Commit Graph

62 Commits

Author SHA1 Message Date
Tressos-Aristomenis 072c84f48d 64-bit SDBM hash function with constant 65599 2024-01-20 04:24:40 +02:00
Still Hsu f5e006c062 Add TOnePipeShell hashing algo 2024-01-19 13:55:32 +08:00
joaogodinho 1a7e8cb7a7 Add SmokeLoader ROL8 XOR 2024-01-18 10:18:46 +00:00
Jack Halon 2c3bdad9c8 Fix Type Error from pytest in brc4_joaat.py 2023-12-03 17:22:38 -06:00
Jack Halon 93b975f27b Add JOAAT Hash Algorithm used by BRC4 2023-12-03 14:02:31 -06:00
jershmagersh 434b837250 Fixing for byte strings as input. 2023-10-20 11:25:48 -04:00
jershmagersh 79d724b4fa Adding algorithm for adding 65599 and multiplying the result. 2023-10-20 11:15:45 -04:00
l3fdb33f 6f5adb9ab4 Adding algorithm seen in CS Loader 2023-10-12 14:37:37 -04:00
Hugo Caron 3599253d74 Add hash algorithm for unknown Mythic agent 2023-08-09 21:47:59 +02:00
3c7 45af1e605e Make flake8 happy. 2023-06-26 16:44:21 +02:00
3c7 de10ab6f04 Added ror8_add_xor variant 2023-06-26 16:24:26 +02:00
peter Gurney 8be418e128 added d0nut 2023-06-13 14:20:04 +01:00
herrcore dd3d6084af added shr1_shl7_2326 2023-04-12 21:44:38 -04:00
Still Hsu d56e5dede8 Add DeedRAT export name hashing algo
Signed-off-by: Still Hsu <dev@stillu.cc>
2023-03-16 09:29:50 +08:00
Still Hsu 2dd5f9f8aa Add DeedRAT hashing algo
Signed-off-by: Still Hsu <dev@stillu.cc>
2023-03-15 17:30:47 +08:00
herrcore a7029c85df fixed naming convention 2023-02-01 20:35:45 -05:00
dodo-sec addfe263c3 Create paradise-murmurhash3.py 2023-02-02 00:56:34 +00:00
GRX78FL 47ea8e28ac Added DJB2 variant of Vohuk randomware 2022-12-21 12:45:03 -05:00
Quang Nguyen a677a478a5 add Win32/Tinba api hashing algorithm 2022-12-07 14:55:50 +07:00
Adam Podlosky c3e6e9c399 Add Blister loader v2 API hash 2022-10-13 22:19:50 -06:00
ThreatLabz 6375553569 add danabot api hashing algorithm 2022-10-07 13:14:06 -07:00
Alexander Klute f5985d705b cleanup file
removed copy/paste license from other project
2022-09-27 17:31:06 +02:00
Philip Okoh 70f2ba8d10 Added new hash algorithm for cryptobot 2022-09-27 09:58:00 -04:00
Daniel Moder 6a6a16d17c Added Conti hashing algorithm with seed 0x5B2D 2022-09-22 12:37:23 -07:00
Daniel Moder 2690629bf0 Added Conti hashing algorithm with seed 0xB801FCDA 2022-09-18 12:50:19 -07:00
herrcore 24e3a7ef39 added lockbit3 process hash algo 2022-07-24 17:19:31 -04:00
herrcore 69e2bee015 updated Lockbit 3.0 algo 2022-07-14 17:34:12 -04:00
herrcore 0771ec9fff added Lockbit 3.0 algo with a seed of 0x0 2022-07-14 16:49:08 -04:00
Leander Kohler 65f30aa483 Add CRC32 MPEG-2 algorithm 2022-07-01 15:39:39 +02:00
herrcore b416b48597 updated crc32_bzip2 with table gen algorithm 2022-04-25 20:24:41 -04:00
herrcore b2e707a416 sped up crc32_bzip2 by pre-calculating crc32 table 2022-04-25 19:09:16 -04:00
CryptEncrypt 7631bd002a add conti murmur3 hash 2022-03-22 11:48:53 -07:00
CryptEncrypt 8fd2872b86 add conti murmur3 hash 2022-03-22 11:35:35 -07:00
CryptEncrypt a28ca55008 add conti murmur3 hash 2022-03-22 11:15:49 -07:00
CryptEncrypt 014f64bb00 Add Murmur3 hashing for Conti 2022-03-22 10:35:49 -07:00
Fabian Wosar 91266193c4 Dropped djb2 implementation 2022-03-09 23:35:36 +00:00
Fabian Wosar 4b125b0a19 Added djb2 hash used by Nokoyawa 2022-03-09 22:29:43 +00:00
herrcore cbd63bdb6b added conti hash with seed 0xe9ff0077 2022-02-23 15:44:40 -05:00
Ryan Tancibok 3393b444aa Added shr2_shl5_xor variation with modified initialization constant 0xc4d5a97a from Stealbit malware 2022-01-11 23:29:46 -05:00
herrcore 2d48bb68b2 added hash crc64_ecma_182 2021-12-16 19:30:04 -05:00
herrcore d6b1f31bb8 lol 2022 I'm in the future! 2021-11-16 14:55:41 -05:00
herrcore 07ca5565f6 added emotet hash algo 2021-11-16 14:16:44 -05:00
Michael Gillespie e394829317 ROR13 and ADD using a negative seed
As seen in BlackMatter 3.0.
2021-10-27 16:03:13 -05:00
herrcore 013ffb0d52 added add_hiword_add_lowword hash
this hash is used in darkside ransomware api resolving
2021-10-25 13:13:23 -04:00
jesko 2eb1353afa adds REvil API hashing algorithm 2021-10-23 18:09:00 +02:00
Myrtus 0x0 3ae28ed4d1 flake8 compatability 2021-10-22 13:37:03 -07:00
Myrtus 0x0 06bd8db16f added support for current zloader bot 2021-10-22 13:30:41 -07:00
herrcore e3c744de5d added algorithm for guloader with xor 0x3C389ABC 2021-10-17 17:50:29 -04:00
Anthony Printup 5b635b125e Added 64-bit variants for FNV-1 and FNV-1a 2021-10-15 07:32:54 +02:00
herrcore 3190e72ca9 fixed description of add1501_shl5 2021-10-06 16:11:10 -04:00