Patent Document ID: 9405905
Application ID: 14524325
Patent Status: 1

Claim One:
1. A method, performed by a processor, for identifying associations between binary samples, comprising: receiving a plurality of binary samples; determining one or more file types associated with the plurality of binary samples; extracting type-specific metadata from the plurality of binary samples, the type-specific metadata for a binary sample from the plurality of binary samples including a set of attributes of the binary sample that are unique for a file type associated with the binary sample; identifying a set of associations between the plurality of binary samples based on the extracted metadata, each association characterized by at least one attribute in the set of attributes that the associated binary samples have in common; receiving a reference sample corresponding to a known malware sample; identifying that the reference sample is associated with at least one binary sample among the plurality of binary samples; generating data corresponding to a malware alert in response to identifying that the reference sample is associated with the at least one binary sample; communicating the data to a front-end system; and generating, at the front-end system, a display corresponding to the malware alert using the data.