fabrimagic72 / malware-samples

A collection of malware samples caught by several honeypots i manage

malware-samples

A collection of malware samples caught by several honeypots i handle worldwide

ATTENTION: This repository contains actual malware, do not execute any of these files on your pc unless you know exactly what you are doing.

All of the malware samples contained in this repository has been collected by several honeypots installed on different locations all over the world. This is the result of a distributed honeypot project i am developing with the help of all of those who want to collaborate. Malware with a generic name such as MD5 value or smbxxx.tmp were not detected as malware by virustotal at the moment of the upload, but this does not mean it's not malware. please feel free to download, analyze and reverse all the samples in this repository but please let me know the results of your investigation. All 7z and zip files are password protected and the password is "infected" (without quotes).

Thanks for you interest.

Fabrizio Monaco

twitter: @fabrimagic

malware-samples's Issues

How I run ransomware Petya?

I am working on a research project of my MPhil degree. I have got clone of this repo, but not sure how may I execute that on my staging environment in a virtual machine (Windows 10 x64).

Please guide. I would really appreciate that.

how to run

Which file do you run, and how do you run it.

Wrong password on particular file

This one: https://github.com/fabrimagic72/malware-samples/tree/master/Bitcoin%20miners

The "infected" password doesn't work.

Is it destructive?

Does the ransomware here destructive for Windows virtual machines?

What is the password of the zip files?

Can't extract any files. A password is required to extract contents.

An error has occured while extracting files.

I get this error when i try to extract the zips in any given folder. What might be the problem?
I provide password when prompted for, but still it says the same error.

locky

....

How do you run this

I added the .exe suffix to the unzipped file and execute it. I see a few processes start up, but no files are encrypted.
I am running this on a virtualbox with no network connection

GrandCrab should be named GandCrab

I did some searches on the sample "Ransomware\GrandCrab", and I think there's a typo in its name. This malware sample shows up in VirusTotal and media posts as "GandCrab".

assistance

Hello @fabrimagic72 can you teach me how to use it??