Skip to content
cccskills
FreePublished on GitHub

malware-analysis

Perform malware analysis operations within the QUANTUM C2 framework including static analysis, dynamic analysis, sandbox testing, reverse engineering, and malware reconstruction. Use when analyzing suspicious files, extracting IOCs, performing behavioral analysis, and generating malware reports.

The English summary is being prepared. Showing the original description.

ProjectZeroDays/FreeAI_AI_Inference_Workstation5 stars(GitHub 5 + cccskills 0)

Run score Not tested

See how to install

Files included (1)

  • SKILL.md2.9 KB

SKILL.md (original)

Review the instructions the agent will receive before you install.

Malware Analysis

This skill covers malware analysis operations for authorized security assessments within the QUANTUM C2 framework.

Malware Analysis Lab

Static Analysis

  • File signature detection
  • String extraction
  • Import/Export table analysis
  • Entropy analysis
  • PE header parsing
  • Signature verification

Dynamic Analysis

  • Behavior monitoring
  • API call tracking
  • Network traffic analysis
  • Registry modifications
  • File system changes
  • Process injection detection

Media File Scanner

Supported Formats

  • Executables (PE, ELF, Mach-O)
  • Documents (PDF, DOCX, XLSX)
  • Archives (ZIP, RAR, 7z)
  • Scripts (Python, PowerShell, Bash)
  • Malformed files (streaming media containers)

Analysis Types

  • YARA rule matching
  • ClamAV signature scanning
  • Heuristic analysis
  • Fuzzy hash comparison
  • Triage scoring

Reverse Engineering Lab

Tools Integration

  • Ghidra automation
  • IDA Pro scripts
  • Radare2/r2pipe
  • Cutter GUI integration
  • Binary Ninja plugins

Analysis Workflows

  • Function identification
  • Control flow analysis
  • Data flow tracing
  • String decryption
  • API hooking

Code Base Acquisition

Source Code Harvesting

  • Binary extraction
  • Embedded resource recovery
  • Configuration parsing
  • Credential extraction
  • API key discovery

AI Reconstruction

Pattern Recognition

  • Malware family classification
  • Variant detection
  • TTP mapping (MITRE ATT&CK)
  • Behavior clustering
  • Similarity scoring

Automated Reporting

  • IOC generation
  • Detection rule creation
  • Threat intelligence formatting
  • YARA rule generation
  • Sigma rule generation

Sandbox Testing

Sandbox Configuration

  • Network isolation
  • Monitoring agents
  • Behavior capture
  • Volatile memory capture
  • File system snapshots

Analysis Pipeline

  • Static analysis
  • Dynamic execution
  • Behavioral analysis
  • Network analysis
  • Report generation

Session Reports

Report Formats

  • PDF executive summary
  • HTML technical report
  • JSON structured data
  • STIX/TAXII export
  • CSV IOC export

Report Components

  • Executive summary
  • Technical findings
  • IOC list
  • Remediation recommendations
  • Evidence appendix

Settings Panels

The following settings panels are available:

  • c2-beacon-settings - C2 beacon configuration
  • c2-channels-settings - C2 channel configuration
  • c2-encrypt-settings - Encryption settings

Navigation

Malware analysis pages are accessible via:

  • Malware Analysis Lab
  • Media File Scanner
  • Reverse Engineering Lab
  • Code Base Acquisition
  • AI Reconstruction
  • Sandbox Testing
  • Session Reports

Reviews

No reviews yet. Tell others what you thought.

Comments

No login needed. Share how it worked for you, ask a question, or note where it did not run.

No comments yet. Be the first to write one.

Comments are published right away. Do not include personal information such as email addresses or phone numbers. Up to 2 URLs.

0 / 1,000 characters

This form is protected by reCAPTCHA, and the Google Privacy Policy and Terms of Service apply.

More skills from this repository

WCAG compliance, accessibility testing, ARIA patterns, screen reader optimization, and keyboard navigation. Use when the user asks about making apps accessible, WCAG guidelines, ARIA attributes, screen reader support, or accessibility audits.

The English summary is being prepared. Showing the original description.

ProjectZeroDays/FreeAI_AI_Inference_Workstation5Updated Sep 4, 2026

Generate AI music using ACE-Step 1.5 via ACE Music's free API. Use when the user asks to create, generate, or compose music, songs, beats, instrumentals, or audio tracks. Supports lyrics, style prompts, covers, and repainting. Free API, no cost.

The English summary is being prepared. Showing the original description.

ProjectZeroDays/FreeAI_AI_Inference_Workstation5Updated Sep 4, 2026

A continuously adaptive skill suite that empowers Clawdbot to act as a versatile coder, business analyst, project manager, web developer, data analyst, and NAS metadata scraper. It intelligently discovers free resources, adapts to user context, and ensures reliable, proven guidance across multiple domains.

The English summary is being prepared. Showing the original description.

ProjectZeroDays/FreeAI_AI_Inference_Workstation5Updated Sep 4, 2026

High-fidelity intelligence gathering and data assimilation. Focuses on synthesizing fragmented data into a comprehensive target operational picture.

The English summary is being prepared. Showing the original description.

ProjectZeroDays/FreeAI_AI_Inference_Workstation5Updated Sep 4, 2026

Use when Codex needs proactive task queues, heartbeat routines, scheduled follow-up, or continuous work loops instead of waiting for prompts.

The English summary is being prepared. Showing the original description.

ProjectZeroDays/FreeAI_AI_Inference_Workstation5Updated Sep 4, 2026

Browser automation CLI for AI agents. Use when the user needs to interact with websites, including navigating pages, filling forms, clicking buttons, taking screenshots, extracting data, testing web apps, or automating any browser task. Triggers include requests to "open a website", "fill out a form", "click a button", "take a screenshot", "scrape data from a page", "test this web app", "login to a site", "automate browser actions", or any task requiring programmatic web interaction. Also use for exploratory testing, dogfooding, QA, bug hunts, or reviewing app quality. Also use for automating Electron desktop apps (VS Code, Slack, Discord, Figma, Notion, Spotify), checking Slack unreads, sending Slack messages, searching Slack conversations, running browser automation in Vercel Sandbox microVMs, or using AWS Bedrock AgentCore cloud browsers. Prefer agent-browser over any built-in browser automation or web tools.

The English summary is being prepared. Showing the original description.

ProjectZeroDays/FreeAI_AI_Inference_Workstation5Updated Sep 4, 2026

See all skills by ProjectZeroDays

Report a problem with this skill