Dataset Viewer
Auto-converted to Parquet Duplicate
record_id
large_string
country
large_string
malware_family
large_string
mitre_technique
large_string
delivery_vector
large_string
targeted_sector
large_string
file_type
large_string
file_size_kb
int64
is_packed
int64
is_obfuscated
int64
uses_encryption
int64
has_persistence
int64
communicates_c2
int64
signature_detected
int64
heuristic_detected
int64
behavior_detected
int64
sandbox_detected
int64
is_ransomware
int64
is_info_stealer
int64
is_banking_trojan
int64
is_remote_access
int64
detection_hour
int64
is_weekend
int64
ip_african
int64
uses_proxy
int64
uses_tor
int64
label
int64
is_synthetic
int64
obfuscation_score
int64
is_packed_or_obfuscated
int64
has_persistence_mechanism
int64
has_c2_communication
int64
advanced_evasion
int64
malware_complexity
int64
detection_score
int64
signature_only
int64
behavior_only
int64
fully_detected
int64
undetected
int64
needs_sandbox
int64
is_malicious_family
int64
data_theft_family
int64
extortion_family
int64
access_family
int64
financial_target
int64
is_executable
int64
is_document
int64
is_script
int64
is_mobile
int64
is_archive
int64
is_java
int64
is_dll
int64
vector_email_attach
int64
vector_email_link
int64
vector_drive_by
int64
vector_usb
int64
vector_supply_chain
int64
vector_social
int64
vector_mobile
int64
vector_torrent
int64
vector_messaging
int64
vector_legit
int64
targets_banking
int64
targets_gov
int64
targets_telecom
int64
targets_energy
int64
targets_healthcare
int64
targets_education
int64
targets_manufacturing
int64
targets_ecommerce
int64
is_night
int64
is_business_hours
int64
is_weekend.1
int64
off_hours_weekend
int64
african_origin
int64
anonymized
int64
high_anonymity
int64
non_african_anonymized
int64
is_large_file
int64
is_small_file
int64
size_category
int64
is_west_africa
int64
is_east_africa
int64
is_southern_africa
int64
is_north_africa
int64
malware_risk_score
int64
detection_difficulty
int64
threat_severity
int64
MAL001501
Nigeria
Lokibot
T1543.003
drive_by_download
Government
.pdf
729
1
0
1
1
1
1
0
0
0
0
1
0
0
5
0
0
0
0
1
0
2
1
1
1
0
4
1
1
0
0
0
0
1
1
0
0
1
0
1
0
0
0
0
0
0
0
1
0
0
0
0
0
0
0
0
1
0
0
0
0
0
0
1
0
0
1
0
0
0
0
0
0
1
1
0
0
0
14
0
4
MAL002586
Nigeria
RedLine Stealer
T1204.002
email_attachment
Education
.doc
2,243
0
0
0
1
1
0
1
0
1
0
1
0
0
7
0
1
0
0
1
0
0
0
1
1
0
2
2
0
0
0
0
0
1
1
0
0
1
0
1
0
0
0
0
0
1
0
0
0
0
0
0
0
0
0
0
0
0
0
0
1
0
0
0
0
0
0
1
0
0
0
1
0
2
1
0
0
0
8
0
3
MAL002653
South Africa
FluBot
T1204.002
drive_by_download
Government
.pdf
200
1
0
0
0
0
1
0
0
0
0
0
1
0
21
0
0
1
0
1
0
1
1
0
0
0
1
1
1
0
0
0
0
1
1
0
0
1
0
1
0
0
0
0
0
0
0
1
0
0
0
0
0
0
0
0
1
0
0
0
0
0
0
0
0
0
0
0
1
0
1
0
0
1
0
0
1
0
5
0
3
MAL001055
South Africa
Qakbot
T1547.001
supply_chain
Government
.exe
1,387
1
1
0
0
1
0
1
0
0
0
0
1
0
4
0
0
0
0
1
0
2
1
0
1
0
3
1
0
0
0
0
0
1
1
0
0
1
1
0
0
0
0
0
0
0
0
0
0
1
0
0
0
0
0
0
1
0
0
0
0
0
0
1
0
0
1
0
0
0
0
1
0
2
0
0
1
0
11
0
4
MAL000705
Nigeria
EventBot
T1053.005
social_media
Telecom
.scr
4,830
1
1
1
1
0
1
0
1
1
0
0
1
0
19
0
1
1
0
1
0
3
1
1
0
1
4
3
0
0
0
0
0
1
1
0
0
1
1
0
0
0
0
0
0
0
0
0
0
0
1
0
0
0
0
0
0
1
0
0
0
0
0
0
0
0
0
1
1
0
0
1
0
2
1
0
0
0
14
4
3
MAL000106
Kenya
Remcos
T1204.001
email_link
Government
.doc
697
1
0
0
1
0
0
1
1
0
0
0
0
1
2
0
0
1
0
1
0
1
1
1
0
0
2
2
0
1
0
0
0
1
0
0
1
0
0
1
0
0
0
0
0
0
1
0
0
0
0
0
0
0
0
0
1
0
0
0
0
0
0
1
0
0
1
0
1
0
1
0
0
1
0
1
0
0
6
3
3
MAL000589
Algeria
NjRAT
T1105
email_attachment
Government
.doc
4,451
0
1
1
0
1
1
0
0
1
0
0
0
1
23
0
0
1
1
1
0
2
1
0
1
0
3
2
1
0
0
0
0
1
0
0
1
0
0
1
0
0
0
0
0
1
0
0
0
