Published May 14, 2023
| Version 1.0
Conference paper
Open
Ransomware Execution PROvenance Dataset (REPROD)
Authors/Creators
- 1. SRI International
- 2. LUMS
- 3. LUMS - Lahore University of Management Sciences
Description
A collection of ProcMon log files (PML) files associated with executions of ransomware binaries downloaded from MalwareBazaar. Files are named after the sha256 hash used on MalwareBazaar. These PML files were processed with the SPADE provenance system and queried to produce a subgraphs that are provided as DOT files. Only a subset of all the executions (n=405) that were performed are in this archive as the PML files are large, all DOT files that were obtained (n=861)are in this dataset.
Notes
This work was supported in part by the Office of Naval Research under Grant N00014-21-1-2754.
Files
dots.zip
Files
(144.7 GB)
| Name | Size | Download all |
|---|---|---|
|
md5:d9e3f24ba36a9b9503a55eb1cf677345
|
10.9 GB | Preview Download |
|
md5:8169f6c9be8fb0135dfdb93fea5499f8
|
10.7 GB | Download |
|
md5:be056cdfc68081e9c1717339121a884b
|
10.7 GB | Download |
|
md5:7114156374fb43a854b5d12d233bef79
|
10.7 GB | Download |
|
md5:a1ac2cc90a61f103869ff52c61862f15
|
10.7 GB | Download |
|
md5:2e59bf7cb132db41f855c8e8be722d00
|
10.7 GB | Download |
|
md5:1efcddc75a1692656b9a23467017a853
|
10.7 GB | Download |
|
md5:e7193a91843f5ba6feaf08292d9e5ee0
|
10.7 GB | Download |
|
md5:db8dfcaea50c78aa941c80015df11048
|
10.7 GB | Download |
|
md5:9e54fc7fec6f0e1d6962c6f6c0da3318
|
10.7 GB | Download |
|
md5:273684ea3383c42fa7b75d19d65033d0
|
10.7 GB | Download |
|
md5:633260a16eb54d0bc92b0d1088edeeb2
|
10.7 GB | Download |
|
md5:568306b60841283b19921c593300bcd8
|
10.7 GB | Download |
|
md5:be5ddba86dcdeeaca8faa7d10aa8692a
|
4.9 GB | Preview Download |
|
md5:b4e44a883dd702cb95be5ab270c96da9
|
102.9 kB | Preview Download |