PowerLZY/Bold-Falcon

Extends Cuckoo Sandbox with a modernized architecture (reorganized modules for VM management, analysis processing, and signatures) and incorporates machine learning-based threat detection using TF-IDF and API call sequence analysis to classify malware behavior. Integrates pre-trained models for static analysis (string patterns, MalConv) and dynamic analysis, with optimized model loading and comprehensive reporting that surfaces prediction scores and feature attribution alongside traditional sandbox telemetry.

160 stars. No commits in the last 6 months. Available on PyPI.