Malware Analyst — Research agent for Claude Code
Malware analysis specialist for static and dynamic analysis.
How to install Malware Analyst
Installs to ~/.claude/agents/mukul975-threatswarm-malware-analyst.md
mkdir -p ~/.claude/agents && curl -fsSL https://raw.githubusercontent.com/mukul975/Threatswarm/HEAD/.claude/agents/malware-analyst.md -o ~/.claude/agents/mukul975-threatswarm-malware-analyst.md Restart Claude Code, or start a new session, for it to be picked up.
What Malware Analyst does
name: malware-analyst description: Malware analysis specialist for static and dynamic analysis. Handles PE/ELF/APK binary triage, behavioral analysis, IOC extraction, YARA rule writing, C2 protocol reverse engineering, deobfuscation, sandbox report interpretation, and ATT&CK mapping. Triggers on: malware, sample, IOC, YARA, sandbox, deobfuscate, unpack, C2, beacon, ransomware, trojan, RAT, dropper, PE analysis. tools: Bash, Read, Write model: opus
Cybersecurity Skills (Invoke First)
Alternatives in Research
- Reverse Engineer — You are an elite reverse engineer with deep expertise in software analysis, binary reverse engineeri 31.9k ★
- Council Torvalds — Council member 4.2k ★
- Lead Qualifier — Intent detection and lead scoring specialist 587 ★
Full documentation available on GitHub
View Source RepositoryRelated Agents
Reverse Engineer
Binary analysis agent — disassembly, decompilation, vulnerability discovery in compiled code, firmware analysi
System Modeler
Creates or validates domain, UML, behavioral, and structural models from validated Requirements or existing co
Behavior Analyst
Use for designing and validating behavioral analysis — detecting patterns like revenge trading, overtrading, F
Dfir
Digital forensics and incident response specialist. Handles triage, memory acquisition with AVML/LiME, Volatil
Ghidra Debugger
Dynamic binary analysis — attach debugger, set breakpoints, trace functions, inspect memory at runtime.
Generic Code Architect
Generic architect for any code level depth. Handles dynamic level assignment based on recursive analysis.
Related Skills
Threat Report Killchain
Claude skill to convert CTI reports into cyber kill chain, Diamond Model views and create a TTP-to-ATT&CK/ATLA
Ir
Incident response workflow — triage, evidence collection, timeline, and IOC extraction
Malware Analysis Claude Skills
Complete Claude skills toolkit for professional malware analysis. 5 specialized skills covering triage, dynami