Various capabilities for static malware analysis.
☆80Sep 4, 2024Updated 2 years ago
Alternatives and similar repositories for malchive
Users that are interested in malchive are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- DC3 Malware Configuration Parser (DC3-MWCP) is a framework for parsing configuration information from malware. The information extracted …☆354Jul 17, 2026Updated 3 months ago
- ☆64Apr 1, 2021Updated 5 years ago
- Malware similarity platform with modularity in mind.☆81Jul 18, 2021Updated 5 years ago
- LNK to JSON☆14Mar 7, 2019Updated 7 years ago
- Specialized tool to dump Position Independent Code.☆22Aug 4, 2020Updated 6 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Port of tomchop's autoruns plugin for Volatility 3☆10Apr 27, 2022Updated 4 years ago
- Distributed malware processing framework based on Python, Redis and S3.☆479Oct 23, 2026Updated last week
- Analyses in IDA/Hex-Rays☆88Apr 6, 2023Updated 3 years ago
- Scans a malware file and lists down the related MBC (Malware Behavior Catalog) details.☆23Jul 11, 2022Updated 4 years ago
- Private Search Set (PSS) is an extension to standard Bloom filter or a standalone hash file to describe and share private set.☆16Jan 10, 2025Updated last year
- ☆154Dec 6, 2018Updated 7 years ago
- Collection of scripts used to analyse malware or emails☆20Oct 6, 2020Updated 6 years ago
- The MinHash-based Code Relationship & Investigation Toolkit (MCRIT) is a framework created to simplify the application of the MinHash alg…☆104Updated this week
- CSIRT Jump Bag☆27Apr 25, 2024Updated 2 years ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- MITRE Shield website☆19Oct 20, 2021Updated 5 years ago
- Collects extended function properties from IDA Pro databases☆94Dec 6, 2020Updated 5 years ago
- Tool to decrypt the configuration of NanoCore and dump all used plugins☆12Dec 8, 2020Updated 5 years ago
- MasterParser is a simple, all-in-one, digital forensics artifact parser☆24Jul 9, 2021Updated 5 years ago
- Python library for threat intelligence☆104Sep 10, 2026Updated last month
- IOC from articles, tweets for archives☆318Dec 12, 2023Updated 2 years ago
- Extract and Deobfuscate XLM macros (a.k.a Excel 4.0 Macros)☆591May 5, 2024Updated 2 years ago
- A curses-style interface for automatic takedown notification based on MISP events.☆21Dec 11, 2020Updated 5 years ago
- Cerebrate is an open-source platform meant to act as a trusted contact information provider and interconnection orchestrator for other se…☆94Updated this week
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Simple yara rule manager☆67Dec 27, 2022Updated 3 years ago
- Streaming Unexpected Network Byte Sequences with High Probability of Blue Screening or Otherwise Crashing Attacker Command-and-Control No…☆22Jul 14, 2019Updated 7 years ago
- Use CDNJS as a source to build hashes of known JS/CSS/IMG/... content used all over the internet☆14Feb 23, 2026Updated 8 months ago
- Transfer EIP control to shellcode during malware analysis investigation☆77Oct 29, 2014Updated 12 years ago
- Repository for scripts and tips for "Yara Scan Service"☆20Feb 19, 2023Updated 3 years ago
- ☆41Apr 5, 2025Updated last year
- Defeating Anti-Debugging Techniques for Malware Analysis☆12Oct 1, 2022Updated 4 years ago
- CertWatcher is a new take on monitoring for phishing sites. It is meant to be a set and forget service that will send you a daily report …☆10Oct 12, 2020Updated 6 years ago
- Threat Box Assessment Tool☆19Mar 5, 2026Updated 7 months ago
- Deploy open-source AI quickly and easily - Special Bonus Offer • AdRunpod Hub is built for open source. One-click deployment and autoscaling endpoints without provisioning your own infrastructure.
- ☆19Sep 21, 2020Updated 6 years ago
- An extendable tool to extract and aggregate IoCs from threat feeds☆33Feb 6, 2024Updated 2 years ago
- Incremental Machine Leaning by example - Detecting suspicious activity in real time with Zeek data streams, River and JA3 hashes☆17Aug 10, 2022Updated 4 years ago
- ssdeep cluster analysis for malware files☆32Jun 5, 2020Updated 6 years ago
- Malware Analysis, Threat Intelligence and Reverse Engineering: LABS☆83Dec 24, 2020Updated 5 years ago
- MAL-CL (Malicious Command-Line)☆332Jan 10, 2023Updated 3 years ago
- VSCode extension for the YARA pattern matching language☆62Jan 10, 2024Updated 2 years ago