# Automating Malware Analysis

Tools used - BlueJupyter

To start the docker container-

```
	sudo docker run -it -p 8888:8888 -v /home/remnux/blue-jupyter/malware-analysis/dropbox/:/src/malware-analysis/dropbox bluejupyter
```

To start bluejupyter-

```
	jupyter notebook
```

Now, if you want to add malware into the dropbox, copy it from the PMAT-labs repository into the /home/remnux/blue-jupyter/malware-analysis/dropbox/ directory and it will also copy into the container.

Virus Total API key- `1c3515cbc69ca640a1665a68901637fea29486882c3525322b1c8b4b15d4b35b`

To access bluejupyter , goto on a web browser-`file:///root/.local/share/jupyter/runtime/nbserver-1-open.html`

or

`http://127.0.0.1:8888/?token=012620ea2760b5df1901e08ad4c16a447dd29714a4f6b7de`

Extract .7z files in linux terminal -

```
	7z x test.7z -ppassword
```

## Procedure

***

Put the malware samples in dropbox folder and run Malware-Analysis.ipynb\
Hashes. After running the full script, we get the output in `saved-specimens` folder.

<figure><img src="https://2429440930-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2Fvmiq90eCUf7ZZMUGm7Qu%2Fuploads%2FOOn9uslDXA5aE7chwwAF%2Fimage.png?alt=media&#x26;token=1be91a80-ecae-4ccc-9b03-84de510c280b" alt=""><figcaption></figcaption></figure>
