Welcome to Anubis

Anubis is a service for analyzing malware.

Submit your Windows executable or Android APK and receive an analysis report telling you what it does. Alternatively, submit a suspicious URL and receive a report that shows you all the activities of the Internet Explorer process when visiting this URL.

Want notifications about Anubis downtimes and/or updates? Follow us on twitter.

Announcement

We are proud to present our most recent substantial extension to Anubis: the analysis of Android APKs (codename Andrubis)! Like the core-Anubis does for Windows PE executables, Andrubis executes Android apps in a sandbox and provides a detailed report on their behavior, including file access, network access, crypto operations, dynamic code loading and information leaks. In addition to the dynamic analysis in the sandbox, Andrubis also performs static analysis, yielding information on e.g. the app's activities, services, required external libraries and actually required permissions. To analyze apps straight away from your smartphone, check out our experimental submission app! Available in the Play Store soon.

News

09.10.2012 We are currently migrating to new hardware. Please report any service problems you experience!
30.05.2012 You can now also submit Android APKs!
16.02.2012 Five years Anubis!
05.07.2010 We have improved our analysis of network dumps. Extended DNS data (such as multiple DNS replies) are now available in the analysis reports.
02.07.2010 Dionaea/Nepenthes can again automatically upload samples to Anubis. We will reply with an analysis report!
01.06.2010 The Dll-analysis has been improved. Simply upload a dynamically linked library file for Windows, and we'll try to figure out how to analyze it best!
01.03.2010 We have vastly improved analysis performance of the sandbox. You should now get more analysis results for the same execution duration!

Choose the subject for analysis

For analyzing Javascript and Flash files try Wepawet.

File: (max. 8MB)	Choose the file that you want to analyze. The file must be a Windows executable or Android APK. (details)
URL:	Choose the URL that you want to analyze. The URL will be analyzed in Internet Explorer. Note: We will not analyze a binary that you provide via this URL. We will merely use a browser to check the given URL for a possible drive-by download or similar attack!

Get a priority boost

Enter the code that you see in the image on the left and your submission will be analyzed before all automatic submissions.

:

Anubis Version: 0.5

Last Modified: 2013-05-01