domains / families / security / performing-dynamic-analysis-with-any-run

performing-dynamic-analysis-with-any-run

separate

'Perform interactive dynamic malware analysis using the ANY.RUN cloud sandbox

When to use

• Interactive malware analysis is needed where the analyst must click dialogs, enter credentials, or navigate installer screens
• Rapid cloud-based sandbox analysis without maintaining local sandbox infrastructure
• Malware requires user interaction to proceed past anti-sandbox checks (document macros requiring "Enable Content")
• Sharing analysis results with team members via public or private task URLs
• Comparing behavior across different OS versions (Windows 7, 10, 11) available in ANY.RUN

When not to use

• static analysis alone
• highly sensitive samples that cannot be uploaded to cloud services

Skill page

Source