February 5, 2024

Doctor Web has scheduled an update for the cloud-based version of its Dr.Web vxCube sandbox. As a result, the service will be unavailable on February 7 between 9 a.m. and 10 a.m. GMT.

To meet ever-evolving user demands, the update introduces a number of important changes that will simplify file examination and subsequent data analysis.

The upcoming release will also support the following Linux-based systems (text mode only):

• Debian 11 (Bullseye) ARM 64-bit
• Debian 8 (Jessie) ARMel 32-bit
• Debian 11 (Bullseye) ARMhf 32-bit
• Debian 11 (Bullseye) Intel 32-bit
• Debian 11 (Bullseye) Intel 64-bit
• Debian 10 (Buster) MIPS 32-bit
• Debian 11 (Bullseye) MIPSel 32-bit
• Debian 11 (Bullseye) MIPSel 64-bit
• Debian 8 (Jessie) PowerPC 32-bit
• Debian 11 (Bullseye) PowerPCel 64-bit

Furthermore, the API response containing analysis results will also include information about the relevant YARA rules and tags. This will allow users to quickly identify which of the previously created rules have been triggered. A newly introduced option also lets users choose whether they want to include or exclude the video footage of an object's behaviour in an API response. The recording will remain accessible in the Dr.Web vxCube web interface regardless of this option's setting. A download issue affecting archives containing the results of a Linux-based analysis has been resolved.

The upcoming release also introduces a number of tweaks for the sandbox’s UI and brings its Help and documentation up to date.

Dr.Web vxCube is a virtual analyser that examines the behaviour of suspicious files by running them in an isolated VM environment. It detects signs of system infection and promptly helps prevent attacks, even sophisticated ones involving advanced persistent threats (APT).

The analyser can examine files intended to be run under Windows and Linux. Dr.Web vxCube also lets you examine APK files (Android). The sandbox is available as a cloud-based service and an on-premise solution.

Use this webform to receive demo access to the cloud-based version of Dr.Web vxCube.