{"id":6567,"date":"2023-12-28T09:05:54","date_gmt":"2023-12-28T09:05:54","guid":{"rendered":"\/cybersecurity-blog\/?p=6567"},"modified":"2023-12-28T10:10:26","modified_gmt":"2023-12-28T10:10:26","slug":"release-notes-december-2023","status":"publish","type":"post","link":"https:\/\/any.run\/cybersecurity-blog\/release-notes-december-2023\/","title":{"rendered":"Release Notes: Automated Interactivity (ML), New YARA Rules, and Network Signatures\u00a0"},"content":{"rendered":"\n

Welcome to ANY.RUN<\/a>\u2019s monthly update series, where we share what the team has been working on this past month.  <\/p>\n\n\n\n

In December, ANY.RUN introduced Automated Interactivity using Machine Learning. New YARA rules were added for malware families such as W4SP Stealer, Klippr, OriginBotnet, DarkGate, and IcedId. Suricata signatures were updated, adding detection for AxileStealer, Vidar, AlbumStealer and more. <\/p>\n\n\n\n

New features <\/h2>\n\n\n\n

Automated interactivity (ML) <\/h3>\n\n\n\n

ANY.RUN can now intelligently mimic human actions during task execution. Think of it as an advanced auto-clicker \u2014 the new feature uses Machine Learning to detect and sort buttons based on their importance, always choosing options that move the task forward. This includes navigating through setup forms or getting past captchas. <\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

Via the interface, the feature is disabled by default. When enabled, tasks can now run autonomously in the background, letting you focus elsewhere. And if you ever want to jump back in, you have the flexibility to take over and guide the task to completion manually. <\/p>\n\n\n\n

Read about automated interactivity in more details<\/a> <\/p>\n\n\n\n

Expanded Suricata rules <\/h2>\n\n\n\n

ANY.RUN already utilizes Suricata for network rules detection. We’re now broadening the scope of information displayed to the user when a detection occurs. Now, you\u2019ll be able to see which specific rule was triggered, identify the traffic segment affected, detail the relevant fields, and often, even see the rule itself within the interface. <\/p>\n\n\n\n

This will allow you to understand each detection better and apply our rules in your own detection processes and incident investigations. <\/p>\n\n\n\n

New YARA Rules <\/h2>\n\n\n\n

We\u2019ve added 3 new signatures to detect various activities within the task. Our latest YARA rules cover these malware families: <\/p>\n\n\n\n