# Malware Family Classification

> Master the art of grouping malware into distinct families. Learn to identify shared code, infrastructure, and behavioral traits to track threat actors.

Canonical: https://codelivly.com/rooms/malware-family-classification
Last updated: 2026-09-20

| | |
|---|---|
| Level | Intermediate |
| Category | Malware Analysis |
| Lessons | 3 |
| Estimated time | 30 min |
| XP | 100 |

This module dives into the critical process of malware classification and family grouping. You will learn how to cluster samples based on shared code snippets, unique string artifacts, Command and Control (C2) infrastructure, and behavioral signatures. The curriculum covers the use of clustering algorithms, YARA-based grouping, and manual reverse engineering to identify distinct malware families and track threat actor campaigns. By mastering classification, you will be able to attribute attacks, predict future malware behavior, and build highly targeted detection rules.

## Lessons

1. What Is Malware Classification and Why Does It Matter (30 min)
2. Common Malware Families (Ransomware, Infostealers, RATs, Botnets) (30 min)
3. Guided Lab: Classifying a Sample by Family Traits (30 min)

## Related

- [Learning path: Malware Classification and Detection Engineering](https://codelivly.com/learning-paths/malware-classification-and-detection-engineering)
- [All rooms](https://codelivly.com/rooms)