Writing your own Analyzer for the Open-Source Multi-Scanner IRMA
Tags
attack-pattern: Data Model Code Repositories - T1213.003 Code Repositories - T1593.003 Javascript - T1059.007 Malware - T1587.001 Malware - T1588.001 Python - T1059.006 Server - T1583.004 Server - T1584.004 Software - T1592.002 Ssh - T1021.004 Tool - T1588.002 Sudo - T1169
Show in Graph
Common Information
Type Value
UUID cbcb0319-b8a5-4b6c-8c7e-2993558fb01d
Fingerprint fe06da591ee581c4
Analysis status DONE
Considered CTI value 0
Text language
Published Feb. 23, 2015, midnight
Added to db Jan. 18, 2023, 8:42 p.m.
Last updated Nov. 17, 2024, 11:40 p.m.
Headline Writing your own Analyzer for the Open-Source Multi-Scanner IRMA
Title Writing your own Analyzer for the Open-Source Multi-Scanner IRMA
Detected Hints/Tags/Attributes 63/1/45
Source URLs
Redirection Url
Details Source https://blog.quarkslab.com/writing-our-own-analyzer-for-the-open-source-multi-scanner-irma.html
URL Provider
Details Provider Source level domain
Details quarkslab.com blog.quarkslab.com
Attributes
Details Type #Events CTI Value
Details Domain 45 
hack.lu
Details Domain 1 
vagrantcloud.com
Details Domain 2 
dl.bintray.com
Details Domain 3 
ftp.debian.org
Details Domain 1 
irma.rftd.org
Details Domain 4128 
github.com
Details Domain 1 
irma.py
Details Domain 1 
plugin.py
Details Domain 2 
tasks.py
Details Domain 1 
mark0.net
Details Domain 1 
tridupdate.zip
Details Domain 1 
tridupdate.py
Details Domain 1 
trid.py
Details Domain 1 
output.name
Details Domain 1 
download.comodo.com
Details File 2 
dl.bin
Details File 1 
irma.py
Details File 3 
plugin.py
Details File 61 
__init__.py
Details File 144 
requirements.txt
Details File 4 
plugin.pl
Details File 2 
tasks.py
Details File 1 
trid_linux.zip
Details File 1 
tridupdate.zip
Details File 1 
tridupdate.py
Details File 1 
trid.py
Details File 1 
lib.pl
Details File 1 
run_module.py
Details File 7 
details.html
Details File 1 
item.url
Details Github username 6 
quarkslab
Details sha1 1 
1d7dbc513060f6953e50e65f0fadac67d118745c
Details IPv4 2 
172.16.1.30
Details Url 1 
https://dl.bintray.com/mitchellh/vagrant/vagrant_1.7.2_x86_64.deb
Details Url 2 
http://ftp.debian.org/debian
Details Url 1 
https://github.com/quarkslab/irma-ansible
Details Url 1 
https://github.com/quarkslab/irma-frontend
Details Url 1 
https://github.com/quarkslab/irma-brain
Details Url 1 
https://github.com/quarkslab/irma-probe
Details Url 1 
http://172.16.1.30/_api
Details Url 1 
http://mark0.net/download/trid_linux.zip
Details Url 1 
http://mark0.net/download/tridupdate.zip
Details Url 1 
https://raw.githubusercontent.com/quarkslab/irma-probe/1d7dbc513060f6953e50e65f0fadac67d118745c/modules/metadata/trid/trid.py
Details Url 1 
http://download.comodo.com/cavmgl/download/installs/1000/standalone/cav-linux_1.1.268025-1_amd64.deb
Details Url 1 
http://download.comodo.com/av/updates58/sigs/bases/bases.cav