Vedaang/malware_analysis

1# Malware Analysis Dataset2 3Memory forensics analysis dataset for malware research using Volatility Framework.4 5## Structure6 7### Dataset Repository (this repo)8Analysis outputs, scripts, and YARA rules from memory forensics:9 10```11malware_analysis/12├── Automating_Volatility.py      # Volatility automation script13├── Volshell_Automation.py        # VolShell automation14├── vboxelf.py                    # ELF binary extraction15├── malware_rules.yar             # YARA detection rules16├── completed_files.txt           # Processing log17├── README.md                     # This file18└── Scans/                        # Volatility scan outputs19    ├── malfind/                  # Process memory injection20    ├── pslist/                   # Process listings21    ├── psscan/                   # Process scanning22    ├── pstree/                   # Process trees23    ├── psxview/                  # Cross-view analysis24    ├── yarascan/                 # YARA matches25    └── vadwalk/                  # VAD walk (ransomware)26```27 28### Raw Data Bucket: `hf://buckets/Vedaang/malware-analysis-data/`29Complete directory structure with all raw files:30 31```32malware-analysis-data/33├── Benign_Analysis/              # 6 benign memory dumps + ELF + scans34├── Ransomware_Analysis/          # 12 ransomware samples + ELF + scans35├── Scans/                        # All volatility scan outputs36└── Virtual_Machines/             # VM disk images (Ubuntu 64-bit)37```38 39### Code Base Bucket: `hf://buckets/Vedaang/malware-code-base/`40Source code, research papers, and documentation:41 42```43malware-code-base/44├── Automating_Volatility.py45├── Volshell_Automation.py46├── Memory_Forensics_Volatility_Yara_Rules.ipynb47├── Research_Paper.pdf48├── Conference Paper/49├── Notes/50├── Reference Files/51└── Presentation and Report/52```53 54## Sample Categories55 56### Benign Samples (6)57| File | Description |58|------|-------------|59| `base.raw` / `base.elf` | Baseline clean system |60| `clean.raw` / `clean.elf` | Clean system snapshot |61| `3.raw`–`10.raw` / `3.elf`–`10.elf` | Various benign workloads |62 63### Ransomware Samples (12)64| Sample | Family |65|--------|--------|66| Annabelle | Annabelle |67| blue_howl | BlueHowl |68| cerber / cerber1 | Cerber |69| GandCrab | GandCrab |70| Jigsaw1 / Jigsaw2 | Jigsaw |71| TeslaCrypt1 | TeslaCrypt |72| Vipasna1 | Vipasna |73| ViraLock | ViraLock |74| WannaCry1 / WannaCry2 | WannaCry |75 76## Usage77 78### Analysis Dataset (Hugging Face Dataset)79```bash80hf download Vedaang/malware_analysis81```82 83### Complete Raw Data (Bucket)84```bash85# Install hf CLI86pip install huggingface_hub[hf_transfer]87 88# Sync specific categories89hf sync hf://buckets/Vedaang/malware-analysis-data/Benign_Analysis ./benign90hf sync hf://buckets/Vedaang/malware-analysis-data/Ransomware_Analysis ./ransomware91hf sync hf://buckets/Vedaang/malware-analysis-data/Scans ./scans92hf sync hf://buckets/Vedaang/malware-analysis-data/Virtual_Machines ./vms93 94# Code base95hf sync hf://buckets/Vedaang/malware-code-base ./code96```97 98### Run Volatility Analysis99```bash100python Automating_Volatility.py -f memory.raw --profile Win10x64_19041101python Volshell_Automation.py -f memory.raw102```103 104## Analysis Tools105- **Volatility 3** — Memory forensics framework106- **YARA** — Pattern matching for malware identification107- **Custom Python scripts** — Automation wrappers108 109## Research Context110This dataset was created for the Major Project: "Memory Forensics Analysis of Ransomware using Volatility Framework and YARA Rules"111 112## Citation113```bibtex114@dataset{malware_analysis_2026,115  author = {Vedaang Chopra},116  title = {Malware Analysis Memory Forensics Dataset},117  year = {2026},118  publisher = {Hugging Face},119  url = {https://huggingface.co/datasets/Vedaang/malware_analysis}120}121```122 123## License124For research purposes only. Memory dumps contain no sensitive user data.125