9 online tools for malware analysis
Nowadays, malware and emergent threats are part of our digital life. We must know or be aware of these kinds of threats so we don’t fall into the tentacles of cybercriminals. Below are nine tools that you can use to analyze malware.
Become a certified reverse engineer!
Any.Run
Any.Run is a tool that allows users to play with malware in a secure environment. This interactive tool provides dynamic analysis and static analysis on Windows machines. It parses the events happening during the execution of one or more processes. The free community version is powerful, with many resources that either users or cyber experts can use.
URL: https://any.run/
Tri.age
Hatching Triage is a malware analysis sandbox developed for supporting cross-platforms such as Windows, Android, Linux and macOS. The tool is equipped with high-volume malware analysis capabilities and malware configuration extraction for dozens of malware families. It also provides a community version and can be used to extract information about emergent threats, including malware and suspicious URLs.
URL: https://tria.ge/
0xSI_f33d
0xSI_f33d is a repository that compiles phishing and malware campaigns targeting internet end users. 0xSI_f33d aggregates phishing and malware campaigns, and as a result, an API for community integration is provided. This API can be integrated into several systems, including SIEMs, firewalls and so on. The tool also has a feature to search for specific URLs and domains and learn if the submitted artifact is then categorized as malicious.
URL: https://feed.seguranca-informatica.pt/
VirusTotal
VirusTotal is a free online service that analyzes files and URLs, making it possible to identify malicious content detectable by antivirus and website scanners. It is composed of a strong contribution from the cybersecurity community and provides a community API for integration. Cyber Intelligence and Hunting features are paid and available for enterprises or researchers.
URL: https://www.virustotal.com
CyberChef
CyberChef is a web application developed by GCHQ, also known as Cyber Swiss Army Knife. From the CyberChef Github page: “CyberChef is a simple, intuitive web app for carrying out all manner of “cyber” operations within a web browser." It can be utilized online or downloaded into a local machine.
URL: https://gchq.github.io/CyberChef/
Joe Sandbox
Joe Sandbox is an online sandbox that detects and analyzes potential malicious files and URLs on Windows, Android, Mac OS, Linux and iOS for suspicious activities. This tool performs deep malware analysis and generates detailed reports in several formats. It provides a community version with many powerful features that help cyber experts and users with threat analysis.
URL: https://www.joesandbox.com/
Hybrid Analysis
Hybrid Analysis is a free malware analysis service that detects and analyzes unknown threats using a unique technology. Hybrid Analysis is a file analysis approach that combines runtime data with memory dump analysis to extract all possible execution pathways, even for the most evasive malware.
All data extracted from the Hybrid Analysis engine is processed automatically and integrated into the malware analysis reports. Users can search thousands of existing malware reports or download samples and IOCs (source).
URL: https://www.hybrid-analysis.com/
Intezer Analyze
Intezer automates security operations by simulating the complex decision-making process and threat analysis skills of experienced analysts. Intezer Analyze combines genetic code analysis with other fundamental techniques to automate the investigation of emerging threats with a user-friendly GUI and easy to use. It has a community version that can be used to investigate cyber threats, including malware and suspicious URLs.
URL: https://analyze.intezer.com/
urlscan.io
URLscan is a simple and effective sandbox for websites. This tool allows to find and analyze malicious websites and phishing URLs. It provides different utilities for monitoring websites like health checks and screenshots.
URL: https://urlscan.io/
Sources
- Malware online Tools, GitBook - Segurança-Informática
- awesome-incident-response, GitHub
- Exam Pass Guarantee
- Live expert instruction
- Hands-on labs
- CREA exam voucher
In this Series
- 9 online tools for malware analysis
- How AsyncRAT is escaping security defenses
- Chrome extensions used to steal users' secrets
- Luna ransomware encrypts Windows, Linux and ESXi systems
- Bahamut Android malware and its new features
- LockBit 3.0 ransomware analysis
- AstraLocker releases the ransomware decryptors
- Analysis of Nokoyawa ransomware
- Goodwill ransomware group is propagating unusual demands to get the decryption key
- Dangerous IoT EnemyBot botnet is now attacking other targets
- Fileless malware uses event logger to hide malware
- Nerbian RAT Using COVID-19 templates
- Popular evasion techniques in the malware landscape
- Sunnyday ransomware analysis
- Blackguard malware analysis
- Behind Conti: Leaks reveal inner workings of ransomware group
- ZLoader: What it is, how it works and how to prevent it | Malware spotlight [2022 update]
- WhisperGate: A destructive malware to destroy Ukraine computer systems
- Electron Bot Malware is disseminated via Microsoft's Official Store and is capable of controlling social media apps
- SockDetour: the backdoor impacting U.S. defense contractors
- HermeticWiper malware used against Ukraine
- MyloBot 2022: A botnet that only sends extortion emails
- Mars Stealer malware analysis
- How to remove ransomware: Best free decryption tools and resources
- Purple Fox rootkit and how it has been disseminated in the wild
- Deadbolt ransomware: The real weapon against IoT devices
- Log4j - the remote code execution vulnerability that stopped the world
- Rook ransomware analysis
- Modus operandi of BlackByte ransomware
- Emotet malware returns
- Mekotio banker trojan returns with new TTP
- Android malware BrazKing returns
- Malware instrumentation with Frida
- Malware analysis arsenal: Top 15 tools
- Redline stealer malware: Full analysis
- A full analysis of the BlackMatter ransomware
- A full analysis of Horus Eyes RAT
- REvil ransomware: Lessons learned from a major supply chain attack
- Pingback malware: How it works and how to prevent it
- Android malware worm auto-spreads via WhatsApp messages
- Malware analysis: Ragnarok ransomware
- Taidoor malware: what it is, how it works and how to prevent it | malware spotlight
- SUNBURST backdoor malware: What it is, how it works, and how to prevent it | Malware spotlight
- ZHtrap botnet: How it works and how to prevent it
- DearCry ransomware: How it works and how to prevent it
- How criminals are using Windows Background Intelligent Transfer Service
- How the Javali trojan weaponizes Avira antivirus
- HelloKitty: The ransomware affecting CD Projekt Red and Cyberpunk 2077
- DreamBus Botnet: An analysis
- Kobalos malware: A complex Linux threat
- What is Operation Dream Job by Lazarus?
Get certified and advance your career!
- Exam Pass Guarantee
- Live instruction
- CompTIA, ISACA, ISC2, Cisco, Microsoft and more!
Malware analysis
Malware analysis
Malware analysis
Malware analysis