malware-classification

Activate this skill when the user mentions ANY of: "YARA", "YARA rules", "YARA signature", "write YARA", "detection rule", "packer detection", "packer identification", "packed binary", "UPX", "Themida", "VMProtect", "ASPack", "crypter", "obfuscated binary", "entropy", "entropy analysis", "section entropy", "high entropy", "malware family", "malware classification", "malware triage", "classify sample", "classify binary", "sample analysis", "unknown binary", "suspicious binary", "malware type", "ransomware", "RAT", "remote access trojan", "loader", "dropper", "stealer", "infostealer", "wiper", "botnet", "rootkit", "backdoor", "keylogger", "banker trojan", "cryptominer", "miner", "coinminer", "spyware", "adware", "fuzzy hash", "ssdeep", "TLSH", "imphash", "import hash", "similarity analysis", "sample similarity", "binary similarity", "homologous binary", "IOC", "indicator of compromise", "IOC extraction", "C2", "command and control", "C2 extraction", "network indicators", "host indicators", "malware analysis", "behavioral analysis", "static analysis", "dynamic analysis", "sandbox analysis", "sandbox evasion", "anti-analysis", "anti-debug", "anti-VM", "malware indicators", "threat classification", "campaign attribution", "malware report", "classification report", "triage report", "PEiD", "Detect It Easy", "DIE", "pestudio", "CAPEv2", "ANY.RUN", "VirusTotal", "MalwareBazaar", "Malpedia", "threat intel", "family fingerprint", "malware cluster", "behavioral signature", "string decryption", "config extraction", "C2 config", "MITRE ATT&CK", "TTP mapping", "kill chain", "execution chain".