Анализ семейств малвари через Malpedia

★ 8.4 · security

analyzing-malware-family-relationships-with-malpedia is a Claude Code skill that queries the Malpedia API to map malware family relationships, resolve aliases, extract YARA rules, and link families to threat actors. Maintained by Fraunhofer FKIE, Malpedia catalogs over 2,600 malware families using the platform.family_name convention (e.g., win.cobalt_strike, apk.flubot); the skill calls /list/families, /get/family, /get/yara, and /get/actor endpoints to retrieve alternate vendor names, community and vendor YARA rules, loader-payload chains, and actor attribution data. SOC analysts and CTI researchers can use it to trace a sample's lineage, source detection rules for threat hunting, or identify the full malware toolkit of a specific adversary group. The skill requires Python 3.9+ with requests, yara-python, and stix2, plus a Malpedia API key.

• #threat-intelligence
• #malpedia
• #malware-family
• #yara
• #threat-actor
• #malware-tracking
• #variant-analysis