{"id":6091,"date":"2023-11-01T05:40:18","date_gmt":"2023-11-01T05:40:18","guid":{"rendered":"\/cybersecurity-blog\/?p=6091"},"modified":"2024-09-20T12:12:21","modified_gmt":"2024-09-20T12:12:21","slug":"8-malware-sandbox-features","status":"publish","type":"post","link":"https:\/\/any.run\/cybersecurity-blog\/8-malware-sandbox-features\/","title":{"rendered":"8 ANY.RUN Features you Need to Know About"},"content":{"rendered":"\n

ANY.RUN<\/a> is an online sandbox designed for real-time malware analysis. It provides instant threat assessments and lets you interact with potentially harmful samples safely within a virtual machine. <\/p>\n\n\n\n

Our sandbox is easy to start with but has deeper features you’ll want to master. In this article, we’ve compiled a list of less obvious but highly useful features that can make a big difference in specific situations. <\/p>\n\n\n\n

Let\u2019s get started!<\/strong><\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

Task home screen tips and tricks\u00a0<\/strong><\/h3>\n\n\n\n

On the main task screen \u2014 which is shown above \u2014 you can access VM emulation through our VMC stream. It also shows real-time activity for processes, files, and network traffic. <\/p>\n\n\n\n

The interface focuses on delivering key insights quickly and is generally self-explanatory. However, there are some tips and tricks worth noting.<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

1. Unchecking \u201cOnly important\u201d <\/h2>\n\n\n\n

By default, the process view displays only important, malicious or suspicious processes. To see all processes running in the virtual machine, simply uncheck this filter. <\/p>\n\n\n\n

This can be useful when you’re conducting a deep-dive analysis and don’t want to miss any potential IOCs. Sometimes, even processes that appear benign can exhibit malicious behavior when looked at in the context of other system activities.<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

2. Viewing TTPs for each process <\/h2>\n\n\n\n

You can click on a process to view its details, then scroll down to see a list of Tactics, Techniques, and Procedures generated by that process. TTPs give you insights into the threat’s behavior and containment strategies. <\/p>\n\n\n\n

This feature let\u2019s you quickly get a clear view of what the malware aims to do \u2014 whether it’s lateral movement, data exfiltration, privilege escalation, or any other suspicious activities. This knowledge helps you to prioritize your containment and mitigation steps effectively, allowing for a more targeted response.<\/p>\n\n\n\n\n

\n\n

\nEasily analyze malware<\/span> in ANY.RUN interactive sandbox \n<\/p>\n\n\nGet started for free\n<\/a>\n<\/div>\n\n\n\n