Malware Analysis & Sandboxing

What it does

• Static analysis pipeline: file identification and hashing → threat-intel lookups (VirusTotal, MalwareBazaar) → PE imports, strings and entropy interpretation.
• Suspicious API reference: Windows APIs grouped by intent (process injection, persistence, anti-analysis, C2, keylogging, defense evasion) so an import table alone hints at capability.
• YARA rule generation: three tiered templates (hash-specific, family-level strings, network IOC) plus guidance on testing rules against clean binaries to avoid false positives.
• Behavioral report reading: extracts process-tree anomalies, DGA domains, beacon intervals, Run-key persistence and shadow-copy deletion from Cuckoo/CAPE output and maps them to MITRE ATT&CK.
• Sandbox build guide: host-only networking, snapshots, FakeNet-NG/INetSim, Regshot, Autoruns, plus anti-anti-VM hardening tips.
• Standard report format: hashes, classification, confidence, network/host IOCs and ATT&CK mapping.

Who it's for

• SOC analysts, incident responders and threat-intel researchers
• Detection engineers writing their first YARA rules who need false-positive discipline
• Security learners building a safe home malware-analysis lab

Example uses

1. "Do a static analysis of this exe" → hashes computed, imports/strings/entropy interpreted, packing and suspicious capabilities summarized.
2. "Write a family-level YARA rule from these infostealer samples" → Tier 2 rule from shared strings and mutexes, plus commands to verify zero hits on clean binaries.
3. "Interpret this CAPE report" → classifies the sample as ransomware from the process tree and vssadmin usage, and emits IOCs with T1490 ATT&CK mapping.

Read the instructions in this file and follow them to help me:
https://raw.githubusercontent.com/Masriyan/Claude-Code-CyberSecurity-Skill/HEAD/skills/05-malware-analysis/SKILL.md

What I want: (describe your task here)

Install the skill I found on Claude Skill Mart.
Copy the skills/05-malware-analysis folder from the GitHub repo Masriyan/Claude-Code-CyberSecurity-Skill into my ~/.claude/skills/malware-analysis-sandboxing/.
When it's done, tell me in one line what this skill can do.