{ "version": "1.0.0", "author": "Ricky Jordan, Lead Threat Intelligence Analyst, SystemHelpDesk MSP", "catalog_url": "https://malware-families-catalog.systemhelpdesk.com", "rule_count": 2982, "rules": [ { "family": "xtrat", "family_name": "Xtrat", "category": "rat", "rule_id": "87243534-33c0-5dd6-9c68-a009df07e47b", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/xtrat.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/xtrat.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/xtrat", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 35969 }, { "family": "zbot", "family_name": "Zbot", "category": "banking_trojan", "rule_id": "94568e78-bda3-50b4-a114-f62b10cf49b8", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/zbot.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/zbot.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/zbot", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/banking-trojan-protection", "sample_count": 24075 }, { "family": "ramnit", "family_name": "Ramnit", "category": "worm_banker", "rule_id": "fd5cbcc7-87e9-5c0f-92d9-8d1280766908", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/ramnit.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/ramnit.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/ramnit", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 20595 }, { "family": "sality", "family_name": "Sality", "category": "file_infector", "rule_id": "d4c9af91-ef9c-5b22-9e0b-76fd4a2333de", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/sality.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/sality.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/sality", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 18572 }, { "family": "installmonster", "family_name": "Installmonster", "category": "pua", "rule_id": "27a047c0-4d92-59fe-98a2-1e54c84e45e5", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/installmonster.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/installmonster.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/installmonster", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 16691 }, { "family": "zusy", "family_name": "Zusy", "category": "banking_trojan", "rule_id": "7d4c4b45-e844-524b-aa6d-01ac89a06a21", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/zusy.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/zusy.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/zusy", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/banking-trojan-protection", "sample_count": 14120 }, { "family": "emotet", "family_name": "Emotet", "category": "loader", "rule_id": "01b04abc-ab82-59f8-abaa-e010e33bdf49", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/emotet.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/emotet.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/emotet", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 12943 }, { "family": "vtflooder", "family_name": "Vtflooder", "category": "pua_tool", "rule_id": "05be464b-9728-57c3-bb53-be568ebb0e1c", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/vtflooder.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/vtflooder.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/vtflooder", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 12150 }, { "family": "fareit", "family_name": "Fareit", "category": "infostealer", "rule_id": "801ec755-9a5c-5b2a-b890-67aa11a0c27b", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/fareit.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/fareit.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/fareit", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/infostealer-protection", "sample_count": 10955 }, { "family": "adposhel", "family_name": "Adposhel", "category": "adware", "rule_id": "8855981c-ba68-5817-82b9-49c4ca551291", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/adposhel.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/adposhel.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/adposhel", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 8951 }, { "family": "stop", "family_name": "Stop", "category": "ransomware", "rule_id": "b0a24041-ccd2-59e5-9786-39c5649943e2", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/stop.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/stop.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/stop", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 8900 }, { "family": "high", "family_name": "High", "category": "generic_detection", "rule_id": "48af9171-4b5c-53f7-baf4-bf022326374b", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/high.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/high.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/high", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 8417 }, { "family": "ursnif", "family_name": "Ursnif", "category": "banking_trojan", "rule_id": "472daafc-a73b-5d79-b2c3-4cdbb2a81024", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/ursnif.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/ursnif.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/ursnif", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/banking-trojan-protection", "sample_count": 8188 }, { "family": "sivis", "family_name": "Sivis", "category": "file_infector", "rule_id": "a3ab2d5c-8e05-5dbb-9fd4-ee664c7822aa", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/sivis.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/sivis.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/sivis", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 7180 }, { "family": "startsurf", "family_name": "Startsurf", "category": "browser_hijacker", "rule_id": "aa29fdcb-e7d5-5b5d-98e1-082d3dac2d9f", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/startsurf.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/startsurf.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/startsurf", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 6358 }, { "family": "wapomi", "family_name": "Wapomi", "category": "worm_banker", "rule_id": "df629dbf-1347-5723-8017-c952b1845a0e", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/wapomi.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/wapomi.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/wapomi", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 5191 }, { "family": "lethic", "family_name": "Lethic", "category": "spam_bot", "rule_id": "4c8711a2-2ee6-5204-b7a0-cad2d94d7830", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/lethic.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/lethic.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/lethic", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 4879 }, { "family": "wannacry", "family_name": "Wannacry", "category": "ransomware_worm", "rule_id": "df66d53e-9fa8-57d3-9efe-92ed860aa08a", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/wannacry.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/wannacry.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/wannacry", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 4876 }, { "family": "dlguide", "family_name": "Dlguide", "category": "pua", "rule_id": "6d661b52-b508-5a31-b005-343e00d8d862", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/dlguide.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/dlguide.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/dlguide", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 4733 }, { "family": "flystudio", "family_name": "Flystudio", "category": "packer", "rule_id": "bbf55c7c-8224-5c1f-8d70-d38463500a4b", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/flystudio.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/flystudio.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/flystudio", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 4527 }, { "family": "upatre", "family_name": "Upatre", "category": "downloader", "rule_id": "a0d93697-2ad6-58dc-8b2f-499aa8d96fe1", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/upatre.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/upatre.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/upatre", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 4200 }, { "family": "dealply", "family_name": "Dealply", "category": "adware", "rule_id": "fc922bdc-fc56-5f26-b3a9-dbd0e90eb194", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/dealply.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/dealply.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/dealply", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 3976 }, { "family": "bladabindi", "family_name": "Bladabindi", "category": "rat", "rule_id": "b11014f9-d0b8-502c-a361-d0d2147fee48", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/bladabindi.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/bladabindi.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/bladabindi", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 3930 }, { "family": "cobaltstrike", "family_name": "Cobaltstrike", "category": "hacktool", "rule_id": "22d67bc3-ef13-5a8d-84a9-48c1568c0181", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/cobaltstrike.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/cobaltstrike.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/cobaltstrike", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 3500 }, { "family": "razy", "family_name": "Razy", "category": "infostealer", "rule_id": "a420ef9b-3828-5e03-a625-d97c228424d5", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/razy.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/razy.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/razy", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/infostealer-protection", "sample_count": 3391 }, { "family": "filetour", "family_name": "Filetour", "category": "pua", "rule_id": "daa7902e-7afa-5048-8011-b8a25389754a", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/filetour.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/filetour.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/filetour", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 3238 }, { "family": "virlock", "family_name": "Virlock", "category": "ransomware_file_infector", "rule_id": "1a5c9855-5610-51fc-af7e-587bbc5150ad", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/virlock.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/virlock.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/virlock", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 3132 }, { "family": "prepscram", "family_name": "Prepscram", "category": "pua", "rule_id": "b743e686-f12c-50e6-a094-a9df024730a5", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/prepscram.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/prepscram.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/prepscram", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 3130 }, { "family": "gandcrab", "family_name": "Gandcrab", "category": "ransomware", "rule_id": "53ece1ba-744d-5ec9-bd69-bccbc38a77c4", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/gandcrab.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/gandcrab.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/gandcrab", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 2992 }, { "family": "vittalia", "family_name": "Vittalia", "category": "pua", "rule_id": "47dd132e-d6b8-51d5-8b26-751e9aedac5b", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/vittalia.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/vittalia.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/vittalia", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 2965 }, { "family": "gamarue", "family_name": "Gamarue", "category": "loader", "rule_id": "ab5a5883-1f86-550e-aa53-fa5b8e5af0ed", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/gamarue.