This bulk malware sorter takes in millions of samples of malware and stores information about each sample in a mySQL database. In addition the database is displayed using a django front end as a user friendly table with hyperlinks as seen above.
Working on the Trojan Triage program I developed:
- Front end using Python Django framework
- Back end automation of virtual machines for identifying malware
- mySQL database for storing results
- Automated malware sample analysis using a Portable Executable parser pefile to identify DLL files used by the malware sample, hash, malware file entry point and signature
The github for this project is:
https://github.com/chris-ault/TrojanTriage
To view some previews of the end result head over to gallery:
https://chris-ault.rocks/gallery/trojantriage.html