{"id":"https://openalex.org/W7204126573","doi":"https://doi.org/10.17632/yh9p6vs53y","title":"API Call Dataset of LockBit, Netwalker, WannaCry, and Petya Ransomware","display_name":"API Call Dataset of LockBit, Netwalker, WannaCry, and Petya Ransomware","publication_year":2026,"publication_date":"2026-08-24","ids":{"openalex":"https://openalex.org/W7204126573","doi":"https://doi.org/10.17632/yh9p6vs53y"},"language":"en","primary_location":{"id":"doi:10.17632/yh9p6vs53y","doi":"https://doi.org/10.17632/yh9p6vs53y","is_oa":true,"landing_page_url":"https://doi.org/10.17632/yh9p6vs53y","pdf_url":null,"source":{"id":"https://openalex.org/S7407050775","display_name":"Mendeley Data","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Dataset"},"volume":null,"type":"dataset","is_traditional":false,"indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.17632/yh9p6vs53y","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5092965352","display_name":"Wana Ardilah Iwan","orcid":"https://orcid.org/0009-0009-6616-5688","observed_orcids":["https://orcid.org/0009-0009-6616-5688"]},"institutions":[{"id":"https://openalex.org/I166073570","display_name":"Binus University","ror":"https://ror.org/03zmf4s77","country_code":"ID","type":"education","lineage":["https://openalex.org/I166073570"]}],"countries":["ID"],"is_corresponding":false,"raw_author_name":"Iwan, Wana Ardilah","raw_affiliation_strings":["Binus University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Binus University","institution_ids":["https://openalex.org/I166073570"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5059693285","display_name":"Vera Suryani","orcid":"https://orcid.org/0000-0002-2073-1447","observed_orcids":["https://orcid.org/0000-0002-2073-1447"]},"institutions":[{"id":"https://openalex.org/I862893732","display_name":"Telkom University","ror":"https://ror.org/0004wsx81","country_code":"ID","type":"education","lineage":["https://openalex.org/I862893732"]}],"countries":["ID"],"is_corresponding":false,"raw_author_name":"Suryani, Vera","raw_affiliation_strings":["Telkom University"],"raw_orcid":"https://orcid.org/0000-0002-2073-1447","affiliations":[{"raw_affiliation_string":"Telkom University","institution_ids":["https://openalex.org/I862893732"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5082950554","display_name":"Fazmah Arif Yulianto","orcid":"https://orcid.org/0000-0002-7485-1241","observed_orcids":["https://orcid.org/0000-0002-7485-1241"]},"institutions":[{"id":"https://openalex.org/I862893732","display_name":"Telkom University","ror":"https://ror.org/0004wsx81","country_code":"ID","type":"education","lineage":["https://openalex.org/I862893732"]}],"countries":["ID"],"is_corresponding":false,"raw_author_name":"Arif Yulianto, Fazmah","raw_affiliation_strings":["Telkom University"],"raw_orcid":"https://orcid.org/0000-0002-7485-1241","affiliations":[{"raw_affiliation_string":"Telkom University","institution_ids":["https://openalex.org/I862893732"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5052689356","display_name":"Bens Pardamean","orcid":"https://orcid.org/0000-0002-7404-9005","observed_orcids":["https://orcid.org/0000-0002-7404-9005"]},"institutions":[{"id":"https://openalex.org/I166073570","display_name":"Binus University","ror":"https://ror.org/03zmf4s77","country_code":"ID","type":"education","lineage":["https://openalex.org/I166073570"]}],"countries":["ID"],"is_corresponding":false,"raw_author_name":"Pardamean, Bens","raw_affiliation_strings":["Binus University"],"raw_orcid":"https://orcid.org/0000-0002-7404-9005","affiliations":[{"raw_affiliation_string":"Binus University","institution_ids":["https://openalex.org/I166073570"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.0,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/ransomware","display_name":"ransomware","score":0.9829999804496765},{"id":"https://openalex.org/keywords/lockbit","display_name":"LockBit","score":0.8880000114440918},{"id":"https://openalex.org/keywords/wannacry","display_name":"WannaCry","score":0.9990000128746033},{"id":"https://openalex.org/keywords/sandboxed-execution","display_name":"sandboxed execution","score":0.6240000128746033},{"id":"https://openalex.org/keywords/malware-detection","display_name":"malware detection","score":0.6740000247955322},{"id":"https://openalex.org/keywords/behavioral-patterns","display_name":"behavioral