DarknessEye Malware Analysis — User Guide

Submitting a sample

1. Send /mw in the bot.
2. Pick a source: File (single file or photo) · URL · SHA256 · Batch zip (up to 10 files).
3. Adjust options (package, timeout, priority) and tap Submit — or attach the file when prompted.
4. You receive a verdict card (type, entropy, risk, LLM assessment) and the job appears in the hub.

Job hub

• /mw jobs — all analyses with status chips and filters (all / running / reported / queued / failed).
• Tap a job for its detail card: progress bars, verdict, and action buttons.

Actions on a job

• Refresh — live progress update
• Screenshot — detonation frame as a photo
• Video — captured frames rendered to MP4
• Live — browser remote desktop of the analysis VM (SSO login required)
• Report — interactive HTML report (DC.js crossfilter dashboard, Chart.js, D3 process graph, screenshot gallery) at reports.darkcoders.com (SSO login required)
• Re-run / Stop

Password-protected archives

ZIP/JAR/XPI/CRX/APK samples get a "Password" button — reply with the actual

password, infected (the standard malware-zip convention), or none.

Useful commands

• /sandbox — detonation queue + guest status
• /malware <sha256> — hash lookup with LLM assessment
• /vt, /circl, /hibp, /shodan, /ipinfo — threat-intel lookups

Note

Everything is SSO-protected where sensitive: reports and live sessions require

login at auth.darkcoders.com; infrastructure documentation is available to

administrators at admin-docs.darkcoders.com.

← Malware Lab  ·  Docs home