0
0
0
0
0
0
0
1
0
0
0
0
0
0
1
0
0
1
0
1
1
1
1
0
2
0
0
0
1
9
0
5
MAL002468
Nigeria
EventBot
T1204.002
email_attachment
Telecom
.apk
311
0
0
0
0
0
1
1
0
1
0
0
1
0
7
0
0
0
0
1
0
0
0
0
0
0
0
3
0
0
0
0
0
1
1
0
0
1
0
0
0
1
0
0
0
1
0
0
0
0
0
0
0
0
0
0
0
1
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
1
1
0
0
0
2
0
3
MAL002413
Nigeria
Ryuk
T1566.001
drive_by_download
Manufacturing
.js
1,234
1
1
1
1
1
0
0
1
0
1
0
0
0
16
0
0
0
0
1
0
3
1
1
1
1
5
1
0
1
0
0
0
1
0
1
0
0
0
0
1
0
0
0
0
0
0
1
0
0
0
0
0
0
0
0
0
0
0
0
0
1
0
0
1
0
0
0
0
0
0
1
0
2
1
0
0
0
18
7
4
MAL001600
South Africa
FluBot
T1204.001
social_media
Banking & Fintech
.jar
3,937
1
0
1
1
0
0
1
0
0
0
0
1
0
2
0
0
1
0
1
0
2
1
1
0
0
3
1
0
0
0
0
0
1
1
0
0
1
0
0
0
0
0
1
0
0
0
0
0
0
1
0
0
0
0
1
0
0
0
0
0
0
0
1
0
0
1
0
1
0
1
1
0
2
0
0
1
0
11
0
4
MAL002464
South Africa
Formbook
T1547.001
supply_chain
Healthcare
.apk
568
1
1
1
0
1
1
1
0
0
0
1
0
0
11
0
1
0
0
1
0
3
1
0
1
1
4
2
0
0
0
0
0
1
1
0
0
1
0
0
0
1
0
0
0
0
0
0
0
1
0
0
0
0
0
0
0
0
0
1
0
0
0
0
1
0
0
1
0
0
0
0
0
1
0
0
1
0
14
4
3
MAL000228
South Africa
AgentTesla
T1071.001
email_attachment
Manufacturing
.docx
2,097
0
1
1
0
1
0
1
0
0
0
1
0
0
9
0
1
0
0
1
0
2
1
0
1
0
3
1
0
0
0
0
0
1
1
0
0
1
0
1
0
0
0
0
0
1
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
1
0
0
1
0
0
1
0
0
0
1
0
2
0
0
1
0
11
0
3
MAL000915
Egypt
AgentTesla
T1566.002
drive_by_download
Banking & Fintech
.js
2,975
0
1
1
0
0
1
1
0
0
0
1
0
0
0
0
1
0
0
1
0
2
1
0
0
0
2
2
0
0
0
0
0
1
1
0
0
1
0
0
1
0
0
0
0
0
0
1
0
0
0
0
0
0
0
1
0
0
0
0
0
0
0
1
0
0
1
1
0
0
0
1
0
2
0
0
0
1
8
0
4
MAL000794
Ghana
Lokibot
T1552.001
usb_removable
Energy
.docx
3,539
0
1
0
0
1
0
1
1
0
0
1
0
0
10
0
1
0
0
1
0
1
1
0
1
0
2
2
0
1
0
0
0
1
1
0
0
1
0
1
0
0
0
0
0
0
0
0
1
0
0
0
0
0
0
0
0
0
1
0
0
0
0
0
1
0
0
1
0
0
0
1
0
2
1
0
0
0
8
3
3
MAL003021
Zambia
Lokibot
T1005
email_link
Government
.pdf
1,329
0
0
0
1
1
1
0
0
0
0
1
0
0
9
1
0
1
0
1
0
0
0
1
1
0
2
1
1
0
0
0
0
1
1
0
0
1
0
1
0
0
0
0
0
0
1
0
0
0
0
0
0
0
0
0
1
0
0
0
0
0
0
0
1
1
1
0
1
0
1
1
0
2
0
0
1
0
8
0
4
MAL003543
Ethiopia
AsyncRAT
T1021.002
drive_by_download
Government
.exe
2,646
0
0
1
1
1
0
0
1
1
0
0
0
1
11
1
1
1
0
1
0
1
0
1
1
0
3
2
0
1
0
0
1
1
0
0
1
0
1
0
0
0
0
0
0
0
0
1
0
0
0
0
0
0
0
0
1
0
0
0
0
0
0
0
1
1
1
1
1
0
0
1
0
2
0
1
0
0
9
5
3
MAL001073
South Africa
Remcos
T1053.005
email_attachment
Banking & Fintech
.xlsx
4,929
1
0
1
1
1
1
1
0
0
0
0
0
1
12
0
0
0
1
1
0
2
1
1
1
0
4
2
0
0
0
0
0
1
0
0
1
0
0
1
0
0
0
0
0
1
0
0
0
0
0
0
0
0
0
1
0
0
0
0
0
0
0
0
1
0
0
0
1
0
1
1
0
2
0
0
1
0
12
0
2
MAL003351
Nigeria
AgentTesla
T1005
email_link
Energy
.exe
568
1
1
1
1
1
1
1
0
0
0
1
0
0
1
0
0
1
0
1
0
3
1
1
1
1
5
2
0
0
0
0
0
1
1
0
0
1
1
0
0
0
0
0
0
0
1
0
0
0
0
0
0
0
0
0
0
0
1
0
0
0
0
1
0
0
1
0
1
0
1
0
0
1
1
0
0
0
17
4
4
MAL001744
Algeria
Emotet
T1041
email_link
Banking & Fintech
.js
2,109
0
1
1
0
1
1
1
0
0
0
0
1
0
5
1
0
0
0
1
0
2
1
0
1
0
3
2
0
0
0
0
0
1
1
0
0
1
0
0
1
0
0
0
0
0
1
0
0
0
0
0
0
0
0
1
0
0
0
0
0
0
0
1
0
1
1
0
0
0
0
1
0
2
0
0
0
1
11
0
4
MAL001084
Algeria
RedLine Stealer
T1566.002
email_attachment
Energy
.doc
4,808
0
1
0
1
0
0
1
0
0
0
1
0
0
15
0
0
1
0
1
0
1
1
1
0
0
2
1
0
0
0
0
0
1
1
0
0
1
0
1
0
0
0
0
0
1
0
0
0
0
0
0
0
0
0
0
0
0
1
0
0
0
0
0
1
0
0
0
1
0
1
1
0
2
0
0
0
1
8
0
3
MAL000926
Nigeria
TrickBot
T1204.001
email_attachment
Manufacturing
.pdf
3,572
1
1
1
1
1
1
1
0
1
0
0
1
0
6
0
0
1
0
1
0
3
1
1
1
1
5
3
0
0
0
0
0
1
1
0
0
1
0
1
0
0
0
0
0
1
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
1
0
0
0
0
0
0
1
0
1
1
0
2
1
0
0
0
17
4
3
MAL003049
Ethiopia
Qakbot
T1059.005
email_link
Banking & Fintech
.docx
4,523
0
1
1
1
0
