<!-- Comprehensive technical malware analysis report for security analysts -->
# Malware Analysis Report

**Report ID:** {{REPORT_ID}}  
**Classification:** {{CLASSIFICATION}}  
**Generated:** {{DATETIME_FULL}}  
**Analyst:** {{ANALYST}}  

---

## 📋 Executive Summary

**Severity:** {{SEVERITY_EMOJI}} {{SEVERITY}}  
**Malware Family:** {{MALWARE_FAMILY}}  
**Tags:** {{TAGS}}

{{SUMMARY}}

---

## 📁 Sample Information

| Property | Value |
|----------|-------|
| **Filename** | `{{FILENAME}}` |
| **File Type** | {{FILE_TYPE}} |
| **File Size** | {{FILESIZE_HR}} ({{FILESIZE}} bytes) |
| **MD5** | `{{MD5}}` |
| **SHA1** | `{{SHA1}}` |
| **SHA256** | `{{SHA256}}` |

---

## ⏱️ Analysis Timeline

| Event | Timestamp |
|-------|-----------|
| **Session ID** | `{{SESSION_ID}}` |
| **Analysis Started** | {{ANALYSIS_START}} |
| **Analysis Completed** | {{ANALYSIS_END}} |
| **Duration** | {{ANALYSIS_DURATION}} |

---

## 🎯 MITRE ATT&CK Mapping

| Tactic | Technique | ID |
|--------|-----------|-----|
{{MITRE_TABLE}}

**Techniques Identified:** {{MITRE_COUNT}}

---

## 🔍 Indicators of Compromise (IOCs)

**Total IOCs:** {{IOCS_COUNT}}

{{IOCS_MARKDOWN}}

### YAML Format (for SIEM/SOAR)

```yaml
{{IOCS_YAML}}
```

---

## 📝 Analysis Notes

{{ANALYSIS_NOTES}}

---

## 📊 Technical Analysis

### Static Analysis

_Add static analysis findings here_

### Dynamic Analysis

_Add behavioral analysis findings here_

### Network Analysis

_Add network traffic analysis here_

### Memory Analysis

_Add memory forensics findings here_

---

## 🛡️ Recommendations

1. **Immediate Actions**
   - Block identified IOCs at perimeter
   - Scan endpoints for sample hashes
   - Review network logs for C2 communication

2. **Short-term Actions**
   - Update detection signatures
   - Patch vulnerable systems
   - Enhance monitoring for identified TTPs

3. **Long-term Actions**
   - Review security controls
   - Conduct threat hunting exercises
   - Update incident response procedures

---

## 📚 References

- MITRE ATT&CK: https://attack.mitre.org/
- VirusTotal: https://www.virustotal.com/
- MalwareBazaar: https://bazaar.abuse.ch/

---

## 📄 Report Metadata

| Field | Value |
|-------|-------|
| **Report ID** | {{REPORT_ID}} |
| **Generated At** | {{DATETIME_FULL}} |
| **Timezone** | {{TIMEZONE}} ({{TIMEZONE_ABBR}}) |
| **UTC Time** | {{DATETIME_UTC}} |
| **Generated By** | {{GENERATED_BY}} |
| **Hostname** | {{HOSTNAME}} |

---

**Classification: {{CLASSIFICATION}}**

_This report was automatically generated by Reversecore_MCP._
