Hybrid Analysis vs Malwagon

Hybrid Analysis is a cloud malware analysis service for examining files and URLs to detect and investigate unknown threats. Its free community plan allows 30 file uploads per month, with a maximum file size of 100 MB. File analysis can include Falcon Static Analysis, reputation lookups, antivirus engines and static checks; submitted files can also receive in-depth static and dynamic analysis. Search covers reports, YARA rules, strings and indicators of compromise. Registered users can create a restricted free Public API key for submissions, searches, report retrieval and data erasure, subject to privileges. The service supports hybrid static and runtime analysis on Windows 7 and Windows 10, plus extensive static analysis of Android APK files. Listed integrations include VirusTotal, OPSWAT Metadefender and SIEM systems. Submitted material may be retained or shared at the service’s discretion, including screenshots and metadata for samples marked not to share. Terms limit use to internal business security or legitimate research.

Malwagon is a cloud-based malware analysis sandbox that examines files, URLs, commands, documents, packages, hashes and Windows kernel drivers in isolated virtual machines. It returns scored verdicts with evidence. Static analysis includes YARA, capability identification, obfuscated-string recovery, packer and entropy checks, signature scanning, disassembly, secrets scanning and configuration extraction. Dynamic analysis records ETW kernel telemetry, memory forensics, hypervisor introspection, network traffic and JA3/JA4 fingerprints. Reports can include MITRE ATT&CK mappings and generated YARA, Sigma and Suricata rules, with exports including ATT&CK Navigator, STIX 2.1, MISP, PDF and DOCX. Accepted executables and archives can be up to 128 MB. Each run uses its own full virtual machine, discarded afterward. Samples stay on Malwagon-operated infrastructure; third parties receive hashes and derived indicators for reputation lookups. Free-tier reports are public, while paid plans can keep scans private. Pro costs $79 a month, billed $790/yr billed yearly, and includes 200 scan credits per month, private reports, REST API and MCP access.