在云恶意软件沙箱（Hybrid Analysis、tria.ge、ANY.RUN）中删除文件和URL，并丰富MalwareBazaar、ThreatFox、URLhaus、Feodo、URLScan和VirusTotal等IOCs——直接来自Claude。
概览
该服务器向以下平台提交文件和网址;在免费/社区层（tria.ge、abuse.ch、混合分析）中，提交内容和结果可能如下。请勿提交机密、个人或专有数据。本存储库包含。您需遵守各服务商的服务条款及当地法律。参见安全、合法与负责任使用。 对一个可疑样本进行分类就意味着要同时操作四个浏览器标签页：提交到沙盒，等待，复制判决，将C2数据转向威胁情报数据库，查找VirusTotal的哈希值，然后将行为手动映射到ATT&CK。每个报告都有不同的模式，原始JSON有数百千字节——太大，无法粘贴到LLM中。 一个MCP服务器，用一个归一化的报告模式包覆。
概述（AI 翻译）
在云恶意软件沙箱中删除可疑文件和URL——并直接从Claude提取归一化判决、IOC和MITRE AT&CK技术。
[!警告] 仅供授权安全研究和防御用途。 本服务器向第三方云沙盒提交文件和网址**;在免费/社区层级（tria.ge、abuse.ch、混合分析）中，提交和结果可能公开且不可删除。请勿提交机密、个人或专有数据。本存储库不含实时恶意软件样本。您需自行遵守各供应商的服务条款及当地法律。参见安全、合法与负责任使用。
问题所在
对一个可疑样本进行分类就意味着要同时操作四个浏览器标签页：提交到沙盒，等待，复制判决，将C2数据转向威胁情报数据库，查找VirusTotal的哈希值，然后将行为手动映射到ATT&CK。每个报告都有不同的模式，原始JSON有数百千字节——太大，无法粘贴到LLM中。
解决方案
一台MCP服务器用一个规范化的报告模式包裹9个后端，包裹在20个工具之后。
本页由 AI 翻译，技术细节请以原文为准。
README
以下为原文 README 节选，完整内容请查看原文。
malware-sandbox-mcp
Detonate suspicious files and URLs in cloud malware sandboxes — and pull back normalized verdicts, IOCs and MITRE ATT&CK techniques — directly from Claude.
[!WARNING] For authorized security research and defensive use only. This server submits files and URLs to third-party cloud sandboxes; on free/community tiers (tria.ge, abuse.ch, Hybrid Analysis) submissions and results may be public and non-deletable. Do not submit confidential, personal, or proprietary data. This repository contains no live malware samples. You are responsible for complying with each provider’s Terms of Service and your local laws. See Safety, legal & responsible use.
The problem
Triaging one suspicious sample means juggling four browser tabs: submit to a sandbox, wait, copy the verdict, pivot the C2 into a threat-intel database, look the hash up on VirusTotal, then hand-map behaviours to ATT&CK. Every report has a different schema, and the raw JSON is hundreds of kilobytes — far too large to paste into an LLM.
The solution
One MCP server that wraps 9 backends behind 20 tools with a single normalized report schema. Claude submits a sample, polls asynchronously, and gets back a compact (~4K token) report: verdict, threat score, malware family, top signatures, extracted IOCs, and ATT&CK techniques enriched with tactic names and links — plus tools to retrieve artifacts (dropped files, PCAP, screenshots), enrich IOCs across six intel sources, pivot to related samples, compare verdicts across sandboxes, and export an ATT&CK Navigator layer.
Detonation takes 2–10 minutes, but Claude Desktop enforces a hardcoded ~60s MCP tool timeout. This server therefore uses an async submit → poll pattern: submit_sample returns a task_id in seconds, and each get_report(task_id) call performs exactly one status poll — no tool call ever blocks waiting for the sandbox.
Why this tool
- 9 backends, 20 tools — detonation, artifacts, enrichment, pivoting, comparison, ATT&CK export.
安装
This server does not publish a one-line install command.
Open the repository installation guide 新手？先看 mcpskill.org 教程 →配置
{
"mcpServers": {
"malware-sandbox": {
"command": "uv",
"args": ["run", "--directory", "D:\\Malware-Sandbox-mcp", "python", "server.py"],
"timeout": 600000,
"env": {
"HA_API_KEY": "",
"TRIAGE_API_KEY": "",
"ABUSECH_API_KEY": "",
"URLSCAN_API_KEY": "",
"VT_API_KEY": ""
}
}
}
}