Malwoverview is a first response tool for threat hunting across VirusTotal, Hybrid Analysis, URLHaus, Polyswarm, Malshare, Alien Vault, Malpedia, Malware Bazaar, ThreatFox, Triage, IPInfo, Shodan, AbuseIPDB, GreyNoise, URLScan.io, Whois/RDAP, NIST, and VulnCheck. Supports LLM enrichment, IOC extraction, YARA scanning, and Android analysis.

It's a handy tool to help you analyze malware. You can use this tool to query your malware samples using different hashes or find all other samples using YARA rules, CalmAV signatures, etc. This tool is based on MalwareBazaar.

Chrome extension for fast and secure IOC analysis with multiple threat intelligence providers.

A Python3 module for MalwareBazaar API

A cli tool to interact with MalwareBazaar API

Blazing-fast MD5 lookups against MalwareBazaar, VirusShare & custom. Built for Incident Response. No deps.

The アマヤラ Lab project provides a ready-to-use Jupyter Lab environment to help out with Android malware analysis using YARA rules.

Malware samples and IOCs captured from honeypots and reported to MalwareBazaar, ThreatFox and VirusTotal

PowerShell hash lookup against MalwareBazaar & ThreatFox with HTML reports

🔍 Analyze Indicators of Compromise (IOC) quickly and securely in your browser with Ahtapot, your essential tool for threat detection.

MalwareBazaar scale for Countercept Snake

IOC validation with Python

This project demonstrates my ability to clearly, concisely, and easily document a security event/incident. This journal allows me to visualize my cybersecurity journey and improve my overall skills.

Python-based phishing email analyzer performing automated triage of .eml files including header analysis, URL enrichment via VirusTotal, attachment hashing with MalwareBazaar, and risk scoring mapped to MITRE ATT&CK T1566.

This code pulls hashes from MalwareBazaar's API and uploads them into Cisco AMP's Simple Custom Detections Lists via AMP's v1 API.

LLM AI EDR 백엔드

VATEX Intelligence Server ( Intelligence + Lina(Latin) )

Detonate files & URLs in cloud malware sandboxes (Hybrid Analysis, tria.ge, ANY.RUN) and enrich IOCs across MalwareBazaar, ThreatFox, URLhaus, Feodo, URLScan & VirusTotal — straight from Claude. BYOK, async, MITRE ATT&CK.