1
0
0
0
0
0
1
0
11
0
0
0
1
1
0
2
1
1
0
0
3
1
1
0
0
0
0
1
1
0
0
1
0
1
0
0
0
0
0
0
1
0
0
0
0
0
0
0
0
1
0
0
0
0
0
0
0
0
1
0
0
0
1
0
1
1
0
2
0
1
0
0
11
0
3
MAL001117
Kenya
Lokibot
T1059.003
email_link
Banking & Fintech
.exe
3,664
0
0
1
1
0
1
1
0
0
0
1
0
0
16
1
0
0
0
1
0
1
0
1
0
0
2
2
0
0
0
0
0
1
1
0
0
1
1
0
0
0
0
0
0
0
1
0
0
0
0
0
0
0
0
1
0
0
0
0
0
0
0
0
1
1
1
0
0
0
0
1
0
2
0
1
0
0
8
0
4
MAL000642
South Africa
Anubis
T1204.002
drive_by_download
Healthcare
.pdf
436
1
1
0
1
1
0
1
0
0
0
1
1
0
21
0
0
0
0
1
0
2
1
1
1
0
4
1
0
0
0
0
0
1
1
0
0
1
0
1
0
0
0
0
0
0
0
1
0
0
0
0
0
0
0
0
0
0
0
1
0
0
0
0
0
0
0
0
0
0
0
0
0
1
0
0
1
0
14
0
3
MAL004767
Ghana
Remcos
T1204.001
email_attachment
Manufacturing
.hta
4,126
1
0
0
0
1
1
1
0
0
0
0
0
1
5
0
0
0
0
1
0
1
1
0
1
0
2
2
0
0
0
0
0
1
0
0
1
0
0
0
1
0
0
0
0
1
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
1
0
1
0
0
1
0
0
0
0
1
0
2
1
0
0
0
6
0
3
MAL000501
South Africa
AgentTesla
T1204.002
email_attachment
Telecom
.xlsx
3,937
1
0
0
0
1
0
0
0
0
0
1
0
0
15
0
1
0
0
1
0
1
1
0
1
0
2
0
0
0
0
1
0
1
1
0
0
1
0
1
0
0
0
0
0
1
0
0
0
0
0
0
0
0
0
0
0
1
0
0
0
0
0
0
1
0
0
1
0
0
0
1
0
2
0
0
1
0
11
5
3
MAL004066
South Africa
EventBot
T1566.001
email_attachment
Education
.xlsx
2,425
1
0
0
1
1
0
1
1
0
0
0
1
0
17
0
0
1
0
1
0
1
1
1
1
0
3
2
0
1
0
0
0
1
1
0
0
1
0
1
0
0
0
0
0
1
0
0
0
0
0
0
0
0
0
0
0
0
0
0
1
0
0
0
1
0
0
0
1
0
1
1
0
2
0
0
1
0
11
3
3
MAL000333
Uganda
Emotet
T1543.003
mobile_app_store
Banking & Fintech
.exe
1,803
1
1
1
1
1
0
1
0
0
0
0
1
0
10
1
1
0
0
1
0
3
1
1
1
1
5
1
0
0
0
0
0
1
1
0
0
1
1
0
0
0
0
0
0
0
0
0
0
0
0
1
0
0
0
1
0
0
0
0
0
0
0
0
1
1
1
1
0
0
0
1
0
2
0
1
0
0
17
4
4
MAL004684
Zimbabwe
Remcos
T1552.001
email_attachment
Healthcare
.docx
629
1
0
1
1
1
0
0
0
0
0
0
0
1
20
1
1
0
0
1
0
2
1
1
1
0
4
0
0
0
0
1
0
1
0
0
1
0
0
1
0
0
0
0
0
1
0
0
0
0
0
0
0
0
0
0
0
0
0
1
0
0
0
0
0
1
1
1
0
0
0
0
0
1
0
0
1
0
15
5
3
MAL000486
Egypt
Dridex
T1566.001
email_attachment
Healthcare
.xls
1,629
1
0
1
0
1
1
0
0
0
0
0
1
0
3
0
0
0
0
1
0
2
1
0
1
0
3
1
1
0
0
0
0
1
1
0
0
1
0
1
0
0
0
0
0
1
0
0
0
0
0
0
0
0
0
0
0
0
0
1
0
0
0
1
0
0
1
0
0
0
0
1
0
2
0
0
0
1
11
0
4
MAL001962
Egypt
Dridex
T1204.002
drive_by_download
Government
.docx
3,325
1
1
1
0
1
1
1
0
0
0
0
1
0
8
0
0
1
0
1
0
3
1
0
1
1
4
2
0
0
0
0
0
1
1
0
0
1
0
1
0
0
0
0
0
0
0
1
0
0
0
0
0
0
0
0
1
0
0
0
0
0
0
0
1
0
0
0
1
0
1
1
0
2
0
0
0
1
14
4
3
MAL000393
Egypt
Lokibot
T1041
email_attachment
Healthcare
.js
2,298
0
1
0
1
1
0
1
0
0
0
1
0
0
12
1
0
1
1
1
0
1
1
1
1
0
3
1
0
0
0
0
0
1
1
0
0
1
0
0
1
0
0
0
0
1
0
0
0
0
0
0
0
0
0
0
0
0
0
1
0
0
0
0
1
1
1
0
1
1
1
1
0
2
0
0
0
1
11
0
6
MAL004842
Kenya
FluBot
T1543.003
email_link
Education
.exe
1,672
1
1
1
1
1
1
0
0
0
0
0
1
0
6
1
0
0
0
1
0
3
1
1
1
1
5
1
1
0
0
0
0
1
1
0
0
1
1
0
0
0
0
0
0
0
1
0
0
0
0
0
0
0
0
0
0
0
0
0
1
0
0
0
0
1
1
0
0
0
0
1
0
2
0
1
0
0
17
4
4
MAL004866
Egypt
FluBot
T1005
email_link
Banking & Fintech
.exe
3,955
1
1
1
1
1
0
1
0
0
0
0
1
0
19
1
1
0
0
1
0
3
1
1
1
1
5
1
0
0
0
0
0
1
1
0
0
1
1
0
0
0
0
0
0
0
1
0
0
0
0
0
0
0
0
1
0
0
0
0
0
0
0
0
0
1
1
1
0
0
0
1
0
2
0
0
0
1
17
4
4
MAL001755
Tanzania
Cerberus
T1204.002
email_link
Banking & Fintech
.zip
3,879
0
0
0
1
1
1
1
1
0
0
0
0
0
1
0
0
0
1
1
0
0
0
1
1
0
2
3
0
0
1
0
0
0
0
0
0
0
0
0
0
0
1
0
0
0
1
0
0
0
0
0
0
0
0
1
0
0
0
0
0
0
0
1
0
0
1
0
1
0
1
1
0
2
0
1
0
0
6
0
1
MAL002515
Rwanda
FluBot
T1105
email_attachment
Banking & Fintech
.docx
4,751
1
1
1
0
0
0
0
1
0
0
0
1
0
12
0
0
0
0
1
0
3
1
0
0
1
3
1
0
1
0
0
0
1
1
0
0
1
0
1
0
0
0
0
0
1
0
0
0
0
0
0
0
0
0
1
0
0
0
0
0
0
0
0
1
0
0
0
0
0
0
1
0
2
0
1
0
0
11
7
3
MAL003585
Tanzania
Lokibot
T1566.002
usb_removable
