Easily Extract Malware Configuration in ANY.RUN

Editor’s note: The current article was originally published on March 29, 2022, and updated on December 29, 2023.

Memory dump extraction and YARA matching are powerful detection methods for known malware families. What’s more, they can reveal detailed information about malware injected into the memory of system processes.  

But extracting malware configuration is not easy. Unless you do it with ANY.RUN.  

How memory dumps improve detection rate 

One of ANY.RUN’s main advantages lie in its simplicity, interactivity, and speed. …

any.run article configuration current december detection editor extract extraction families information malware march memory processes reveal run system yara