{"id":5709,"date":"2023-09-06T11:23:31","date_gmt":"2023-09-06T11:23:31","guid":{"rendered":"\/cybersecurity-blog\/?p=5709"},"modified":"2023-09-12T06:43:27","modified_gmt":"2023-09-12T06:43:27","slug":"how-to-use-interactivity-in-a-malware-sandbox","status":"publish","type":"post","link":"https:\/\/any.run\/cybersecurity-blog\/how-to-use-interactivity-in-a-malware-sandbox\/","title":{"rendered":"How to Use Interactivity in a Malware Sandbox\u00a0"},"content":{"rendered":"\n

<\/p>\n\n\n\n

This article will explore how malware researchers, SOC teams, or DFIR team members can benefit from an interactive sandbox. We’ll also look at the advantages of this type of software. <\/p>\n\n\n\n

What is an interactive malware sandbox?  <\/h2>\n\n\n\n

It’s a virtual environment that allows you to perform actions in a virtual machine during execution, just as you would on a real system. This includes typing, clicking, pasting from the clipboard, and more. <\/p>\n\n\n\n

\"ANY.RUN
ANY.RUN interactive sandbox shows a real-time representation of network, file, and memory activity<\/figcaption><\/figure>\n\n\n\n

<\/p>\n\n\n\n

In <\/strong>ANY.RUN<\/strong><\/a>, users can interact with virtualized machines through their browser<\/strong>. Our cloud VMs are highly performant \u2014 there’s almost no latency during execution, and logging doesn’t introduce any slowdowns. This makes the user experience similar to working with a local setup. <\/p>\n\n\n\n

Aren’t all sandboxes interactive? <\/strong>No. While some sandboxes offer an interactive mode, most leave the malware execution process behind the scenes, providing a report afterward. This method has its uses, but there are several disadvantages to this approach: <\/p>\n\n\n\n