Skip to content

Welcome to the MalZoo wiki!

nheijmans edited this page Mar 3, 2018 · 3 revisions

The MalZoo project started as a internship assignment. The objective is to analyse a lot of malware samples and store all the results in one place for data analysis and find similarities with other samples. MalZoo is slowly being extended with compatibility for more filetypes and more ways to add a sample to the analysis process.

Currently the following filetypes are supported:

  • Microsoft Office Documents
  • Portable Executables
  • E-mail messages
  • ZIP

Samples can be submitted via:

  • API
  • Directory Monitoring
  • Mailbox (IMAP)

And exported to:

  • Mongo DB
  • ElasticSearch
  • Splunk
  • Text file (JSON)
Clone this wiki locally