Banking & Fintech
.pdf
1,029
1
0
0
0
1
0
0
0
0
0
1
0
0
15
0
0
0
0
1
0
1
1
0
1
0
2
0
0
0
0
1
0
1
1
0
0
1
0
1
0
0
0
0
0
0
0
0
1
0
0
0
0
0
0
1
0
0
0
0
0
0
0
0
1
0
0
0
0
0
0
1
0
2
0
1
0
0
11
5
3
MAL004315
Ghana
Lokibot
T1566.001
mobile_app_store
Energy
.pdf
2,272
0
0
0
1
1
0
1
0
1
0
1
0
0
19
0
0
0
1
1
0
0
0
1
1
0
2
2
0
0
0
0
0
1
1
0
0
1
0
1
0
0
0
0
0
0
0
0
0
0
0
1
0
0
0
0
0
0
1
0
0
0
0
0
0
0
0
0
1
0
1
1
0
2
1
0
0
0
8
0
3
MAL004966
Uganda
Remcos
T1547.001
email_attachment
Banking & Fintech
.docx
1,217
0
0
0
1
0
1
0
0
0
0
0
0
1
16
1
1
1
0
1
0
0
0
1
0
0
1
1
1
0
0
0
0
1
0
0
1
0
0
1
0
0
0
0
0
1
0
0
0
0
0
0
0
0
0
1
0
0
0
0
0
0
0
0
1
1
1
1
1
0
0
1
0
2
0
1
0
0
3
0
3
MAL002099
South Africa
AgentTesla
T1021.001
supply_chain
Government
.exe
3,872
0
1
1
0
0
1
1
0
0
0
1
0
0
10
0
0
0
0
1
0
2
1
0
0
0
2
2
0
0
0
0
0
1
1
0
0
1
1
0
0
0
0
0
0
0
0
0
0
1
0
0
0
0
0
0
1
0
0
0
0
0
0
0
1
0
0
0
0
0
0
1
0
2
0
0
1
0
8
0
3
MAL003599
Nigeria
AgentTesla
T1005
social_media
Energy
.zip
814
0
1
0
1
0
1
1
0
0
0
1
0
0
4
0
0
0
0
1
0
1
1
1
0
0
2
2
0
0
0
0
0
1
1
0
0
1
0
0
0
0
1
0
0
0
0
0
0
0
1
0
0
0
0
0
0
0
1
0
0
0
0
1
0
0
1
0
0
0
0
0
0
1
1
0
0
0
8
0
4
MAL004121
Botswana
Qakbot
T1552.001
social_media
Banking & Fintech
.hta
1,145
1
0
1
1
1
1
1
0
1
0
0
1
0
2
0
0
0
0
1
0
2
1
1
1
0
4
3
0
0
0
0
0
1
1
0
0
1
0
0
1
0
0
0
0
0
0
0
0
0
1
0
0
0
0
1
0
0
0
0
0
0
0
1
0
0
1
0
0
0
0
1
0
2
0
0
1
0
14
0
4
MAL000029
Egypt
TrickBot
T1059.003
email_link
Government
.apk
4,065
0
1
1
1
0
1
0
0
1
0
0
1
0
14
1
0
0
0
1
0
2
1
1
0
0
3
2
1
0
0
0
0
1
1
0
0
1
0
0
0
1
0
0
0
0
1
0
0
0
0
0
0
0
0
0
1
0
0
0
0
0
0
0
1
1
1
0
0
0
0
1
0
2
0
0
0
1
11
0
4
MAL000065
Egypt
AgentTesla
T1071.001
supply_chain
Banking & Fintech
.apk
789
1
1
1
1
1
1
0
1
0
0
1
0
0
10
1
0
0
0
1
0
3
1
1
1
1
5
2
0
0
0
0
0
1
1
0
0
1
0
0
0
1
0
0
0
0
0
0
0
1
0
0
0
0
0
1
0
0
0
0
0
0
0
0
1
1
1
0
0
0
0
0
0
1
0
0
0
1
17
4
4
MAL000838
Uganda
Qakbot
T1021.001
email_attachment
Healthcare
.xlsx
4,891
1
0
1
1
0
1
1
0
0
0
0
1
0
22
0
0
1
0
1
0
2
1
1
0
0
3
2
0
0
0
0
0
1
1
0
0
1
0
1
0
0
0
0
0
1
0
0
0
0
0
0
0
0
0
0
0
0
0
1
0
0
0
0
0
0
0
0
1
0
1
1
0
2
0
1
0
0
11
0
3
MAL003906
Egypt
TrickBot
T1547.001
usb_removable
Education
.exe
4,273
1
1
1
0
1
1
0
0
0
0
0
1
0
11
0
0
0
0
1
0
3
1
0
1
1
4
1
1
0
0
0
0
1
1
0
0
1
1
0
0
0
0
0
0
0
0
0
1
0
0
0
0
0
0
0
0
0
0
0
1
0
0
0
1
0
0
0
0
0
0
1
0
2
0
0
0
1
14
4
3
MAL003773
Nigeria
RedLine Stealer
T1053.005
email_attachment
Manufacturing
.zip
4,249
1
0
1
0
1
0
0
1
0
0
1
0
0
12
0
1
1
0
1
0
2
1
0
1
0
3
1
0
1
0
0
0
1
1
0
0
1
0
0
0
0
1
0
0
1
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
1
0
0
1
0
0
1
1
0
0
1
0
2
1
0
0
0
11
3
3
MAL004635
Morocco
Lokibot
T1543.003
email_attachment
Education
.exe
3,173
1
0
0
0
0
1
0
1
0
0
1
0
0
15
0
0
1
0
1
0
1
1
0
0
0
1
2
0
0
0
0
0
1
1
0
0
1
1
0
0
0
0
0
0
1
0
0
0
0
0
0
0
0
0
0
0
0
0
0
1
0
0
0
1
0
0
0
1
0
1
1
0
2
0
0
0
1
5
0
3
MAL003161
Egypt
Anubis
T1543.003
drive_by_download
Government
.hta
2,439
1
1
1
0
0
1
0
0
0
0
1
1
0
13
0
0
1
0
1
0
3
1
0
0
1
3
1
1
0
0
0
0
1
1
0
0
1
0
0
1
0
0
0
0
0
0
1
0
0
0
0
0
0
0
0
1
0
0
0
0
0
0
0
1
0
0
0
1
0
1
1
0
2
0
0
0
1
11
4
3
MAL002659
Kenya
Dridex
T1071.001
email_attachment
Government
.js
2,994
0
0
1
0
0
0
0
0
0
0
0
1
0
20
0
1
0
1
1
0
1
0
0
0
0
1
0
0
0
0
1
0
1
1
0
0
1
0
0
1
0
0
0
0
1
0
0
0
0
0
0
0
0
0
0
1
0
0
0
0
0
0
0
0
0
0
1
1
0
0
1
0
2
0
1
0
0
8
5
3
MAL004615
Nigeria
RedLine Stealer
T1204.002
usb_removable
Telecom
.hta
1,687
0
0
0
1
0
0
0
0
0
0
1
0
0
0
0
1
0
0
1
0
0
0
1
0
0
1
0
0
0
0
1
0
1
1
0
0
1
0
0
1
0
0
0
0
0
0
0
1
0
0
0
0
0
0
0
0
1
0
0
0
0
0
1
0
0
1
1
0
0
0
1
0
2
1
0
0
0
8
5
4
MAL004628
Tanzania
Anubis
