The Cybersight Security Malware Samples repository is a curated collection of malicious software specimens for cybersecurity research and analysis. This repository provides security professionals with real-world samples to study malware behavior, develop detection techniques, and enhance defensive strategies.
- Comprehensive collection of real malware samples
- Password-protected archives (password: "infected") for safe handling
- Categorized by malware type (RATs, ransomware, trojans)
- Detailed descriptions of each sample
- Regular updates with new specimens
- Research-focused organization
Important Note: All samples are contained within password-protected archives and should only be handled in secure, isolated environments. The attack simulations and behaviors described are real malware capabilities - extreme caution is required when working with these samples.
- 888RAT - Advanced remote control capabilities
- DarkComet - Comprehensive surveillance features
- Nanocore - Robust feature set for system manipulation
- 20+ additional RAT variants
- WannaCry - Global epidemic ransomware
- LockBit - Ransomware-as-a-service platform
- Petya - Master boot record encryptor
- 20+ additional ransomware variants
- AgentTesla - Advanced information stealer
- QakBot - Persistent banking trojan
- FakeAV - Rogue antivirus malware
- 20+ additional trojan variants
- All samples password-protected ("infected")
- Archived in RAR format for additional security
- Detailed metadata included for each sample
- Regular integrity checks performed
- Use isolated virtual machines
- Disable network connectivity
- Employ memory-only analysis tools
- Utilize sandbox environments
- Virtualization software (VMware, VirtualBox)
- Archive utility supporting RAR (WinRAR, 7-Zip)
- Isolated laboratory environment
- Malware analysis tools
-
Clone the repository:
git clone https://github.com/cybersight/malware-samples.git cd malware-samples
-
Extract samples:
- Use password "infected" for all archives
- Only extract in secure environments
-
Analyze samples:
- Use appropriate analysis tools
- Maintain strict isolation protocols
- Never execute on production systems
- Critical Warning: These samples are live malware and will infect unprotected systems
- Always work in isolated virtual environments
- Never analyze samples on internet-connected systems
- Use dedicated research machines when possible
- Follow all organizational security policies
This project is licensed under the GNU General Public License (GPL). This means you are free to:
- Use the samples for research purposes
- Study the malware behavior
- Develop detection and prevention mechanisms
The full license text is included in the repository.
Cybersight Security is a leading provider of cybersecurity solutions, helping organizations protect their digital assets against evolving threats. Our Malware Samples Repository is part of our commitment to security research and education.
Disclaimer: This repository contains real malicious software. Cybersight Security is not responsible for any damage caused by improper handling of these samples. Use exclusively for legitimate research purposes in controlled environments. By accessing this repository, you assume all responsibility for safe handling of these materials.