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/gamarue.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/gamarue", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 2789 }, { "family": "kovter", "family_name": "Kovter", "category": "trojan", "rule_id": "dc205370-6495-547b-997c-194ee920eeba", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/kovter.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/kovter.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/kovter", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 2414 }, { "family": "nanocore", "family_name": "Nanocore", "category": "rat", "rule_id": "36544e0a-76e1-5045-ab82-64617697596e", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/nanocore.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/nanocore.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/nanocore", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 2400 }, { "family": "chapak", "family_name": "Chapak", "category": "downloader", "rule_id": "396d1ef0-8a9b-57ff-bdf8-df55a5c15333", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/chapak.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/chapak.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/chapak", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 2254 }, { "family": "installcore", "family_name": "Installcore", "category": "pua", "rule_id": "fc779292-8134-58e8-9ce4-a55a9f3bc072", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/installcore.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/installcore.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/installcore", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1961 }, { "family": "sdbot", "family_name": "Sdbot", "category": "rat", "rule_id": "e215ec81-e61a-553c-b5f6-1b3453abbf67", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/sdbot.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/sdbot.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/sdbot", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 1931 }, { "family": "autoit", "family_name": "Autoit", "category": "packer", "rule_id": "6db2f3aa-103f-55b4-949a-3c76512c2270", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/autoit.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/autoit.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/autoit", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1895 }, { "family": "cerber", "family_name": "Cerber", "category": "ransomware", "rule_id": "c7759257-abba-53d4-af35-314f0ed7da6c", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/cerber.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/cerber.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/cerber", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1792 }, { "family": "qbot", "family_name": "Qbot", "category": "banking_trojan", "rule_id": "a9930fcf-bcad-5f93-8bfa-237b0ffc9f9e", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/qbot.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/qbot.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/qbot", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/banking-trojan-protection", "sample_count": 1758 }, { "family": "tiggre", "family_name": "Tiggre", "category": "cryptominer", "rule_id": "ef6c3fdb-3f80-5c40-93d6-4d859d9ee986", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/tiggre.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/tiggre.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/tiggre", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1728 }, { "family": "delf", "family_name": "Delf", "category": "trojan", "rule_id": "71d3422e-45c9-5543-a743-170a563670c2", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/delf.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/delf.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/delf", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 1727 }, { "family": "qhost", "family_name": "Qhost", "category": "trojan", "rule_id": "d54227aa-4544-5069-9d47-4a3ef2de446f", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/qhost.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/qhost.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/qhost", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 1722 }, { "family": "dotdo", "family_name": "Dotdo", "category": "adware", "rule_id": "63dabacb-788e-53c5-acdd-fae94f0e4969", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/dotdo.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/dotdo.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/dotdo", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1678 }, { "family": "gamehack", "family_name": "Gamehack", "category": "pua_tool", "rule_id": "0b00e5e3-07c3-5bb8-82eb-2a002fd31b50", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/gamehack.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/gamehack.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/gamehack", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1656 }, { "family": "gepys", "family_name": "Gepys", "category": "downloader", "rule_id": "78326178-491b-52a6-873b-0f891bf36192", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/gepys.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/gepys.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/gepys", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1587 }, { "family": "virut", "family_name": "Virut", "category": "file_infector", "rule_id": "87b17341-be02-5528-8955-55bb8290ffdb", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/virut.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/virut.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/virut", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1578 }, { "family": "tinba", "family_name": "Tinba", "category": "banking_trojan", "rule_id": "be69441f-5a06-5c01-9d1c-b3023d8bc01a", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/tinba.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/tinba.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/tinba", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/banking-trojan-protection", "sample_count": 1531 }, { "family": "azorult", "family_name": "Azorult", "category": "infostealer", "rule_id": "e7943f49-6f0a-5675-b4b0-34397691104a", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/azorult.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/azorult.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/azorult", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/infostealer-protection", "sample_count": 1513 }, { "family": "cerberus", "family_name": "Cerberus", "category": "trojan", "rule_id": "42c0e3cb-c542-527d-ba88-3fe7d8202fd3", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/cerberus.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/cerberus.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/cerberus", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 1500 }, { "family": "erazer", "family_name": "Erazer", "category": "trojan", "rule_id": "7f59c175-f7c5-5fc4-bd67-c88d06072cbf", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/erazer.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/erazer.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/erazer", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 1500 }, { "family": "erazer_lite", "family_name": "Erazer_lite", "category": "trojan", "rule_id": "6ce75f84-01bb-5975-9a02-53b8e37d82c9", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/erazer_lite.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/erazer_lite.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/erazer_lite", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 1500 }, { "family": "fearless_key_spy", "family_name": "Fearless_key_spy", "category": "spyware", "rule_id": "51716430-c5bd-587d-94a1-6e00b29d9aa1", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/fearless_key_spy.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/fearless_key_spy.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/fearless_key_spy", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1500 }, { "family": "fearless_lite", "family_name": "Fearless_lite", "category": "spyware", "rule_id": "28d2351d-5f67-5ad0-8b7c-703841615399", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/fearless_lite.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/fearless_lite.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/fearless_lite", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1500 }, { "family": "flux", "family_name": "Flux", "category": "backdoor", "rule_id": "33e2ac2a-c8b0-5cdd-9f28-3f71ea6e1d09", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/flux.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/flux.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/flux", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 1500 }, { "family": "hack_a_tack", "family_name": "Hack_a_tack", "category": "trojan", "rule_id": "af6e7a4a-13cf-5dff-ab83-37b8cdfc7b68", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/hack_a_tack.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/hack_a_tack.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/hack_a_tack", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 1500 }, { "family": "hav_rat", "family_name": "Hav_rat", "category": "rat", "rule_id": "1d30f3a3-a99a-5e33-9be4-c13150d917f7", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/hav_rat.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/hav_rat.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/hav_rat", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 1500 }, { "family": "hue", "family_name": "Hue", "category": "trojan", "rule_id": "f31d8c2d-6d09-54b7-a5e7-27d79ba73d8f", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/hue.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/hue.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/hue", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 1500 }, { "family": "icecold_reloaded", "family_name": "Icecold_reloaded", "category": "rat", "rule_id": "d662f3b9-7f16-53c4-8833-c47caf3be4ac", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/icecold_reloaded.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/icecold_reloaded.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/icecold_reloaded", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 1500 }, { "family": "infector_ng_2004", "family_name": "Infector_ng_2004", "category": "trojan", "rule_id": "5c580e3f-2c7e-5fde-94b9-c666841d10d0", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/infector_ng_2004.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/infector_ng_2004.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/infector_ng_2004", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 1500 }, { "family": "vobfus", "family_name": "Vobfus", "category": "worm", "rule_id": "5eaa6aa4-7794-512c-892e-08b8c79f16c4", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/vobfus.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/vobfus.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/vobfus", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1484 }, { "family": "triusor", "family_name": "Triusor", "category": "trojan", "rule_id": "0c6362a6-3885-5348-9ff4-0975ee53e010", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/triusor.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/triusor.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/triusor", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 1429 }, { "family": "agen", "family_name": "Agen", "category": "trojan", "rule_id": "f3e34693-fc50-587f-a2f1-771222dbb9c4", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/agen.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/agen.