Advanced Search
Discussions
Static Analysis
Dynamic Analysis
Sample Database
Simple, transparent pricing
- All features included
- Top support priority
- Enterprise Use Allowed
- Email support
Features
Everything you need, nothing you don't
Search & Discuss
MRF provides advanced search to retrieve your favorite samples from the database — by hash, name, or even scores and metas.
Create discussion pages to request a specific sample or just discuss any topic.
- Query by anything.
- Find a sample by hash, name, score or any metadata a module extracted — not just by filename.
- Discuss in place.
- Discussion pages sit beside the samples, so a request or a debate stays attached to what it is about.
- Your zoo, your server.
- Self-hosted, so the samples and everything said about them stay on infrastructure you control.
Static Analysis
When a new sample is uploaded, a variety of static-analysis modules run to extract important information. That information is then displayed in a beautiful UI and can be used for search.
- Runs on upload.
- Static modules fire the moment a sample lands — there is no queue to babysit or button to press.
- Fields, not a blob.
- Headers, hashes, signatures and strings come out as structured data rather than a wall of output.
- Feeds the search.
- Everything extracted becomes searchable, so today's upload answers next month's question.
Dynamic Analysis
MRF provides modules for 3rd-party or in-house services performing dynamic analysis or further scanning. Get VirusTotal, Hybrid Analysis reports or YARA scan results — extract the most from your samples!
- Third-party or your own.
- VirusTotal and Hybrid Analysis plug in beside in-house services on the same footing.
- YARA scan results.
- Run your rule set across the zoo and see which samples your signatures actually catch.
- Results arrive as they land.
- External analysis takes time, so reports attach to the sample as each service reports back.
See it in action
What users say
Trusted by people who clean real machines
A very good malware organizer
“I'm a researcher in a CERT company collecting hundreds of samples every day, and we needed a way to organize and triage them locally. Our IT department installed MRF and made it available on the corporate network. Our honeypots and spam collectors plug directly into the framework — samples arrive already tagged with their source and useful comments. We just open them, get the info we need for forensics or intelligence, and that's it! Very useful to follow spam campaigns and new threats.”
Steven A.
July 2018