Dubai Silicon Oasis, United Arab Emirates, October 3rd, 2024, CyberNewsWire
ANY.RUN has announced an upgrade to its Threat Intelligence Portal, enhancing its capabilities to identify and analyze emerging cyber threats. This upgrade underscores ANY.RUN’s commitment to providing comprehensive threat intelligence solutions, empowering users to navigate the ever-evolving landscape of cyber threats.
About Threat Intelligence Lookup
The main page of ANY.RUN TI portal
Threat Intelligence Lookup is a streamlined platform designed to help users find relevant threat data extracted from ANY.RUN’s extensive database of malware analysis sessions carried out in its interactive sandbox. This tool transforms isolated data into a holistic view of both persistent and emerging threats, offering users insights into malicious activities, suspicious connections, and hidden indicators of compromise.
Accessible through an intuitive web interface and an API for seamless integration with existing security solutions, TI Lookup allows users to examine various data points including:
- Processes
- Modules
- Files
- Network activity
- Registry interactions
This comprehensive approach enables cybersecurity analysts to gain detailed context about attacks, helping them understand the nature, scope, and potential impact of threats.
Expanded Search Capabilities
In addition to the enhancements to Threat Intelligence Lookup, ANY.RUN has significantly expanded its search capabilities, now offering over 40 parameters for querying its extensive database. This upgrade allows users to filter searches by file hashes, IP addresses, domain names, and more, facilitating a more targeted and efficient investigation of potential threats.
How TI Lookup Helps in Investigating Emerging Threats
ANY.RUN showcased the effectiveness of its TI Lookup feature through a practical use case. By utilizing a single suspicious IP address, users can efficiently identify associated malware.
Search by the IP address in ANY.RUN TI Lookup
For instance, investigating the IP address by submitting the query destinationIP:”185.196.9.26″ revealed connections to Redline malware, which is used to steal login credentials and other sensitive data.
The close integration between the ANY.RUN sandbox and Threat Intelligence Lookup allows users to directly access recorded sandbox sessions where the specific IP address was detected. By accessing the sandbox session, users can examine the malware’s actions in a secure environment.
Analysis of the Redline stealer in the ANY.RUN sandbox
One of the significant advantages of TI Lookup is its ability to provide immediate insights into threat behavior, collecting crucial data such as Indicators of Compromise (IOCs) and Tactics, Techniques, and Procedures (TTPs).
With these significant upgrades, ANY.RUN reaffirms its position as a leader in threat intelligence solutions, equipping cybersecurity analysts with the tools necessary to combat emerging threats effectively.
Users who want to experience ANY.RUN’s enhanced Threat Intelligence portal firsthand can sign up for a 14-day free trial to unlock powerful tools for detecting, analyzing, and combating emerging cyber threats.
Contact
The ANY.RUN team
ANYRUN FZCO
pr@any.run
+1 657-366-5050
About 30yrs ago, I used the term “predictive morphology”. This is trying to predict human actions based on the “whole package’ Not just what technologies they had available at any one moment. Or, their motivations or intention’s at any one time&place. Yes, it’s critical to anticipate what anyone will do, that affects you. Abilities, intentions, actions, can change very quickly. Why does a young man, who once loved his country become a terrorist? More important why do they “GO OUT OF THEIR WAY”, to claim what they now hate, once loved? (Or at least very innocently, tolerated?) The young, and idealistic are the easiest for any cult, or terrorist group to “play with” (in the worse possible way).
To anticipate any threat, you have to understand it’s source, but the “whole package’ involves recognizing the granular details of not just what motivates anyone to do anything at anyone moment, but what “motivates” anyone to do anything, anytime in their life. It’s less the circumstances that matter. It’s how we respond to each of them, that show everyone (and ourselves) who we truly are. Sorry, I do babble. To offer something helpful? (Right, good luck…)
Since it’s unlikely that most of us will every meet any person we actually consider a threat at least to our person, we can: 1: Intercept communications and “hope” we know what their intentions are. 2: “Know” what their “saying”, but not what their “talking about”. So? One way to “change the metric” is to introduce “turbulence” into a conversation or communication. Disrupt the conversation without causing a riot. A simple example: Say, your in a group of people who get emotional and LOUD. You can’t be heard by being louder.
But you can be heard, by getting other peoples ATTENTION. How? Lower your voice, and use body language to show everyone your trying to say SOMETHING. Make that body language more pathetic and desperate, but never “weak”. (A fine line) Not angry and domineering. That turns (most) men/women off, very quick. Don’t threaten people, who are more comfortable with being curious. And sympathetic. You’d be amazed at how many people will shut up, and TRY to hear what you say. Trust me. It works. It’s late, more later.