for Account Readme