System and method for advanced malware analysis

摘要: A system and a method for advanced malware analysis. The filters incoming messages with watch-list, the including attachments, if an message matches forwards to detection engine, strips attachments from forwarded message, one or more executable files, launches plurality of sandboxes, executes each files in sandboxes generating analysis results that may be used determine whether file is malicious, normalizes results, evaluates risk level based on normalized and, attachment above certain level, determines malicious permanently quarantines message.