MalTree Uses Phylogenetic Methods to Map Malware Evolution at Scale

MalTree applies UPGMA and Neighbor-Joining phylogenetic algorithms to structural, behavioral, and image-based malware features, achieving 87% temporal consistency against VirusTotal timestamps. The framework reveals mutation rate variance across families exceeding 10x, enabling more targeted, proactive detection strategies.