APT38-DYEPACK

KO | EN

gitlite — search

#python #java #python3 #arduino #golang #machine-learning #rust #html #flask #javascript #seismology #nodejs

★ 23 Open GitHub ↗

Reverse engineered APT38 DYEPACK samples used to empty SWIFT banking servers. Use caution when handling live binaries.

// repository documentation

Was this content helpful?

★ 0 (0 ratings)

# APT38 DYEPACK FRAMEWORK
Reverse engineered using IDA Pro + Ghidra.
Live binaries are in /sample/binaries.zip

```
Password: infected
```

### DISCLAIMER
Samples are for malware research ONLY. Do not use decompiled versions of the framework to cause harm, I am not responsible for any damages caused. Handle live binaries with care, and use a VM for any dynamic analysis.

![alt text](https://raw.githubusercontent.com/649/APT38-DYEPACK/master/img/SWIFT_Interception.png)
![alt text](https://raw.githubusercontent.com/649/APT38-DYEPACK/master/img/Decompiled_Printer_detection.png)
![alt text](https://raw.githubusercontent.com/649/APT38-DYEPACK/master/img/Destroying_Transaction_Records.png)
![alt text](https://raw.githubusercontent.com/649/APT38-DYEPACK/master/img/Evasion.png)
![alt text](https://raw.githubusercontent.com/649/APT38-DYEPACK/master/img/Interesting_Strings.png)
![alt text](https://raw.githubusercontent.com/649/APT38-DYEPACK/master/img/Printer_detection.png)
![alt text](https://raw.githubusercontent.com/649/APT38-DYEPACK/master/img/SQL_Statements.png)

APT38-DYEPACK

Explore Similar Repositories

Was this content helpful?

Recent Feedback

Download README