mace-0.1.3 is not a library.
MACE (MAlware Configuration Extrator)
Description
This project aims to provide functionality for the automated extraction of malware configuration from samples. The extracted information is focused on the C2 communication of the sample. This includes hardcoded domains and IPs and parameters of used Domain Generation Algorithms.
Installation
- From crates.io with cargo
- From git
or - Or run without installation
Supported malware families
Note: Automatic classification of malware families is not yet implemented
Example usage
Analyzing the DMSniff sample f4be1b8d67e33c11789d151d288130254d346ecc0f4738a12ce3a34d86ec646d
|
{
}
Todo
- Implement automated classification of malware families