🐛 Malware Triage

Malware Triage Checklist

Step-by-step analysis workflow covering static, dynamic, and memory analysis. Track your progress and capture IOCs as you work.

⚠ Safety reminder: Never analyse malware on a production system. Use an isolated VM with no network access, snapshots enabled, and shared folders disabled. Disable VM tools that share clipboard or drag-and-drop with the host. If doing dynamic analysis, use a dedicated isolated network segment.
0/0 steps

📜 IOC Capture

File Hashes (MD5 / SHA256)

IP Addresses & Domains (C2)

File Paths & Registry Keys

Strings / Mutexes / Named Pipes

🔢 Verdict