agentic-malware-analysis — MCP Server by mrphrazer

by mrphrazer · MCP Server · ★ 162

Last updated: · Indexed by AgentSkillsHub · Auto-synced every 8h

About agentic-malware-analysis

Agentic Malware Analysis Automated deep malware reverse engineering driven by AI agents. A Kali-based Docker environment pairs 50+ RE tools with MCP-connected disassembler backends ([Binary Ninja][binary-ninja-headless-mcp] or [Ghidra][ghidra-headless-mcp]) and a structured multi-phase orchestrator skill that turns a raw binary into a case directory of ranked evidence, validated hypotheses, component maps, and a prioritized deep-analysis plan -- with no human interaction required. Ready for [Claude Code][claude-code] and [Codex CLI][codex-cli]. See the companion blog post [Building a Pipeline for Agentic Malware Analysis][blog-post] for background, a case study, and evaluation. Why Initial malware analysis involves a number of routine steps: collecting hashes and compiler artifacts, extracting strings, inspecting imports, running YARA and capa, correlating the results, and identifying code areas for closer inspection. These steps provide the basis for deeper analysis, but they are often repetitive and time-consuming. This repository automates much of that workflow.

Quick Facts

Stars162
Forks18
LanguageYARA
CategoryMCP Server
LicenseGPL-2.0
Quality Score40.6/100
Last Updated2026-03-22
Created2026-03-18
Platformsclaude-code, cli, codex, mcp
Est. Tokens~21k

More MCP Server Tools

Explore other popular mcp server tools:

View all MCP Server tools →

Popular YARA Agent Tools

Frequently Asked Questions

What is agentic-malware-analysis?

agentic-malware-analysis is Agentic malware analysis environment with MCP-connected disassemblers, RE tooling, and structured workflows for Claude Code and Codex CLI.. It is categorized as a MCP Server with 162 GitHub stars.

What programming language is agentic-malware-analysis written in?

agentic-malware-analysis is primarily written in YARA.

How do I install or use agentic-malware-analysis?

You can find installation instructions and usage details in the agentic-malware-analysis GitHub repository at github.com/mrphrazer/agentic-malware-analysis. The project has 162 stars and 18 forks, indicating an active community.

What license does agentic-malware-analysis use?

agentic-malware-analysis is released under the GPL-2.0 license, making it free to use and modify according to the license terms.

View on GitHub → Browse MCP Server tools