Verdicts to tag a sample from sandbox behaviour
verdicts contains a list of maliciousness classifications for the file under study based on its behaviour. It is a list of strings, that can contain any of the following:
CLEANclean, whitelisted or undetected.MALWAREshould be detected as malware.GREYWAREPUA, PUP (possibly unwanted program).RANSOMRansom or crypter.PHISHINGTries to phish the user or deceive him to steel his credentials.BANKERbanking trojan malware.ADWAREdisplays unwanted advertisements.EXPLOITcontains or runs an exploit.EVADERcontains logic to evade analysis.RATremote access trojan, may listen for inbound connections.TROJANtrojan or bot.SPREADERspreads to USB, other drives, network, etc. Work-like functionality.
{
"data": {
"attributes": {
"verdicts": [
"<string>"
]
}
}
}
{
"data": {
"attributes": {
"verdicts": [
"MALWARE"
]
}
}
}
