# jstrosch/malware-samples architecture

> Architecture diagram of the GitHub repository jstrosch/malware-samples, generated by GitDiagram from its file tree, README and a sample of source files (last updated 2026-11-11). It is an AI-made overview: check details against the source.

- Interactive diagram: https://gitdiagram.com/jstrosch/malware-samples
- Repository: https://github.com/jstrosch/malware-samples

## Overview

This repository is an artifact library for malware analysis and training, not an application with an implemented processing pipeline. Analysts access malware samples, exploit-kit artifacts, maldoc templates and maldocs; the README says samples are distributed in password-protected ZIP archives (password: “infected”). It also documents training PCAPs and analysis exercises, but those paths are not present in the supplied tree. With no source excerpts, relationships below are limited to capabilities explicitly described in the README.

Main entry points: [`binaries`](https://github.com/jstrosch/malware-samples/tree/master/binaries) (Password ZIP Archives), [`exploit_kits`](https://github.com/jstrosch/malware-samples/tree/master/exploit_kits) (Exploit Kits), [`maldoc_templates`](https://github.com/jstrosch/malware-samples/tree/master/maldoc_templates) (Maldoc Templates), [`maldocs`](https://github.com/jstrosch/malware-samples/tree/master/maldocs) (Malicious Documents)

## Diagram (Mermaid)

```mermaid
flowchart TD

subgraph group_sample_sets["Malware Samples"]
  node_binaries["Malware Binaries"]
  node_exploit_kits["Exploit Kits"]
  node_password_archives["Password ZIP Archives"]
end

subgraph group_document_artifacts["Document Artifacts"]
  node_maldoc_templates["Maldoc Templates"]
  node_maldocs["Malicious Documents"]
end

subgraph group_training_materials["Training Materials"]
  node_training_pcaps["Training PCAPs"]
  node_analysis_exercises["Analysis Exercises"]
end

node_analyst(("Analyst"))

node_analyst -->|"accesses"| node_binaries
node_analyst -->|"accesses"| node_exploit_kits
node_analyst -->|"accesses"| node_maldoc_templates
node_analyst -->|"accesses"| node_maldocs
node_analyst -->|"uses"| node_training_pcaps
node_analyst -->|"studies"| node_analysis_exercises
node_binaries -->|"distributed as"| node_password_archives
node_exploit_kits -->|"distributed as"| node_password_archives
node_maldoc_templates -->|"distributed as"| node_password_archives
node_maldocs -->|"distributed as"| node_password_archives

click node_binaries "https://github.com/jstrosch/malware-samples/tree/master/binaries"
click node_exploit_kits "https://github.com/jstrosch/malware-samples/tree/master/exploit_kits"
click node_maldoc_templates "https://github.com/jstrosch/malware-samples/tree/master/maldoc_templates"
click node_maldocs "https://github.com/jstrosch/malware-samples/tree/master/maldocs"
click node_password_archives "https://github.com/jstrosch/malware-samples/tree/master/binaries"

classDef toneNeutral fill:#f8fafc,stroke:#334155,stroke-width:1.5px,color:#0f172a
classDef toneBlue fill:#dbeafe,stroke:#2563eb,stroke-width:1.5px,color:#172554
classDef toneAmber fill:#fef3c7,stroke:#d97706,stroke-width:1.5px,color:#78350f
classDef toneMint fill:#dcfce7,stroke:#16a34a,stroke-width:1.5px,color:#14532d
classDef toneRose fill:#ffe4e6,stroke:#e11d48,stroke-width:1.5px,color:#881337
classDef toneIndigo fill:#e0e7ff,stroke:#4f46e5,stroke-width:1.5px,color:#312e81
classDef toneTeal fill:#ccfbf1,stroke:#0f766e,stroke-width:1.5px,color:#134e4a
class node_binaries,node_exploit_kits,node_password_archives toneBlue
class node_maldoc_templates,node_maldocs toneAmber
class node_training_pcaps,node_analysis_exercises toneMint
class node_analyst toneIndigo
```

## Components

### Malware Samples

- [Malware Binaries](https://github.com/jstrosch/malware-samples/tree/master/binaries): `binaries`
- [Exploit Kits](https://github.com/jstrosch/malware-samples/tree/master/exploit_kits): `exploit_kits`
- [Password ZIP Archives](https://github.com/jstrosch/malware-samples/tree/master/binaries): `binaries`

### Document Artifacts

- [Maldoc Templates](https://github.com/jstrosch/malware-samples/tree/master/maldoc_templates): `maldoc_templates`
- [Malicious Documents](https://github.com/jstrosch/malware-samples/tree/master/maldocs): `maldocs`

### Training Materials

- **Training PCAPs**
- **Analysis Exercises**

### Other components

- **Analyst**

## Connections

- Analyst → Malware Binaries: accesses
- Analyst → Exploit Kits: accesses
- Analyst → Maldoc Templates: accesses
- Analyst → Malicious Documents: accesses
- Analyst → Training PCAPs: uses
- Analyst → Analysis Exercises: studies
- Malware Binaries → Password ZIP Archives: distributed as
- Exploit Kits → Password ZIP Archives: distributed as
- Maldoc Templates → Password ZIP Archives: distributed as
- Malicious Documents → Password ZIP Archives: distributed as