close
close

Apre-salomemanzo

Breaking: Beyond Headlines!

ANY.RUN Sandbox now automates interactive analysis of complex cyberattack chains
aecifo

ANY.RUN Sandbox now automates interactive analysis of complex cyberattack chains

Dubai, United Arab Emirates, November 20, 2024, CyberNewsWire

ALL.RUN announced the launch of Smart Content Analysis, an advanced mechanism within its Automated Interactivity feature that allows the service to automatically trigger complex malware and phishing attacks, helping users accelerate their investigations and gain insights. in-depth insights into malicious behavior.

About intelligent content analysis

Smart Content Analysis is a mechanism that allows the ANY.RUN sandbox to execute multi-stage cyberattacks without any user involvement. To do this, three main steps are followed:

  • Scans downloaded files to locate critical components, such as email URLs and attachments.
  • Identify key components that drive the attack forward, including URLs embedded in QR codes or rewritten by security filters.
  • Interact with malicious content in a controlled environment, for example by opening URLs in a browser or executing payloads found in email archive attachments to observe their behavior.

Automated interactivity toggle in ANY.RUN sandbox

Trigger a multi-stage attack with automated interactivity

With this new upgrade, ANY.RUN’s sandbox can automatically execute the following content types found in different stages of complex cyberattacks:

  • URL in QR codes
  • Modified links
  • Multi-step redirects
  • Email Attachments
  • Payloads with archives

Interested users can take advantage of a 14-day free trial of ANY.RUN to explore automated interactivity and other PRO features.

Consider the following multi-stage phishing attack analyzed with automated interactivity.

Phishing email analyzed with automated interactivity

The system automatically opens the .eml file submitted by the user via Outlook, detects a PDF attachment and analyzes its contents.

ANY.RUN sandbox static analysis module reveals hidden link in QR

Inside the PDF, it identifies a QR code, instantly extracts the embedded URL and opens it in a browser.

ANY.RUN sandbox automatically solves CAPTCHA challenges

When faced with a CAPTCHA challenge, commonly used to evade detection, the feature successfully resolves it and moves on to the next stage of the attack.

The latest phishing page designed to steal victims’ credentials

Eventually, it manages to reach the final phishing page, ensuring not only full detection of the attack, but also providing additional context about the threat in question.

Adaptive to new threats

ANY.RUN’s intelligent content analysis is designed to adapt to the evolving threat landscape. With regular attack scenario updates from ANY.RUN’s threat research team, the system stays aligned with emerging attack methods, allowing it to handle even the latest and greatest threats. more evasive.

Explore intelligent content analysis

Automated interactivity helps security professionals streamline and improve their threat investigations:

  • Less manual effort: No more unnecessary clicks. Let the sandbox handle repetitive actions so you can focus on the big picture.
  • Faster, deeper insights: Go beyond surface detections with simulations that uncover hidden layers of threats.
  • Quick analysis: Accelerate your analysis with automation that scales as fast as you do, from simple phishing links to multi-level attack chains.

Users can request a 14-day free trial of ANY.RUN’s interactive sandbox to try automated interactivity for free.

๐€๐›๐จ๐ฎ๐ญ ๐€๐๐˜.๐‘๐”๐

ANY.RUN serves more than 500,000 cybersecurity professionals worldwide, offering an interactive malware analysis platform targeting Windows and Linux environments. With advanced threat intelligence tools such as TI Lookup, YARA Search and Feeds, ANY.RUN improves incident response and provides analysts with essential data to effectively counter cyber threats.

Users can connect via social media: X, LinkedIn

Contact

ANYRUN FZCO
(email protected)
+1 657-366-5050