MetaDefender Sandbox (previously known as OPSWAT Filescan Sandbox) is a comprehensive malware analysis platform that integrates advanced tools, services, and proprietary engines to focus on Indicators of Compromise (IOCs) and threat extraction from files, documents, scripts, and URLs at high speed and scale. It offers deeper insights than traditional static analysis tools, providing actionable intelligence in more cases. Its unmatched speed significantly reduces the number of artifacts requiring sandboxing, streamlining the analysis process.
For example, using a cutting-edge unique emulation engine, even extremely obfuscated, state-of-the-art and environment aware malware can be de-obfuscated and dissected in less than 15 seconds. Furthermore, any relevant IOCs (e.g. second stage download files or URLs) are automatically crosschecked with threat intelligence databases to provide accurate attribution.
Coming with a simple RESTful HTTP based API and an open and agile architecture, Filescan offers easy integration into various platforms and corporate systems. The on-premise instance can be deployed on a single server and instantly allows processing of thousands of files/URLs per day. The web interface comes with very user-centric reports that are easy to understand and contain in-depth data if needed.
Key features include
Extract Indicators of Compromise (IOCs) from a wide range of executables, documents, scripts, and URLs
Emulates 90%+ of highly obfuscated state-of-the-art macro malware (VBA), VBS, PowerShell, Jscript, MSHTA, XSL, WSF
Rapid & deep analysis at high scale (50K+ scans per day/ machine)
REST API for automated integration
Integrates with Virus Total, YARA, MITRE ATT&CK framework and more
Clean and intuitive reports with in-depth data on demand and able to export in HTML, PDF, MISP, STIX
Simple and cost-effective on-premises standalone deployment or private cloud
Designed, engineered, and maintained by experienced industry experts
An overview of all features is available on the up-to-date product page: https://www.opswat.com/products/metadefender/sandbox