MalFe

Please wait ...

Public Datasets

Process Memory of Ransomware Rows: 2017 | Cols: 9 | Reports Used: 720

Description: This dataset counts the frequency of the memory access privileges

Dataset SHA256: f74876676c8d04d1a703d3959d3592bc02d74683be74794686ca77b83cfcd7ec

Features (sample):

	r	rw	rx	rwc	rwx	rwxc	category	label	SHA256
0	69	71	26	28	5	0	Ransomware	M	4e0d1edb76747fd945b87dd18299298f0df719edbea946119d91db59a9b6527a
1	120	102	50	29	6	0	Ransomware	M	4e0d1edb76747fd945b87dd18299298f0df719edbea946119d91db59a9b6527a
...	...	...	...	...	...	...	...	...	...
2015	131	95	44	33	64	0	Ransomware	M	cf5ec678a2f836f859eb983eb633d529c25771b3b7505e74aa695b7ca00f9fa8
2016	85	77	26	27	60	0	Ransomware	M	cf5ec678a2f836f859eb983eb633d529c25771b3b7505e74aa695b7ca00f9fa8

2017 rows × 9 columns

Created by: Avinash
Downloaded 2 times
Comments Enabled: True
Comments: 0

def process(data, filename, sha256, category, malicious):
    try:
        # Implement your data processing here, this function will get called with the data of each 
        # report in the category you have selected along with the filename of the report and hash. 
        # Do your processing and add your data to the features array, and return the features_lables, features, and sha256
        # PLEASE NOTE: THE CODE BELOW SERVES AS AN EXAMPLE ONLY! This example extracts the entropy of the PE Sections. Which can be seen here: https://malfe.cs.up.ac.za/datasets/view/Entropy_of_PE_Sections/5
        ###

features_labels = ["r", "rw", "rx", "rwc", "rwx", "rwxc", "category", "label"]
        features = []
        label =   "M" if malicious else "B"
        if "procmemory" in data:
            for pm in data["procmemory"]:
                feat = {'r': 0, 'rw': 0, 'rx': 0, 'rwc': 0, 'rwx': 0, 'rwxc': 0, 'category': category, 'label': label}
                for regions in pm["regions"]:  
                    feat[regions["protect"]] = feat[regions["protect"]] + 1
                
                features.append(list(feat.values())) 
                del feat
        del data
        
        ###
        return features_labels, features, sha256
        
    except Exception as e:
        log("|process error| " + filename + " -> " + sha256 + " (" + str(e) + ")")
        pass

Nov. 21, 2022, 1:34 p.m. Public Create New Vesion Download Dataset (194.2 KB)

Version: 1
Date: Sept. 4, 2023, 12:30 p.m.
Created by: Avinash
Description: Updated version with 3084 reports.
Categories:

Rows: 10186 | Cols: 9 | Reports Used: 3084 Download Version 1 (990.2 KB)

Please wait ...

Public Datasets

Process Memory of Ransomware Rows: 2017 | Cols: 9 | Reports Used: 720

Reports Used

Dataset Code

All Versions

Comments

No comments to display