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/agen", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 1335 }, { "family": "zpevdo", "family_name": "Zpevdo", "category": "trojan", "rule_id": "0e82f61e-88da-57db-ab67-99c5e33c9b24", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/zpevdo.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/zpevdo.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/zpevdo", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 1303 }, { "family": "unruy", "family_name": "Unruy", "category": "click_fraud", "rule_id": "dd657eb6-2a12-5204-8d2f-a7b64760bbbf", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/unruy.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/unruy.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/unruy", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1267 }, { "family": "istartsurf", "family_name": "Istartsurf", "category": "browser_hijacker", "rule_id": "d5dd4405-f3d3-5925-8200-ca1f4773586b", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/istartsurf.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/istartsurf.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/istartsurf", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1214 }, { "family": "darkgate", "family_name": "Darkgate", "category": "loader", "rule_id": "12ee13cd-cb23-5418-9689-ad0d347bc242", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/darkgate.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/darkgate.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/darkgate", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1205 }, { "family": "ribaj", "family_name": "Ribaj", "category": "infostealer", "rule_id": "2266d221-4033-51d4-b211-fe382d923170", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/ribaj.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/ribaj.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/ribaj", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/infostealer-protection", "sample_count": 1199 }, { "family": "linkury", "family_name": "Linkury", "category": "adware", "rule_id": "6132a3d3-b6d3-56d8-bf11-2cb151e379e8", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/linkury.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/linkury.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/linkury", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1194 }, { "family": "wabot", "family_name": "Wabot", "category": "rat", "rule_id": "d7dee591-802e-5686-8f8d-5ab34794a2e5", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/wabot.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/wabot.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/wabot", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 1185 }, { "family": "ulise", "family_name": "Ulise", "category": "trojan", "rule_id": "0670f11b-960b-5d02-bbc4-d99488a4ca6e", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/ulise.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/ulise.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/ulise", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 1176 }, { "family": "ursu", "family_name": "Ursu", "category": "trojan", "rule_id": "1d5aa7be-e7e3-5205-a9b4-cb44401c82f7", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/ursu.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/ursu.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/ursu", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 1168 }, { "family": "moderate", "family_name": "Moderate", "category": "generic_detection", "rule_id": "b23a60a8-a5f0-5188-8edb-861751564973", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/moderate.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/moderate.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/moderate", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1146 }, { "family": "icloader", "family_name": "Icloader", "category": "pua", "rule_id": "1f610ac7-a5ec-51a4-b468-6d4c452ec2fc", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/icloader.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/icloader.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/icloader", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1145 }, { "family": "swisyn", "family_name": "Swisyn", "category": "trojan", "rule_id": "d502190b-0642-5afe-b917-5c0e75c319e8", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/swisyn.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/swisyn.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/swisyn", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 1036 }, { "family": "spigot", "family_name": "Spigot", "category": "adware", "rule_id": "4f7304a2-9a70-5f57-9ef2-117496c6e82e", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/spigot.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/spigot.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/spigot", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1008 }, { "family": "scar", "family_name": "Scar", "category": "trojan", "rule_id": "a4d61783-d5c1-51e5-b788-50a4b035b536", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/scar.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/scar.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/scar", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 984 }, { "family": "dinwod", "family_name": "Dinwod", "category": "file_infector", "rule_id": "a8ebd854-15f3-58f2-ad1d-0b6c50e35222", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/dinwod.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/dinwod.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/dinwod", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 973 }, { "family": "noon", "family_name": "Noon", "category": "adware", "rule_id": "d1c4189c-b3bc-5e82-b063-bae9becf4e0c", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/noon.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/noon.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/noon", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 926 }, { "family": "shipup", "family_name": "Shipup", "category": "adware", "rule_id": "e8f677f8-59ba-5168-bbea-ce96295a6894", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/shipup.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/shipup.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/shipup", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 896 }, { "family": "lamer", "family_name": "Lamer", "category": "worm", "rule_id": "0e68fa2a-5efc-597c-a185-17157999b39e", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/lamer.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/lamer.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/lamer", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 894 }, { "family": "pikabot", "family_name": "Pikabot", "category": "loader", "rule_id": "9ac6e771-055d-562d-9243-1f50a975b723", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/pikabot.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/pikabot.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/pikabot", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 850 }, { "family": "darkkomet", "family_name": "Darkkomet", "category": "rat", "rule_id": "8fe3e3e8-dc95-57c2-b06a-081197a102c2", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/darkkomet.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/darkkomet.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/darkkomet", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 801 }, { "family": "nymaim", "family_name": "Nymaim", "category": "downloader", "rule_id": "5fbcad4b-3484-5e9e-88d1-0ea4df48bf4f", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/nymaim.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/nymaim.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/nymaim", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 756 }, { "family": "yakes", "family_name": "Yakes", "category": "trojan", "rule_id": "b9de32d3-7a6e-5698-8e68-27953a3cb7e4", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/yakes.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yakes.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/yakes", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 751 }, { "family": "speedingupmypc", "family_name": "Speedingupmypc", "category": "pup", "rule_id": "6b324771-34b7-52a6-ac29-638df977a901", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/speedingupmypc.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/speedingupmypc.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/speedingupmypc", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 740 }, { "family": "mira", "family_name": "Mira", "category": "worm", "rule_id": "c2ffe337-7ac3-50af-8c4a-4da0319e3306", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/mira.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/mira.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/mira", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 729 }, { "family": "soft32dl", "family_name": "Soft32dl", "category": "pua", "rule_id": "866f0788-dd66-5a9a-a02f-d0f3465fb29c", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/soft32dl.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/soft32dl.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/soft32dl", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 715 }, { "family": "nitol", "family_name": "Nitol", "category": "ddos_bot", "rule_id": "3c46adda-f1b4-5595-bea6-a47c659c9813", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/nitol.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/nitol.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/nitol", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 694 }, { "family": "urelas", "family_name": "Urelas", "category": "infostealer", "rule_id": "9362b575-4bde-5a36-8b07-95f76b754459", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/urelas.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/urelas.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/urelas", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/infostealer-protection", "sample_count": 666 }, { "family": "downloadhelper", "family_name": "Downloadhelper", "category": "adware", "rule_id": "9ad600b8-c727-5227-95f6-f95ac9fbaa0f", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/downloadhelper.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/downloadhelper.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/downloadhelper", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 645 }, { "family": "appster", "family_name": "Appster", "category": "adware", "rule_id": "67e3dddc-d6ec-5f0a-a3d7-9637ffc1036a", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/appster.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/appster.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/appster", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 637 }, { "family": "ainslot", "family_name": "Ainslot", "category": "trojan", "rule_id": "340bd0bc-cdb2-58c4-82f0-56c151532715", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/ainslot.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/ainslot.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/ainslot", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 635 }, { "family": "simbot", "family_name": "Simbot", "category": "backdoor", "rule_id": "976a2044-dce4-5569-9e57-9df27dd3ee61", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/simbot.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/simbot.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/simbot", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 634 }, { "family": "hawkeyekeylogger", "family_name": "Hawkeyekeylogger", "category": "infostealer", "rule_id": "b16752c1-06db-5c7f-97bd-46a7914b9273", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/hawkeyekeylogger.