This stage involves running the malware in a sandboxed environment (like Any.Run or a private VM) to monitor its behavior.

: Usually contains a single file named Lab01-01.exe and a matching DLL ( Lab01-01.dll ). 2. Static Analysis Findings

Modification of registry keys (e.g., HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run ). 4. Conclusion and Mitigation