Awesome

MalwareLibrary

About this Library

This is a malware library built by NEUAI (Hyperlink: https://github.com/NEUAI/).

Research use only. Don't do evil.

Reference

• Microsoft Malware Naming Convention (Hyperlink: https://www.microsoft.com/en-us/wdsi/help/malware-naming)

Naming Format (Type:Platform/Family.Variant!Information)

e.g. Backdoor:Win32/Caphaw.D!lnk

• Type — describes what the malware does on your computer. Worms, viruses, trojans, backdoors, and ransomware are some of the most common types of malware.

• Platform — indicates the operating system (such as Windows, Mac OS X, and Android) that the malware is designed to work on. The platform is also used to indicate programming languages and file formats.

• Family — grouping of malware based on common characteristics, including attribution to the same authors. Security software providers sometimes use different names for the same malware family.

• Variant letter — used sequentially for every distinct version of a malware family. For example, the detection for the variant ".AF" would have been created after the detection for the variant ".AE".

• Additional information — provides extra detail about the malware, including how it is used as part of a multicomponent threat. In the example above, "!lnk" indicates that the threat component is a shortcut file used by Trojan:Win32/Reveton.T.