<commit_before># Copyright (c) 2014-2019 Maltrail developers (https://github.com/stamparm/maltrail/)
# See the file 'LICENSE' for copying permission

# Reference: https://twitter.com/slayersecurity/status/1115635967875014656

/out-292242810.ps1
/out-1584466740.ps1

# Reference: https://twitter.com/slayersecurity/status/1115902366686031878

/spid.ps1

# Reference: https://twitter.com/x42x5a/status/1116272110912065536

/out-113489727.ps1
/out-734087850.ps1
/out-1137236610.ps1

# Reference: https://raw.githubusercontent.com/blackorbird/APT_REPORT/master/kimsuky/Smoke%20Screen.pdf

/keylogger.ps1
/keylogger1.ps1

# Reference: https://twitter.com/malwrhunterteam/status/1118768633377955840

/bs.ps1
/indiapro.ps1

# Reference: https://krebsonsecurity.com/wp-content/uploads/2019/04/wiproiocs.txt

/abc.ps1
/sc.ps1

# Reference: https://securelist.com/muddywaters-arsenal/90659/

/km.ps1

# Reference: https://norfolkinfosec.com/osint-reporting-on-dprk-and-ta505-overlap/

/ICAS.ps1

# Reference: https://twitter.com/VK_Intel/status/1093001266974916608

/dnipu.ps1

# Reference: https://twitter.com/blackorbird/status/1125308108773871617

/ipconfig.ps1

# Reference: https://otx.alienvault.com/pulse/5cd154f0905e39830df5e5f5

/ms17-010.ps1

# Reference: https://www.welivesecurity.com/wp-content/uploads/2019/05/ESET-LightNeuron.pdf

/msinp.ps1

# Reference: https://twitter.com/DissectMalware/status/1126384963497205762

/bros.ps1
/out-1215218964.ps1
/out-1717054512.ps1
/out-1552287668.ps1
/papa.ps1
/youngest.ps1

# Reference: https://twitter.com/sudosev/status/1126552059334070272

/Invoke-Mimikatz.ps1

# Reference: https://twitter.com/James_inthe_box/status/1131556358732443650

/out-821986920.ps1

# Reference: https://www.virustotal.com/gui/domain/checkerrors.ug/relations

/payload.ps1
/payload2.ps1

# Reference: https://twitter.com/HONKONE_K/status/1133205335877885952

/coki.ps1
/gc.ps1
/java1.ps1
/ky.ps1

# Reference: https://www.welivesecurity.com/2019/05/29/turla-powershell-usage/

/msctx.ps1

# Reference: https://twitter.com/reecdeep/status/1136581953770205185

/5WD3emSKcJoLcaDjAUCFj7.ps1

# Reference: https://twitter.com/p5yb34m/status/1138143258498949122

/PayAdvice.ps1
/remit.ps1
/remittance.ps1

# Reference: https://twitter.com/HONKONE_K/status/1139364022296272896

/done1.ps1
/done2.ps1
/putty.ps1
/x10.ps1
/x11.ps1
/x12.ps1
/xvid1.ps1
/xvid2.ps1
<commit_msg>Update malicious_powershell.txt<commit_after># Copyright (c) 2014-2019 Maltrail developers (https://github.com/stamparm/maltrail/)
# See the file 'LICENSE' for copying permission

# Reference: https://twitter.com/slayersecurity/status/1115635967875014656

/out-292242810.ps1
/out-1584466740.ps1

# Reference: https://twitter.com/slayersecurity/status/1115902366686031878

/spid.ps1

# Reference: https://twitter.com/x42x5a/status/1116272110912065536

/out-113489727.ps1
/out-734087850.ps1
/out-1137236610.ps1

# Reference: https://raw.githubusercontent.com/blackorbird/APT_REPORT/master/kimsuky/Smoke%20Screen.pdf

/keylogger.ps1
/keylogger1.ps1

# Reference: https://twitter.com/malwrhunterteam/status/1118768633377955840

/bs.ps1
/indiapro.ps1

# Reference: https://krebsonsecurity.com/wp-content/uploads/2019/04/wiproiocs.txt

/abc.ps1
/sc.ps1

# Reference: https://securelist.com/muddywaters-arsenal/90659/

/km.ps1

# Reference: https://norfolkinfosec.com/osint-reporting-on-dprk-and-ta505-overlap/

/ICAS.ps1

# Reference: https://twitter.com/VK_Intel/status/1093001266974916608

/dnipu.ps1

# Reference: https://twitter.com/blackorbird/status/1125308108773871617

/ipconfig.ps1

# Reference: https://otx.alienvault.com/pulse/5cd154f0905e39830df5e5f5

/ms17-010.ps1

# Reference: https://www.welivesecurity.com/wp-content/uploads/2019/05/ESET-LightNeuron.pdf

/msinp.ps1

# Reference: https://twitter.com/DissectMalware/status/1126384963497205762

/bros.ps1
/out-1215218964.ps1
/out-1717054512.ps1
/out-1552287668.ps1
/papa.ps1
/youngest.ps1

# Reference: https://twitter.com/sudosev/status/1126552059334070272

/Invoke-Mimikatz.ps1

# Reference: https://twitter.com/James_inthe_box/status/1131556358732443650

/out-821986920.ps1

# Reference: https://www.virustotal.com/gui/domain/checkerrors.ug/relations

/payload.ps1
/payload2.ps1

# Reference: https://twitter.com/HONKONE_K/status/1133205335877885952

/coki.ps1
/gc.ps1
/java1.ps1
/ky.ps1

# Reference: https://www.welivesecurity.com/2019/05/29/turla-powershell-usage/

/msctx.ps1

# Reference: https://twitter.com/reecdeep/status/1136581953770205185

/5WD3emSKcJoLcaDjAUCFj7.ps1

# Reference: https://twitter.com/p5yb34m/status/1138143258498949122

/PayAdvice.ps1
/remit.ps1
/remittance.ps1

# Reference: https://twitter.com/HONKONE_K/status/1139364022296272896

/done1.ps1
/done2.ps1
/putty.ps1
/x10.ps1
/x11.ps1
/x12.ps1
/xvid1.ps1
/xvid2.ps1

# Reference: https://twitter.com/h4ckak/status/1144173749056315392

/shell.ps1

{'fraction_non_alphanumeric': 0.14109926168990977, 'fraction_numerical': 0.19257588187038557, 'mean_word_length': 4.59931113662457, 'pattern_counts': {'":': 0, '<': 3, '<?xml version=': 0, '>': 3, 'https://': 45, 'lorem ipsum': 0, 'www.': 6, 'xml': 0}, 'pii_count': 0, 'substrings_counts': 0, 'word_list_counts': {'cursed_substrings.json': 0, 'profanity_word_list.json': 0, 'sexual_word_list.json': 0, 'zh_pornsignals.json': 0}}
{'dir': 'git-commits-cleaned', 'id': '2006770', 'n_tokens_mistral': 2617, 'n_tokens_neox': 2130, 'n_words': 206}