How to Conduct Advanced Static Analysis in a Malware Sandbox

This contributed article outlines how the ANY.RUN cloud-based sandbox performs static and dynamic analysis for malware investigations, showing use cases for PDFs, LNKs, email files, Microsoft Office documents, and compressed archives; it highlights features such as JavaScript/URL extraction, command-line inspection, RSPAMD email scoring, macro and QR code analysis, and the ability to submit embedded files for further analysis.