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/hawkeyekeylogger.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/hawkeyekeylogger", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/infostealer-protection", "sample_count": 620 }, { "family": "hematite", "family_name": "Hematite", "category": "trojan", "rule_id": "d0bc5042-fd52-52c7-9267-b29d037f0060", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/hematite.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/hematite.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/hematite", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 616 }, { "family": "qqpass", "family_name": "Qqpass", "category": "infostealer", "rule_id": "8e8512df-4b6a-5fd5-b3a6-9734f7297db0", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/qqpass.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/qqpass.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/qqpass", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/infostealer-protection", "sample_count": 612 }, { "family": "vbclone", "family_name": "Vbclone", "category": "trojan", "rule_id": "999840b3-8509-54e8-b0e8-ad96c697e50c", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/vbclone.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/vbclone.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/vbclone", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 601 }, { "family": "msilperseus", "family_name": "Msilperseus", "category": "infostealer", "rule_id": "e3bdb01f-76d2-5ab5-89cf-77b9ad7f9ada", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/msilperseus.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/msilperseus.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/msilperseus", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/infostealer-protection", "sample_count": 596 }, { "family": "byfh", "family_name": "Byfh", "category": "trojan", "rule_id": "fba90262-a511-5617-9f94-0911499eff6c", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/byfh.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/byfh.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/byfh", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 593 }, { "family": "occamy", "family_name": "Occamy", "category": "trojan", "rule_id": "dea505e8-ee08-5624-a550-548d7cf42929", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/occamy.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/occamy.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/occamy", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 589 }, { "family": "slimware", "family_name": "Slimware", "category": "rogueware", "rule_id": "eca70272-acbf-5278-b760-ea09611b5c28", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/slimware.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/slimware.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/slimware", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 566 }, { "family": "khalesi", "family_name": "Khalesi", "category": "infostealer", "rule_id": "c2dda1bd-93c3-52f3-b8bc-2138251bfc20", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/khalesi.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/khalesi.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/khalesi", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/infostealer-protection", "sample_count": 555 }, { "family": "vbkryjetor", "family_name": "Vbkryjetor", "category": "packer", "rule_id": "8acb5584-0e52-51b9-b81c-7df980afc6eb", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/vbkryjetor.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/vbkryjetor.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/vbkryjetor", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 551 }, { "family": "zamg", "family_name": "Zamg", "category": "trojan", "rule_id": "df366cf5-4e2b-54f8-a49c-d86612dae37d", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/zamg.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/zamg.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/zamg", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 527 }, { "family": "detnat", "family_name": "Detnat", "category": "trojan", "rule_id": "1b256301-a1bd-502d-93ae-79dd9fd79ea5", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/detnat.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/detnat.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/detnat", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 523 }, { "family": "softcnapp", "family_name": "Softcnapp", "category": "adware", "rule_id": "7871dbb0-468b-52f4-920b-62f614169732", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/softcnapp.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/softcnapp.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/softcnapp", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 520 }, { "family": "wizzmonetize", "family_name": "Wizzmonetize", "category": "adware", "rule_id": "aff7a4d8-7f38-5548-abc6-dc9dc1aa5a6f", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/wizzmonetize.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/wizzmonetize.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/wizzmonetize", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 515 }, { "family": "kuaizip", "family_name": "Kuaizip", "category": "adware", "rule_id": "c9f8c597-926e-53aa-bfad-ddbe4a5cd5e9", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/kuaizip.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/kuaizip.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/kuaizip", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 483 }, { "family": "gandcrypt", "family_name": "Gandcrypt", "category": "ransomware", "rule_id": "7f683660-b4cf-5a44-a96b-f30c2bcac2aa", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/gandcrypt.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/gandcrypt.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/gandcrypt", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 474 }, { "family": "trickbot", "family_name": "Trickbot", "category": "trojan", "rule_id": "f21666fd-0d42-5abe-a78c-e48e01082199", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/trickbot.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/trickbot.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/trickbot", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 466 }, { "family": "snake", "family_name": "Snake", "category": "advanced_threat", "rule_id": "9a418605-6cf5-5187-8677-f8c6a74bfb33", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/snake.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/snake.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/snake", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 450 }, { "family": "agentb", "family_name": "Agentb", "category": "trojan", "rule_id": "4127f9eb-07b8-5b63-a4a1-7d7db4ebcc6d", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/agentb.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/agentb.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/agentb", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 449 }, { "family": "memery", "family_name": "Memery", "category": "trojan", "rule_id": "c734a3ff-96a5-5a2f-a225-e3593ed8b52b", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/memery.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/memery.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/memery", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 445 }, { "family": "neshta", "family_name": "Neshta", "category": "file_infector", "rule_id": "a090395c-b895-5265-8aa8-96a44e40897f", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/neshta.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/neshta.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/neshta", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 443 }, { "family": "zegost", "family_name": "Zegost", "category": "rat", "rule_id": "50bc467a-476f-509e-82e8-712d6d614402", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/zegost.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/zegost.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/zegost", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 441 }, { "family": "skeeyah", "family_name": "Skeeyah", "category": "trojan", "rule_id": "7dd2e23b-f0a1-5ce1-83ee-5c1f07a7b59a", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/skeeyah.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/skeeyah.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/skeeyah", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 440 }, { "family": "fsysna", "family_name": "Fsysna", "category": "trojan", "rule_id": "69a527a1-e3f7-5cf6-955f-f4caf318bfca", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/fsysna.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/fsysna.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/fsysna", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 427 }, { "family": "ausiv", "family_name": "Ausiv", "category": "trojan", "rule_id": "0ac167d8-5a67-5f70-92f7-9934a66fb591", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/ausiv.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/ausiv.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/ausiv", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 422 }, { "family": "ekstak", "family_name": "Ekstak", "category": "trojan", "rule_id": "19526635-4f2f-53f2-a762-46be5bcc556c", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/ekstak.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/ekstak.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/ekstak", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 421 }, { "family": "winactivator", "family_name": "Winactivator", "category": "pua_tool", "rule_id": "d57c1750-5a28-5460-8c1e-873ae9cc8427", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/winactivator.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/winactivator.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/winactivator", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 409 }, { "family": "cosmicduke", "family_name": "Cosmicduke", "category": "infostealer", "rule_id": "261e35bc-ce75-5d34-a2a5-0fd9ac8e5431", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/cosmicduke.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/cosmicduke.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/cosmicduke", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/infostealer-protection", "sample_count": 408 }, { "family": "berbew", "family_name": "Berbew", "category": "infostealer", "rule_id": "04b2a330-e06c-5258-b35b-04ef231a0699", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/berbew.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/berbew.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/berbew", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/infostealer-protection", "sample_count": 407 }, { "family": "presenoker", "family_name": "Presenoker", "category": "pua", "rule_id": "60d2b73a-a36f-51a7-b5ca-3e688741f5cf", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/presenoker.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/presenoker.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/presenoker", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 406 }, { "family": "loadmoney", "family_name": "Loadmoney", "category": "adware", "rule_id": "71266a8a-2ce8-538e-9252-9b266e6a17fc", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/loadmoney.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/loadmoney.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/loadmoney", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 398 }, { "family": "maener", "family_name": "Maener", "category": "cryptominer", "rule_id": "bf31216d-60e4-5547-94f8-3e6f6682e262", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/maener.