That would be a nice ML application for fun and profit! Predict infected files. Cross with known infectations. Submit all others. Collect bounty? In more serio

That would be a nice ML application for fun and profit! Predict infected files. Cross with known infectations. Submit all others. Collect bounty? In more seriousness. It still would be a hard problem. You never know for certain which files are safe and which harbour 0-day exploits. I guess you do know what textual contents in these emails are 'normal' and which are not (although it's in Turkish), so you could say obvious attempts at fishing-with-attachments are probably infected. Plus that not all virusscanners would recognize all infectations.