Using Any.Run

Another very popular choice among malware analysts for the automated detonation of malware is Any.Run, located at https://app.any.run. Navigating to the page for this, the browser will present the following home page:

Figure 4.13 – The Any.Run home page

Any.Run has a very polished home page, with a heatmap showing the sources of detonations, interesting samples, trending malware families, and other information. In the upper left-hand corner, we have the ability to start a new task and detonate our sample. One key difference is that we must create an account on Any.Run in order to make use of the detonation sandbox.

Once our account is created, we may begin to detonate our sample by clicking the New Task button:

Figure 4.14 – The new task pane in Any.Run

Once we click to begin the task, we are presented with the name of the file, and a warning that this submission will be shared publicly, as...