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/maener.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/maener", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 387 }, { "family": "lolbot", "family_name": "Lolbot", "category": "worm", "rule_id": "3ad7365c-8079-5749-b037-ff65a84ce7b1", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/lolbot.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/lolbot.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/lolbot", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 374 }, { "family": "ponystealer", "family_name": "Ponystealer", "category": "infostealer", "rule_id": "3a4c537a-3fed-55bb-8e05-d906f8a1c4da", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/ponystealer.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/ponystealer.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/ponystealer", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/infostealer-protection", "sample_count": 374 }, { "family": "farfli", "family_name": "Farfli", "category": "rat", "rule_id": "726076c5-d117-5027-b4cd-8fa3681362d8", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/farfli.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/farfli.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/farfli", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 360 }, { "family": "coins", "family_name": "Coins", "category": "cryptominer", "rule_id": "15c400b4-cc4a-5102-8cb6-90cad9483d70", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/coins.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/coins.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/coins", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 359 }, { "family": "wdfload", "family_name": "Wdfload", "category": "advanced_threat", "rule_id": "bc3b54b6-d46f-579a-bfc6-eec3392feb82", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/wdfload.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/wdfload.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/wdfload", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 358 }, { "family": "genkryptik", "family_name": "Genkryptik", "category": "packer", "rule_id": "a530d047-4662-5858-8ae8-02293d0e668b", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/genkryptik.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/genkryptik.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/genkryptik", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 353 }, { "family": "koobface", "family_name": "Koobface", "category": "worm", "rule_id": "c5b0537d-c514-5bc6-a829-7981e4bdcdcb", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/koobface.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/koobface.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/koobface", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 350 }, { "family": "ganelp", "family_name": "Ganelp", "category": "trojan", "rule_id": "6549279c-6b7b-52a0-a665-f4a7bc0dea3d", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/ganelp.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/ganelp.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/ganelp", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 348 }, { "family": "ircbot", "family_name": "Ircbot", "category": "rat", "rule_id": "befe4eb5-293e-524e-9b4e-b3faf5da3a63", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/ircbot.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/ircbot.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/ircbot", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 348 }, { "family": "midie", "family_name": "Midie", "category": "trojan", "rule_id": "fce42c5a-3740-5c6f-ad13-a21203fdd67f", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/midie.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/midie.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/midie", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 341 }, { "family": "lockbit", "family_name": "Lockbit", "category": "ransomware", "rule_id": "2bffbff5-36cd-5c55-a17b-be2eb74a7a5f", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/lockbit.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/lockbit.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/lockbit", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 340 }, { "family": "zdengo", "family_name": "Zdengo", "category": "adware", "rule_id": "d1cf8b1f-4d2c-5449-bc11-2f1b035edf37", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/zdengo.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/zdengo.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/zdengo", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 333 }, { "family": "sfone", "family_name": "Sfone", "category": "worm", "rule_id": "c614b9e7-a626-5c07-a763-a7e18bf68caa", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/sfone.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/sfone.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/sfone", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 332 }, { "family": "mintluks", "family_name": "Mintluks", "category": "infostealer", "rule_id": "6190d51c-c7d4-5cc1-a0e5-3592e712b5d6", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/mintluks.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/mintluks.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/mintluks", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/infostealer-protection", "sample_count": 330 }, { "family": "black", "family_name": "Black", "category": "ransomware", "rule_id": "923c3efa-fb67-508e-917b-685bdfcbb7af", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/black.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/black.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/black", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 329 }, { "family": "driverpack", "family_name": "Driverpack", "category": "pua", "rule_id": "743ac5a0-84bc-5dbd-a4d0-4f78ce1c4ebd", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/driverpack.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/driverpack.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/driverpack", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 326 }, { "family": "snojan", "family_name": "Snojan", "category": "trojan", "rule_id": "f0c97295-9cbc-5017-b4bc-805948802604", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/snojan.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/snojan.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/snojan", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 324 }, { "family": "mikey", "family_name": "Mikey", "category": "adware", "rule_id": "9f76c68c-a437-5545-b99d-3a48f4f1912a", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/mikey.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/mikey.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/mikey", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 314 }, { "family": "nanobot", "family_name": "Nanobot", "category": "rat", "rule_id": "9b143fe6-b077-5a00-9c32-53a1182f71fd", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/nanobot.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/nanobot.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/nanobot", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 306 }, { "family": "expiro", "family_name": "Expiro", "category": "file_infector", "rule_id": "d25e3ff2-0ec8-558d-84b7-b57661bff576", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/expiro.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/expiro.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/expiro", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 305 }, { "family": "shiz", "family_name": "Shiz", "category": "banking_trojan", "rule_id": "c98acd2f-1692-5ef0-b898-a327b0f564ed", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/shiz.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/shiz.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/shiz", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/banking-trojan-protection", "sample_count": 302 }, { "family": "dfay", "family_name": "Dfay", "category": "trojan", "rule_id": "f02eb629-9f16-5bb3-987d-a60810ae0278", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/dfay.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/dfay.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/dfay", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 300 }, { "family": "regsup", "family_name": "Regsup", "category": "trojan", "rule_id": "0d04d63f-0313-5444-be6a-b59c08c41353", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/regsup.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/regsup.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/regsup", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 296 }, { "family": "winwrapper", "family_name": "Winwrapper", "category": "pua_tool", "rule_id": "e8aa5723-2b38-5994-844c-483affd5bc54", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/winwrapper.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/winwrapper.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/winwrapper", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 296 }, { "family": "kasidet", "family_name": "Kasidet", "category": "pos_malware", "rule_id": "2f4177ec-5fe5-5da7-8261-0c83088f8bef", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/kasidet.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/kasidet.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/kasidet", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 294 }, { "family": "dlhelper", "family_name": "Dlhelper", "category": "downloader", "rule_id": "7d6a1ce8-db4a-549f-beb4-2af75e8432a6", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/dlhelper.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/dlhelper.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/dlhelper", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 290 }, { "family": "banload", "family_name": "Banload", "category": "downloader", "rule_id": "b907be37-879f-505d-9975-d9c40d5e5880", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/banload.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/banload.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/banload", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 288 }, { "family": "ludbaruma", "family_name": "Ludbaruma", "category": "worm", "rule_id": "84a9ad9f-6b02-5ecf-9855-7c3e1c2684cc", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/ludbaruma.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/ludbaruma.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/ludbaruma", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 283 }, { "family": "njrat", "family_name": "Njrat", "category": "rat", "rule_id": "7400cf07-bd99-5283-9bf8-80efd40c70a8", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/njrat.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/njrat.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/njrat", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 280 }, { "family": "quasarrat", "family_name": "Quasarrat", "category": "rat", "rule_id": "44cf2879-504c-50db-b642-f3facbcacf5c", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/quasarrat.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/quasarrat.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/quasarrat", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 280 }, { "family": "yunsip", "family_name": "Yunsip", "category": "infostealer", "rule_id": "b3c959ad-f644-5249-b248-fbbc07eacd34", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/yunsip.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yunsip.