Jumal

Jumal is an AI-powered static malware analysis orchestrator designed to provide automated analysis capabilities to LLM clients via the Model Context Protocol (MCP). It streamlines the initial assessment of suspicious files by performing crucial tasks like hash generation, MIME type detection, entropy calculation, deep PE structure analysis, YARA rule scanning, and string extraction, including IOC candidates. All analysis is executed within an isolated and secure Docker container, ensuring that potentially malicious samples are processed without risk to the host system. Additionally, it can enrich analysis results with threat intelligence from VirusTotal, making it a comprehensive tool for junior malware analysts and security researchers.

主な機能

ユースケース