Automated Hybrid Malware Analysis System

Welcome to the Hybrid Malware Analysis System project repository. This system integrates machine learning with CAPEv2 sandbox to provide detailed hybrid analysis of potentially malicious files. Developed by the Cybersec_N00bers team as part of the IAM302 course at FPT University, this project aims to streamline the malware analysis process through automation and enhanced detection capabilities.
Members
- Huynh Ngoc Quang (Leader): GitHub
- Pham Thanh Long: GitHub
- Hoang Kim Long: GitHub
- Ho Tai Lien Vy Kha: GitHub
Objective
The primary objective of this project is to develop a robust, automated malware analysis system that combines dynamic behavioral analysis with machine learning. By doing so, the system aims to improve the accuracy and efficiency of malware detection and analysis, making it easier for cybersecurity professionals and researchers to identify threats in a timely and effective manner. This system is designed to be user-friendly, scalable, and adaptable to various malware analysis needs.
Features
- Hybrid Analysis: Utilizes CAPEv2 sandbox for dynamic behavioral analysis of malware.
- Automation: System setup is automated with an All-In-One script, simplifying installation and configuration.
- Containerized: Runs entirely within Docker containers, ensuring consistency across different environments and simplifying system dependencies.
- Cross-platform Analysis: Capable of analyzing malware targeted at various operating systems, enhancing the versatility of malware research.
- Machine Learning Integration: Employs machine learning algorithms to distinguish between clean and malicious files effectively.