T1547.001
email_attachment
Government
.pdf
4,973
0
0
1
1
1
0
1
1
1
0
1
1
0
8
0
1
0
0
1
0
1
0
1
1
0
3
3
0
1
0
0
0
1
1
0
0
1
0
1
0
0
0
0
0
1
0
0
0
0
0
0
0
0
0
0
1
0
0
0
0
0
0
0
1
0
0
1
0
0
0
1
0
2
0
1
0
0
11
3
3
MAL002451
Kenya
Lokibot
T1204.002
drive_by_download
Manufacturing
.exe
735
1
0
1
1
1
0
1
1
0
0
1
0
0
19
0
0
0
0
1
0
2
1
1
1
0
4
2
0
1
0
0
0
1
1
0
0
1
1
0
0
0
0
0
0
0
0
1
0
0
0
0
0
0
0
0
0
0
0
0
0
1
0
0
0
0
0
0
0
0
0
0
0
1
0
1
0
0
14
3
3
MAL002846
Ghana
Remcos
T1059.003
email_link
Banking & Fintech
.doc
2,016
1
1
1
0
0
1
0
0
0
0
0
0
1
9
0
0
0
0
1
0
3
1
0
0
1
3
1
1
0
0
0
0
1
0
0
1
0
0
1
0
0
0
0
0
0
1
0
0
0
0
0
0
0
0
1
0
0
0
0
0
0
0
0
1
0
0
0
0
0
0
1
0
2
1
0
0
0
9
4
2
MAL001144
Ghana
Anubis
T1566.001
mobile_app_store
Manufacturing
.exe
3,819
0
0
1
0
1
1
0
0
0
0
1
1
0
7
1
0
0
0
1
0
1
0
0
1
0
2
1
1
0
0
0
0
1
1
0
0
1
1
0
0
0
0
0
0
0
0
0
0
0
0
1
0
0
0
0
0
0
0
0
0
1
0
0
0
1
1
0
0
0
0
1
0
2
1
0
0
0
8
0
4
MAL003078
Nigeria
AgentTesla
T1005
drive_by_download
Healthcare
.zip
840
1
0
0
1
1
1
0
1
0
0
1
0
0
1
0
0
0
0
1
0
1
1
1
1
0
3
2
0
0
0
0
0
1
1
0
0
1
0
0
0
0
1
0
0
0
0
1
0
0
0
0
0
0
0
0
0
0
0
1
0
0
0
1
0
0
1
0
0
0
0
0
0
1
1
0
0
0
11
0
4
MAL001103
Ghana
AgentTesla
T1071.001
email_link
Government
.pdf
697
0
0
1
1
1
1
1
0
0
0
1
0
0
19
0
1
0
0
1
0
1
0
1
1
0
3
2
0
0
0
0
0
1
1
0
0
1
0
1
0
0
0
0
0
0
1
0
0
0
0
0
0
0
0
0
1
0
0
0
0
0
0
0
0
0
0
1
0
0
0
0
0
1
1
0
0
0
11
0
3
MAL000168
Kenya
Formbook
T1547.001
supply_chain
Energy
.zip
2,254
1
1
0
0
1
0
0
0
0
0
1
0
0
8
0
0
1
0
1
0
2
1
0
1
0
3
0
0
0
0
1
0
1
1
0
0
1
0
0
0
0
1
0
0
0
0
0
0
1
0
0
0
0
0
0
0
0
1
0
0
0
0
0
1
0
0
0
1
0
1
1
0
2
0
1
0
0
14
5
3
MAL001670
Botswana
TrickBot
T1552.001
email_link
Banking & Fintech
.exe
2,819
0
0
0
0
0
0
0
0
0
0
0
1
0
0
1
0
0
0
1
0
0
0
0
0
0
0
0
0
0
0
1
0
1
1
0
0
1
1
0
0
0
0
0
0
0
1
0
0
0
0
0
0
0
0
1
0
0
0
0
0
0
0
1
0
1
1
0
0
0
0
1
0
2
0
0
1
0
5
5
4
MAL002570
Nigeria
AgentTesla
T1105
drive_by_download
Banking & Fintech
.jar
3,156
1
1
0
0
1
1
1
0
0
0
1
0
0
2
0
0
0
0
1
0
2
1
0
1
0
3
2
0
0
0
0
0
1
1
0
0
1
0
0
0
0
0
1
0
0
0
1
0
0
0
0
0
0
0
1
0
0
0
0
0
0
0
1
0
0
1
0
0
0
0
1
0
2
1
0
0
0
11
0
4
MAL002377
Egypt
Lokibot
T1021.002
email_link
Energy
.exe
2,460
0
0
0
1
0
1
1
1
0
0
1
0
0
13
0
0
0
0
1
0
0
0
1
0
0
1
3
0
0
1
0
0
1
1
0
0
1
1
0
0
0
0
0
0
0
1
0
0
0
0
0
0
0
0
0
0
0
1
0
0
0
0
0
1
0
0
0
0
0
0
1
0
2
0
0
0
1
5
0
3
MAL004395
Nigeria
Lokibot
T1071.001
email_link
Energy
.xls
1,870
0
0
0
1
1
1
0
0
0
0
1
0
0
15
0
0
1
1
1
0
0
0
1
1
0
2
1
1
0
0
0
0
1
1
0
0
1
0
1
0
0
0
0
0
0
1
0
0
0
0
0
0
0
0
0
0
0
1
0
0
0
0
0
1
0
0
0
1
1
1
1
0
2
1
0
0
0
8
0
5
MAL004257
Kenya
Dridex
T1059.005
usb_removable
Government
.docx
3,594
1
0
0
0
1
1
1
0
0
0
0
1
0
8
1
1
0
0
1
0
1
1
0
1
0
2
2
0
0
0
0
0
1
1
0
0
1
0
1
0
0
0
0
0
0
0
0
1
0
0
0
0
0
0
0
1
0
0
0
0
0
0
0
1
1
1
1
0
0
0
1
0
2
0
1
0
0
8
0
4
MAL003862
Zambia
Lokibot
T1204.001
drive_by_download
Government
.doc
4,019
1
1
1
0
1
1
0
0
1
0
1
0
0
21
1
0
0
0
1
0
3
1
0
1
1
4
2
1
0
0
0
0
1
1
0
0
1
0
1
0
0
0
0
0
0
0
1
0
0
0
0
0
0
0
0
1
0
0
0
0
0
0
0
0
1
1
0
0
0
0
1
0
2
0
0
1
0
14
4
4
MAL000023
Uganda
Ryuk
T1021.001
supply_chain
Telecom
.apk
3,938
1
0
0
1
1
1
0
0
1
1
0
0
0
2
0
0
0
0
1
0
1
1
1
1
0
3
2
1
0
0
0
0
1
0
1
0
0
0
0
0
1
0
0
0
0
0
0
0
1
0
0
0
0
0
0
0
1
0
0
0
0
0
1
0
0
1
0
0
0
0
1
0
2
0
1
0
0
12
0
5
MAL002633
Uganda
RedLine Stealer
T1059.003
drive_by_download
Government
.exe
104
0
0
1
1
0
1
0
1
0
0
1
0
0
13
1
0
1
0
1
0
1
0
1
0
0
2
2
0
0
0
0
0
1
1
0
0
1
1
0
0
0
0
0
0
0
0
1
0
0
0
0
0
0
0
0
1
0
0
0
0
0
0
0
1
1
1
0
1
0
1
0
0
1
0
1
0
0
8
0
4
MAL003340
Algeria
Lokibot
T1059.005
usb_removable
Healthcare
.js
3,605
