ANY.RUN Analyzes Malware With ChatGPT

ANY.RUN, a cybersecurity company for malware researchers, tested ChatGPT and now is ready to share the expert results.

ANY.RUN, a cybersecurity company developing an interactive sandbox analytical platform for malware researchers, tested ChatGPT and now is ready to share the expert results.

OpenAI released ChatGPT in November 2022 and by February 2023 the chatbot already has over 600 million monthly visits, according to SimilarWeb. It’s scary to think how many people are being armed with the tools to develop advanced malware.

If ChatGPT can build malware, can it help to analyze it? ANY.RUN made a special experiment to investigate if AI can help to perform malware analysis.

How did ANY.RUN test ChatGPT?

ANY.RUN fed the chatbot malicious scripts of varying complexity and asked it to explain the purpose behind the code. The researchers used simple prompts such as “explain what this code does” or “analyze this code”. Furthermore, it was made several round ups with malicious scripts of varying complexity.

Marketing Technology News: SnapLogic Announces Winners of 2022 Enterprise Automation Awards

ChatGPT can recognize and explain simple malware

Based on the testing, it can recognize and explain malicious code, but it only works for simple scripts. The AI understands the purpose of the code, highlights its malicious intent and logically lays out what it does step-by-step.

ChatGPT struggles in real-life situations

The performance the AI was able to show so far is impressive, there is no doubt about it. But in a real-life situation it usually won’t be dealing with such simple code, like in the previous examples.

So for the next couple of tests, ANY.RUN ramped up the complexity and provided it with code that is closer to that of what one can expect to be asked to analyze on the job. Unfortunately, ChatGPT just couldn’t keep up.

Marketing Technology News: MarTech Interview with Andrew Feigenson, CEO at Vivvix