Norwegian Honeynet Project | A chapter of The Honeynet Project
Sandbox Data
Version 1.04 - 2006.09.10

SUBMISSIONS   SIGNATURES   FILE NAMES   BOTNETS   IRC   MALWARE-HOSTS   UNKNOWNS   MUTEXES

Top 10 Sandbox Signatures

Signature Name Count
NO_MALWARE 562
W32/Spybot.gen3 281
W32/Malware 135
Not detected by Sandbox 109
W32/Spybot.gen4 53
W32/Backdoor 29
W32/Rootkit.AI.dropper 20
W32/Spybot.gen7 17
W32/Spybot.gen6 17
Pinfi.A.dropper 16

Top 10 Virus Signatures

Signature Name Count
NO_VIRUS 439
W32/Virut.A 48
W32/Pinfi.A 35
W32/Agent.TRB 19
W32/Spybot.XMI 18
W32/Suspicious_M.gen 15
W32/Spybot.AMKV 13
W32/Spybot.ZWA 12
W32/Spybot.AAFX 11
W32/Sality.N 11

Day-by-day graph over top 10 sandbox detections

Day-by-day graph over top 10 virus signatures

Detection Rate graph

*) Excluding "NO_MALWARE" and "NO_VIRUS" data.