Triage Thursday

Ep. 101: New Analysis Log View


Happy Thursday! It’s time for another update on the Triage Thursday blog post. As always, we’re here to support you and make the internet a safer place with the help of our lovely Triage Sandbox.

This week, in addition to our usual updates on malware family detection and configuration extraction, we have some exciting news to share. We’ve just launched a new feature called Analysis Logs. You can find it next to the report button in the behavioral section. This feature is a total rework of the old analysis logs view and will help you gain advanced insights into a sample’s runtime behavior.

The Analysis Logs provide a handy way to access information about sample runtime details. For example, when a sample is running on a Windows VM, you can observe various types of processes in execution, all kinds of modifications or accesses to registry entries, file operations, mutex operations, and network activities.

In addition to the information mentioned above, the Android VM’s Analysis Logs also provide Android-related details, such as system services utilized by the application during runtime, the Content URI the application intends to observe, as well as the key value associated with the Shared Preferences.

If you’re lucky, you might even find a hidden C2 in the Shared Preferences section.

To get more information about a specific operation, simply click on any item that you are interested in. You may also use keywords to filter your search by typing them in the search bar at the top of the page. We hope that you find this new feature helpful in your journey to hunt evil.

Moving forward, please find our weekly update below. Stay tuned and enjoy!

New Families This Week

Updates for Existing Families

If you have any feedback, questions, or issues regarding Triage feel free to reach out to us any time - we do our best to respond to all feedback but even if we can’t get back to you straight away your files will go into our list of things to review and help us prioritize tasks.

You can contact us through the website, or using the Feedback option on an analysis report page.

Not signed up yet? Head over to to register for a free account.

You may also like: