01645nas a2200217 4500000000100000008004100001653003000042653002100072653002100093653002500114653002000139100001800159700001700177700002100194700002100215700001900236245004900255300001100304490000700315520110500322 2021 d10acyber threat intelligence10adynamic analysis10amalware analysis10amalware intelligence10astatic analysis1 aCagatay Yucel1 aAdam Lockett1 aIoannis Chalkias1 aDimitrios Mallis1 aVasilios Katos00aMAIT: Malware Analysis and Intelligence Tool a49-65 0 v503 a

Malware is the instrument that delivers the decisive blow in cyber-attacks. A first-time presented malware or an updated malware can remain undetected and stealth until the attackers achieve their objectives. Information about malware and its use needs to be shared with other entities that are protecting their infrastructure from the same or similar threats. Malware intelligence can be critical in a rapidly changing threat landscape, allowing entities to respond to incidents in a successful and timely manner. We introduce the Malware Analysis and Intelligence Tool, a tool that uses state-of-the-art malware analysers (static and dynamic), combined with open-source malware databases to provide a malware signature and an intelligence report that is collected from publicly available cyber threat intelligence sources. The tool can be used to obtain chronological data for a malicious file, related vulnerabilities, and towards providing attribution and techniques, tactics and procedures when used in attacks from Advanced Persistent Threat groups.