AI-Malware-Sandbox-Analyzer

# 🛡️ AI Malware Sandbox Analyzer

An intelligent, completely free malware analysis assistant built with Python and Streamlit. This tool parses raw sandbox reports (Cuckoo, Any.Run, VirusTotal, etc.) and utilizes generative AI to extract readable insights regarding suspicious behaviors, persistence mechanisms, MITRE ATT&CK mappings, and overall risk levels.

---

## ✨ Features

* **100% Free AI Engines:** Supports Google Gemini API (Free Tier) and Ollama (Local/Offline).
* **Automated Mapping:** Maps behaviors automatically to MITRE ATT&CK techniques.
* **Threat Extraction:** Identifies persistence methods and provides a human-readable summary.
* **Flexible Inputs:** Accepts `.json`, `.txt` file uploads or direct text pasting.

---

## 📸 Screenshots

| Main Interface | Detailed Malware Analysis Output |
| :---: | :---: |
| <img src="screenshots/main_interface.png" width="100%" alt="Main Interface"> | <img src="screenshots/malware_analysis.png" width="100%" alt="Malware Analysis Output"> |

---

## 🚀 Setup Instructions (Windows)

1. **Clone the repository:**
```bash
git clone https://github.com/JuttSahib1999/AI-Malware-Sandbox-Analyzer.git
cd AI-Malware-Sandbox-Analyzer

```


2. **Create a virtual environment and install dependencies:**
```bash
python -m venv venv
venv\Scripts\activate
pip install -r requirements.txt

```


3. **Run the application:**
```bash
streamlit run app.py

```



---

## 👨‍💻 Author

Created by **Abdul Muqeet Tabraiz**

* **LinkedIn:** [Abdul Muqeet Tabraiz](https://www.linkedin.com/in/abdul-muqeet-tabraiz/)
* **GitHub:** [JuttSahib1999](https://github.com/JuttSahib1999)

---

## 📜 License

This project is licensed under the MIT License - see the `LICENSE` file for details.