patterns","score":0.5180000066757202}],"concepts":[{"id":"https://openalex.org/C2777667771","wikidata":"https://www.wikidata.org/wiki/Q926331","display_name":"Ransomware","level":3,"score":0.9682999849319458},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6854000091552734},{"id":"https://openalex.org/C2776401178","wikidata":"https://www.wikidata.org/wiki/Q12050496","display_name":"Feature (linguistics)","level":2,"score":0.5045999884605408},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.38609999418258667},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.38350000977516174},{"id":"https://openalex.org/C2989277270","wikidata":"https://www.wikidata.org/wiki/Q168338","display_name":"Behavioral analysis","level":2,"score":0.32659998536109924},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.3176000118255615},{"id":"https://openalex.org/C2778579508","wikidata":"https://www.wikidata.org/wiki/Q722192","display_name":"System call","level":2,"score":0.3125},{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.30320000648498535},{"id":"https://openalex.org/C52622490","wikidata":"https://www.wikidata.org/wiki/Q1026626","display_name":"Feature extraction","level":2,"score":0.29809999465942383},{"id":"https://openalex.org/C83804111","wikidata":"https://www.wikidata.org/wiki/Q1063558","display_name":"Behavioral pattern","level":2,"score":0.2818000018596649},{"id":"https://openalex.org/C23123220","wikidata":"https://www.wikidata.org/wiki/Q816826","display_name":"Information retrieval","level":1,"score":0.25949999690055847},{"id":"https://openalex.org/C148483581","wikidata":"https://www.wikidata.org/wiki/Q446488","display_name":"Feature selection","level":2,"score":0.25780001282691956}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.17632/yh9p6vs53y","doi":"https://doi.org/10.17632/yh9p6vs53y","is_oa":true,"landing_page_url":"https://doi.org/10.17632/yh9p6vs53y","pdf_url":null,"source":{"id":"https://openalex.org/S7407050775","display_name":"Mendeley Data","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Dataset"},{"id":"doi:10.17632/yh9p6vs53y.1","doi":"https://doi.org/10.17632/yh9p6vs53y.1","is_oa":true,"landing_page_url":"https://doi.org/10.17632/yh9p6vs53y.1","pdf_url":null,"source":{"id":"https://openalex.org/S7407050775","display_name":"Mendeley Data","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Dataset"}],"best_oa_location":{"id":"doi:10.17632/yh9p6vs53y","doi":"https://doi.org/10.17632/yh9p6vs53y","is_oa":true,"landing_page_url":"https://doi.org/10.17632/yh9p6vs53y","pdf_url":null,"source":{"id":"https://openalex.org/S7407050775","display_name":"Mendeley Data","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Dataset"},"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":["https://openalex.org/W7081657378","https://openalex.org/W2789729245","https://openalex.org/W6944252957","https://openalex.org/W3091011807","https://openalex.org/W7140278594","https://openalex.org/W7106791140","https://openalex.org/W7070931126","https://openalex.org/W7170349031","https://openalex.org/W6888552224","https://openalex.org/W4200030734"],"abstract_inverted_index":{"This":[0,33],"dataset":[1,34],"comprises":[2],"sequences":[3],"of":[4],"Windows":[5],"API":[6,57],"calls":[7],"collected":[8],"from":[9],"ransomware":[10,21,54,80],"and":[11,31,78],"benign":[12,63],"program":[13],"samples":[14,22,41],"in":[15],"a":[16],"controlled":[17],"sandboxed":[18],"environment.":[19],"The":[20,45,65],"belong":[23],"to":[24,70],"four":[25],"families,":[26],"namely":[27],"LockBit,":[28],"NetWalker,":[29],"WannaCry,":[30],"Petya.":[32],"provides":[35],"host-based":[36],"behavioral":[37,59,73],"information":[38],"about":[39],"the":[40],"during":[42],"their":[43],"execution.":[44],"underlying":[46],"hypothesis":[47],"behind":[48],"this":[49],"data":[50,66],"collection":[51],"is":[52],"that":[53],"exhibits":[55],"distinct":[56],"call":[58],"patterns":[60],"compared":[61],"with":[62],"software.":[64],"can":[67],"be":[68],"used":[69],"study":[71],"ransomware-related":[72],"patterns,":[74],"perform":[75],"feature":[76],"extraction,":[77],"develop":[79],"detection":[81],"methods":[82],"using":[83],"machine":[84],"learning":[85],"techniques.":[86]},"counts_by_year":[],"updated_date":"2026-10-28T10:33:24.094632","created_date":"2026-08-25T00:00:00"}