Datatypes

Malpedia malware family ID

ID malpedia_family_id

DatatypeNot PIIidentifierDraft

This record is a draft: it has not been reviewed yet and may be incomplete or wrong. Do not rely on it for compliance decisions. Help improve it (see CONTRIBUTING.md).

Identifier of a malware family in Malpedia, the malware corpus and reference library run by Fraunhofer FKIE: a platform prefix, a period and the family name in lowercase, with underscores (and rarely hyphens) between words, for example win.agent_tesla. The prefixes in use are aix, apk, asp, elf, fas, ios, jar, js, jsp, osx, php, pl, ps1, py, sh, symbian, vbs and win. The family page is https://malpedia.caad.fkie.fraunhofer.de/details/<id>, and Wikidata property P9096 stores that path (details/<id>).

Categories
Software development
Countries
Global (not tied to a country)
Languages
Common to most languages
Quality
75/100 · missing: mapping (Wikidata, Schema.org, ...), translation, detector coverage
Metacrafter rules
no detection rule yet
Supported by tools
no tool record lists this type yet

Regular expression

^(?:aix|apk|asp|elf|fas|ios|jar|js|jsp|osx|php|pl|ps1|py|sh|symbian|vbs|win)\.[a-z0-9][a-z0-9_-]*$

Python re syntax.

Examples

ValueDescription
win.agent_teslaAgent Tesla (Windows)
elf.miraiMirai (ELF)
apk.anatsaAnatsa (Android APK)
Win.Agent_Tesla invalidUppercase letters
agent_tesla invalidPlatform prefix is missing

Sources

Use this record