Skip to content
A warehouse for your malware
Python
Branch: master
Clone or download
Fetching latest commit…
Cannot retrieve the latest commit at this time.
Permalink
Type Name Latest commit message Commit time
Failed to load latest commit information.
extensions
.gitignore
LICENSE.md
README.md
db_controller.py
malware_manager.py
malware_sample.py
malware_sample_model.py
malwarehouse.cfg
setup_db.py
utils.py

README.md

Malwarehouse is a warehouse for your malware. Malwarehouse is a useful command line utility for storing, tagging, storing, and searching for malware. This is intended to help analyst manage their workflow by conducting basic triage and making it easy to look up past samples.

Requirements

  • Python 2.7

Libraries

Authors

Setup - Databases

For initial DB setup, run python setup_db.py Using sqlalchecmy, Malwarehouse can now support a wider variety of database engines.

  • You simply need to create the database and a user account with sufficient read/write privileges.
  • Once created, setup the database section of the malwarehouse.cfg file accordingly.
    • EXAMPLE: postgresql://USER:PASSWORD@SERVER/DB

For more information, refer to http://docs.sqlalchemy.org/en/rel_0_8/core/engines.html#database-urls

Usage

malware_manager.py [-h] [-r [RECENT]] [-s SOURCE] [-t TAGS] [-n NOTES]
                       [-f FIND] [-l LOAD] [-d DELETE]

-h 	displays help
-r 	search db for most recent n samples [default=5]
-f	search db for a sample either by md5 or sha256
-l 	load a new sample to the db for analysis
-s      add source text of the sample to the report
-n	add additional text notes to the report

Plugins

Malwarehouse now allows you to seamlessly integrate your own plugins to automagically run during analysis. For now, please see the virus total plugin for reference.

License

See LICENSE for more information

Thanks

  • Jonathan Hencinski
  • Chris St.Myers
  • @Xen0ph0n
You can’t perform that action at this time.