Executing (parts of) payloads is often an effective part of malware analysis, revealing things quicker than static analysis. You just need to do it in an isola

Executing (parts of) payloads is often an effective part of malware analysis, revealing things quicker than static analysis. You just need to do it in an isolated environment - it can be a virtual machine (while VM escapes exist, they are quite rare) or a separate laptop that doesn't have any personal data and will be wiped afterward.