How this analysis was created: This summary and feature list are AI-generated from collected project material and can contain mistakes. Stars, license and language are imported from GitHub. Inclusion does not mean that we have tested or audited this project. Check the source documentation for any feature you depend on. Learn more on our About page.
EMBER2024 is an update to the EMBER2017 and EMBER2018 datasets. It includes raw features and labels for 3.2 million malicious and benign files from 6 different file types (Win32, Win64, .NET, APK, ELF, and PDF). EMBER2024 is meant to allow researchers to explore a variety of common malware…
The main features of futurecomputing4ai/ember2024 are: Malware Datasets.
Projects with overlapping indexed features include: cryakl/ultimate-rat-collection — This project is a curated repository of remote access trojan binaries and malware samples. It serves as a structured… jgamblin/mirai-source-code — This repository contains the source code for a C-based network botnet designed to compromise Internet of Things… dhondta/dataset-packed-elf — This dataset was made from a set of 482 not packed cleanware including executable and object files coming from… elastic/ember — The EMBER dataset is a collection of features from PE files that serve as a benchmark dataset for researchers. The… ffri/ffridataset-scripts — This script allows you to create datasets in the same format as the FFRI dataset. dhondta/dataset-packed-pe — This is a fork of the dataset at https://github.com/chesvectain/PackingData with some samples sanitized (e.g.…
This project is a curated repository of remote access trojan binaries and malware samples. It serves as a structured analysis dataset and security research toolset designed for studying the behavior and inner workings of remote administration tools. The collection provides a versioned archive of malware samples and backdoor interfaces, with specific categorizations for target platforms including Windows and Android. It organizes these binaries to facilitate the study of malware evolution and the identification of technical patterns. The repository covers several security research areas, incl
This repository contains the source code for a C-based network botnet designed to compromise Internet of Things devices. It serves as a functional implementation of malware used for security research, behavioral analysis, and the development of threat detection signatures. The project includes a command and control server architecture that manages infected devices via a custom binary protocol and TCP-based command distribution. It employs a cross-compilation toolchain to build and deliver architecture-specific binary payloads across multiple hardware platforms. The codebase covers capabiliti
This dataset was made from a set of 482 not packed cleanware including executable and object files coming from /usr/bin from a fresh installation of Ubuntu 20.04. From this folder of not packed binaries, we built the 6 subsets with the packers integrated in the Packing Box with the dataset make…
This is a fork of the dataset at https://github.com/chesvectain/PackingData with some samples sanitized (e.g. UPX-packed samples in the ´not-packed´ folder or samples with a same hash from the packer and not-packed folders).