hub / github.com/eSentire/iocs
github.com/eSentire/iocs @main
Chat with this repo
196 symbols
544 edges
29 files
19 documented · 10%
● updated 43d ago★ 61
Browse by type
What it actually does AI analysis from the code graph — generated when you open this
loading…
README
Threat Intelligence
Indicators, malware configuration extractors, and Proof-of-Concepts from eSentire's Threat Response Unit (TRU) team.
TRU publishes security advisories, blogs, reports, industry publications and webinars based on its original research and the insights driven through proactive threat hunts.
Dive deeper into TRU's threat intelligence resources below.
Core symbols most depended-on inside this repo
signed_to_int32
called by 26
EarthKapre/EarthKapre-IDA.py
decrypt_string
called by 11
DarkCloud/DarkCloud.py
rand
called by 9
EarthKapre/EarthKapre-Stage2-C2.py
quarter_round
called by 8
LummaC2/Lumma.py
generate_random_string
called by 8
EarthKapre/EarthKapre-Stage2-C2.py
print_hex_dump
called by 7
Sinobi/curve-25519+aes-128-ctr.py
add32
called by 5
LummaC2/Lumma.py
close
called by 5
Interlock/interlock_backdoor_simulate_client.py
Shape
Languages
Python81%
TypeScript10%
C#9%
Modules by API surface
LummaC2/Lumma.py22 symbols
DEV#POPPER/DEV#STOPPER.js20 symbols
Koi/emulate_c2.py15 symbols
Pure Crypter/PureCrypterPunisher/Program.cs14 symbols
Interlock/interlock_backdoor_simulate_client.py11 symbols
EarthKapre/EarthKapre-IDA.py11 symbols
Stealc/stealc_hwid.py9 symbols
EarthKapre/EarthKapre-Stage2-Payload-Decrypter.py9 symbols
EarthKapre/EarthKapre-Stage2-C2.py9 symbols
DarkCloud/DarkCloud.py9 symbols
DarkCloud/DarkCloud-IDA.py9 symbols
ShadowCoil/shadowcoil_unpacker.py7 symbols