Jotti VS Cuckoo Sandbox

Everyone of you "pirates" should be using a image of your hard-drive to restore from. This should have been done after your windows installation, updates, drivers, OS tweaks, etc. You use the free version of Macrium Reflect, you use the "make a boot thumb drive" option with the software and it will automatically partition the USB drive for you and on the non-boot partition, you stick the image. Anytime you think... Source: about 1 year ago

Anything you execute, including installers, run through VirusTotal, Jotti AntiVirus, or my personal favorite: ShieldPro. Source: about 1 year ago

Just scanned the apk on https://virusscan.jotti.org which also uses Ikarus and says that it's fine. Only Fortinet gives the same result. Source: about 1 year ago

Let me give you a pro tip from guys doing netsec since the 90s: Get rid of 3rd party AV and use https://virusscan.jotti.org/ for suspicious downloads. Source: over 1 year ago

There is also https://virusscan.jotti.org/ but virustotal is the largest one and communicates with the companies whose scanners they use to report new threats. Source: about 2 years ago

You can detonate it into a VM running an instance of Cuckoo Sandbox. If you want to go the extra mile, you can dump the memory of said VM and analyse it with Volatility Framework. Also, if you want to quickly identify behavioural patterns in executable code, you can use Mandiant's CAPA tool (though idk if it works on .pdfs). Source: 12 months ago

You should save a copy of the .exe, copy it into a VM running Cuckoo and get a report on exactly what the .exe does. Without this automated dissection, people are making educated guesses. They're probably right, but why not be certain? There is an online version too - https://cuckoosandbox.org. Source: about 1 year ago

You could use a service like cuckoo to check links/files. Source: over 1 year ago

I made my own lab in college using a series of VM's, A windows 10 machine that was packed with analysis tools, a kali listening machine (running inetsim or fakenet, I can't remember.) and I had remnux on another machine (which I ended up not really making use of, but it was there.) I used virtualbox and ran these VM's in an internal network, no internet access. Disabled all clipboard and file sharing after... Source: over 1 year ago

Another option if you want to self-host is https://cuckoosandbox.org/ . Of note, it's currently an unmaintained project so issues may not receive support, but it is free. Source: over 1 year ago