Skip to content

Horus v1.0.0

Choose a tag to compare

View all tags
@mobinert mobinert released this 21 Jun 14:23
· 28 commits to master since this release
v1.0.0
1124c82

Horus v1.0.0 — Initial Release

Download

File Description
horus.exe Pre-built Windows x64 binary — drop it anywhere and run. No installer, no dependencies.

What's in this release

  • PE32 / PE32+ static analysis with per-section Shannon entropy visual bars
  • 110-API capability knowledge base with combination scoring
    • Injection primitives + runtime API resolution
    • Crypto + network I/O (ransomware / exfil pattern)
    • Keylogger + network I/O
  • Imphash calculation matching the Mandiant/pefile recipe
  • Embedded IOC pivot: URLs and IPs extracted from strings and enriched automatically
  • VirusTotal v3 integration (files, hashes, IPs, domains, URLs)
  • AbuseIPDB v2 integration (IP abuse confidence score)
  • Parallel fan-out across all configured intel sources
  • JSON output mode with scripting-friendly exit codes (0=clean, 1=suspicious, 2=error)
  • Zero external dependencies — BCrypt + WinHTTP ship with Windows

Requirements

  • Windows 7 x64 or later
  • No runtime install needed

Quick start

horus suspicious.exe
horus 185.220.101.5
horus 44d88612fea8a8f36de82e1278abb02f
horus https://sketchy.example/drop.bin --json
Assets 3
Loading