Agent skill · security · aradotso

malware-analysis-dragonflyTomb-avast

Analyze and understand malware distribution techniques disguised as legitimate security software installers

Why this skill is useful

Includes executable detection scripts and specific malware analysis techniques that extend the AI's capabilities in cybersecurity.

What it needs

Requires go installed locally. About 4k tokens when loaded. Last updated 2026-08-04. 11 stars on the source repository.

What this skill does

DragonflyTomb/Avast-Premium-Security-2026 Analysis Skill by ara.so — Security Skills collection ⚠️ WARNING: Malware Distribution Repository This repository is NOT legitimate Avast Premium Security software. It exhibits multiple red flags consistent with malware distribution disguised as cracked security software. Threat Indicators Repository Red Flags 1. Unauthorized Distribution: Avast Corporation does not distribute software via GitHub repositories named "DragonflyTomb" 2. Crack/Keygen Keywords: Terms like "Keygen", "Pre-Activated", "Loader", "Serial" indicate piracy or malware 3. Suspicious Topics: Includes "retdec" (reverse engineering tool) in security software context 4. No README: Legitimate software repositories include documentation 5. Artificial Stars: 60 stars at 5 stars/day suggests manipulation 6. No License: "NOASSERTION" for commercial software is suspicious 7. Future Date: Claims to be "2026" version (likely timestamp manipulation) Common Malware Distribution Patterns Analysis Techniques Static Analysis Checklist Detection Code Example Safe Investigation Practices Sandbox Environment Setup Binary Analysis Tools Reporting Malware GitHub Abuse Report VirusTotal Submission Prevention Guidance For Developers 1. Never download from unofficial sources 2. Verify digital signatures on legitimate software 3. Check official vendor websites for authentic downloads 4. Use package managers where possible 5. Enable EDR/XDR solutions on development machines For Security Teams Legitimate Avast Resources Official Website: https://www.avast.com Official Downloads: https://www.avast.com/download Official Support: https://support.avast.com Verify Publisher: Digital signatures should show "Avast Software s.r.o." Conclusion This repository represents a malware distribution operation using social engineering tactics. Always obtain security software directly from verified vendor sources and never trust "cracked", "keygen", or "pre-activated" versions of commercial software.

How to use it

Reference it in AdaL, Claude Code, Cursor or any coding agent — nothing to install:

@skills aradotso/malware-analysis-dragonflyTomb-avast

View the source on GitHub

Browse the @skills marketplace