AVClass
A Python tool for extracting malware family names and tags from antivirus engine labels, designed for large-scale malware analysis.
What is AVClass?
AVClass is a Python-based tool that extracts structured tags—such as malware family names, classes, behaviors, and file properties—from antivirus engine labels. It addresses the challenge of inconsistent and noisy AV labeling by providing automated, vendor-agnostic analysis suitable for large-scale malware datasets.
Security researchers, malware analysts, and threat intelligence teams who need to process and label large volumes of malware samples consistently, especially those working with AV reports from sources like VirusTotal.
AVClass offers a scalable, automated solution with quantified accuracy, eliminating manual labeling efforts and providing reliable tags across diverse AV engines and platforms without requiring executable files.
Overview
AVClass malware labeling tool
Use Cases
Best For
- Automating malware family identification from VirusTotal reports
- Large-scale malware dataset labeling for research projects
Related Projects
Found a gem we're missing?
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
