Cuckoo Sandbox is an automated dynamic malware analysis system

A secure sandbox environment for malware developers and red teamers to test payloads against detection mechanisms before deployment. Integrates with LLM agents via MCP for enhanced analysis capabilities.

DRAKVUF Sandbox - automated hypervisor-level malware analysis system

Noriben - Portable, Simple, Malware Analysis Sandbox

An easy-to-use library for emulating memory dumps. Useful for malware analysis (config extraction, unpacking) and dynamic analysis in general (sandboxing).

CuckooDroid - Automated Android Malware Analysis with Cuckoo Sandbox.

Sandbox for automated Linux malware analysis.

Sandbox for semi-automatic Javascript malware analysis, deobfuscation and payload extraction. Written for Node.js

Limon is a sandbox developed as a research project written in python, which automatically collects, analyzes, and reports on the run time indicators of Linux malware. It allows one to inspect Linux malware before execution, during execution, and after execution (post-mortem analysis) by performing static, dynamic and memory analysis using open source tools

Pafish Macro is a Macro enabled Office Document to detect malware analysis systems and sandboxes. It uses evasion & detection techniques implemented by malicious documents.

Malware dataset for security researchers, data scientists. Public malware dataset generated by Cuckoo Sandbox based on Windows OS API calls analysis for cyber security researchers

Rapidly initialize Windows Sandbox for malware analysis and reverse engineering

Smart DLL execution for malware analysis in sandbox systems

👁‍🗨 This script will simulate fake processes of analysis sandbox/VM software that some malware will try to avoid.

ELFEN: Automated Linux Malware Analysis Sandbox

CuckooDroid - Automated Android Malware Analysis with Cuckoo Sandbox.

eBPF-powered silent observer for containerized runtimes, built for malware analysis sandboxes and Agentic AI monitoring.

Malware dataset for security researchers, data scientists. Public malware dataset generated by Cuckoo Sandbox based on Windows OS API calls analysis for cyber security researchers

Norimaci is a simple and lightweight malware analysis sandbox for macOS

Rapidly building a Windows 10 system to use for dynamic malware analysis (sandbox), sending data to Elastic Cloud.

Ida pro plugin. The antiVM aims to quickly identify anti-virtual machine and anti-sandbox behavior. This can speed up malware analysis.

A ready to deploy docker container for a fresh sandbox for on-the-fly malware analysis

Linux malware analysis based on Cuckoo Sandbox.

A minimal malware analysis sandbox for macOS

Al-khaser is a PoC malware with good intentions that aimes to stress your malware analysis / sandbox environement

A personalized COLLECTION of technical research papers focused on malware analysis. Covers static/dynamic analysis, sandboxing, behavioral classification, threat intelligence extraction, and anti-evasion techniques.

Web Classification and Reputation | IP Reputation | Real-Time Anti-Phishing | Streaming Malware Detection | File Reputation | Mobile Security SDK | Malware analysis tools | Online Scanners and Sandboxes...

My personal Automated Malware Analysis Sandboxes and Services

Malware Dynamic Analysis Platform enhanced Cuckoo Sandbox

A modern GUI manager to toggle Windows Sandbox and add a "Read-Only" context menu integration for safe malware analysis.