Launch of Kunai Sandbox for Linux Malware Analysis

• •Kunai Sandbox replaces the previous DMA service for Linux malware analysis.
• •It supports both x86_64 and aarch64 architectures for comprehensive malware behavior analysis.
• •The service is open-source, allowing users to run their own instances.

CIRCL has launched the Kunai Sandbox, a new malware analysis service for Linux-based malware, replacing its previous Dynamic Malware Analysis (DMA) service. This sandbox allows users to execute Linux malware samples in an isolated environment and generates detailed dynamic-analysis reports. The Kunai Sandbox supports both x86_64 and aarch64 architectures, providing insights into malware behavior and network interactions. Users can access the service via a public web interface and are encouraged to submit only authorized files. The Kunai Sandbox is open-source, with its code available on GitHub, allowing users to run their own instances. The transition from DMA to Kunai Sandbox signifies an upgrade in malware analysis capabilities for cybersecurity professionals.