Malpedia malware family ID
ID malpedia_family_id
DatatypeNot PIIidentifierDraft
This record is a draft: it has not been reviewed yet and may be incomplete or wrong. Do not rely on it for compliance decisions. Help improve it (see CONTRIBUTING.md).
Identifier of a malware family in Malpedia, the malware corpus and reference library run by Fraunhofer FKIE: a platform prefix, a period and the family name in lowercase, with underscores (and rarely hyphens) between words, for example win.agent_tesla. The prefixes in use are aix, apk, asp, elf, fas, ios, jar, js, jsp, osx, php, pl, ps1, py, sh, symbian, vbs and win. The family page is https://malpedia.caad.fkie.fraunhofer.de/details/<id>, and Wikidata property P9096 stores that path (details/<id>).
- Categories
- Software development
- Countries
- Global (not tied to a country)
- Languages
- Common to most languages
- Quality
- 75/100 · missing: mapping (Wikidata, Schema.org, ...), translation, detector coverage
- Metacrafter rules
- no detection rule yet
- Supported by tools
- no tool record lists this type yet
Regular expression
^(?:aix|apk|asp|elf|fas|ios|jar|js|jsp|osx|php|pl|ps1|py|sh|symbian|vbs|win)\.[a-z0-9][a-z0-9_-]*$
Python re syntax.
Examples
| Value | Description |
|---|---|
| win.agent_tesla | Agent Tesla (Windows) |
| elf.mirai | Mirai (ELF) |
| apk.anatsa | Anatsa (Android APK) |
| Win.Agent_Tesla invalid | Uppercase letters |
| agent_tesla invalid | Platform prefix is missing |
Sources
- other: https://malpedia.caad.fkie.fraunhofer.de/details/win.agent_tesla
- doc: https://malpedia.caad.fkie.fraunhofer.de/api/list/families
Use this record
- Page URL:
https://registry.apicrafter.io/datatype/malpedia_family_id - JSON: API v1 · legacy shape (used by metacrafter) · Markdown (for LLMs)
- Improve it: edit
data/datatypes/any/software/malpedia_family_id.yamlon GitHub