Anubi: Open-Source Malware Sandbox Automation Framework with CTI Integration

Hello everyone!

Over the past months, I've been working on Anubi, an open-source automation engine that extends the power of Cuckoo sandbox with Threat Intelligence capabilities and custom analysis logic.

Its key features are: - Automates static/dynamic analysis of suspicious files (EXE, DLL, PDF…) - Enriches Cuckoo results with external threat intelligence feeds - Integrates custom logic for IOC extraction, YARA scanning, score aggregation - JSON outputs, webhook support, modular design

Anubi is designed for analysts, threat hunters and SOCs looking to streamline malware analysis pipelines. It’s written in Python and works as a standalone backend engine (or can be chained with other tools like MISP or Cortex).

It is full open-source: https://github.com/kavat/anubi

Would love feedback, suggestions or contributors.
Feel free to star ⭐ the project if you find it useful!