Index of /publicDatasets/IoT-23-Dataset-v2/CTU-IoT-Malware-Capture-7-1

Name	Last modified	Size

Parent Directory		-
2018-07-20-17-31-20-192.168.100.108-labels.config	2024-01-21 16:57	2.6K
2018-07-20-17-31-20-192.168.100.108-zeek-conn-log.labeled	2024-01-21 17:21	1.5G
README.html	2022-11-18 13:40	3.1K
README.md	2022-11-18 12:14	2.6K
pcap/	2022-11-25 16:15	-
zeek-labeled/	2024-01-21 15:57	-

IoT-23v2 CTU-IoT-Malware-Capture-7-1

Device and type of traffic

Type of Capture: malware
Name: Linux Mirai
Device: IoT device, raspberry pi
MD5: c76a2520b7454788d127b7e41ae3d9be
SHA1: 66883e8b7d2e34d9da2bdd48a6e28b5a01ccf93d
SHA256: fdb74bae02106a08e1afa9ac408b8d97521f9414bbb6af874f6574a75656dfc8
VirusTotal: https://www.virustotal.com/en/file/fdb74bae02106a08e1afa9ac408b8d97521f9414bbb6af874f6574a75656dfc8/analysis/
HybridAnalysis: https://www.hybrid-analysis.com/sample/fdb74bae02106a08e1afa9ac408b8d97521f9414bbb6af874f6574a75656dfc8?environmentId=2

Network capture information

Start Date: 2018-07-20
Duration: 24.00 hrs
Size: 897M
Host IP: 192.168.100.108
Gateway IP: 192.168.100.1
Number of Packets: 11508430

Description of files

pcap: original raw network data packets in pcap format.
zeek-conn.log.labeled: raw flow data generated by the Zeek tool from the pcap file with expert labels.
labels.config: Rules used to label this capture.
README.md: Readme file

Labels

Security experts labeled this dataset manually by analyzing the traffic and creating labeling rules. The labeling program used is NetflowLabeler https://github.com/stratosphereips/netflowlabeler. The labels.config file contains the rules used to label this capture.

Additional Files

For additional files associated with this capture, visit our Malware Dataset Website: https://mcfp.felk.cvut.cz/publicDatasets/IoT-23v2

About the IoT-23v2 dataset

This capture is part of the IoT-23v2 dataset, a dataset of network traffic from Internet of Things (IoT) devices. It has twenty malware captures executed in IoT devices and eight benign captures from IoT devices. The first version of this dataset, IoT-23, was first published in January 2020. Its goal is to offer an extensive and curated dataset of real and labeled IoT traffic for researchers to develop machine learning algorithms. The malware was allowed to connect to the Internet. The network traffic capture was done at the Stratosphere Laboratory, AIC group, CTU University in Prague, Czech Republic. Version 2 has the same traffic as version 1, but it is an improved version with much better labels, file organization, and a separation of the original three benign captures into eight. Avast Software funded this dataset and its research.

Contact

Contact our team for information about this dataset at mailto:stratosphere@aic.fel.cvut.cz.

Citation

For information on how to cite this dataset check our Stratosphere IoT-23 website.