Skip to content

CharlesDardaman/Malware_Report_Automation

Repository files navigation

Malware Report Automation

This script will take a directory of files and generate a report from it.

You are able to add your own summary, ips, domains, analysis, and recommendations to the report during generation.

Usage

python report.py directory/

It will then ask you for the file name containing the following information:

  • Description (markdown file)
  • Domains (text file with domains seperated by a new line)
  • IPs (text file with IPs seperated by a new line)
  • Analysis for each file (markdown files)
  • Recommendations (markdown file)

Prerequisites

This script it built to run on Python 3

The following libraries are required in order to run this script:

  • ssdeep
  • markdown
  • magic
  • requests

They can all be added with the following commands:

pip install requests markdown python-magic ssdeep

Note ssdeep will fail unless you have ssdeep installed already. This can be done on macOS with:

brew install ssdeep

The script reaches out to Virus Total to grab Anti Virus results, you will need to add your API key in order to make the lookup.

It is currently setup to be used with the free version of Virus Total which was a 4 api call limit per minute.

About

Automating the boring part of malware analysis

Resources

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published