OpenSec Atlas

Name: freki
Author: cristianzsh

freki: An Open Source Tool for Malware Analysis | OpenSec Atlas

Back to Browse

Malware Analysis

Tool

freki

Freki is an open-source malware analysis platform that facilitates automated malware inspection through a user-friendly web interface and REST API.

Visit Website View on GitHub

About This Tool

:wolf: Malware analysis platform

Primary Use Case

Freki is designed for malware analysts, reverse engineers, and threat hunters to streamline the analysis and investigation of malware samples. It provides tools for static analysis, hash extraction, and integration with VirusTotal, enabling efficient malware forensics and threat intelligence gathering.

Key Features

Hash extraction from malware samples
VirusTotal API integration for reputation checks
Static analysis of PE files including headers, sections, imports, capabilities, and strings
Pattern matching using Yara rules
Web interface and REST API for easy access and automation
User management and community commenting features
Sample download capability
Easy deployment via Docker

Insights & Recommendations

Freki requires Docker and Docker Compose for the easiest deployment; HTTPS configuration is recommended for production environments. The platform provides a REST API allowing integration with other tools and automation workflows. Users should refer to the online documentation for advanced setup and development details.

Installation

Install Docker from https://docs.docker.com/get-docker/
Install Docker Compose from https://docs.docker.com/compose/install/
Clone the repository: git clone https://github.com/cristianzsh/freki.git
Edit the .env file to configure environment variables
For production use, edit nginx/freki.conf to enable HTTPS
Run the platform using docker-compose up or make

Usage

git clone https://github.com/cristianzsh/freki.git

Clones the Freki source code repository locally

docker-compose up

Starts the Freki platform using Docker Compose

make

Alternative command to launch Freki via Docker

Smart Usage Notes

Integrate Freki with threat intelligence platforms to automate enrichment of malware indicators.Leverage the REST API to build custom automated malware triage workflows in SOC environments.Use Yara pattern matching to proactively hunt for emerging threats in enterprise networks.Deploy Freki in a containerized environment to enable scalable malware analysis pipelines.Incorporate community commenting features to foster collaborative threat analysis and knowledge sharing.