Multifamily malware models