├── Miskip ├── README.md └── miskip_file_extractor.py ├── README.md ├── TajMahal ├── Chaperone │ ├── MaintPol.sln │ └── MaintPol │ │ ├── Crypt.cs │ │ ├── MaintPol.csproj │ │ ├── Properties │ │ └── AssemblyInfo.cs │ │ ├── RegData.cs │ │ ├── ScmAccessRights.cs │ │ ├── ServiceAccessRights.cs │ │ ├── ServiceBootFlag.cs │ │ ├── ServiceControl.cs │ │ ├── ServiceError.cs │ │ ├── ServiceInstaller.cs │ │ ├── ServiceMonitor.cs │ │ ├── ServiceState.cs │ │ └── Tools.cs ├── README.md └── tajmahal_regdata_decrypter.py └── rdp_bot ├── README.md └── rdp_bot_report_v1.pdf /Miskip/README.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/TheEnergyStory/malware_analysis/HEAD/Miskip/README.md -------------------------------------------------------------------------------- /Miskip/miskip_file_extractor.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/TheEnergyStory/malware_analysis/HEAD/Miskip/miskip_file_extractor.py -------------------------------------------------------------------------------- /README.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/TheEnergyStory/malware_analysis/HEAD/README.md -------------------------------------------------------------------------------- /TajMahal/Chaperone/MaintPol.sln: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/TheEnergyStory/malware_analysis/HEAD/TajMahal/Chaperone/MaintPol.sln -------------------------------------------------------------------------------- /TajMahal/Chaperone/MaintPol/Crypt.cs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/TheEnergyStory/malware_analysis/HEAD/TajMahal/Chaperone/MaintPol/Crypt.cs -------------------------------------------------------------------------------- /TajMahal/Chaperone/MaintPol/MaintPol.csproj: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/TheEnergyStory/malware_analysis/HEAD/TajMahal/Chaperone/MaintPol/MaintPol.csproj -------------------------------------------------------------------------------- /TajMahal/Chaperone/MaintPol/Properties/AssemblyInfo.cs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/TheEnergyStory/malware_analysis/HEAD/TajMahal/Chaperone/MaintPol/Properties/AssemblyInfo.cs -------------------------------------------------------------------------------- /TajMahal/Chaperone/MaintPol/RegData.cs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/TheEnergyStory/malware_analysis/HEAD/TajMahal/Chaperone/MaintPol/RegData.cs -------------------------------------------------------------------------------- /TajMahal/Chaperone/MaintPol/ScmAccessRights.cs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/TheEnergyStory/malware_analysis/HEAD/TajMahal/Chaperone/MaintPol/ScmAccessRights.cs -------------------------------------------------------------------------------- /TajMahal/Chaperone/MaintPol/ServiceAccessRights.cs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/TheEnergyStory/malware_analysis/HEAD/TajMahal/Chaperone/MaintPol/ServiceAccessRights.cs -------------------------------------------------------------------------------- /TajMahal/Chaperone/MaintPol/ServiceBootFlag.cs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/TheEnergyStory/malware_analysis/HEAD/TajMahal/Chaperone/MaintPol/ServiceBootFlag.cs -------------------------------------------------------------------------------- /TajMahal/Chaperone/MaintPol/ServiceControl.cs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/TheEnergyStory/malware_analysis/HEAD/TajMahal/Chaperone/MaintPol/ServiceControl.cs -------------------------------------------------------------------------------- /TajMahal/Chaperone/MaintPol/ServiceError.cs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/TheEnergyStory/malware_analysis/HEAD/TajMahal/Chaperone/MaintPol/ServiceError.cs -------------------------------------------------------------------------------- /TajMahal/Chaperone/MaintPol/ServiceInstaller.cs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/TheEnergyStory/malware_analysis/HEAD/TajMahal/Chaperone/MaintPol/ServiceInstaller.cs -------------------------------------------------------------------------------- /TajMahal/Chaperone/MaintPol/ServiceMonitor.cs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/TheEnergyStory/malware_analysis/HEAD/TajMahal/Chaperone/MaintPol/ServiceMonitor.cs -------------------------------------------------------------------------------- /TajMahal/Chaperone/MaintPol/ServiceState.cs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/TheEnergyStory/malware_analysis/HEAD/TajMahal/Chaperone/MaintPol/ServiceState.cs -------------------------------------------------------------------------------- /TajMahal/Chaperone/MaintPol/Tools.cs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/TheEnergyStory/malware_analysis/HEAD/TajMahal/Chaperone/MaintPol/Tools.cs -------------------------------------------------------------------------------- /TajMahal/README.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/TheEnergyStory/malware_analysis/HEAD/TajMahal/README.md -------------------------------------------------------------------------------- /TajMahal/tajmahal_regdata_decrypter.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/TheEnergyStory/malware_analysis/HEAD/TajMahal/tajmahal_regdata_decrypter.py -------------------------------------------------------------------------------- /rdp_bot/README.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/TheEnergyStory/malware_analysis/HEAD/rdp_bot/README.md -------------------------------------------------------------------------------- /rdp_bot/rdp_bot_report_v1.pdf: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/TheEnergyStory/malware_analysis/HEAD/rdp_bot/rdp_bot_report_v1.pdf --------------------------------------------------------------------------------