misp-taxonomies/malware_classification
Iglocska 74c23483b0 Added versions to manifest and some directory name changes
- made some changes to the directory names to reflect the actual namespace
- added version numbers in MANIFEST.json
2016-07-24 11:32:09 +02:00
..
README.md Added versions to manifest and some directory name changes 2016-07-24 11:32:09 +02:00
machinetag.json Added versions to manifest and some directory name changes 2016-07-24 11:32:09 +02:00

README.md

Malware Classification

Malware Categories

All malware samples should be classified into one of the categories listed in the table below.

Virus
Worm
Trojan
Ransomware
Rootkit
Downloader
Adware
Spyware

Obfuscation Classification

All malware samples should be classified into one of the categories listed in the table below.

no-obfuscation
No obfuscation is used
encryption
encryption
oligomorphism
oligomorphism
metamorphism
metamorphism
stealth
stealth
armouring
armouring
encryption
encryption
tunneling
tunneling
XOR
XOR
BASE64
BASE64
ROT13
ROT13
## Payload Classification

Memory Classification

Machine-parsable Malware Classification

The repository contains a JSON file including the machine-parsable tags along with their human-readable description. The software can use both representation on the user-interface and store the tag as machine-parsable.

malware_classification:malware-category="virus"

Based on:

https://www.sans.org/reading-room/whitepapers/incident/malware-101-viruses-32848