Open access

A Multi-Modal Deep Learning Framework for Robust Polymorphic Malware Detection

Phil Steadman Paul Jenkins Rajkumar Singh Rathore Chaminda Hewage

2026 · Computers, Materials & Continua · Vol 88, pp. 1-10 · 0 citations · 21 references

TL;DR

A Hybrid Multi-Modal Deep Learning framework that combines visual and structural features reduces modality collapse and creates a much stronger system compared to using either input type on its own, improves detection performance on deeply hidden contemporary threats, including the AveMariaRAT and CobaltStrike families.

Abstract

: Modern malware is increasingly employing polymorphism, packing, and metamorphism to evade traditional signature-based detection. Because of this, there is an urgency to have more reliable classification systems. Visual malware analysis, where binaries are converted into grayscale images, has demonstrated potential in revealing structural patterns of malware family classification. However, recent methods mostly rely on single-stream, lightweight Convolutional Neural Networks (CNNs). These models have a major blind spot. The visual representation textures can be heavily obscured without changing the underlying malicious code, causing severe performance drops on newer or even rare malware classes. This paper presents a Hybrid Multi-Modal Deep Learning framework to fix this vulnerability. The proposed dual-stream architecture uses image recognition via EfficientNetB0 alongside metadata analysis using 1D-convolutional byte embeddings. This paper evaluated the framework on the modern MalwareVision-2025 dataset (approximately 125,000 samples) and the legacy Malimg dataset (9339 samples). On MalwareVision-2025, the model reached a weighted accuracy of 88.44% and achieved 100% benign recall on the evaluated split. The testing across both datasets shows that combining visual and structural features reduces modality collapse. This creates a much stronger system compared to using either input type on its own. In particular, the hybrid approach improves detection performance on deeply hidden contemporary threats, including the AveMariaRAT and CobaltStrike families.

DOI Semantic Scholar

Read PDF

Similar papers

RES2NET-MAXOUT: Image-Based Multi-Class Malware Classification with Deep Learning Models

G.Joel, Sunny Deol, A. Hod et al. · 0 citations

Open access Jul 2026

Hybrid noise-resistant technique for malware classification.

This study proposes a novel hybrid malware representation framework that integrates Convolutional Autoencoder (CAE)-based latent structural learning with Local Binary Pattern (LBP)-based texture feature extraction for robust malware classification and represents one of the first comprehensive investigations of hybrid l...

Syed Shakir Hameed Shah, Syed Shakir Hameed Shah, Ahmed Hamed et al. · Scientific Reports · 0 citations

Review Open access Aug 2026

A Survey on Deep Learning Approaches for Malware Detection and Classification

Malware is a serious threat in the cybersecurity area because of its dynamic nature, the variety of malware families, stealth, propagation and the capability of evading traditional security products. Therefore, proper malware detection and classification are crucial for detecting malicious software and for securing com...

Shivani Jain · International Journal of Cyb... · 0 citations

#explainable ai Open access Aug 2026

DEVELOPMENT OF A HYBRID NN–CNN DEEP LEARNING FRAMEWORK FOR INTELLIGENT MALWARE DETECTION, FAMILY CLASSIFICATION, AND VARIANT IDENTIFICATION

A Hybrid Neural Network–Convolutional Neural Network (NN–CNN) Deep Learning Framework for malware detection, malware-family classification, and malware-variant identification and considers two important issues in practical malware detection: model explainability and generalization to previously unseen malware.

Chioma Grace Nwankwo, B. C. Amanze, Ikechukwu Amaefule · World Journal of Advanced Re... · 0 citations

Open access 2026

Hybrid Convolutional-Hopfield Neural Networks for Image-Based Malware Classification

A novel hybrid CNN-Hopfield Neural Network (CNN-HNN) framework that replaces traditional dense classification heads with continuous Modern Hopfield associative memory layers is proposed, achieving top-tier accuracy and reducing classification-head parameter counts while reducing floating-point operations (FLOPs) and ac...

Uma Kannan, Rajendran Swamidurai · International journal of res... · 0 citations

Open access 2026

Hybrid Feature Image Mapping (HFIM): A Multi-Channel Image Approach for Malware Detection Using Static and Dynamic Features

It is indicated that integrating static and dynamic features at the representation level can improve robustness and classification performance in image-based malware detection, particularly under variations in feature availability.

Anis Elgarduh, A. Zainal, Fuad A. Ghaleb et al. · IEEE Access · 0 citations