Euphony is a Harmonious Unification of Cacophonous Anti-Virus Vendor Labels for Android Malware.
From a list of VirusTotal reports, Euphony can parse malware labels and produce a single family per file.
Dependencies:
+ Java 8
+ git and Internet Connection
Feature:
+ Provide a sequence of reports from VirusTotal formatted as JSON records.
+ Provide a ground-truth to evaluate the output formatted as JSON records.
+ Provide a seeds file with some initial domain knowledge about malware formatted as an EDN structure.
+ URI Provide a database URI to run the program and persist the learning.
+ statistics about malware files.
+ statistics about malware families.
+ clustering of malware fields and Output dataset.
+ tokenization of malware labels.
+ field frequency per malware signature.
Use and Download:
git clone https://github.com/fmind/euphony && cd euphony cd target/uberjar Example: java -jar euphony.jar -e output-dir/ -r reports.vt -CPEO java -jar euphony.jar -e output-dir/ -r reports.vt -t 0.05 -CPEO java -jar euphony.jar -e output-dir/ -r reports.vt -f type -CPEO java -jar euphony.jar -e output-dir/ -r reports.vt -g truths.gt -CPEOMF
Source: https://github.com/fmind