1
0
1
0
0
1
0
1
1
0
1
0
0
1
0
1
0
0
1
0
2
1
0
0
0
2
3
0
0
0
0
0
1
1
0
0
1
0
0
1
0
0
0
0
0
0
0
1
0
0
0
0
0
0
0
0
0
0
1
0
0
0
1
0
0
1
1
0
0
0
1
0
2
0
0
0
1
8
0
4
MAL002215
South Africa
EventBot
T1041
email_link
E-commerce
.pdf
1,431
0
1
1
1
1
0
1
0
0
0
0
1
0
17
0
0
0
0
1
0
2
1
1
1
0
4
1
0
0
0
0
0
1
1
0
0
1
0
1
0
0
0
0
0
0
1
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
1
0
1
0
0
0
0
0
0
1
0
2
0
0
1
0
14
0
3
MAL003682
Kenya
Formbook
T1105
email_link
Banking & Fintech
.exe
3,080
1
0
0
1
0
1
1
0
0
0
1
0
0
4
0
0
0
0
1
0
1
1
1
0
0
2
2
0
0
0
0
0
1
1
0
0
1
1
0
0
0
0
0
0
0
1
0
0
0
0
0
0
0
0
1
0
0
0
0
0
0
0
1
0
0
1
0
0
0
0
1
0
2
0
1
0
0
8
0
4
MAL004724
Zimbabwe
Formbook
T1021.001
drive_by_download
Banking & Fintech
.js
1,654
1
1
0
1
0
0
1
1
0
0
1
0
0
19
0
0
1
0
1
0
2
1
1
0
0
3
2
0
1
0
0
0
1
1
0
0
1
0
0
1
0
0
0
0
0
0
1
0
0
0
0
0
0
0
1
0
0
0
0
0
0
0
0
0
0
0
0
1
0
1
1
0
2
0
0
1
0
11
3
3
MAL001907
Ghana
RedLine Stealer
T1053.005
messaging_app
Government
.js
3,427
1
1
1
1
0
0
1
0
0
0
1
0
0
9
0
0
1
0
1
0
3
1
1
0
1
4
1
0
0
0
0
0
1
1
0
0
1
0
0
1
0
0
0
0
0
0
0
0
0
0
0
0
1
0
0
1
0
0
0
0
0
0
0
1
0
0
0
1
0
1
1
0
2
1
0
0
0
14
4
3
MAL000084
Ethiopia
Emotet
T1041
supply_chain
Telecom
.apk
282
0
0
1
1
0
1
1
0
1
0
0
1
0
20
0
0
1
0
1
0
1
0
1
0
0
2
3
0
0
0
0
0
1
1
0
0
1
0
0
0
1
0
0
0
0
0
0
0
1
0
0
0
0
0
0
0
1
0
0
0
0
0
0
0
0
0
0
1
0
1
0
0
1
0
1
0
0
8
0
3
MAL000227
South Africa
AgentTesla
T1005
email_link
Government
.doc
50
1
0
1
1
1
1
0
1
1
0
1
0
0
9
0
1
0
1
1
0
2
1
1
1
0
4
3
0
0
0
0
0
1
1
0
0
1
0
1
0
0
0
0
0
0
1
0
0
0
0
0
0
0
0
0
1
0
0
0
0
0
0
0
1
0
0
1
1
0
0
0
1
0
0
0
1
0
14
0
3
MAL000296
Tanzania
Cerberus
T1105
social_media
Banking & Fintech
.pdf
495
1
0
0
1
1
0
1
0
0
0
0
0
0
14
0
0
0
0
1
0
1
1
1
1
0
3
1
0
0
0
0
0
0
0
0
0
0
0
1
0
0
0
0
0
0
0
0
0
0
1
0
0
0
0
1
0
0
0
0
0
0
0
0
1
0
0
0
0
0
0
0
0
1
0
1
0
0
9
0
0
MAL001001
Kenya
NjRAT
T1005
usb_removable
Banking & Fintech
.exe
1,802
0
1
0
0
1
1
0
0
0
0
0
0
1
9
1
1
0
0
1
0
1
1
0
1
0
2
1
1
0
0
0
0
1
0
0
1
0
1
0
0
0
0
0
0
0
0
0
1
0
0
0
0
0
0
1
0
0
0
0
0
0
0
0
1
1
1
1
0
0
0
1
0
2
0
1
0
0
6
0
3
MAL002138
Ghana
AsyncRAT
T1059.005
social_media
Government
.docx
3,605
1
0
1
1
0
0
1
0
1
0
0
0
1
15
1
0
1
1
1
0
2
1
1
0
0
3
2
0
0
0
0
0
1
0
0
1
0
0
1
0
0
0
0
0
0
0
0
0
0
1
0
0
0
0
0
1
0
0
0
0
0
0
0
1
1
1
0
1
1
1
1
0
2
1
0
0
0
9
0
5
MAL000711
Algeria
Netwalker
T1543.003
drive_by_download
Banking & Fintech
.js
229
1
1
1
1
1
0
1
1
1
1
0
0
0
13
0
1
0
0
1
0
3
1
1
1
1
5
3
0
1
0
0
0
1
0
1
0
0
0
0
1
0
0
0
0
0
0
1
0
0
0
0
0
0
0
1
0
0
0
0
0
0
0
0
1
0
0
1
0
0
0
0
0
1
0
0
0
1
18
7
4
MAL002801
South Africa
EventBot
T1204.001
drive_by_download
Education
.doc
2,338
0
0
0
0
1
1
0
0
0
0
0
1
0
6
0
0
1
0
1
0
0
0
0
1
0
1
1
1
0
0
0
0
1
1
0
0
1
0
1
0
0
0
0
0
0
0
1
0
0
0
0
0
0
0
0
0
0
0
0
1
0
0
0
0
0
0
0
1
0
1
1
0
2
0
0
1
0
5
0
3
MAL002527
Ethiopia
Formbook
T1059.003
email_attachment
Education
.pdf
1,121
1
1
0
0
1
1
0
0
0
0
1
0
0
7
0
0
0
0
1
0
2
1
0
1
0
3
1
1
0
0
0
0
1
1
0
0
1
0
1
0
0
0
0
0
1
0
0
0
0
0
0
0
0
0
0
0
0
0
0
1
0
0
0
0
0
0
0
0
0
0
1
0
2
0
1
0
0
11
0
3
MAL003752
Tanzania
Lokibot
T1552.001
email_link
Healthcare
.jar
2,999
0
1
0
0
1
1
1
0
0
0
1
0
0
9
1
1
0
0
1
0
1
1
0
1
0
2
2
0
0
0
0
0
1
1
0
0
1
0
0
0
0
0
1
0
0
1
0
0
0
0
0
0
0
0
0
0
0
0
1
0
0
0
0
1
1
1
1
0
0
0
1
0
2
0
1
0
0
8
0
4
MAL003321
Egypt
Lokibot
T1005
email_attachment
Education
.js
1,128
0
0
1
0
0
1
0
0
0
0
1
0
0
8
0
1
1
0
1
0
1
0
0
0
0
1
1
1
0
0
0
0
1
1
0
0
1
0
0
1
0
0
0
0
1
0
0
0
0
0
0
0
0
0
0
0
0
0
0
1
0
0
0
1
0
0
1
1
0
0
1
0
2
0
0
0
1
5
0
3
MAL003181
Botswana
Remcos
T1566.001
drive_by_download
Manufacturing
.xls
