Back to main

tria.ge

  • Advantages:
    • Completely free to use
    • Fast analysis speed
    • Detailed reporting
    • Good history of samples
    • Free application for researcher license
    • Custom YARA Rulesets (Researcher license)
  • Limitations:
    • Verification emails may take some time to send
    • Lack of MITMproxy

any.run

  • Advantages:
    • Interactive analysis
    • Comprehensive API support
    • Uses mitm proxy to provide exact request information even in raw
  • Limitations:
    • Requires registration with a business email
    • Limited upload size of 16mb
    • Limited features without a paid account
    • Hunter license for individuals costs 299 USD a month

VirusTotal

  • Advantages:
    • Free to use
    • No account required
  • Limitations:
    • Some malware samples have hardcoded VirusTotal HWID's and account names into their system checks, so it never actually runs any malicious code
    • Non-detailed reporting
    • Potential for abuse
    • Limited usefulness
    • Limited features like sample download behind an EXPENSIVE enterprise license, pricing goes up to $10,000/month