├── .gitignore ├── TRR240101 ├── trr240101_iocs.csv ├── trr240101_iocs.txt └── trr240101_yara.yar ├── TRR240201 ├── trr240201_iocs.csv ├── trr240201_iocs.txt └── trr240201_yara.yar ├── TRR240301 └── trr240301_iocs.txt ├── TRR240401 ├── trr240401_iocs.csv ├── trr240401_iocs.txt └── trr240401_yara.yar ├── TRR240402 ├── trr240402_iocs.csv ├── trr240402_iocs.txt ├── trr240402_yara-template.yar └── trr240402_yara.yar ├── TRR240501 ├── trr240501_iocs.csv ├── trr240501_iocs.txt └── trr240501_yara.yar ├── TRR240601 ├── trr240601_iocs.csv ├── trr240601_iocs.txt └── trr240601_yara.yar ├── TRR240701 ├── trr240701_i.csv └── trr240701_i.txt ├── TRR240801 ├── trr240801_iocs.csv ├── trr240801_iocs.txt ├── trr240801_snippet.py ├── trr240801_suricata.rules └── trr240801_yara.yar ├── TRR250201 ├── trr250201_iocs.csv ├── trr250201_iocs.txt ├── trr250201_suricata.rules └── trr250201_yara.yar ├── TRR250401 ├── trr250401_iocs.csv ├── trr250401_iocs.txt ├── trr250401_yara.yar └── update2506 │ ├── trr250401_update2506_iocs.csv │ ├── trr250401_update2506_iocs.txt │ └── trr250401_update2506_yara.yar ├── TRR250601 ├── trr250601_iocs.csv ├── trr250601_iocs.txt └── trr250601_yara.yar ├── TRR250801 ├── trr250801_iocs.csv ├── trr250801_iocs.txt └── trr250801_yara.yar ├── TRR251001 ├── trr251001_iocs.csv ├── trr251001_iocs.txt └── trr251001_yara.yar ├── abused_certs_hijackloader ├── iocs.csv └── iocs.txt ├── hl_public_reports_master.rules ├── hl_public_reports_master.yar ├── iv_lastauthserverused_js └── 20240122_lastauthserverused_js.txt ├── packxor ├── packxor_iocs.csv ├── packxor_iocs.txt ├── packxor_yara.yar └── unpacker_packXOR.py └── raspberryrobin ├── 20240403_raspberryrobin_iocs.txt └── 20240403_raspberryrobin_yara.yar /.gitignore: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HarfangLab/iocs/HEAD/.gitignore -------------------------------------------------------------------------------- /TRR240101/trr240101_iocs.csv: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HarfangLab/iocs/HEAD/TRR240101/trr240101_iocs.csv -------------------------------------------------------------------------------- /TRR240101/trr240101_iocs.txt: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HarfangLab/iocs/HEAD/TRR240101/trr240101_iocs.txt -------------------------------------------------------------------------------- /TRR240101/trr240101_yara.yar: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HarfangLab/iocs/HEAD/TRR240101/trr240101_yara.yar -------------------------------------------------------------------------------- /TRR240201/trr240201_iocs.csv: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HarfangLab/iocs/HEAD/TRR240201/trr240201_iocs.csv -------------------------------------------------------------------------------- /TRR240201/trr240201_iocs.txt: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HarfangLab/iocs/HEAD/TRR240201/trr240201_iocs.txt -------------------------------------------------------------------------------- /TRR240201/trr240201_yara.yar: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HarfangLab/iocs/HEAD/TRR240201/trr240201_yara.yar -------------------------------------------------------------------------------- /TRR240301/trr240301_iocs.txt: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HarfangLab/iocs/HEAD/TRR240301/trr240301_iocs.txt -------------------------------------------------------------------------------- /TRR240401/trr240401_iocs.csv: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HarfangLab/iocs/HEAD/TRR240401/trr240401_iocs.csv -------------------------------------------------------------------------------- /TRR240401/trr240401_iocs.txt: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HarfangLab/iocs/HEAD/TRR240401/trr240401_iocs.txt -------------------------------------------------------------------------------- /TRR240401/trr240401_yara.yar: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HarfangLab/iocs/HEAD/TRR240401/trr240401_yara.yar -------------------------------------------------------------------------------- /TRR240402/trr240402_iocs.csv: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HarfangLab/iocs/HEAD/TRR240402/trr240402_iocs.csv -------------------------------------------------------------------------------- /TRR240402/trr240402_iocs.txt: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HarfangLab/iocs/HEAD/TRR240402/trr240402_iocs.txt -------------------------------------------------------------------------------- /TRR240402/trr240402_yara-template.yar: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HarfangLab/iocs/HEAD/TRR240402/trr240402_yara-template.yar -------------------------------------------------------------------------------- /TRR240402/trr240402_yara.yar: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HarfangLab/iocs/HEAD/TRR240402/trr240402_yara.yar -------------------------------------------------------------------------------- /TRR240501/trr240501_iocs.csv: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HarfangLab/iocs/HEAD/TRR240501/trr240501_iocs.csv -------------------------------------------------------------------------------- /TRR240501/trr240501_iocs.txt: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HarfangLab/iocs/HEAD/TRR240501/trr240501_iocs.txt -------------------------------------------------------------------------------- /TRR240501/trr240501_yara.yar: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HarfangLab/iocs/HEAD/TRR240501/trr240501_yara.yar -------------------------------------------------------------------------------- /TRR240601/trr240601_iocs.csv: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HarfangLab/iocs/HEAD/TRR240601/trr240601_iocs.csv -------------------------------------------------------------------------------- /TRR240601/trr240601_iocs.txt: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HarfangLab/iocs/HEAD/TRR240601/trr240601_iocs.txt -------------------------------------------------------------------------------- /TRR240601/trr240601_yara.yar: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HarfangLab/iocs/HEAD/TRR240601/trr240601_yara.yar -------------------------------------------------------------------------------- /TRR240701/trr240701_i.csv: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HarfangLab/iocs/HEAD/TRR240701/trr240701_i.csv -------------------------------------------------------------------------------- /TRR240701/trr240701_i.txt: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HarfangLab/iocs/HEAD/TRR240701/trr240701_i.txt -------------------------------------------------------------------------------- /TRR240801/trr240801_iocs.csv: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HarfangLab/iocs/HEAD/TRR240801/trr240801_iocs.csv -------------------------------------------------------------------------------- /TRR240801/trr240801_iocs.txt: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HarfangLab/iocs/HEAD/TRR240801/trr240801_iocs.txt -------------------------------------------------------------------------------- /TRR240801/trr240801_snippet.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HarfangLab/iocs/HEAD/TRR240801/trr240801_snippet.py -------------------------------------------------------------------------------- /TRR240801/trr240801_suricata.rules: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HarfangLab/iocs/HEAD/TRR240801/trr240801_suricata.rules -------------------------------------------------------------------------------- /TRR240801/trr240801_yara.yar: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HarfangLab/iocs/HEAD/TRR240801/trr240801_yara.yar -------------------------------------------------------------------------------- /TRR250201/trr250201_iocs.csv: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HarfangLab/iocs/HEAD/TRR250201/trr250201_iocs.csv -------------------------------------------------------------------------------- /TRR250201/trr250201_iocs.txt: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HarfangLab/iocs/HEAD/TRR250201/trr250201_iocs.txt -------------------------------------------------------------------------------- /TRR250201/trr250201_suricata.rules: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HarfangLab/iocs/HEAD/TRR250201/trr250201_suricata.rules -------------------------------------------------------------------------------- /TRR250201/trr250201_yara.yar: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HarfangLab/iocs/HEAD/TRR250201/trr250201_yara.yar -------------------------------------------------------------------------------- /TRR250401/trr250401_iocs.csv: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HarfangLab/iocs/HEAD/TRR250401/trr250401_iocs.csv -------------------------------------------------------------------------------- /TRR250401/trr250401_iocs.txt: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HarfangLab/iocs/HEAD/TRR250401/trr250401_iocs.txt -------------------------------------------------------------------------------- /TRR250401/trr250401_yara.yar: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HarfangLab/iocs/HEAD/TRR250401/trr250401_yara.yar -------------------------------------------------------------------------------- /TRR250401/update2506/trr250401_update2506_iocs.csv: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HarfangLab/iocs/HEAD/TRR250401/update2506/trr250401_update2506_iocs.csv -------------------------------------------------------------------------------- /TRR250401/update2506/trr250401_update2506_iocs.txt: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HarfangLab/iocs/HEAD/TRR250401/update2506/trr250401_update2506_iocs.txt -------------------------------------------------------------------------------- /TRR250401/update2506/trr250401_update2506_yara.yar: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HarfangLab/iocs/HEAD/TRR250401/update2506/trr250401_update2506_yara.yar -------------------------------------------------------------------------------- /TRR250601/trr250601_iocs.csv: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HarfangLab/iocs/HEAD/TRR250601/trr250601_iocs.csv -------------------------------------------------------------------------------- /TRR250601/trr250601_iocs.txt: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HarfangLab/iocs/HEAD/TRR250601/trr250601_iocs.txt -------------------------------------------------------------------------------- /TRR250601/trr250601_yara.yar: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HarfangLab/iocs/HEAD/TRR250601/trr250601_yara.yar -------------------------------------------------------------------------------- /TRR250801/trr250801_iocs.csv: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HarfangLab/iocs/HEAD/TRR250801/trr250801_iocs.csv -------------------------------------------------------------------------------- /TRR250801/trr250801_iocs.txt: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HarfangLab/iocs/HEAD/TRR250801/trr250801_iocs.txt -------------------------------------------------------------------------------- /TRR250801/trr250801_yara.yar: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HarfangLab/iocs/HEAD/TRR250801/trr250801_yara.yar -------------------------------------------------------------------------------- /TRR251001/trr251001_iocs.csv: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HarfangLab/iocs/HEAD/TRR251001/trr251001_iocs.csv -------------------------------------------------------------------------------- /TRR251001/trr251001_iocs.txt: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HarfangLab/iocs/HEAD/TRR251001/trr251001_iocs.txt -------------------------------------------------------------------------------- /TRR251001/trr251001_yara.yar: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HarfangLab/iocs/HEAD/TRR251001/trr251001_yara.yar -------------------------------------------------------------------------------- /abused_certs_hijackloader/iocs.csv: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HarfangLab/iocs/HEAD/abused_certs_hijackloader/iocs.csv -------------------------------------------------------------------------------- /abused_certs_hijackloader/iocs.txt: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HarfangLab/iocs/HEAD/abused_certs_hijackloader/iocs.txt -------------------------------------------------------------------------------- /hl_public_reports_master.rules: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HarfangLab/iocs/HEAD/hl_public_reports_master.rules -------------------------------------------------------------------------------- /hl_public_reports_master.yar: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HarfangLab/iocs/HEAD/hl_public_reports_master.yar -------------------------------------------------------------------------------- /iv_lastauthserverused_js/20240122_lastauthserverused_js.txt: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HarfangLab/iocs/HEAD/iv_lastauthserverused_js/20240122_lastauthserverused_js.txt -------------------------------------------------------------------------------- /packxor/packxor_iocs.csv: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HarfangLab/iocs/HEAD/packxor/packxor_iocs.csv -------------------------------------------------------------------------------- /packxor/packxor_iocs.txt: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HarfangLab/iocs/HEAD/packxor/packxor_iocs.txt -------------------------------------------------------------------------------- /packxor/packxor_yara.yar: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HarfangLab/iocs/HEAD/packxor/packxor_yara.yar -------------------------------------------------------------------------------- /packxor/unpacker_packXOR.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HarfangLab/iocs/HEAD/packxor/unpacker_packXOR.py -------------------------------------------------------------------------------- /raspberryrobin/20240403_raspberryrobin_iocs.txt: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HarfangLab/iocs/HEAD/raspberryrobin/20240403_raspberryrobin_iocs.txt -------------------------------------------------------------------------------- /raspberryrobin/20240403_raspberryrobin_yara.yar: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/HarfangLab/iocs/HEAD/raspberryrobin/20240403_raspberryrobin_yara.yar --------------------------------------------------------------------------------