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/yunsip", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/infostealer-protection", "sample_count": 280 }, { "family": "sytro", "family_name": "Sytro", "category": "worm", "rule_id": "3785d395-d1c5-54ba-ae52-2b031025d516", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/sytro.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/sytro.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/sytro", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 273 }, { "family": "eorezo", "family_name": "Eorezo", "category": "adware", "rule_id": "d1b9d8fc-d7bf-5060-8eef-1118301bcce9", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/eorezo.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/eorezo.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/eorezo", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 271 }, { "family": "hosts", "family_name": "Hosts", "category": "trojan_generic", "rule_id": "e67534b9-099c-522b-8158-644b47178a5a", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/hosts.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/hosts.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/hosts", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 267 }, { "family": "tofsee", "family_name": "Tofsee", "category": "spam_bot", "rule_id": "f9b777f0-b4ce-50ef-9c92-0772f406706b", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/tofsee.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/tofsee.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/tofsee", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 264 }, { "family": "poison", "family_name": "Poison", "category": "rat", "rule_id": "aa56c219-1756-59f0-97f4-4cea51f4d583", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/poison.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/poison.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/poison", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 261 }, { "family": "xmrig", "family_name": "Xmrig", "category": "cryptominer", "rule_id": "e48325b7-ddb7-53ab-92c9-d846fd48c911", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/xmrig.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/xmrig.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/xmrig", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 248 }, { "family": "daws", "family_name": "Daws", "category": "ransomware", "rule_id": "a8fd07ee-2644-5316-b236-feb515c96579", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/daws.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/daws.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/daws", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 246 }, { "family": "gamemodding", "family_name": "Gamemodding", "category": "pua", "rule_id": "20a3a515-5e4d-532d-88cc-ec4436daf15c", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/gamemodding.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/gamemodding.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/gamemodding", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 244 }, { "family": "browserio", "family_name": "Browserio", "category": "adware", "rule_id": "1f46f18f-2d57-5f67-9237-7533f79c483c", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/browserio.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/browserio.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/browserio", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 243 }, { "family": "olgames", "family_name": "Olgames", "category": "infostealer", "rule_id": "ba414aa5-6774-52e6-8290-f3199b127cba", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/olgames.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/olgames.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/olgames", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/infostealer-protection", "sample_count": 243 }, { "family": "amonetize", "family_name": "Amonetize", "category": "downloader", "rule_id": "ec844b9c-478e-5b42-9414-a5d0947c9453", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/amonetize.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/amonetize.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/amonetize", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 242 }, { "family": "disfa", "family_name": "Disfa", "category": "trojan", "rule_id": "bb40e310-dd26-5ad1-add3-78ca377adcd5", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/disfa.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/disfa.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/disfa", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 238 }, { "family": "blackmoon", "family_name": "Blackmoon", "category": "banking_trojan", "rule_id": "8b58f0ab-e87e-5b85-8ddc-4a7052dd40c3", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/blackmoon.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/blackmoon.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/blackmoon", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/banking-trojan-protection", "sample_count": 228 }, { "family": "mywebsearch", "family_name": "Mywebsearch", "category": "adware", "rule_id": "18c151bc-0dbb-5805-ae4e-fdfbba915634", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/mywebsearch.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/mywebsearch.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/mywebsearch", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 223 }, { "family": "reconyc", "family_name": "Reconyc", "category": "downloader", "rule_id": "44103e0c-07f8-5594-ab52-38f877c7e97d", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/reconyc.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/reconyc.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/reconyc", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 222 }, { "family": "johnnie", "family_name": "Johnnie", "category": "trojan", "rule_id": "0f73d307-721e-5077-8bef-8fe830e1149c", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/johnnie.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/johnnie.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/johnnie", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 221 }, { "family": "kolab", "family_name": "Kolab", "category": "worm", "rule_id": "22e06405-20bc-5cdc-aa3a-1994a90ae007", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/kolab.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/kolab.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/kolab", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 219 }, { "family": "cosmu", "family_name": "Cosmu", "category": "rat", "rule_id": "ef577927-6c41-5177-8e1a-75d914a6d1df", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/cosmu.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/cosmu.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/cosmu", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 218 }, { "family": "playtech", "family_name": "Playtech", "category": "pua", "rule_id": "0c83d84a-a12e-5a2e-b747-505540e48e80", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/playtech.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/playtech.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/playtech", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 216 }, { "family": "jeefo", "family_name": "Jeefo", "category": "file_infector", "rule_id": "542c7529-dd2c-5108-b64d-5a36b3a590ca", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/jeefo.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/jeefo.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/jeefo", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 213 }, { "family": "ryuk", "family_name": "Ryuk", "category": "ransomware", "rule_id": "9993c81f-9249-50f5-bf7e-46e5eed6ead1", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/ryuk.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/ryuk.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/ryuk", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 210 }, { "family": "pluto", "family_name": "Pluto", "category": "worm", "rule_id": "c706daaf-5b3f-5ab4-b1ba-b54c2c3397d2", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/pluto.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/pluto.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/pluto", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 209 }, { "family": "relevantknowledge", "family_name": "Relevantknowledge", "category": "spyware", "rule_id": "3b7330cf-fbb4-5555-a59d-21123daf8aee", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/relevantknowledge.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/relevantknowledge.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/relevantknowledge", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 209 }, { "family": "drolnux", "family_name": "Drolnux", "category": "worm", "rule_id": "38654a81-cb14-5d55-baaf-06de1099738b", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/drolnux.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/drolnux.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/drolnux", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 205 }, { "family": "extenbro", "family_name": "Extenbro", "category": "trojan", "rule_id": "40bf3245-b27f-5e7a-8ad1-7123915308c8", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/extenbro.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/extenbro.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/extenbro", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 204 }, { "family": "laqma", "family_name": "Laqma", "category": "trojan", "rule_id": "6b33fb79-6799-5d01-98f6-2e30f7b25848", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/laqma.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/laqma.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/laqma", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 204 }, { "family": "pioneer", "family_name": "Pioneer", "category": "file_infector", "rule_id": "76339940-0f2b-525d-ab91-210d12792155", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/pioneer.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/pioneer.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/pioneer", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 203 }, { "family": "tinyloader", "family_name": "Tinyloader", "category": "downloader", "rule_id": "7ee94777-1603-5b1b-9240-2b74c82c2668", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/tinyloader.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/tinyloader.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/tinyloader", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 203 }, { "family": "barys", "family_name": "Barys", "category": "infostealer", "rule_id": "43f2ab06-35e5-5643-b8fa-aad40d894995", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/barys.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/barys.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/barys", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/infostealer-protection", "sample_count": 200 }, { "family": "remcos", "family_name": "Remcos", "category": "rat", "rule_id": "22ecacdd-068c-5579-b25e-27367cf1aa75", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/remcos.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/remcos.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/remcos", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 198 }, { "family": "dapato", "family_name": "Dapato", "category": "trojan", "rule_id": "8a416d0a-e99d-58af-911d-26096b2d5d04", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/dapato.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/dapato.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/dapato", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 197 }, { "family": "temonde", "family_name": "Temonde", "category": "adware", "rule_id": "30a74a08-b675-57ad-866f-81f9f8997ed3", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/temonde.