Sample analysis is the technical examination of a malware specimen to understand its code, behavior, capabilities, and possible relationship to other malware. Analysts may inspect code statically, run the sample in an isolated environment, or combine both approaches to observe actions such as credential theft, file changes, network communication, or remote control.
In cyber security, analysis helps defenders assess risk, develop detection rules, and identify malware lineage. For example, code overlap between a new sample and a known family can support a link between them, but does not by itself prove who created or operated the malware. Because samples may be dangerous, researchers use controlled sandboxes and avoid exposing real systems or sensitive data.