A command-line utility for storing, tagging, and searching malware samples to help analysts manage their workflow.
Malwarehouse is a command-line utility that acts as a warehouse for storing, tagging, and searching malware samples. It helps malware analysts manage their workflow by conducting basic triage and making it easy to look up past samples, streamlining analysis processes.
Malware analysts, cybersecurity researchers, and digital forensics professionals who need to organize and retrieve malware samples efficiently.
Developers choose Malwarehouse for its command-line simplicity, extensible plugin architecture, and features like fuzzy hashing and YARA integration, which enhance sample management and analysis without relying on proprietary solutions.
A warehouse for your malware
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
Allows integration of custom plugins to automate analysis tasks, as demonstrated by the referenced virus total plugin, enhancing workflow flexibility.
Supports fuzzy hashing with ppdeep to identify similar malware samples, improving sample comparison and clustering beyond basic hashes.
Optional YARA rule matching enables efficient sample classification and identification based on custom or community rules for malware detection.
Uses Google Fire for a straightforward command-line experience, making commands like 'load' and 'find' easy to use and remember from the help output.
Delete functionality is explicitly noted as not yet implemented in the README, which limits basic sample management and cleanup in workflows.
Requires manual database configuration and installation of dependencies like libmagic, making initial deployment non-trivial compared to plug-and-play tools.
Only a virus total plugin is referenced, indicating a lack of ready-made integrations for common analysis tools, requiring custom development.