These buttons open the developer's own site, repository or store listing in a new tab. wares.gg does not host downloads.
About Triage
Triage is a hosted malware analysis sandbox where you submit files or URLs and get an automated report on what they do. It runs samples in customizable environments, produces behavioral detections, and extracts configurations for many malware families. Public reports can be browsed to study known threats.
It is aimed at malware analysts and threat intelligence teams. Free accounts can submit samples and view results in the browser, and an API is available for higher-volume workflows.
Strengths
- Detonates samples with behavioral detections
- Configuration extraction for many malware families
- Public reports for studying known threats
- API for automated submission
Limitations
- Requires an account
- Hosted service, not self-hosted
- Advanced features require paid plans
Details
- Pricing
- FreemiumFree malware analysis with paid commercial tiers.
- License
- Proprietary
- Developer
- Recorded Future
- Platforms
- Web
- How it runs
- Hosted service
- Account
- Required
- Works offline
- No
- Best suited for
- Analysts detonating and triaging malware samples in the cloud
- Categories
- Network tools, Security tools
- Last verified
- Added
- Provenance
- Facts checked against the developer's own pages and store listings, 1 sources on file.
Alternatives to Triage
Compare allSoftware that can replace Triage for an important use case, and what changes if you switch.
Hybrid Analysis
Free online sandbox that runs submitted files and URLs and reports on their behaviour.
Hybrid Analysis is a free online sandbox for files and URLs with behavioural reports, though submitted samples still go to a third-party service.
CAPEv2
A self-hosted automated malware sandbox that extracts payloads and parses malware configurations.
CAPEv2 is an open-source sandbox you host yourself with payload extraction and config parsing, but requires a complex setup with analysis virtual machines.
VirusTotal
Online service that checks a URL or file against many antivirus engines and URL scanners.
VirusTotal is free and aggregates verdicts from many antivirus engines for files and URLs rather than detonating samples for detailed behaviour reports.
Similar software
Related functionality, not necessarily a direct replacement.
urlscan.io
Sandbox for the web that loads a URL and records screenshots, requests and indicators.
capa
Identify likely capabilities inside executable files.
YARA
Pattern-matching engine for identifying and classifying malware samples.
REMnux
Linux toolkit for reverse engineering and analysing malicious software.
FLARE-VM
Installation scripts that turn a Windows virtual machine into a malware analysis and reverse-engineering workstation.
MISP
An open-source threat intelligence platform for sharing, storing and correlating indicators of compromise.
