{
  "id": "malpedia_family_id",
  "kind": "datatype",
  "status": "draft",
  "name": "Malpedia malware family ID",
  "doc": "Identifier of a malware family in Malpedia, the malware corpus and reference library run by Fraunhofer FKIE: a platform prefix, a period and the family name in lowercase, with underscores (and rarely hyphens) between words, for example win.agent_tesla. The prefixes in use are aix, apk, asp, elf, fas, ios, jar, js, jsp, osx, php, pl, ps1, py, sh, symbian, vbs and win. The family page is https://malpedia.caad.fkie.fraunhofer.de/details/<id>, and Wikidata property P9096 stores that path (details/<id>).",
  "is_pii": false,
  "categories": [
    "software"
  ],
  "langs": [
    "common"
  ],
  "classification": "identifier",
  "regexp": "^(?:aix|apk|asp|elf|fas|ios|jar|js|jsp|osx|php|pl|ps1|py|sh|symbian|vbs|win)\\.[a-z0-9][a-z0-9_-]*$",
  "examples": [
    {
      "value": "win.agent_tesla",
      "description": "Agent Tesla (Windows)",
      "valid": true
    },
    {
      "value": "elf.mirai",
      "description": "Mirai (ELF)",
      "valid": true
    },
    {
      "value": "apk.anatsa",
      "description": "Anatsa (Android APK)",
      "valid": true
    },
    {
      "value": "Win.Agent_Tesla",
      "description": "Uppercase letters",
      "valid": false
    },
    {
      "value": "agent_tesla",
      "description": "Platform prefix is missing",
      "valid": false
    }
  ],
  "links": [
    {
      "type": "other",
      "url": "https://malpedia.caad.fkie.fraunhofer.de/details/win.agent_tesla"
    },
    {
      "type": "doc",
      "url": "https://malpedia.caad.fkie.fraunhofer.de/api/list/families"
    }
  ],
  "quality": {
    "score": 75,
    "missing": [
      "mapping (Wikidata, Schema.org, ...)",
      "translation",
      "detector coverage"
    ]
  },
  "source": {
    "path": "data/datatypes/any/software/malpedia_family_id.yaml",
    "url": "https://github.com/apicrafter/metacrafter-registry/blob/main/data/datatypes/any/software/malpedia_family_id.yaml",
    "edit_url": "https://github.com/apicrafter/metacrafter-registry/edit/main/data/datatypes/any/software/malpedia_family_id.yaml"
  },
  "urls": {
    "html": "https://registry.apicrafter.io/datatype/malpedia_family_id",
    "json": "https://registry.apicrafter.io/api/v1/datatypes/malpedia_family_id.json"
  }
}