Malva.RE now powers MalwareBazaar with deep static reports

An exciting integration into a key threat intelligence ecosystem

Since early August 2025, static analysis reports generated by Malva.RE are now integrated into MalwareBazaar, one of the most respected open platforms for sharing malware samples and threat intelligence metadata.

What is MalwareBazaar?

Run by the non-profit initiative abuse.ch, MalwareBazaar is widely used by SOCs, CERTs, threat researchers, and security vendors to collect, triage, and investigate fresh malware samples. The platform provides valuable metadata and API access for automated workflows.

Thanks to the integration with Malva.RE, users now get instant access to a deep static analysis report for each supported sample, without needing to download or execute anything.

Why this matters for Malva.RE

Malva.RE is a static-first malware analysis platform designed to automate time-consuming tasks like decapsulation, deobfuscation, and unpacking. It supports over 50 file formats, including Office documents, PDFs, LNKs, XPS, MSI, JS/VBS/WSF scripts, and more — without running the sample.

Our engine also extracts configuration data from over 20 malware families, including:

• XWorm
  ⮕ Example: MalwareBazaar sample
• QuasarRAT
  ⮕ Example: Malva.RE report
• AsyncRAT, LimeRAT, njRAT, RevengeRAT, DcRat, and others

We extract C2 infrastructure directly from the binary and push this intelligence to MalwareBazaar, providing researchers with actionable IOCs even before dynamic analysis is performed.

This partnership is a strong validation of our platform’s resilience, performance, and technical accuracy. We’re a very small French company with a strong vision and a deep commitment to building practical, trustworthy tools for the community.

We’d like to thank the MalwareBazaar team for their trust, and we’re looking forward to continuing to support the community with better tooling.