cuckoosandbox/cuckoo

Health v2 · maintenance only

Flags: archived no_license

Adoption not part of the score

5964 stars · 1723 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-29, confidence not recorded

Cuckoo Sandbox is an open-source automated dynamic malware analysis system that executes suspicious files in an isolated environment and reports on their behavior. The 2.x codebase is officially unmaintained while a full rewrite is underway.

Use cases

• analyze suspicious files in a sandbox
• automated malware behavior analysis
• detonate malware samples safely
• generate behavioral reports for malware
• reverse engineer unknown binaries
• build a threat intelligence pipeline

When to choose

• you need to observe what an unknown file does when executed
• you want a self-hosted malware analysis lab
• you need automated behavioral reports from suspicious samples

When to avoid

• you need maintained software with active support - 2.x is unmaintained
• you want a production-ready system without self-managing forks
• you only need static analysis rather than dynamic execution

Facets

application · maturity abandoned

security workflow-automation monitoring security reverse-engineering python cross-platform malware-analysis sandbox dynamic-analysis behavioral-analysis threat-intelligence linux

Member repositories

For agents

markdown · JSON · MCP: product_card(name="cuckoosandbox/cuckoo")