System and method for offloading packet processing and static analysis operations

A non-transitory storage medium including one or more software modules operating as part of a cloud computing service and, upon execution, performing operations comprising:

• determining whether an object includes one or more characteristics associated with a malicious attack without execution of the object, the one or more characteristics includes information that suggests the object is associated with a known exploit;
• and
• responsive to determining that content of the object includes the one or more characteristics associated with the malicious attack, executing the object and monitoring behaviors of the executed object that suggest the object is associated with the malicious attack.

A method for detecting a cyberattack, comprising:

• determining, by logic operating as part of a cloud computing service, whether an object includes one or more characteristics associated with a malicious attack without execution of the object, the one or more characteristics includes information that suggests the object is associated with a known exploit including (i) a particular source address that is associated with the known exploit or a Uniform Resource Locator (URL) that is associated with the known exploit;
• and
• responsive to determining that content of the object includes the one or more characteristics associated with the malicious attack, executing the object by a virtual execution logic operating as part of the cloud computing service, the virtual execution logic further monitors for behaviors of the object suggesting the object is associated with the malicious attack.