BlueBox Malware Analysis Box and Cyber Threat Hunting

Open Source Intelligence solution for threat intelligence data enrichment and quick analysis of suspicious files or malware.

Threat Management

Free

Visit website

BlueBox Malware Analysis Box and Cyber Threat Hunting

Open Source Intelligence solution for threat intelligence data enrichment and quick analysis of suspicious files or malware.

Threat Management•Threat Intelligence Platforms

Free

Osint Malware Analysis Threat Intelligence

43stars

GitHub Stars

17 Apr

Last commit

Visit Website

Updated 16 Oct 25

BlueBox Malware Analysis Box and Cyber Threat Hunting Description

BlueBox is an Open Source Intelligence (OSINT) solution that provides threat intelligence data about specific files, IPs, domains, and URLs, allowing for quick analysis of suspicious files or malware. It offers enrichment of threat intelligence for malware and observables, scales out to speed up threat info retrieval, and includes features such as static analysis of files, detection using YARA rules, machine learning for URL and phishing website detection, and extraction of lexical features to aid in identifying malicious websites. The application is built with Python3, Flask, JavaScript, Bootstrap, SQLAlchemy, Scikit-learn, JSON, and YARA rules.