Current malware (malicious software) analysis tools focus on detection and family classification but fail to provide clear and actionable narrative insights into the malignant activity of the malware. Therefore, there is a need for a tool that translates raw malware data into human-readable descriptions. Developing such a tool accelerates incident response, reduces malware analysts’ cognitive load, and enables individuals having limited technical expertise to understand malicious software behaviour. With this objective, we present MaLAware, which automatically summarizes the full spectrum of malicious activity of malware executables. MaLAware leverages cuckoo sandbox analysis and large language models (LLMs) to explain malware behaviour. It parses sandbox JSON reports and uses LLMs to correlate executable activities and generate concise summaries. We benchmark the tool’s performance on five open-source LLMs. The evaluation uses the human-written malware behaviour description dataset as ground truth. The model’s performance is measured using 11 extensive performance metrics, which boosts the confidence of MaLAware’s effectiveness. The current version of the tool, i.e., v0, supports Qwen2.5-7B, Llama2-7B, Llama3.1-8B, Mistral-7B, and Falcon-7B, along with the quantization feature for resource-constrained environments. MaLAware lays a foundation for future research in malware behaviour explanation, and its extensive evaluation sets a benchmark for LLMs’ ability to narrate malware behaviour in actionable and comprehensive manner.