Malware & Reverse Engineering

Static and dynamic analysis, YARA, then real reverse engineering.

You do not need to reverse it, you need to call it

The question on the floor is whether the thing on that laptop is a nuisance or the start of a bad week, and you have about ten minutes to answer. Hashes, strings, what it did in the sandbox, and which crew reuses which infrastructure. That is usually enough to make the call.