With YARA you can create descriptions of malware families (or whatever you want to describe) based on textual or binary patterns. Each description, a.k.a rule, consists of a set of strings and a boolean expression which determine its logic.
Download the tool from here – https://github.com/plusvic/yara/releases/tag/v3.0.0