—-The MD5 hash links shouldn’t be hard, so I will look into that soon.

2. bindiff of the each variant.

—-Is their a bindiff tool for linux as I would want to automate this on the box already doing the analysis. Maybe there is a switch in the standard diff for binaries… I will have to look at this.

3. probably, a column for ports, protrocols used by each variant.

—-Now this would be hard…. Not easily done without automating the lab run of the actual binary, which is something I would like to do but haven’t.

Thanks for the suggestions and glad you found the information useful.

–jeremy

As it is, its pretty good info.

In addtion to Spam tracking, Domain Name tracking, Name Server Tracking, Web Page Tracking, and a possible peers dataset.

If possible, This info might help few researchers.
1. based on each MD5 hash, having links to any of the online analyzers will be a good idea.
2. bindiff of the each variant.
3. probably, a column for ports, protrocols used by each variant.

- lot of work, but i love your work.
-Thanks for sharing.