Hybrid Analysis
hybrid-analysis.com
What it is
Hybrid Analysis is a cloud malware analysis service for examining files and URLs to detect and investigate unknown threats. Its free community plan allows 30 file uploads per month, with a maximum file size of 100 MB. File analysis can include Falcon Static Analysis, reputation lookups, antivirus engines and static checks; submitted files can also receive in-depth static and dynamic analysis. Search covers reports, YARA rules, strings and indicators of compromise. Registered users can create a restricted free Public API key for submissions, searches, report retrieval and data erasure, subject to privileges. The service supports hybrid static and runtime analysis on Windows 7 and Windows 10, plus extensive static analysis of Android APK files. Listed integrations include VirusTotal, OPSWAT Metadefender and SIEM systems. Submitted material may be retained or shared at the service’s discretion, including screenshots and metadata for samples marked not to share. Terms limit use to internal business security or legitimate research.
Spec sheet
- Purpose
- Hybrid Analysis is a free community malware analysis service that detects and analyzes unknown threats.Read 30 Sep 2026 · hybrid-analysis.com
- Trial
- CrowdStrike’s Hybrid Analysis page invites users to request a Falcon Sandbox free trial.Read 30 Sep 2026 · go.crowdstrike.com
- API
- Registered users can generate a restricted free Public API key, and the API supports file and URL submissions, search, report retrieval, and data erasure subject to privileges.Read 30 Sep 2026 · hybrid-analysis.com
- Integrations
- The FAQ lists integrations including VirusTotal, OPSWAT Metadefender, SIEM systems such as HP ArcSight, Suricata, and Phantom.Read 30 Sep 2026 · hybrid-analysis.com
- Privacy
- Submitted content may be retained, used, and distributed at Hybrid Analysis’s discretion; even samples marked not to share may have screenshots and associated metadata shared with the community.Read 30 Sep 2026 · hybrid-analysis.com
- Headquarters
- Frankfurt, GermanyRead 28 Sep 2026 · hybrid-analysis.com
- Analysis
- The service accepts files for in-depth static and dynamic analysis.Read 30 Sep 2026 · hybrid-analysis.com
- File analysis
- The homepage says file collections receive Falcon Static Analysis (ML), reputation lookups, AV engines, and static analysis.Read 30 Sep 2026 · hybrid-analysis.com
- Intended use
- The terms limit use of the service and its content to internal business security or legitimate research purposes.Read 30 Sep 2026 · hybrid-analysis.com
- Monthly limit
- CrowdStrike says Hybrid Analysis limits file uploads to 30 per month.Read 30 Sep 2026 · go.crowdstrike.com
- Paid option
- CrowdStrike offers Falcon Sandbox licenses starting at 250 files per month and describes an on-premises option for keeping files within the customer's environment.Read 30 Sep 2026 · go.crowdstrike.com
- Search
- The site offers report, YARA, and string searches, plus IOC search.Read 30 Sep 2026 · hybrid-analysis.com
- Supported analysis systems
- The FAQ says hybrid static and runtime analysis is supported on Windows 7 and Windows 10, with extensive static analysis for Android APK files.Read 30 Sep 2026 · hybrid-analysis.com
- Upload limit
- The homepage states a maximum upload size of 100 MB.Read 30 Sep 2026 · hybrid-analysis.com
Plans and prices
Strong points and limits
Strong points
- Free community plan includes 30 monthly uploads.
- Accepts files and URLs for analysis.
- Searches reports, YARA, strings, and IOCs.
- API supports submissions, searches, and report retrieval.
Limits
- Uploads are limited to 30 per month.
- Maximum upload size is 100 MB.
- Submitted content and metadata may be shared.
Who it suits
It suits security teams or researchers who need file or URL analysis, search, and API access. Its terms restrict use to internal business security or legitimate research.
Verdict
Hybrid Analysis combines file and URL analysis with useful search and API functions on a free community plan. Check the upload limits and sharing terms before submitting sensitive material.
Where Specifiction places it
- Malware Analysis Sandboxes#11 of 277.6