Download: Zeus Zip File
| Number of Instances: | 8010 | Security Area: | Malware Analysis |
|---|---|---|---|
| Number of Attributes: | 10 | Date Donated: | Sep 12, 2016 |
| Missing Values? | 0 | Associated ML Tasks: | Malware Categorize |
Mike Sconzo
Security Repository
Secrepo.com
ZeuS (also known as Zbot / WSNPoem) is a crimeware kit, which steals credentials from various online services like social networks, online banking accounts, ftp accounts, email accounts and other (phishing). The crimeware kit contains the following modules: a web interface to administrate and control the botnet (ZeuS Admin Panel). A tool to create the trojan binaries and encrypt the config file (called exe builder).
| Data Type | Count | Unique Values | Missing Values | |
|---|---|---|---|---|
| FileName | object | 8010 | 8010 | 0 |
| SectionAlignment | int64 | 8010 | 3 | 0 |
| FileAlignment | int64 | 8010 | 3 | 0 |
| SizeOfHeaders | int64 | 8010 | 8 | 0 |
| TimeDateStamp | object | 8010 | 4800 | 0 |
| ImageBase | int64 | 8010 | 6 | 0 |
| SizeOfImage | int64 | 8010 | 343 | 0 |
| DllCharacteristics | int64 | 8010 | 18 | 0 |
| Characteristics | int64 | 8010 | 13 | 0 |
| HighEntropy | int64 | 8010 | 2 | 0 |
| LowEntropy | int64 | 8010 | 2 | 0 |
| TotalSuspiciousSections | int64 | 8010 | 15 | 0 |
| TotalNonSuspiciousSections | int64 | 8010 | 12 | 0 |
Mohaisen, Abedelaziz, Alrawi, Omar. “Unveiling Zeus: automated classification of malware samples” May 2013 https://alrawi.github.io/static/papers/unzeus_www13.pdf
Hannah, Kyle Gianvecchio, Steven. “Zeuslite: a Tool for Botnet Analysis in the Classroom” January 2015 http://delivery.acm.org