performing-malware-ioc-extraction

What problem does it solve?

Malware IOC extraction automates the identification of indicators of compromise from malicious software, enabling faster threat hunting and response.

Core Features & Use Cases

• Static analysis: PE parsing, hash generation, string extraction to identify IOCs
• YARA-based classification and STIX 2.1 indicator creation for sharing across TI platforms
• Use Case: Analysts run the tool on a sample to produce a structured IOC bundle and human-readable report for incident response

Quick Start

Run the tool against a malware sample to extract IOCs and generate a STIX bundle.