Which tool should be used for dynamic malware analysis?

Dynamic malware analysis involves executing the malware in a controlled environment to observe its

behavior, such as file creation, network traffic, or system modifications. A sandbox is designed for

this purpose—it safely executes and monitors suspicious code without risking the host system. The

other tools (Decompiler, Unpacker, Disassembler) are primarily used in static analysis.

Correct answer: D. Sandbox

—