GenRex: Generator of Regular Expressions

Malware detection, dynamic analysis, pattern generation algorithm, regular expressions, rules generation algorithm, YARA, GenRex

GenRex is a unique tool for detecting similarities in artifacts (extracted data) from executable files and for generating regular expressions from them. It implements an advanced algorithm to create regular expressions, improves state-of-the-art algorithms, and includes domain-specific optimizations and pattern detections for optimal results.

Generated regular expressions can be used for malware detections, for example, with YARA or any other pattern-matching tool. We also tested GenRex on publicly available behavioral reports and achieved a high True Positive Rate of 92.34% and a low False Positive Rate of 0.01%.

https://github.com/avast/genrex