613 matches found
GreyEnergy-Mini-Module-Malware-Analysis
GreyEnergy Mini Module Malware Analysis Turkish This research paper has already been published before and you can also find the original .pdf version at here...
BlueBox
BlueBox Malware analysis Box and Cyber threat Hunting What is it? Threat intelligence data about a malware, an IP or a domain , URL ? a Quick Analysis suspicious File or Malware ! BlueBox is an Open Source Intelligence, or OSINT solution to get threat intelligence data about a specific file, an I...
cuckoo
.. image:: https://cuckoosandbox.org/assets/images/cuckoo-black.png :alt: Cuckoo Sandbox :target: https://cuckoosandbox.org/ TENGA EN CUENTA: Cuckoo Sandbox 2.x actualmente no recibe mantenimiento. Es muy probable que las incidencias abiertas o las pull requests no se procesen, ya que actualmente...
AIDebug
AIDebug AIDebug is an evidence-focused malware reverse-engineering CLI and terminal UI. It combines deterministic offline triage, whole-file hex inspection, deep PE structure analysis, Capstone disassembly, Ghidra reconstruction, optional LLM cross-checks, local ELF debugging, compiled learning...
FreeMOCA
FreeMOCA: Memory-Free Continual Learning for Malicious Code Analysis ArXiv Paper Link Zahra Asadi, Haeseung Jeon, Sohyun Han, Md Mahmuduzzaman Kamol, Se Eun Oh, Mohammad Saidur Rahmanโ Equally credited authors. โ Corresponding author. !NOTE This is official implementation of the paper FreeMOCA:...
cve-2017-1182-TN
cve-2017-1182-TN Malware Analysis Testing...
Detect-CVE-2024-0762
Script de Detecciรณn de CVE-2024-0762 y Anรกlisis de Malware Resumen Este script estรก diseรฑado para detectar versiones de firmware UEFI y evaluarlas en busca de vulnerabilidades relacionadas con CVE-2024-0762. Ademรกs, se integra con la API de VirusTotal para analizar archivos en busca de malware,...
Hybrid Submit
Hybrid Analysis Batch Submission Script This Python script recursively scans a folder and submits executable, script, document, and other relevant files to Hybrid Analysis Falcon Sandbox for automated malware analysis. Features Recursively walks through directories Submits only supported file typ...
001-Malware-Analysis-CVE-2017-11882
Este repositorio no tiene un README...
ForensiX-Studio
ForensiX Studio Forensic Intelligence Platform | Malware Analysis | Threat Correlation Engine ๐ง Multi-Signal Analysis โข โก Behavioral Intelligence โข ๐ฏ MITRE Mapping โ ๏ธ LEGAL DISCLAIMER ForensiX Studio is intended strictly for authorized digital forensics, security research, and defensive analysis. ...
HydraDragonAntivirus openedr-v2-release-9
Hydra Dragon Antivirus WARNING: Highly outdated documenation here but for reference I keep it. Other than OpenEDR, MBRFilter, Sanctum etc. directories are fully deperecated for performance. ๐ For detailed documentation, architecture diagrams, and component guides, visit our Project Wiki. ๐ฅ POC:...
MISP ๅฎๅ จๆผๆด
MISP is a set of open-source software solutions developed by MISP. This product is used for collecting, storing, distributing, and sharing network security metrics. It also includes functions such as analyzing threats to network security and malware analysis. MISP has a security vulnerability tha...
MAECO-Lite: Modular Ontology for Dynamic Malware Analysis
Capturing dynamic malware behavior in a practical but still semantically precise manner remains a significant challenge in cyber threat intelligence. While standards such as MAEC and STIX provide widely adopted vocabularies for describing malware artifacts and observations, they represent data wi...
Automatically Attacking Software Reverse Engineering AI Agents
Software tools for reverse engineering executable binary files, such as Ghidra, enable malware analysts to safely conduct robust static analysis without having access to original source code. Coupled with the analytic power of large language models LLM, agentic systems enabled with tools, such as...
A Large Language Model Approach to Generating Bypass Rules for Malware Evasion in Analysis Sandbox
Sandbox evasion remains a critical challenge for automated malware analysis, as modern malware employs environment checks to detect analysis platforms and suppress malicious behavior. Existing approaches rely on manually crafted bypass rules that require deep reverse engineering of each evasion...
MalwarePT: A Binary-Level Foundation Model for Malware Analysis
Automated malware analysis increasingly relies on machine learning, yet most existing methods remain task-specific and depend on handcrafted features or narrowly scoped models. Recent developments in binary-level foundation models suggest a path toward reusable program representations, but their...
Memory Forensics Techniques for Automated Detection and Analysis of Go Malware
The Go programming language has become increasingly popular among malware developers due to its ability to produce statically linked, cross-platform executables that challenge traditional analysis techniques. These binaries embed a substantial runtime and compiler-generated metadata and are...
FreeMOCA: Memory-Free Continual Learning for Malicious Code Analysis
As over 200 million new malware samples are identified each year, antivirus systems must continuously adapt to the evolving threat landscape. However, retraining solely on new samples leads to catastrophic forgetting and exploitable blind spots, while retraining on the entire dataset incurs...
