MalChela banner
dwmetz dwmetz

MalChela

Development community

Description

A YARA & Malware Analysis Toolkit written in Rust.

Installation

This entry records only its repository, not the path inside it, so there is no exact command to give. Open the source below and copy the folder into ~/.claude/skills/, or the file into ~/.claude/agents/.

README

MalChela v4.3.1

A YARA & Malware Analysis Toolkit written in Rust.

Check out the new [MalChela instructional series](https://www.youtube.com/playlist?list=PL__KsCEzV6Ae5jA-YObTmvZEKuu-rkON6) on YouTube

PWA View CLI View

About:

**mal** — malware **chela** — "crab hand" A chela on a crab is the scientific term for a claw or pincer. It's a specialized appendage, typically found on the first pair of legs, used for grasping, defense, and manipulating things — just like these programs.


Features:

Program Function
Analyze Auto-triages a file, folder, or .app bundle: classifies with File Miner, dispatches every tool it suggests, and produces a combined MalChela Summary rollup report
Combine YARA Combines all .yara/.yar files in a directory into a single rule file
Extract Samples Recursively extracts password-protected malware archives (ZIP/RAR) using common passwords
File Analyzer Analyzes a file for hashes, entropy, PE structure, fuzzy hashes, YARA matches, NSRL lookup, and VirusTotal status
File Miner Scans a folder for file type mismatches and metadata
Hash It Generates MD5, SHA1, and SHA256 hashes for a single file
Hash Check Checks if a given hash exists in a provided hash set file
Threat Intel Query Multi-source ha