CFG of Cryptojacking and NoCJ Malware

DATASET OVERVIEW

This dataset is a curated collection of malware samples obtained and filtered from the MalwareBazaar database (https://bazaar.abuse.ch/browse/ ). Specifically, it contains Control-Flow-Graphs (CFG) of samples from cryptojacking (CJ) families analysed in the paper "Linking Structure and Time: A Lineage-Based Framework for Cryptojacking Analysis". 

Malware samples from March 2020 to October 2025 were collected, covering multiple years and enabling a longitudinal analysis of the evolution of cryptojacking malware.Cryptojacking (CJ) malware samples were selected by retrieving a predefined set of CJ-related tags, including coinminer , cryptominer , miner , and crypto.

This collection resulted in a total of  4,078 CJ samples.

This dataset may be useful for:

- reproducing the experiments reported in the related paper;

- benchmarking malware analysis methods;

- comparative studies on binary similarity and structural analysis;

- further research on cryptojacking detection and characterization.

LEGAL NOTICE

This dataset is intended strictly for research, educational, and cybersecurity analysis purposes.• Unauthorized use is prohibited: Redistribution, transfer, or provision of active malware samples to unauthorized individuals, organizations, or systems is strictly prohibited and may violate local, national, or international laws.

• No malicious use: Any activity involving misuse of the datasets for any malicious activity, including but not limited to system infection, data theft, data destruction, ransomware deployment, cryptojacking, unauthorized access, or any form of cyber intrusion, is strictly forbidden.

• User responsibility: The user is exclusively and fully responsible for any use, execution, handling, storage, or distribution of the dataset. The provider assumes no responsibility for any damages, losses, liabilities, or legal consequences that may arise directly or indirectly from the user’s actions. The user is solely responsible for ensuring that their use complies with all applicable laws, regulations, and institutional or organizational requirements.

• Provided “AS IS”: The dataset is supplied without any warranty, express or implied, including but not limited to warranties of accuracy, completeness, reliability, non-infringement or fitness for a particular purpose.

By accessing, downloading or utilising this dataset, the user acknowledges and agrees that they are exclusively responsible for all actions taken in connection with the datasets, including any execution, handling, storage or distribution. The user assumes all risks associated with its use and is solely responsible for ensuring compliance with all applicable laws and regulations.

The dataset is provided by the entity “AS IS”, without warranty of any kind. In no event shall the entity be liable for any direct, indirect, incidental consequential, special, exemplary or punitive damages, or for any loss arising from access to, use of, inability to use, or reliance on the datasets, even if the entity has been advised of the possibility of such damages.