Malware analysis tool

Malware Discussion Analysis
1

I can’t remember where I saw this initially, but I learned about a malware analysis tool that’s available on github and tried it out today. The tool is called Qu1cksc0pe and you can find it at this link: GitHub - CYB3RMX/Qu1cksc0pe: All-in-One malware analysis tool.

You run it from the command line and it uses a number of tools including a set of Yara rules to do a quick analysis of the subject file. You can also add your Virustotal api key and then submit files to VT with the tool.

Here are some photos of the output from a scan I just did:

q1
q1672×877 77.5 KB

q2
q2570×871 52.1 KB

q3
q3476×868 58.3 KB

q4
q4655×860 88.7 KB

q5
q5584×874 72.3 KB

2

Looks awesome, can’t believe I haven’t heard of this before. Definitely gonna try it out.

3

It works really quick, too. I ran it on my Linux system and it blew through that exe file in short order.