Static Malware Analysis For Claude Code

Open Static Malware Analysis (Claude Skill)

A Claude Code skill for fast, structured static malware analysis without executing suspicious files. I'm sure there are plenty out there already, or you can build your own, but I've found this one quite useful.

   

Table of Contents

• Installing the Skill to Claude Code
• Basic Usage
• Example Prompt
• Example Output Sections
• Features
• Disclaimer
• Contributing
• Thank You
• License

Installing the Skill to Claude Code

1. Clone or copy this folder to your local machine.
2. Place the skill in your Claude Code commands directory as:
   • ~/.claude/commands/open-static-malware-analysis/
3. Ensure the main skill file is available at:
   • ~/.claude/commands/open-static-malware-analysis/open-static-malware-analysis.md
4. Keep any supporting reference files in the same skill directory structure if your setup uses them.

Basic Usage

• In Claude Code, provide or reference a suspicious file and ask for static analysis.
• Example prompts:
  • Analyze this sample with open-static-malware-analysis
  • Run static malware triage on /path/to/file
  • Is this binary malicious? Perform static analysis only
• The skill guides analysis through:
  • file type verification by magic bytes
  • hashing and metadata collection
  • structural analysis by file format
  • string and IOC extraction
  • entropy and obfuscation checks
  • MITRE ATT&CK mapping and risk scoring
  • report generation with YARA and Sigma opportunities

Example