malzoo

MalZoo is a mass static malware analysis tool designed to catalog malware samples by storing metadata in a MongoDB database and organizing samples into a directory structure based on their MD5 hashes. Its primary use cases include analyzing large sets of malware for insights (such as identifying compilation languages and packers) and monitoring emails for malicious attachments. Notable features include support for Docker and AWS Serverless deployment, extensive data collection capabilities, and integration options with tools like Splunk for enhanced analysis and visualization.