Awesome Malware Analysis Awesome

A curated list of awesome malware analysis tools and resources. Inspired by awesome-python and awesome-php.

View Chinese translation: 恶意软件分析大合集.md.


Malware Collection

Anonymizers

Web traffic anonymizers for analysts.

Honeypots

Trap and collect your own samples.

Malware Corpora

Malware samples collected for analysis.

Open Source Threat Intelligence

Tools

Harvest and analyze IOCs.

Other Resources

Threat intelligence and IOC resources.

Detection and Classification

Antivirus and other malware identification tools

Online Scanners and Sandboxes

Web-based multi-AV scanners, and malware sandboxes for automated analysis.

Domain Analysis

Inspect domains and IP addresses.

Browser Malware

Analyze malicious URLs. See also the domain analysis and documents and shellcode sections.

Documents and Shellcode

Analyze malicious JS and shellcode from PDFs and Office documents. See also the browser malware section.

File Carving

For extracting files from inside disk and memory images.

Deobfuscation

Reverse XOR and other code obfuscation methods.

Debugging and Reverse Engineering

Disassemblers, debuggers, and other static and dynamic analysis tools.

Network

Analyze network interactions.

Memory Forensics

Tools for dissecting malware in memory images or running systems.

Windows Artifacts

Storage and Workflow

Miscellaneous

Resources

Books

Essential malware analysis reading material.

Twitter

Some relevant Twitter accounts.

Other

Related Awesome Lists

Contributing

Pull requests and issues with suggestions are welcome! Please read the CONTRIBUTING guidelines before submitting a PR.

Thanks

This list was made possible by:

Thanks!