← incident responder

Malware Triage — Static Analysis, Sandboxing, and Family Identification

intermediate 4h

Triage unknown binaries in minutes using static indicators (strings, PE header, imports) and dynamic analysis (sandbox detonation), identify malware families, and extract IOCs for IR scope expansion.

Lessons

1 Static Analysis — PE Header, Strings, and Import Analysis
25 min
2 Sandbox Analysis — Dynamic Detonation and IOC Extraction
25 min

Module Quiz

Test your knowledge before moving on.

Take Quiz →