> ## Content Index > Fetch the complete content index at: https://itsfoss.com/llms.txt > Use this file to discover other available public pages before exploring further. # Reverse Engineering Linux Distro REMnux Marks 15 Years With Major v8 Release Featuring AI Agent Support - URL: https://itsfoss.com/news/remnux-v8-release/ - Published: 2026-02-16T14:14:48.000Z - Updated: 2026-02-16T14:14:48.000Z - Description: Malware analysis Linux distro gets Ubuntu 24.04 base, a new installer, and many new tools. - Author: Sourav Rudra - Tags: News Linux has become [a lucrative target for bad actors](https://itsfoss.com/news/xz-utils-backdoor/), making specialized security tools more essential than ever. [REMnux](https://remnux.org/?ref=itsfoss.com) is a Linux distribution built specifically for such scenarios, helping researchers understand malware. While [Kali Linux](https://www.kali.org/?ref=itsfoss.com) is the go-to for penetration testing, REMnux specializes in reverse-engineering and analyzing malware. Both are essential security tools, but they serve different purposes. The [new v8 release](https://zeltser.com/remnux-v8-release?ref=itsfoss.com) brings many improvements, with some [agentic AI](https://en.wikipedia.org/wiki/AI%5Fagent?ref=itsfoss.com) support sprinkled in. ## REMnux v8: What's New? ![](https://itsfoss.com/content/images/2026/02/remnux-v8-desktop-view.png) ![](https://itsfoss.com/content/images/2026/02/remnux-v8-tools.png) **REMnux v8 desktop view (left) and its tool list (right).* Featuring an [Ubuntu 24.04 LTS](https://itsfoss.com/ubuntu-24-04-lts-review/) base, REMnux v8 comes with a new [Cast](https://github.com/ekristen/cast?ref=itsfoss.com)\-based installer that is said to be more reliable and better for handling upgrades. **Several new tools** also make it into this release, with additions like [YARA-X](https://github.com/VirusTotal/yara-x?ref=itsfoss.com), which is a Rust rewrite of the popular [YARA](https://github.com/VirusTotal/yara?ref=itsfoss.com) pattern matching tool. [GoReSym](https://github.com/mandiant/GoReSym?ref=itsfoss.com) and [Redress](https://github.com/goretk/redress?ref=itsfoss.com) are here for Go binary analysis, while [Manalyze](https://github.com/JusticeRage/Manalyze?ref=itsfoss.com) and [LIEF](https://lief.re/?ref=itsfoss.com) handle PE, ELF, and MachO file parsing. For Android analysis, there's [APKiD](https://github.com/rednaga/APKiD?ref=itsfoss.com). PDF files get [origamindee](https://github.com/mindee/origamindee?ref=itsfoss.com), and QR codes get [ZBar](https://github.com/mchehab/zbar?ref=itsfoss.com) for decoding. Python malware analysis gains [pyinstxtractor-ng](https://github.com/pyinstxtractor/pyinstxtractor-ng?ref=itsfoss.com) for unpacking PyInstaller executables and [uncompyle6](https://github.com/rocky/python-uncompyle6?ref=itsfoss.com) for decompiling bytecode. [AutoIt-Ripper](https://github.com/nazywam/AutoIt-Ripper?ref=itsfoss.com) handles AutoIt scripts. ## The AI Buff REMnux v8 adds a [new MCP server](https://github.com/REMnux/remnux-mcp-server?ref=itsfoss.com) that connects AI assistants like Claude or ChatGPT to the distro's analysis tools. The MCP server knows which tools work for different file types and how to interpret their output. The AI can automatically run multiple tools in sequence. At standard depth, analyzing a Windows executable triggers about 16 different tools in one go. It plans how to analyze, selects the relevant tools, understands the output, and correlates the results. When standard tools don't work, the AI can write custom Python scripts for things like reconstructing PE files or decoding obfuscated data. [Lenny Zeltser](https://zeltser.com/?ref=itsfoss.com), the creator of REMNux, demonstrated this with real malware samples [on his blog](https://zeltser.com/ai-malware-analysis-remnux?ref=itsfoss.com). In addition, REMnux v8 also ships with [OpenCode](https://opencode.ai/?ref=itsfoss.com), a terminal AI coding assistant that [works with the MCP server](https://docs.remnux.org/discover-the-tools/use+artificial+intelligence?ref=itsfoss.com). There are also AI plugins for tools like [Ghidra](https://github.com/NationalSecurityAgency/ghidra?ref=itsfoss.com) and [Radare2](https://github.com/radareorg/radare2?ref=itsfoss.com). ## Install REMnux v8 The developers provide quite a few ways to get this release of REMnux. The most straightforward way is to import the [virtual appliance](https://docs.remnux.org/install-distro/get-virtual-appliance?ref=itsfoss.com) into the [hypervisor](https://linuxhandbook.com/what-is-hypervisor/?ref=itsfoss.com) of your choice. If that doesn't work for you, you can [install REMnux from scratch](https://docs.remnux.org/install-distro/install-from-scratch?ref=itsfoss.com) on a dedicated system or run it as [a Docker container](https://docs.remnux.org/run-tools-in-containers/remnux-containers?ref=itsfoss.com). The source code for REMnux can be found on [GitHub](https://github.com/REMnux/distro?ref=itsfoss.com). [REMnux v8](https://docs.remnux.org/install-distro/get-virtual-appliance?ref=itsfoss.com)