Malva.RE is a SaaS service for static and structural malware analysis. Files are dissected without being executed, and the layers in which malicious code is encapsulated are stripped away automatically. According to the vendor, it supports more than fifty file formats, including Office documents, PDF, VBA macros, scripts, AutoIt executables, PowerShell, LNK and MSI. Features include a VBA decompiler with detection of VBA stomping and purging, multi-layer deobfuscation, and extraction of malware configurations and IOCs. The target groups are SOC analysts, CERTs and CSIRTs, and threat researchers. A free account and a demo request are offered.
Malva.RE is developed by Yneos, a French SAS that also provides cybersecurity services, with offices in Le Bourget-du-Lac, France. An on-premise version is offered to organisations that want to control where samples are stored. The trust page states hosting in the European Union and a design aimed at GDPR compliance, without naming a provider or country. A data processing agreement is not mentioned there. Ask about the hosting location, the sub-processors and the processing terms before you upload sensitive samples.