Emotet Detection Tool

Overview

Emotet Detection Tool is a Python-based malware detection tool designed to identify potential Emotet malware infections using YARA rules.

The tool performs file and directory scanning and analyzes files based on predefined malware indicators such as suspicious strings, libraries, network indicators, and file signatures.

This project was developed for malware analysis and cybersecurity research purposes.

---

Features

• Scan individual files for suspicious patterns.
• Scan complete directories recursively.
• Detection based on YARA rules.
• Support for adding custom YARA rules.
• Support for removing existing YARA rules.
• Display loaded detection rules.
• File size limitation to improve performance.
• Scan timeout protection.
• Colored terminal interface.
• Logging system for scan results.

---

Project Structure

Emotet-Detection-Tools/
│
├── tools.py
│ └── Main Python detection tool
│
├── Win32.Trojan.Emotet.yara
│ └── YARA detection rules
│
├── rule we made.yara
│ └── Custom YARA detection rules
│
└── README.md
└── Project documentation

---

Requirements

Python 3.x

Required Python libraries:

yara-python
colorama
pyfiglet

Install dependencies:

pip install yara-python colorama pyfiglet