OrionMalware v1.0.0
Analyze suspicious hashes or files using static and dynamic analysis
- Author:
- Airbus
- Support:
- partner
Indicator fields (3)
- Orion Engine Detection Names
- Orion Engine Detections
- Orion Engine Vendors
Indicator types (1)
- unifiedFileRep
Integrations (1)
README
Orion Malware content pack
This content pack is made to call Orion Malware API service ton analyze 2 types of inputs:
- file
- hash
Analysis will return a report with a risk level and qualitative information about the detection.
By analyzing a file indicator, this file will be uploaded to Orion Malware server, and analyzed using default workflow for your apikey user.
By analyzing a hash observable, Orion Malware will return you a report from previous matching hashes from files analyzed on this Orion Malware server.
Extracted Observables
Orion Malware analyzer extract hostnames, domains, IP addresses, and TTP. These indicators are added as relationships to the initial file or hash indicator.
More information