MalDet

Scan report

kh4sh3i / Ransomware-Samples

Report Rescan
Vulnerability Safe

Could an attacker exploit mistakes in this code?

0 risk score

No issues of this kind were found.

High
0
Medium
0
Low
0

Sources: Bandit, Semgrep, pip-audit

Malicious pattern Critical

Does this code look like it is trying to cause harm?

352 risk score

Strong warning signs. Do not run or install this without a careful review.

High
49
Medium
0
Low
0

Sources: YARA, ClamAV, GuardDog, dependency checker

Findings overview
49 total findings
Likely real
32
Uncertain
5
Likely noise
12

The risk classifier rates every finding for how likely it is to be a real issue. Likely noise still counts, just much less.

What we found, in plain English

This repository has been flagged as extremely dangerous because it contains files that have been identified by security tools as ransomware agents, exploit kits, and malware designed to steal data or encrypt files. The scan found over 49 specific instances of these malicious patterns, with the highest priority alerts coming from ClamAV which detected numerous different types of ransomware like Cerber, Locky, and various droppers. While the vulnerability risk score is low because there are no obvious coding errors that an attacker could easily exploit, the malicious-pattern risk score is critically high, indicating that the code itself likely contains intentional malware rather than just bad security practices. Because these files have been confirmed to be active ransomware agents with 98% confidence, using this repository would expose your system to severe data theft or encryption attacks immediately upon execution.

Written by a local language model from the findings below. The risk scores come from the classifier, not from this summary.

Detections by engine

  • ClamAV 32

    Antivirus engine · Malicious pattern

  • YARA 17

    Malware signature rules · Malicious pattern

Score over time

Overall score each time this repository was scanned.

Findings

Highest severity first. Select a finding to see the code and what it means.