$ ./get-mauled

$ docker run --rm -v /path/to/malware:/malware malice/get-mauled --help Usage: get-mauled [OPTIONS] COMMAND [arg...] Malice DEMO Malware Downloader Plugin Version: v0.1.7, BuildTime: 20180915 Author: blacktop - <https://github.com/blacktop> Options: --verbose, -V verbose output --proxy, -x proxy settings for Malice webhook endpoint [$MALICE_PROXY] --timeout value malice plugin timeout (in seconds) (default: 300) [$MALICE_TIMEOUT] --output value, -o value set output directory [$MALICE_OUTPUT_DIRECTORY] --store-url value s3 or minio file server url [$MALICE_STORAGE_URL] --store-tls enable secure (HTTPS) access [$MALICE_STORAGE_TLS] --store-zone value s3 or minio availbility zone location (default: "us-east-1") [$MALICE_STORAGE_ZONE] --store-bucket value name of the minio or s3 bucket (default: "malice") [$MALICE_STORAGE_BUCKET] --store-id value user ID that uniquely identifies your account [$MALICE_STORAGE_ID] --store-key value secret key is the password to your account [$MALICE_STORAGE_KEY] --help, -h show help --version, -v print the version Commands: all Gotta' Catch Em' All the-zoo Download and Unzip The Zoo Malware contagio Download and Unzip contagiodump Malware malware-samples Download and Unzip Malware Samples download Download and Unzip Malware From URL help Shows a list of commands or help for one command Run 'get-mauled COMMAND --help' for more information on a command.

$ docker run --rm -it \ -v /path/to/download/malware:/malware \ malice/get-mauled download --password infected \ https://github.com/ytisf/theZoo/raw/master/malwares/Binaries/Duqu2/Duqu2.zip INFO[0000] Downloading file: https://github.com/ytisf/theZoo/raw/master/malwares/Binaries/Duqu2/Duqu2.zip

ls -lah /path/to/downloaded/malware

-rw-r--r-- 1 blacktop staff 13K Aug 13 22:49 2796a119171328e91648a73d95eb297edc220e8768f4bbba5fb7237122a988fc -rw-r--r-- 1 blacktop staff 16K Aug 13 22:49 2a9a5afc342cde12c6eb9a91ad29f7afdfd8f0fb17b983dcfddceccfbc17af69 -rw-r--r-- 1 blacktop staff 17K Aug 13 22:49 2c9c3ddd4d93e687eb095444cef7668b21636b364bff55de953bdd1df40071da -rw-r--r-- 1 blacktop staff 17K Aug 13 22:49 2ecb26021d21fcef3d8bba63de0c888499110a2b78e4caa6fa07a2b27d87f71b -rw-r--r-- 1 blacktop staff 12K Aug 13 22:49 3536df7379660d931256b3cf49be810c0d931c3957c464d75e4cba78ba3b92e3 -rw-r--r-- 1 blacktop staff 254K Aug 13 22:49 52fe506928b0262f10de31e783af8540b6a0b232b15749d647847488acd0e17a -rw-r--r-- 1 blacktop staff 18K Aug 13 22:49 5559fcc93eef38a1c22db66a3e0f9e9f026c99e741cc8b1a4980d166f2696188 -rw-r--r-- 1 blacktop staff 17K Aug 13 22:49 5ba187106567e8d036edd5ddb6763f89774c158d2a571e15d76572d8604c22a0 -rw-r--r-- 1 blacktop staff 25K Aug 13 22:49 6217cebf11a76c888cc6ae94f54597a877462ed70da49a88589a9197173cc072 -rw-r--r-- 1 blacktop staff 14K Aug 13 22:49 6b146e3a59025d7085127b552494e8aaf76450a19c249bfed0b4c09f328e564f -rw-r--r-- 1 blacktop staff 17K Aug 13 22:49 6c803aac51038ce308ee085f2cd82a055aaa9ba24d08a19efb2c0fcfde936c34 -rw-r--r-- 1 blacktop staff 24K Aug 13 22:49 6de1bb58ae3c37876c6372208366f5548fcc647ffd19ad1d31cebd9069b8a559 -rw-r--r-- 1 blacktop staff 17K Aug 13 22:49 6e09e1a4f56ea736ff21ad5e188845615b57e1a5168f4bdaebe7ddc634912de9 -rw-r--r-- 1 blacktop staff 274K Aug 13 22:49 81cdbe905392155a1ba8b687a02e65d611b60aac938e470a76ef518e8cffd74d -rw-r--r-- 1 blacktop staff 18K Aug 13 22:49 8e97c371633d285cd8fc842f4582705052a9409149ee67d97de545030787a192 -rw-r--r-- 1 blacktop staff 24K Aug 13 22:49 9900c91f6d754f15f73729ce5a4333a718463e24aa7e6192c7527ec5c80dac42 -rw-r--r-- 1 blacktop staff 27K Aug 13 22:49 bc4ae56434b45818f57724f4cd19354a13e5964fd097d1933a30e2e31c9bdfa5.bin -rw-r--r-- 1 blacktop staff 17K Aug 13 22:49 c16410c49dc40a371be22773f420b7dd3cfd4d8205cf39909ad9a6f26f55718e -rw-r--r-- 1 blacktop staff 17K Aug 13 22:49 d12cd9490fd75e192ea053a05e869ed2f3f9748bf1563e6e496e7153fb4e6c98 -rw-r--r-- 1 blacktop staff 25K Aug 13 22:49 d5c57788cf12b020c4083eb228911260b744a2a67c88662c9bab8faebca98fa2 -rw-r--r-- 1 blacktop staff 15K Aug 13 22:49 d8a849654ab97debaf28ae5b749c3b1ff1812ea49978713853333db48c3972c3 -rw-r--r-- 1 blacktop staff 25K Aug 13 22:49 e83c6c36dbd143ee0fd36aff30fb43529a34129817dc2530f251121527cbf4b4