Malicious program defense method and device, electronic equipment and storage medium

The embodiment of the invention provides a malicious program defense method and device, electronic equipment and a storage medium, and the method comprises the steps: obtaining a malicious application program; moving the malicious application program to a security sandbox for operation to obtain basic information of the malicious application program; generating an attack chain according to the basic information; acquiring communication data of the malicious application program; acquiring an attack intention corresponding to the malicious application program according to the communication data and the attack chain; acquiring a defense scheme according to the attack intention; and performing defense according to the defense scheme. In the embodiment of the invention, different defense schemes are provided for different attack intentions, and defense is performed according to the defense schemes, so that the working capability of the equipment can be reserved to the maximum extent while the equipment is protecte