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/temonde.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/temonde", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 197 }, { "family": "phpw", "family_name": "Phpw", "category": "trojan", "rule_id": "a41b0778-bb9e-5d67-a3c9-1e7026d5ab12", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/phpw.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/phpw.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/phpw", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 195 }, { "family": "kuzitui", "family_name": "Kuzitui", "category": "adware", "rule_id": "5ee5ed98-da0d-5dd1-969e-dabb046f89b6", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/kuzitui.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/kuzitui.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/kuzitui", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 194 }, { "family": "spyeye", "family_name": "Spyeye", "category": "banking_trojan", "rule_id": "1f96448b-590f-594e-82cb-04470c32304e", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/spyeye.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/spyeye.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/spyeye", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/banking-trojan-protection", "sample_count": 192 }, { "family": "qjwmonkey", "family_name": "Qjwmonkey", "category": "adware", "rule_id": "2d59cec9-1dea-5b22-9795-b1209f524139", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/qjwmonkey.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/qjwmonkey.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/qjwmonkey", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 190 }, { "family": "processhijack", "family_name": "Processhijack", "category": "trojan", "rule_id": "0b3c5be9-94a1-5a18-b0b7-9c6a46468b2b", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/processhijack.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/processhijack.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/processhijack", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 187 }, { "family": "hydracrypt", "family_name": "Hydracrypt", "category": "ransomware", "rule_id": "c4f1d325-e1f7-5349-93ed-fe638310efb2", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/hydracrypt.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/hydracrypt.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/hydracrypt", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 180 }, { "family": "conti", "family_name": "Conti", "category": "ransomware", "rule_id": "0b62cf1d-a4bf-52b0-804e-93fb0b95c81a", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/conti.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/conti.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/conti", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 180 }, { "family": "cheatengine", "family_name": "Cheatengine", "category": "pua_tool", "rule_id": "a36f22c5-ae5c-5d88-8837-6a73275bed4b", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/cheatengine.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/cheatengine.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/cheatengine", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 175 }, { "family": "viking", "family_name": "Viking", "category": "file_infector", "rule_id": "01f31bc1-13c2-5629-9bc6-5cdcd13d877a", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/viking.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/viking.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/viking", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 175 }, { "family": "mailru", "family_name": "Mailru", "category": "adware", "rule_id": "0d222832-2b96-5a91-a8a7-214e5e20b573", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/mailru.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/mailru.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/mailru", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 174 }, { "family": "neoreklami", "family_name": "Neoreklami", "category": "adware", "rule_id": "575c5e92-a758-5623-8387-23fb0b8187a8", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/neoreklami.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/neoreklami.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/neoreklami", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 170 }, { "family": "pykspa", "family_name": "Pykspa", "category": "worm", "rule_id": "80a2a1e4-f76a-5305-8919-acde253b0f3f", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/pykspa.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/pykspa.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/pykspa", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 169 }, { "family": "safebytes", "family_name": "Safebytes", "category": "rogueware", "rule_id": "27559808-435f-5bcd-bf95-e67cd7d2e46d", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/safebytes.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/safebytes.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/safebytes", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 169 }, { "family": "stantinko", "family_name": "Stantinko", "category": "botnet", "rule_id": "f9439851-ef8f-5d73-aff2-5e27be2d039f", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/stantinko.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/stantinko.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/stantinko", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/botnet-protection", "sample_count": 168 }, { "family": "hworld", "family_name": "Hworld", "category": "worm", "rule_id": "5ddabd8c-4055-598a-9be7-f1549eb83b12", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/hworld.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/hworld.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/hworld", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 166 }, { "family": "rodecap", "family_name": "Rodecap", "category": "trojan", "rule_id": "2ca79941-6906-50a4-be75-29381b3ec31d", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/rodecap.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/rodecap.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/rodecap", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 165 }, { "family": "atraps", "family_name": "Atraps", "category": "infostealer", "rule_id": "f33fa7aa-0c42-530b-816c-6f4ea3b8b432", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/atraps.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/atraps.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/atraps", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/infostealer-protection", "sample_count": 164 }, { "family": "parite", "family_name": "Parite", "category": "file_infector", "rule_id": "49f54fec-f279-5b85-ba11-10e0ba2b0e9e", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/parite.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/parite.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/parite", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 163 }, { "family": "wizrem", "family_name": "Wizrem", "category": "trojan", "rule_id": "3663c66e-26ab-5ae5-a812-a37252061d11", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/wizrem.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/wizrem.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/wizrem", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 162 }, { "family": "swrort", "family_name": "Swrort", "category": "backdoor", "rule_id": "44480efe-3278-5dda-92a2-3ef2f93859aa", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/swrort.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/swrort.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/swrort", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 161 }, { "family": "revil", "family_name": "Revil", "category": "ransomware", "rule_id": "97bc2737-8d9c-5840-a64f-02e04a482fd6", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/revil.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/revil.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/revil", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 160 }, { "family": "socelars", "family_name": "Socelars", "category": "infostealer", "rule_id": "b4e7fe8f-9b3f-5ee3-bf13-282fb2c19af1", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/socelars.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/socelars.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/socelars", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/infostealer-protection", "sample_count": 159 }, { "family": "vittaliaent", "family_name": "Vittaliaent", "category": "adware", "rule_id": "355d2561-fcdd-546a-b2ed-624595845661", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/vittaliaent.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/vittaliaent.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/vittaliaent", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 158 }, { "family": "benjamin", "family_name": "Benjamin", "category": "worm", "rule_id": "ba74af47-4fc7-515e-99a7-362f20ae25f9", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/benjamin.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/benjamin.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/benjamin", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 153 }, { "family": "beebone", "family_name": "Beebone", "category": "worm", "rule_id": "9d049765-278a-5106-8530-4d6f035548ba", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/beebone.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/beebone.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/beebone", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 151 }, { "family": "dlsponsor", "family_name": "Dlsponsor", "category": "adware", "rule_id": "13a4deb3-abb3-5deb-82c0-189175777d32", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/dlsponsor.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/dlsponsor.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/dlsponsor", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 151 }, { "family": "firseria", "family_name": "Firseria", "category": "adware", "rule_id": "38734474-7fd7-5de0-8539-7cd0e8b78d04", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/firseria.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/firseria.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/firseria", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 149 }, { "family": "quasar", "family_name": "Quasar", "category": "rat", "rule_id": "efbad2a6-f5d1-5b98-a177-aaecc9356ff8", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/quasar.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/quasar.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/quasar", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 148 }, { "family": "gofot", "family_name": "Gofot", "category": "trojan", "rule_id": "ffed9de7-0cb1-5059-b451-561b455513ba", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/gofot.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/gofot.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/gofot", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 147 }, { "family": "ipamor", "family_name": "Ipamor", "category": "backdoor", "rule_id": "474df67b-bcd0-541f-bb0e-20040ab47e73", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/ipamor.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/ipamor.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/ipamor", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 147 }, { "family": "hupigon", "family_name": "Hupigon", "category": "rat", "rule_id": "d043ebf7-ec81-5c1e-9e78-1a626f2ddb96", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/hupigon.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/hupigon.