- Home
- Malware Analysis Sandboxes
- Hybrid Analysis
Hybrid Analysis
Frankfurt, Germany
What it is
Hybrid Analysis is a free community malware analysis service for detecting and investigating unknown threats. It accepts files for in-depth static and dynamic analysis and supports URL analysis. File collections can receive Falcon Static Analysis using machine learning, reputation lookups, antivirus engine checks, and static analysis. The community plan allows 30 file uploads per month, with a maximum upload size of 100 MB. Search options include reports, YARA rules, strings, and indicators of compromise. Registered users can generate a restricted free Public API key for file and URL submissions, searches, report retrieval, and data erasure, subject to privileges. Hybrid static and runtime analysis is supported for Windows 7 and Windows 10; Android APK files receive extensive static analysis. Listed integrations include VirusTotal, OPSWAT Metadefender, and SIEM systems such as HP ArcSight, Suricata, and Phantom. Submitted content may be retained, used, or distributed at the service’s discretion. Even samples marked not to share may have screenshots and associated metadata shared with the community. The terms limit use to internal business security or legitimate research. The service is cloud-deployed and headquartered in Frankfurt, Germany.
For and against
For
- Supports static and dynamic file analysis
- Includes URL analysis and IOC search
- Restricted free Public API key is available
- Integrates with VirusTotal and SIEM systems
Against
- Limited to 30 file uploads per month
- Maximum upload size is 100 MB
- Submitted content may be retained or shared
- Use is limited to security or research purposes
The verdict
Hybrid Analysis offers file and URL investigation with search and API tools under a free community service. Review its upload limits and content-sharing terms before submitting material.
Who it suits
Hybrid Analysis may suit security teams or researchers examining files, URLs, and indicators of compromise for internal business security or legitimate research. Its stated terms limit use to those purposes.
Plans and prices
Hybrid Analysis community service
30 file uploads per month · 100 MB maximum upload size
Read 30 Sep 2026 · hybrid-analysis.com
On the record
- Analysis
- The service accepts files for in-depth static and dynamic analysis.hybrid-analysis.com · read 30 Sep 2026
- API
- Registered users can generate a restricted free Public API key, and the API supports file and URL submissions, search, report retrieval, and data erasure subject to privileges.hybrid-analysis.com · read 30 Sep 2026
- File analysis
- The homepage says file collections receive Falcon Static Analysis (ML), reputation lookups, AV engines, and static analysis.hybrid-analysis.com · read 30 Sep 2026
- Integrations
- The FAQ lists integrations including VirusTotal, OPSWAT Metadefender, SIEM systems such as HP ArcSight, Suricata, and Phantom.hybrid-analysis.com · read 30 Sep 2026
- Intended use
- The terms limit use of the service and its content to internal business security or legitimate research purposes.hybrid-analysis.com · read 30 Sep 2026
- Monthly limit
- CrowdStrike says Hybrid Analysis limits file uploads to 30 per month.go.crowdstrike.com · read 30 Sep 2026
- Paid option
- CrowdStrike offers Falcon Sandbox licenses starting at 250 files per month and describes an on-premises option for keeping files within the customer's environment.go.crowdstrike.com · read 30 Sep 2026
- Privacy
- Submitted content may be retained, used, and distributed at Hybrid Analysis’s discretion; even samples marked not to share may have screenshots and associated metadata shared with the community.hybrid-analysis.com · read 30 Sep 2026
- Purpose
- Hybrid Analysis is a free community malware analysis service that detects and analyzes unknown threats.hybrid-analysis.com · read 30 Sep 2026
- Search
- The site offers report, YARA, and string searches, plus IOC search.hybrid-analysis.com · read 30 Sep 2026
- Supported analysis systems
- The FAQ says hybrid static and runtime analysis is supported on Windows 7 and Windows 10, with extensive static analysis for Android APK files.hybrid-analysis.com · read 30 Sep 2026
- Trial
- CrowdStrike’s Hybrid Analysis page invites users to request a Falcon Sandbox free trial.go.crowdstrike.com · read 30 Sep 2026
- Upload limit
- The homepage states a maximum upload size of 100 MB.hybrid-analysis.com · read 30 Sep 2026
