Ghidra

Automating Malware Reverse Engineering with Local LLM

A researcher presented the MLMalwareAnalyzer project, which automates malware analysis using a local LLM (Qwen3), Ghidra, and Neo4j. The system decompiles code, analyzes each function with the LLM, and builds call graphs to identify behavioral patterns such as file encryption and communication with a C2 server.

Ghidra