The invention belongs to the technical field of
virus analysis, and discloses an
industrial internet ransomware virus analysis method, device and equipment and a storage medium. The method comprises the following steps: acquiring information of a to-be-analyzed
virus during running in a preset sandbox to obtain an interface behavior sequence corresponding to the to-be-analyzed virus; performing type identification on the interface behavior sequence through a preset
virus identification model, and determining whether the to-be-analyzed virus is a
ransomware virus or not; and if the to-be-analyzed virus is the
ransomware virus, determining a virus family classification to which the to-be-analyzed virus belongs according to the interface behavior sequence and each virus
fingerprint sequence in a preset virus
fingerprint database. Whether the to-be-analyzed virus is the ransomware virus or not is identified according to the interface behavior sequence of the to-be-analyzed virus through the pre-trained preset
virus identification model, the overall identification process is rapid, and after the to-be-analyzed virus is determined to be the ransomware virus, the virus family classification of the to-be-analyzed virus can be determined, so that targeted
processing can be ensured, infection and transmission of the ransomware virus can be prevented, and the accuracy of the identification process is improved. And the security and defense capability are improved.