Tressos-Aristomenis
|
072c84f48d
|
64-bit SDBM hash function with constant 65599
|
2024-01-20 04:24:40 +02:00 |
|
Still Hsu
|
f5e006c062
|
Add TOnePipeShell hashing algo
|
2024-01-19 13:55:32 +08:00 |
|
joaogodinho
|
1a7e8cb7a7
|
Add SmokeLoader ROL8 XOR
|
2024-01-18 10:18:46 +00:00 |
|
Jack Halon
|
2c3bdad9c8
|
Fix Type Error from pytest in brc4_joaat.py
|
2023-12-03 17:22:38 -06:00 |
|
Jack Halon
|
93b975f27b
|
Add JOAAT Hash Algorithm used by BRC4
|
2023-12-03 14:02:31 -06:00 |
|
jershmagersh
|
434b837250
|
Fixing for byte strings as input.
|
2023-10-20 11:25:48 -04:00 |
|
jershmagersh
|
79d724b4fa
|
Adding algorithm for adding 65599 and multiplying the result.
|
2023-10-20 11:15:45 -04:00 |
|
l3fdb33f
|
6f5adb9ab4
|
Adding algorithm seen in CS Loader
|
2023-10-12 14:37:37 -04:00 |
|
Hugo Caron
|
3599253d74
|
Add hash algorithm for unknown Mythic agent
|
2023-08-09 21:47:59 +02:00 |
|
3c7
|
45af1e605e
|
Make flake8 happy.
|
2023-06-26 16:44:21 +02:00 |
|
3c7
|
de10ab6f04
|
Added ror8_add_xor variant
|
2023-06-26 16:24:26 +02:00 |
|
peter Gurney
|
8be418e128
|
added d0nut
|
2023-06-13 14:20:04 +01:00 |
|
herrcore
|
dd3d6084af
|
added shr1_shl7_2326
|
2023-04-12 21:44:38 -04:00 |
|
Still Hsu
|
d56e5dede8
|
Add DeedRAT export name hashing algo
Signed-off-by: Still Hsu <dev@stillu.cc>
|
2023-03-16 09:29:50 +08:00 |
|
Still Hsu
|
2dd5f9f8aa
|
Add DeedRAT hashing algo
Signed-off-by: Still Hsu <dev@stillu.cc>
|
2023-03-15 17:30:47 +08:00 |
|
herrcore
|
a7029c85df
|
fixed naming convention
|
2023-02-01 20:35:45 -05:00 |
|
dodo-sec
|
addfe263c3
|
Create paradise-murmurhash3.py
|
2023-02-02 00:56:34 +00:00 |
|
GRX78FL
|
47ea8e28ac
|
Added DJB2 variant of Vohuk randomware
|
2022-12-21 12:45:03 -05:00 |
|
Quang Nguyen
|
a677a478a5
|
add Win32/Tinba api hashing algorithm
|
2022-12-07 14:55:50 +07:00 |
|
Adam Podlosky
|
c3e6e9c399
|
Add Blister loader v2 API hash
|
2022-10-13 22:19:50 -06:00 |
|
ThreatLabz
|
6375553569
|
add danabot api hashing algorithm
|
2022-10-07 13:14:06 -07:00 |
|
Alexander Klute
|
f5985d705b
|
cleanup file
removed copy/paste license from other project
|
2022-09-27 17:31:06 +02:00 |
|
Philip Okoh
|
70f2ba8d10
|
Added new hash algorithm for cryptobot
|
2022-09-27 09:58:00 -04:00 |
|
Daniel Moder
|
6a6a16d17c
|
Added Conti hashing algorithm with seed 0x5B2D
|
2022-09-22 12:37:23 -07:00 |
|
Daniel Moder
|
2690629bf0
|
Added Conti hashing algorithm with seed 0xB801FCDA
|
2022-09-18 12:50:19 -07:00 |
|
herrcore
|
24e3a7ef39
|
added lockbit3 process hash algo
|
2022-07-24 17:19:31 -04:00 |
|
herrcore
|
69e2bee015
|
updated Lockbit 3.0 algo
|
2022-07-14 17:34:12 -04:00 |
|
herrcore
|
0771ec9fff
|
added Lockbit 3.0 algo with a seed of 0x0
|
2022-07-14 16:49:08 -04:00 |
|
Leander Kohler
|
65f30aa483
|
Add CRC32 MPEG-2 algorithm
|
2022-07-01 15:39:39 +02:00 |
|
herrcore
|
b416b48597
|
updated crc32_bzip2 with table gen algorithm
|
2022-04-25 20:24:41 -04:00 |
|
herrcore
|
b2e707a416
|
sped up crc32_bzip2 by pre-calculating crc32 table
|
2022-04-25 19:09:16 -04:00 |
|
CryptEncrypt
|
7631bd002a
|
add conti murmur3 hash
|
2022-03-22 11:48:53 -07:00 |
|
CryptEncrypt
|
8fd2872b86
|
add conti murmur3 hash
|
2022-03-22 11:35:35 -07:00 |
|
CryptEncrypt
|
a28ca55008
|
add conti murmur3 hash
|
2022-03-22 11:15:49 -07:00 |
|
CryptEncrypt
|
014f64bb00
|
Add Murmur3 hashing for Conti
|
2022-03-22 10:35:49 -07:00 |
|
Fabian Wosar
|
91266193c4
|
Dropped djb2 implementation
|
2022-03-09 23:35:36 +00:00 |
|
Fabian Wosar
|
4b125b0a19
|
Added djb2 hash used by Nokoyawa
|
2022-03-09 22:29:43 +00:00 |
|
herrcore
|
cbd63bdb6b
|
added conti hash with seed 0xe9ff0077
|
2022-02-23 15:44:40 -05:00 |
|
Ryan Tancibok
|
3393b444aa
|
Added shr2_shl5_xor variation with modified initialization constant 0xc4d5a97a from Stealbit malware
|
2022-01-11 23:29:46 -05:00 |
|
herrcore
|
2d48bb68b2
|
added hash crc64_ecma_182
|
2021-12-16 19:30:04 -05:00 |
|
herrcore
|
d6b1f31bb8
|
lol 2022 I'm in the future!
|
2021-11-16 14:55:41 -05:00 |
|
herrcore
|
07ca5565f6
|
added emotet hash algo
|
2021-11-16 14:16:44 -05:00 |
|
Michael Gillespie
|
e394829317
|
ROR13 and ADD using a negative seed
As seen in BlackMatter 3.0.
|
2021-10-27 16:03:13 -05:00 |
|
herrcore
|
013ffb0d52
|
added add_hiword_add_lowword hash
this hash is used in darkside ransomware api resolving
|
2021-10-25 13:13:23 -04:00 |
|
jesko
|
2eb1353afa
|
adds REvil API hashing algorithm
|
2021-10-23 18:09:00 +02:00 |
|
Myrtus 0x0
|
3ae28ed4d1
|
flake8 compatability
|
2021-10-22 13:37:03 -07:00 |
|
Myrtus 0x0
|
06bd8db16f
|
added support for current zloader bot
|
2021-10-22 13:30:41 -07:00 |
|
herrcore
|
e3c744de5d
|
added algorithm for guloader with xor 0x3C389ABC
|
2021-10-17 17:50:29 -04:00 |
|
Anthony Printup
|
5b635b125e
|
Added 64-bit variants for FNV-1 and FNV-1a
|
2021-10-15 07:32:54 +02:00 |
|
herrcore
|
3190e72ca9
|
fixed description of add1501_shl5
|
2021-10-06 16:11:10 -04:00 |
|