Lazy Labeling

Oh boy look, another malware sample classified as the notorious Win32:Malware-gen. Just why does Avast label 90% of detected threats as “Malware-gen”? I hate when I’m downloading something like freeware and a simple bundled piece of PUP gets detected as “malware”. This is not just an overkill, but also uninformative. Why can’t there be more info about detections, like what type of threat was detected (ransomware) or even the specific name (Petya, Satana, etc.)?

Most malware analysis today is done by auto systems, becaus of the enormus amount that is found every day, so there is not enough man power to sit and nitpic on evry file unless there is something special

So Win32:Malware-gen = Generic detection is a algorithm that look for file(s) that has features or behaviors similar to known harmful programs

Malware satistic > https://www.av-test.org/en/statistics/malware/