/ 
STIX-1.01
/ STIX::Malware

NAME

STIX::Malware - STIX Domain Object (SDO) - Malware

SYNOPSIS

use STIX::Malware;

my $malware = STIX::Malware->new();

DESCRIPTION

Malware is a type of TTP that is also known as malicious code and malicious software, refers to a program that is inserted into a system, usually covertly, with the intent of compromising the confidentiality, integrity, or availability of the victim's data, applications, or operating system (OS) or of otherwise annoying or disrupting the victim.

METHODS

STIX::Malware inherits all methods from STIX::Common::Properties and implements the following new ones.

STIX::Malware->new(%properties)

Create a new instance of STIX::Malware.

$malware->aliases

Alternative names used to identify this Malware or Malware family.

$malware->architecture_execution_envs

The processor architectures (e.g., x86, ARM, etc.) that the malware instance or family is executable on. (See PROCESSOR_ARCHITECTURE in STIX::Common::OpenVocabulary)

$malware->capabilities

Specifies any capabilities identified for the malware instance or family. (See MALWARE_CAPABILITIES in STIX::Common::OpenVocabulary).

$malware->description

Provides more context and details about the Malware object.

$malware->first_seen

The time that the malware instance or family was first seen.

$malware->id
$malware->implementation_languages

The programming language(s) used to implement the malware instance or family. (See IMPLEMENTATION_LANGUAGE in STIX::Common::OpenVocabulary).

$malware->kill_chain_phases

The list of kill chain phases for which this Malware instance can be used.

$malware->last_seen

The time that the malware family or malware instance was last seen.

$malware->malware_types

The type of malware being described. (See MALWARE_TYPE in STIX::Common::OpenVocabulary)

$malware->name

The name used to identify the Malware.

$malware->operating_system_refs

The operating systems that the malware family or malware instance is executable on.

$malware->sample_refs

The sample_refs property specifies a list of identifiers of the SCO file or artifact objects associated with this malware instance(s) or family.

$malware->type

The type of this object, which MUST be the literal malware.

HELPERS

$malware->TO_JSON

Encode the object in JSON.

$malware->to_hash

Return the object HASH.

$malware->to_string

Encode the object in JSON.

$malware->validate

Validate the object using JSON Schema (see STIX::Schema).

SUPPORT

Bugs / Feature Requests

Please report any bugs or feature requests through the issue tracker at https://github.com/giterlizzi/perl-STIX/issues. You will be notified automatically of any progress on your issue.

Source Code

This is open source software. The code repository is available for public review and contribution under the terms of the license.

https://github.com/giterlizzi/perl-STIX

git clone https://github.com/giterlizzi/perl-STIX.git

AUTHOR

  • Giuseppe Di Terlizzi <gdt@cpan.org>

LICENSE AND COPYRIGHT

This software is copyright (c) 2024 by Giuseppe Di Terlizzi.

This is free software; you can redistribute it and/or modify it under the same terms as the Perl 5 programming language system itself.