cosa-nostra

Cosa Nostra Cosa Nostra is an open source software clustering toolkit with a focus on malware analysis. It can create phylogenetic trees of binary malware samples that are structurally similar. It was initially released during SyScan360 Shanghai 2016. I basically maintain it since 2016 for my one...

cosa-nostra

Cosa Nostra Cosa Nostra 是一个专注于恶意软件分析的开源软件聚类工具包。它能够为结构相似的二进制恶意软件样本构建系统发育树。该工具最初在 2016 年上海 SyScan360 大会上发布。 自 2016 年以来，我一直在维护它，用户只有一位，恰好是我的一个朋友……好吧。 快速入门 必需的第三方工具 要使用 Cosa Nostra，你需要一个 Python 3.X 版本，以及以下工具之一来执行代码分析： IDA 使用 C++ 编写。它支持分析你可能从未听说过的多种可执行文件类型。商业产品。目前仅支持 7.X 版本。 Radare2 使用纯 C 语言编写。与 IDA...

Open Source Malware Clusterization Toolkit: Cosa Nostra

Open Source Malware Clusterization Toolkit Cosa Nostra is an open source software clustering toolkit with a focus on malware analysis. It can create phylogenetic trees of binary malware samples that are structurally similar. It was initially released during SyScan360 Shanghai 2016. Required 3rd...