Malware Analysis

This is your comprehensive toolkit for analyzing suspicious binaries and scripts, from initial triage with pestudio and capa to writing production YARA rules. It walks through both static analysis (strings extraction, import enumeration, entropy checks) and dynamic behavior profiling in sandboxes with process monitoring and network capture. The anti-analysis detection section is especially practical, covering the real evasion techniques you'll encounter like sleep delays, VM checks, and timing attacks. If you're doing incident response or threat intelligence work, the C2 protocol analysis and fileless malware sections alone justify having this loaded. The unpacking guidance covers both automated tools and manual OEP dumping when dealing with custom packers.

Install to Claude Code

npx -y skills add hypnguyen1209/offensive-claude --skill malware-analysis --agent claude-code