Repository Index

Malwoverview is a first response tool for threat hunting across VirusTotal, Hybrid Analysis, URLHaus, Polyswarm, Malshare, Alien Vault, Malpedia, Malware Bazaar, ThreatFox, Triage, IPInfo, Shodan, AbuseIPDB, GreyNoise, URLScan.io, Whois/RDAP, NIST, and VulnCheck. Supports LLM enrichment, IOC extraction, YARA scanning, and Android analysis.

• malware
• virustotal
• malpedia
• urlhaus

Malware Configuration And Payload Extraction

• configs
• debugging-tools
• malware
• malware-analysis

The repository host gives no description.

• defcon
• android
• blackhat
• blackbox

Noriben - Portable, Simple, Malware Analysis Sandbox

DRAKVUF Black-box Binary Analysis

• malware-analysis
• virtualization
• xen
• introspection

Sandboxed Execution Environment

• python
• sandbox
• malware-analysis
• malware-research

Dynamic analysis of Android apps

Script to create templates to use with VirtualBox to make vm detection harder

• virtualbox
• antivm
• sandbox
• malware-analysis

A tool for studying JavaScript malware.

• malware
• malwareanalysis
• nodejs
• es6

CuckooDroid - Automated Android Malware Analysis with Cuckoo Sandbox.

Sandbox for semi-automatic Javascript malware analysis, deobfuscation and payload extraction. Written for Node.js

• malware-samples
• wscript
• deobfuscation
• angler

Modified edition of cuckoo

Limon is a sandbox developed as a research project written in python, which automatically collects, analyzes, and reports on the run time indicators of Linux malware. It allows one to inspect Linux malware before execution, during execution, and after execution (post-mortem analysis) by performing static, dynamic and memory analysis using open source tools

Android Malware Sandbox

The Multiplatform Linux Sandbox

Automatic deployment of Cuckoo Sandbox malware lab using Packer and Vagrant

Python implementation of the Packed Executable iDentifier (PEiD)

• peid
• peid-signature
• pe-file
• pe-files

Sample staging & detonation utility to be used in combination with Cuckoo Sandbox.

Docker image gathering packers and tools for making datasets of packed executables and training machine learning models for packing detection

• docker-image
• executable-packing
• malware-packers
• research-platform

An ICAP Server with yara scanner for URL and content.

• python
• icap-server
• yara
• malware-analysis

Analysis tool for estimating the likelihood that a binary contains compressed or encrypted bytes

• entropy
• pe-file
• pe-files
• pe-format

Packing detection tool for PE files

• detector
• pe-file
• pe-format
• peid

Implementation of the packing detection heuristic from the paper "Packed PE File Detection for Malware Forensics" of Han et al.

• binary-analysis
• entropy
• entrypoint
• executable-packing