ANY.RUN
Interactive malware sandbox where you can click through a live detonation.
Ghidra
NSA's open-source reverse engineering suite.
Hybrid Analysis
Free malware sandbox powered by CrowdStrike Falcon Sandbox technology.
ID Ransomware
Identifies ransomware families from ransom notes or encrypted files.
Joe Sandbox
Deep automated malware analysis with detailed behavioral reports.
MalwareBazaar
abuse.ch repository for sharing malware samples with tags and signatures.
No More Ransom
Europol-backed portal of free ransomware decryptors.
VirusTotal
Multi-engine scanner for files, URLs, domains and IPs with community comments and relationships.
YARA
Pattern-matching rules language for classifying malware.
Get the daily intel picture. The Early Bird™ Intelligence Brief lands in your inbox every morning. Subscribe →