Malware Analysis

Coordinate threat intelligence processing and analysis at scale with IntelOwl, an open-source project.

Browse the APTnotes repository, which collects reports and reference material about APT activity.

BleepingComputer hosts a malware removal help forum where users can request assistance from authorized responders.

BlueTeam Tools collects tools and techniques for blue team security and incident response.

Use reference sheets for reverse engineering, binary analysis, and assembly programming tools.

Consult concise notes on mobile application penetration-testing topics with this cheat sheet.

Set up a Windows virtual machine for reverse engineering with FLARE-VM’s software installation scripts.

This repository curates tools and resources for analyzing malware, including material for researchers and practitioners.

Browse Android reverse engineering training, tools, and learning resources in this curated repository.

Browse community-maintained materials and plugins for the Ghidra reverse engineering framework.

ANY.RUN offers a cloud-based malware analysis sandbox and threat intelligence for examining suspicious and malicious activity.

Malware investigation and reverse engineering are the focus of REMnux, a Linux toolkit that bundles analysis tools.

Analyze and reverse engineer software with radare2, a Unix-like framework and command-line toolkit.

Analyze software with Cutter, an open-source reverse engineering platform powered by Rizin.

dnSpyEx continues the dnSpy project as a debugger and assembly editor for .NET.

Packet Sender sends and receives TCP, UDP, SSL, and DTLS packets and supports HTTP requests.

Triage provides a malware analysis sandbox for sample submissions, with detections, configuration extraction, and public reports.

Browse plugins for x64dbg, a Windows debugger used for reverse engineering and malware analysis.

pyWhat identifies items such as email addresses and IPs from text or packet captures, according to its project description.

MetaDefender Cloud scans files, URLs, IPs, and hashes for malware using antivirus engines, CDR, and sandbox detection.

Hybrid Analysis offers automated malware analysis for submitted files and URLs, using CrowdStrike Falcon Sandbox.

Analyze suspicious files or URLs in an online malware-analysis sandbox with ANY.RUN.

Filescan.io provides malware assessment with a focus on extracting indicators of compromise at scale.