Archivarix · Echo

malware-intel

Hybrid Analysis

The community portal of CrowdStrike's Falcon Sandbox, with a large public corpus of malware analyses searchable by file hash. The website itself is captcha-protected, so the workable route is its API, keyed via a free account. A solid stop for checking whether a hash has already been analyzed and what the sandbox observed.

API key required captcha

Why it’s useful & how it works

Free account → restricted key; MUST send 'User-Agent: Falcon Sandbox' or requests rejected. Page reCAPTCHA'd; the API path is the integration point.

What’s inside

Large public sandbox corpus.

API access

https://hybrid-analysis.com/api/v2/search/hash (api-key + UA 'Falcon Sandbox')

An API key is required — usually free; see the endpoints above for where to get one.

Access

May require solving a captcha before it responds.

Homepage

https://hybrid-analysis.com/