malware-intel
ANY.RUN
An interactive online malware sandbox whose public report feed makes a large corpus of analyses freely browsable. You search and read public reports on the website; the API is limited to paid plans. Reach for it when you want to see how a suspicious file behaves when run, without executing it yourself.
Sin comprobación programática; abre la propia búsqueda del archivo.
Por qué es útil y cómo funciona
ANY.RUN is an interactive sandbox, meaning you can watch a file execute in a browser-based virtual machine in real time and interact with it as it runs. Its community feeds a large public corpus of analyses, which you can browse and search freely on the website without an account: look up a known hash or browse recent public submissions to find existing reports on a sample. Submitting your own files for analysis and accessing the full API require a paid plan, but reading public reports is free.
Qué contiene
ANY.RUN's community ran 6.8 million sandbox sessions in 2025 alone, a 72 percent increase over 2024, and the platform has collected roughly 3.8 billion indicators of compromise cumulatively. The public report archive covers a wide variety of Windows, Linux and web-based threats.
Acceso por API
https://api.any.run/v1/ (API-Key; paid plans only)
Se requiere una clave de API (normalmente gratuita); consulta los endpoints anteriores para saber dónde obtenerla.
Acceso
Freely reachable, no key, login, or captcha.