©
Malcore is the future of sandbox analysis. Malcore is the main engine of Maltree that does full static analysis on passed files and is able to with 99.99% reliability determine the difference between file types. Passed files produce the following information:
- Dissassembly asm
- Imports and exports
- Sections in the binary
- Manifest details
- Permission details
- Every doc file is ran through Inquest DFI in a closed enviroment
- Strings
- Hexdump
- Fuzzy hash matching at a 0.21% match ratio
- Dissassembly of compiled binary files
- Faster than the leading sandbox solutions
- Integrated static analysis of Windows PE, ELF, APK, and all leading MS doc files (xls, xlsx, doc, docx, etc)
- Mimetype guessing and exif data gathering
- Full PCAP analysis for IP address and domains processed through ZETAlytics
- Generates yara rules and ndb signatures of each file passed
- Runs each file through over 700+ well documented yara rules
Malnet is the RESTful API that processes all requests into Malcore, you can read the API documentation here. During testing we were able to send up to 40,000 requests per hour to Malnet without the API failing. Malnet requires an API key which you may purchase from us on our website, or if you prefer you can contact us at the link below for a more private discussion. Key features of Malnet include:
- Ability to search the database using a SHA-256 hash
- Ability to check if a file is packed
- Ability to perform deep static analysis on passed files
- Ability to process uploads
- Unique UUID generated for each upload
- Shellcode analysis
- Domain analysis processed by ZETAlytics
- Ability to process two PCAP files and discover the differences between them
COMING SOON ...
COMING SOON ...
Malbox is the dynamic analysis environment for Malcore that integrates the static and dynamic analysis into the system. Malbox key features include:
- Integratable with almost all Virtual Machine software (vbox, esxi, etc)
- Runs multiple virtual machines including Windows 10, Ubuntu, and Android images
- Traces calls produced by the sample passed to it
- Full machine memory dump
Maltree is the whole thing put together into a package that is integratable into almost all major SOC solutions. The goal of Maltree is to provide a more stable, reliable, and cost effective malware analysis platform to integrate into your SOC solution.
COMING SOON ...
