ANY.RUN malware sandbox’s goal is to level up your research. The interactive approach allows cybersecurity specialists to influence the virtual machine. The sandbox gives access to the malware laboratory with a lot of different tools within a second.
Start your analysis immediately, and work with results in one minute. Control the process and monitor malware behavior in real-time. During the analysis of malware, you are able to drag a mouse, tap keys, reboot the system, open files, input data in the secured online sandbox.
It is not enough to run a suspicious file on a testing system to be sure in its safety. For some types of malware or vulnerabilities (e.g., APT), direct human interaction during analysis is required. A set of online malware analysis tools, allows you to watch the research process and make adjustments when needed, just as you would do it on a real system, rather than relying on a wholly automated sandbox.
The service shows many aspects of testing, such as creation of new processes, potentially suspicious or malicious files or URLs as well as registry activity, network requests and much more in real-time, allowing to make conclusions during the task execution without having to wait for the final report.
A community consisting of a large number of researchers from different countries contributes to our threat intelligence platform, allowing to collect and analyze attacks at the moment of their appearance, revealing the IOC at the initial stage. The malware reports can be accessed through public submissions and downloaded in specialized formats.
Information security audit tools provided by the service allow generating reports that contain important parts of the malware analysis, like video, screenshots, hashes as well as all the data accumulated during the task execution. The service also provides an ability for teamwork in a single desktop mode or to host a real-time presentation for several people.
Unlike fully automated malware sandboxes, the interactivity of our service allows receiving initial results
immediately after launching a task, not having to wait for the simulation to end completely.
* With an average analysis of 6 minutes, we are ready to provide you with the first data within 15 seconds.