# Malware Deobfuscator

> Malware Deobfuscator analyzes obfuscated malware scripts and generates code, behavior and indicator reports. A deterministic pass extracts indicators with regexes and maps keyword signatures to MITRE ATT&CK; an OpenAI or Ollama model supplies deobfuscated code and execution-flow explanations. The CLI handles individual files or directories and can emit JSON.

- Type: Tool
- Targets: App
- Category: Native analysis tools
- Relationship: Foundation tool
- Sources reviewed: 2026-11-06
- Added to the catalog: 2026-11-06
- Original resource: <https://github.com/X-Abhishek-X/malware-deobfuscator>
- Primary source: <https://github.com/X-Abhishek-X/malware-deobfuscator/blob/f33320c31f07e252433d8eaf4937c43426ae1bd4/README.md>
- Catalog page: <https://awesomerea.org/resources/malware-deobfuscator/>
- Record JSON: <https://awesomerea.org/resources/malware-deobfuscator/record.json>
- Chinese version: [简体中文](https://awesomerea.org/zh/resources/malware-deobfuscator/index.md)

## Requirements & limits

- **Prerequisites:** Python 3.9 or later is specified in the package metadata.
- **Prerequisites:** Full analysis requires an OpenAI API key or a configured Ollama model; IOC extraction works without one.
- **Scope:** The included samples are described as defanged educational examples.
- **License:** MIT license.

## Primary sources

1. <https://github.com/X-Abhishek-X/malware-deobfuscator/blob/f33320c31f07e252433d8eaf4937c43426ae1bd4/README.md>
2. <https://github.com/X-Abhishek-X/malware-deobfuscator/blob/f33320c31f07e252433d8eaf4937c43426ae1bd4/pyproject.toml>

## More in Native binaries

- [flashkit](https://awesomerea.org/resources/flashkit/index.md) · Tool
- [Kaiju](https://awesomerea.org/resources/kaiju-re-framework/index.md) · Tool
- [sqlce](https://awesomerea.org/resources/sqlce/index.md) · Tool
- [inkterop](https://awesomerea.org/resources/inkterop/index.md) · Tool
- [wMatcher](https://awesomerea.org/resources/wmatcher/index.md) · Tool
- [tasm-rs](https://awesomerea.org/resources/tasm-rs/index.md) · Tool

## About this entry

The description was reviewed against primary sources.
Original editorial content: MIT. Linked projects, papers and assets retain their own rights and licenses.