Scaling Up Malware Analysis with Gemini 1.5 Flash

This report outlines Mandiant and Google Threat Intelligence's malware analysis pipeline—Mandiant Backscatter for scalable unpacking and configuration extraction, a Hex-Rays IDA Pro decompiler cluster producing pseudo-C for downstream analysis, and Gemini 1.5 Flash for AI-driven behavioral analysis—discussing current limitations, planned decompiler improvements, richer contextual outputs, and listing several sample binaries with their SHA-256 hashes.