1,335
1
0
1
1
1
0
0
1
0
0
0
0
1
1
0
0
0
0
1
0
2
1
1
1
0
4
1
0
1
0
0
0
1
0
0
1
0
0
1
0
0
0
0
0
0
0
1
0
0
0
0
0
0
0
0
0
0
0
0
0
1
0
1
0
0
1
0
0
0
0
1
0
2
0
0
1
0
12
3
3
MAL004183
Egypt
Sodinokibi
T1059.005
email_attachment
Energy
.exe
3,425
0
0
1
1
1
0
1
0
0
1
0
0
0
11
0
0
0
0
1
0
1
0
1
1
0
3
1
0
0
0
0
0
1
0
1
0
0
1
0
0
0
0
0
0
1
0
0
0
0
0
0
0
0
0
0
0
0
1
0
0
0
0
0
1
0
0
0
0
0
0
1
0
2
0
0
0
1
12
0
4
MAL001615
Kenya
Qakbot
T1005
email_link
Education
.zip
4,089
1
0
1
0
1
1
0
0
0
0
0
1
0
16
1
0
0
1
1
0
2
1
0
1
0
3
1
1
0
0
0
0
1
1
0
0
1
0
0
0
0
1
0
0
0
1
0
0
0
0
0
0
0
0
0
0
0
0
0
1
0
0
0
1
1
1
0
1
0
1
1
0
2
0
1
0
0
11
0
4
MAL003024
Kenya
Lokibot
T1204.002
drive_by_download
Banking & Fintech
.doc
618
1
0
0
1
0
1
1
0
0
0
1
0
0
18
0
0
0
0
1
0
1
1
1
0
0
2
2
0
0
0
0
0
1
1
0
0
1
0
1
0
0
0
0
0
0
0
1
0
0
0
0
0
0
0
1
0
0
0
0
0
0
0
0
1
0
0
0
0
0
0
0
0
1
0
1
0
0
8
0
3
MAL001413
Egypt
FluBot
T1547.001
drive_by_download
Banking & Fintech
.docx
3,834
0
0
1
0
0
0
0
0
0
0
0
1
0
12
1
0
0
0
1
0
1
0
0
0
0
1
0
0
0
0
1
0
1
1
0
0
1
0
1
0
0
0
0
0
0
0
1
0
0
0
0
0
0
0
1
0
0
0
0
0
0
0
0
1
1
1
0
0
0
0
1
0
2
0
0
0
1
8
5
4
MAL000763
Botswana
Lokibot
T1059.005
usb_removable
Telecom
.doc
2,443
1
0
0
1
0
1
1
0
1
0
1
0
0
16
0
0
0
0
1
0
1
1
1
0
0
2
3
0
0
0
0
0
1
1
0
0
1
0
1
0
0
0
0
0
0
0
0
1
0
0
0
0
0
0
0
0
1
0
0
0
0
0
0
1
0
0
0
0
0
0
1
0
2
0
0
1
0
8
0
3
MAL000655
Kenya
AgentTesla
T1071.001
email_attachment
Banking & Fintech
.exe
590
1
1
1
1
1
1
1
0
0
0
1
0
0
9
0
0
0
0
1
0
3
1
1
1
1
5
2
0
0
0
0
0
1
1
0
0
1
1
0
0
0
0
0
0
1
0
0
0
0
0
0
0
0
0
1
0
0
0
0
0
0
0
0
1
0
0
0
0
0
0
0
0
1
0
1
0
0
17
4
3
MAL004797
South Africa
Ryuk
T1021.002
email_attachment
Banking & Fintech
.xls
2,599
1
1
1
0
0
1
0
0
0
1
0
0
0
0
1
0
1
0
1
0
3
1
0
0
1
3
1
1
0
0
0
0
1
0
1
0
0
0
1
0
0
0
0
0
1
0
0
0
0
0
0
0
0
0
1
0
0
0
0
0
0
0
1
0
1
1
0
1
0
1
1
0
2
0
0
1
0
12
4
5
MAL003849
Uganda
AsyncRAT
T1053.005
email_attachment
Banking & Fintech
.docx
766
1
0
0
1
1
0
0
0
0
0
0
0
1
13
1
0
1
0
1
0
1
1
1
1
0
3
0
0
0
0
1
0
1
0
0
1
0
0
1
0
0
0
0
0
1
0
0
0
0
0
0
0
0
0
1
0
0
0
0
0
0
0
0
1
1
1
0
1
0
1
0
0
1
0
1
0
0
12
5
3
MAL004153
Kenya
RedLine Stealer
T1041
drive_by_download
Government
.exe
1,639
1
0
1
1
1
0
0
1
1
0
1
0
0
2
0
0
0
0
1
0
2
1
1
1
0
4
2
0
1
0
0
1
1
1
0
0
1
1
0
0
0
0
0
0
0
0
1
0
0
0
0
0
0
0
0
1
0
0
0
0
0
0
1
0
0
1
0
0
0
0
1
0
2
0
1
0
0
14
5
4
MAL000468
Nigeria
AgentTesla
T1005
email_attachment
Government
.doc
3,311
1
0
1
1
1
0
0
0
1
0
1
0
0
23
0
0
0
1
1
0
2
1
1
1
0
4
1
0
0
0
0
1
1
1
0
0
1
0
1
0
0
0
0
0
1
0
0
0
0
0
0
0
0
0
0
1
0
0
0
0
0
0
1
0
0
1
0
1
0
1
1
0
2
1
0
0
0
14
2
4
MAL000157
Tanzania
Netwalker
T1021.001
email_link
Government
.pdf
880
1
1
0
0
1
0
0
0
0
1
0
0
0
10
0
0
0
0
1
0
2
1
0
1
0
3
0
0
0
0
1
0
1
0
1
0
0
0
1
0
0
0
0
0
0
1
0
0
0
0
0
0
0
0
0
1
0
0
0
0
0
0
0
1
0
0
0
0
0
0
0
0
1
0
1
0
0
15
5
4
MAL001295
Zimbabwe
Sodinokibi
T1041
email_attachment
Telecom
.exe
227
1
0
0
1
1
1
1
0
1
1
0
0
0
20
0
0
1
1
1
0
1
1
1
1
0
3
3
0
0
0
0
0
1
0
1
0
0
1
0
0
0
0
0
0
1
0
0
0
0
0
0
0
0
0
0
0
1
0
0
0
0
0
0
0
0
0
0
1
1
1
0
0
1
0
0
1
0
12
0
6
MAL000497
Senegal
Remcos
T1021.002
supply_chain
Telecom
.jar
1,589
0
0
1
0
1
1
0
0
1
0
0
0
1
3
0
0
0
0
1
0
1
0
0
1
0
2
2
1
0
0
0
0
1
0
0
1
0
0
0
0
0
0
1
0
0
0
0
0
1
0
0
0
0
0
0
0
1
0
0
0
0
0
1
0
0
1
0
0
0
0
1
0
2
1
0
0
0
6
0
3
MAL004740
Nigeria
Dridex
T1059.005
email_attachment
Healthcare
.doc
3,920
0
0
0
0
0
1
1
1
0
0
0
1
0
17
1
1
0
0
1
0
0
0
0
0
0
0
3
0
0
1
0
0
1
1
0
0
1
0
1
0
0
0
0
0
1
0
0
0
0
0
0
0
0
0
0
0
0
0
1
0
0
0
0
1
1
1
1
0
0
0
1
0
2
1
0
0
0
2
0
4
MAL002940
Morocco
Maze
T1071.001
drive_by_download
Energy
.docx
3,750
