building-automated-malware-submission-pipeline - Automate malware submission and sandbox analysis
Collects suspicious files, checks known malware databases, submits unknown samples to sandboxes, and extracts verdicts and IOCs.
Tags
Updated: 2026-10-05Capabilities
Typical Outputs
What this skill does
- Collect suspicious files
- Compute file hashes
- Query VirusTotal records
- Query MalwareBazaar records
- Pre-screen malware samples
- Submit files to sandboxes
- Poll analysis status
- Extract analysis indicators
- Generate malware verdicts
Inputs
- EDR quarantine API
- Email gateway quarantine files
- Network capture files
- VirusTotal API key
- MalwareBazaar API access
- Sandbox endpoint
- Suspicious files
Outputs
- Collected malware samples
- File hashes
- Pre-screening verdicts
- Sandbox task identifiers
- Sandbox analysis reports
- Extracted IOCs
Requirements
- Python 3.8 or later
- requests library
- vt-py library
- pefile library
- Sandbox environment
- Isolated analysis network
- Production network isolation