SYSTEM AND METHOD FOR DETECTING A HARMFUL SCRIPT BASED ON A SET OF HASH CODES

    公开(公告)号:US20230297703A1

    公开(公告)日:2023-09-21

    申请号:US17939071

    申请日:2022-09-07

    申请人: AO Kaspersky Lab

    IPC分类号: G06F21/62 G06F21/56

    摘要: Disclosed herein are systems and methods for detecting harmful scripts. In one aspect, an exemplary method comprises, identifying a file containing a script, wherein the identification of the file is performed by analyzing each file of a plurality of files for a presence of a harmful script, generating a summary of the script based on the identified file, calculating static and dynamic parameters of the generated summary of the script, recognizing a script programming language based on the calculated static parameters and dynamic parameters of the generated summary of the script using at least one language recognition rule, processing the identified file based on the data about the recognized script programming language, generating a set of hash codes based on a processed file using rules for generating hash codes, and detecting the harmful script when the generated set of hash codes is similar to known harmful sets of hash codes.