1
0
1
1
0
0
0
0
0
1
0
0
0
9
0
0
1
1
1
0
2
1
1
0
0
3
0
0
0
0
1
0
1
0
1
0
0
0
1
0
0
0
0
0
0
0
1
0
0
0
0
0
0
0
0
0
0
1
0
0
0
0
0
1
0
0
0
1
1
1
1
0
2
0
0
0
1
15
5
6
MAL003456
Zimbabwe
Cobalt Strike
T1005
torrent
Government
.exe
4,702
1
0
1
1
1
0
0
1
0
0
0
0
1
9
0
0
0
0
1
0
2
1
1
1
0
4
1
0
1
0
0
0
1
0
0
1
0
1
0
0
0
0
0
0
0
0
0
0
0
0
0
1
0
0
0
1
0
0
0
0
0
0
0
1
0
0
0
0
0
0
1
0
2
0
0
1
0
12
3
2
MAL000373
Egypt
Formbook
T1543.003
email_link
Government
.xls
3,750
0
0
1
1
1
0
0
0
1
0
1
0
0
8
0
1
0
0
1
0
1
0
1
1
0
3
1
0
0
0
0
1
1
1
0
0
1
0
1
0
0
0
0
0
0
1
0
0
0
0
0
0
0
0
0
1
0
0
0
0
0
0
0
1
0
0
1
0
0
0
1
0
2
0
0
0
1
11
2
3
MAL000079
South Africa
Dridex
T1071.001
email_link
Telecom
.pdf
3,735
1
0
1
0
1
0
1
1
0
0
0
1
0
20
0
0
0
0
1
0
2
1
0
1
0
3
2
0
1
0
0
0
1
1
0
0
1
0
1
0
0
0
0
0
0
1
0
0
0
0
0
0
0
0
0
0
1
0
0
0
0
0
0
0
0
0
0
0
0
0
1
0
2
0
0
1
0
11
3
3
End of preview. Expand in Data Studio

Malware Distribution Networks — Africa Cyber Threat Intelligence

Part of the Africa Cyber Threat Intelligence collection by electricsheepafrica.

  • Acquisition: EXISTING
  • Rows: 10,000 (balanced 50/50)
  • Synthetic: Records sourced from existing datasets (is_synthetic flags vary).

Usage

from datasets import load_dataset
dataset = load_dataset("electricsheepafrica/africa-malware-dataset")

Features

Column Type
record_id str
country str
malware_family str
mitre_technique str
delivery_vector str
targeted_sector str
file_type str
file_size_kb int64
is_packed int64
is_obfuscated int64
uses_encryption int64
has_persistence int64
communicates_c2 int64
signature_detected int64
heuristic_detected int64
behavior_detected int64
sandbox_detected int64
is_ransomware int64
is_info_stealer int64
is_banking_trojan int64
is_remote_access int64
detection_hour int64
is_weekend int64
ip_african int64
uses_proxy int64
uses_tor int64
label int64
is_synthetic int64
obfuscation_score int64
is_packed_or_obfuscated int64
has_persistence_mechanism int64
has_c2_communication int64
advanced_evasion int64
malware_complexity int64
detection_score int64
signature_only int64
behavior_only int64
fully_detected int64
undetected int64
needs_sandbox int64
is_malicious_family int64
data_theft_family int64
extortion_family int64
access_family int64
financial_target int64
is_executable int64
is_document int64
is_script int64
is_mobile int64
is_archive int64
is_java int64
is_dll int64
vector_email_attach int64
vector_email_link int64
vector_drive_by int64
vector_usb int64
vector_supply_chain int64
vector_social int64
vector_mobile int64
vector_torrent int64
vector_messaging int64
vector_legit int64
targets_banking int64
targets_gov int64
targets_telecom int64
targets_energy int64
targets_healthcare int64
targets_education int64
targets_manufacturing int64
targets_ecommerce int64
is_night int64
is_business_hours int64
is_weekend.1 int64
off_hours_weekend int64
african_origin int64
anonymized int64
high_anonymity int64
non_african_anonymized int64
is_large_file int64
is_small_file int64
size_category int64
is_west_africa int64
is_east_africa int64
is_southern_africa int64
is_north_africa int64
malware_risk_score int64
detection_difficulty int64
threat_severity int64

Citation

@misc{electricsheepafrica2026africamalwaredataset,
  title = {Malware Distribution Networks (Africa)},
  author = {Electric Sheep Africa},
  year = {2026},
  howpublished = {\url{https://huggingface.co/datasets/electricsheepafrica/africa-malware-dataset}}
}

License: MIT

Downloads last month
122

Collection including electricsheepafrica/africa-malware-dataset