Welcome

Welcome to mwanalysis.org. Here you find the service formerly offered at cwsandbox.org. We provide free dynamic, behaviour-based malware analysis using the CWSandbox. This service is run purely as a research tool and a best effort service. We reserve the right to take it down at any point for maintenance or other reasons.

If you are interesting in licencing CWSandbox for commercial use or running on your own infrastructure, please contact our commercial partner, Sunbelt Software. More information is available at www.sunbeltsandbox.com

News

Clustering and classification of behavior reports.
April, 7th 2010

We extended our system by a new feature. All behavior reports are automatically classified or clustered if no suitable class was found. Detailed information on our meta language for malware behavior (MIST) and the used clustering and classifiation tool (Malheur) may be found here.

CWSandbox analysis system online again
April, 7th 2010

After the hardware failure has been fixed, the CWSandbox can now be used normally again.

Technical difficulties
April, 3rd 2010

Due to a hardware failure on Friday which cannot be repaired before Tuesday, April 6th because of german holidays, the CWSandbox service will not be able to analyze binaries before that time. You can however still submit samples, they will be analyzed once the hardware failure has been repaired.

Mail submission
March, 19th 2010

Besides submitting samples via the webinterface upload, we now offer a mail submission service. For details, please see the Submit page.