Skip to content
This repository was archived by the owner on Oct 13, 2025. It is now read-only.

pan-unit42/iocs

BranchesTags

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

1,067 Commits
AcidBox
AcidBox
 
 
ArtraDownloader
ArtraDownloader
 
 
BazarCall
BazarCall
 
 
CAPTCHA_Protected_Phishing
CAPTCHA_Protected_Phishing
 
 
COVID-19 IOCs
COVID-19 IOCs
 
 
DanaBotV4
DanaBotV4
 
 
Darkside
Darkside
 
 
DearCry
DearCry
 
 
Egregor
Egregor
 
 
Emotet-thread-hijacking
Emotet-thread-hijacking
 
 
Gamaredon
Gamaredon
 
 
Redaman_banking_malware
Redaman_banking_malware
 
 
Ryuk
Ryuk
 
 
Shade_ransomware
Shade_ransomware
 
 
SolarStorm
SolarStorm
 
 
TA551
TA551
 
 
Trickbot
Trickbot
 
 
Valak
Valak
 
 
WebMonitor
WebMonitor
 
 
agent_tesla
agent_tesla
 
 
agenttesla
agenttesla
 
 
angler
angler
 
 
bitter
bitter
 
 
coinhive
coinhive
 
 
cryptocurrency_miners
cryptocurrency_miners
 
 
dearjoohn
dearjoohn
 
 
diamondfox
diamondfox
 
 
emotet/sha256-hashes
emotet/sha256-hashes
 
 
escelar
escelar
 
 
ewind
ewind
 
 
fake_Flash_updates
fake_Flash_updates
 
 
gorgon
gorgon
 
 
henbox
henbox
 
 
hidenseek
hidenseek
 
 
iocs
iocs
 
 
iran_linked_operators
iran_linked_operators
 
 
ispy
ispy
 
 
keybase
keybase
 
 
krbanker
krbanker
 
 
lotusblossom
lotusblossom
 
 
luminositylink
luminositylink
 
 
macro_loader
macro_loader
 
 
magnitude
magnitude
 
 
mirai
mirai
 
 
notepadcase
notepadcase
 
 
orcus
orcus
 
 
pb40
pb40
 
 
powerstager
powerstager
 
 
prince_of_persia
prince_of_persia
 
 
psencmds
psencmds
 
 
pwobot
pwobot
 
 
ramdo
ramdo
 
 
rarog
rarog
 
 
rat_nest
rat_nest
 
 
samsa
samsa
 
 
seaduke
seaduke
 
 
silverterrier
silverterrier
 
 
squirtdanger
squirtdanger
 
 
stix2-reports
stix2-reports
 
 
xHunt
xHunt
 
 
.DS_Store
.DS_Store
 
 
2024-02-27-Akira-Ransomware.json
2024-02-27-Akira-Ransomware.json
 
 
4457_of_4633_scam_js_urls_in_pandb.txt
4457_of_4633_scam_js_urls_in_pandb.txt
 
 
6908_of_8712_coin_mining_urls_in_pandb.txt
6908_of_8712_coin_mining_urls_in_pandb.txt
 
 
Appcall_rename_api
Appcall_rename_api
 
 
Conti_IOCs.txt
Conti_IOCs.txt
 
 
DeObfuscate_Opaque
DeObfuscate_Opaque
 
 
Defray777_IOC.text
Defray777_IOC.text
 
 
Dharma_IOCs.text
Dharma_IOCs.text
 
 
DoppelPaymer
DoppelPaymer
 
 
DoppelPaymer_IOCs.text
DoppelPaymer_IOCs.text
 
 
Dridex Infection Chain Case Studies
Dridex Infection Chain Case Studies
 
 
GandCrab_REVIL_IOCs.text
GandCrab_REVIL_IOCs.text
 
 
IOC - Unit 42 blog Advanced URL Filtering.txt
IOC - Unit 42 blog Advanced URL Filtering.txt
 
 
IOCs_MaliciousJS.txt
IOCs_MaliciousJS.txt
 
 
LICENSE
LICENSE
 
 
Matrix_IOCs.text
Matrix_IOCs.text
 
 
NetSupportManager
NetSupportManager
 
 
Netwalker_IOCs.text
Netwalker_IOCs.text
 
 
Phobos_IOCs.text
Phobos_IOCs.text
 
 
README.md
README.md
 
 
Skimmer_IOC.txt
Skimmer_IOC.txt
 
 
UA RU IOCs
UA RU IOCs
 
 
WeSteal Hashes.txt
WeSteal Hashes.txt
 
 
Zeppelin_IOCs.text
Zeppelin_IOCs.text
 
 
clop-iocs.text
clop-iocs.text
 
 
decrypt_guloader.py
decrypt_guloader.py
 
 
golang_malware_results.csv
golang_malware_results.csv
 
 
menuPass
menuPass
 
 
venomrat_iocs.csv
venomrat_iocs.csv
 
 
watchdog-cryptomining-operation.json
watchdog-cryptomining-operation.json
 
 

Repository files navigation

Unit 42 iocs

This repository contains indicators related to Unit 42 Public Reports.

About

Indicators from Unit 42 Public Reports

Resources

Readme

License

MIT license
Activity
Custom properties

Stars

726 stars

Watchers

139 watching

Forks

151 forks
Report repository

Releases

No releases published

Packages

 
 
 

Contributors

Languages