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/hupigon", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 146 }, { "family": "indiloadz", "family_name": "Indiloadz", "category": "adware", "rule_id": "4a38399f-3b8f-5527-94c9-69c93a6dcf2d", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/indiloadz.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/indiloadz.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/indiloadz", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 146 }, { "family": "bypassuac", "family_name": "Bypassuac", "category": "hacktool", "rule_id": "1929830d-44f7-5304-af80-9e095bd958d2", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/bypassuac.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/bypassuac.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/bypassuac", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 145 }, { "family": "bsymem", "family_name": "Bsymem", "category": "ransomware", "rule_id": "25dc1486-2810-530f-be92-2497bd283964", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/bsymem.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/bsymem.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/bsymem", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 144 }, { "family": "game", "family_name": "Game", "category": "trojan", "rule_id": "e4e98647-4d21-5130-8f62-ede5937041f9", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/game.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/game.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/game", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 144 }, { "family": "kolabc", "family_name": "Kolabc", "category": "worm", "rule_id": "7541542f-c22b-52d1-916d-a4cfef806d07", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/kolabc.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/kolabc.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/kolabc", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 143 }, { "family": "socks", "family_name": "Socks", "category": "trojan", "rule_id": "df1e468b-3f2d-53cf-8641-ef7e68ec63b6", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/socks.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/socks.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/socks", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 143 }, { "family": "killproc", "family_name": "Killproc", "category": "trojan", "rule_id": "62971096-6648-53f2-a465-84191f8aabcc", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/killproc.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/killproc.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/killproc", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 141 }, { "family": "allaple", "family_name": "Allaple", "category": "worm", "rule_id": "b785f6bb-e0bb-523c-9323-3d6a7833e021", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/allaple.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/allaple.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/allaple", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 140 }, { "family": "clop", "family_name": "Clop", "category": "ransomware", "rule_id": "237c1f37-9e4c-5444-ad14-3852ae233149", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/clop.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/clop.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/clop", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 140 }, { "family": "cassiopeia", "family_name": "Cassiopeia", "category": "backdoor", "rule_id": "3ab93f5f-41c0-5cfe-aa8c-e0182fb8c22b", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/cassiopeia.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/cassiopeia.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/cassiopeia", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 137 }, { "family": "noobyprotect", "family_name": "Noobyprotect", "category": "packer", "rule_id": "57d38d70-1dc2-54cd-bd4e-672621096831", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/noobyprotect.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/noobyprotect.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/noobyprotect", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 136 }, { "family": "salgorea", "family_name": "Salgorea", "category": "backdoor", "rule_id": "336d3a2b-eb33-5b27-bfaa-50c07070920d", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/salgorea.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/salgorea.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/salgorea", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 135 }, { "family": "nakoctb", "family_name": "Nakoctb", "category": "ransomware", "rule_id": "6807b9e0-a704-572c-98cf-4345b5dc495c", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/nakoctb.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/nakoctb.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/nakoctb", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 134 }, { "family": "auslogics", "family_name": "Auslogics", "category": "rogueware", "rule_id": "3d274e29-bebc-5af2-82f7-8679a3aa3213", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/auslogics.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/auslogics.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/auslogics", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 133 }, { "family": "scarsi", "family_name": "Scarsi", "category": "backdoor", "rule_id": "cb4a0423-732d-5753-87fd-c2cffb0249d5", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/scarsi.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/scarsi.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/scarsi", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 133 }, { "family": "wajam", "family_name": "Wajam", "category": "adware", "rule_id": "4b6b97c5-ef46-523b-aa5b-abd76e5f8dbf", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/wajam.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/wajam.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/wajam", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 131 }, { "family": "archsms", "family_name": "Archsms", "category": "ransomware", "rule_id": "aa4dd4e1-2e17-523c-916d-8ad9cee151ff", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/archsms.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/archsms.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/archsms", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 127 }, { "family": "spygate", "family_name": "Spygate", "category": "rat", "rule_id": "e0f871e3-b3ef-50b8-9e4e-0c469f8b5a45", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/spygate.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/spygate.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/spygate", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 127 }, { "family": "petya", "family_name": "Petya", "category": "ransomware", "rule_id": "7fe1db2f-8718-59b9-a5c7-d539fad180fb", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/petya.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/petya.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/petya", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 121 }, { "family": "softpulse", "family_name": "Softpulse", "category": "adware", "rule_id": "7a402202-8f04-51e6-8e27-4d21fe4a38f4", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/softpulse.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/softpulse.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/softpulse", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 121 }, { "family": "autohk", "family_name": "Autohk", "category": "trojan", "rule_id": "a686d958-b7be-525b-a597-cc2a0ebf5ff0", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/autohk.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/autohk.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/autohk", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 120 }, { "family": "confuser", "family_name": "Confuser", "category": "packer", "rule_id": "eed9f182-e26c-5dad-95fe-6a5b77481b1d", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/confuser.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/confuser.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/confuser", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 120 }, { "family": "goznym", "family_name": "Goznym", "category": "banking_trojan", "rule_id": "a5047987-c005-5a71-aaa9-c2f02342bdb4", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/goznym.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/goznym.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/goznym", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/banking-trojan-protection", "sample_count": 120 }, { "family": "hafen", "family_name": "Hafen", "category": "backdoor", "rule_id": "2fac2f3f-2b55-59a5-b3c0-557e99d6fef0", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/hafen.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/hafen.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/hafen", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 120 }, { "family": "predator", "family_name": "Predator", "category": "spyware", "rule_id": "b9e2d34f-7b55-5749-877f-4c8a41d8cfc2", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/predator.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/predator.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/predator", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 120 }, { "family": "rebhip", "family_name": "Rebhip", "category": "rat", "rule_id": "4455a3c7-67dd-57a1-9d06-5ff6f4efe3e5", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/rebhip.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/rebhip.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/rebhip", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 120 }, { "family": "redline", "family_name": "Redline", "category": "infostealer", "rule_id": "1266fb60-b653-5417-8588-c0ffc92bbfe6", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/redline.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/redline.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/redline", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/infostealer-protection", "sample_count": 120 }, { "family": "csdimonetize", "family_name": "Csdimonetize", "category": "adware", "rule_id": "d670dfbb-ce6a-52ab-bcbc-39583ef4cf85", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/csdimonetize.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/csdimonetize.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/csdimonetize", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 118 }, { "family": "icedid", "family_name": "Icedid", "category": "banking_trojan", "rule_id": "759bd794-2b8b-5ef5-bf17-c796f8633118", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/icedid.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/icedid.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/icedid", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/banking-trojan-protection", "sample_count": 118 }, { "family": "tweakbit", "family_name": "Tweakbit", "category": "rogueware", "rule_id": "6645a4c8-ba5c-5eeb-8c45-4ca65933d687", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/tweakbit.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/tweakbit.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/tweakbit", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 117 }, { "family": "wakme", "family_name": "Wakme", "category": "trojan", "rule_id": "6e8d4697-1867-5913-8a65-976597674c99", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/wakme.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/wakme.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/wakme", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 116 }, { "family": "phorpiex", "family_name": "Phorpiex", "category": "botnet", "rule_id": "d8579d9a-82c8-51c2-875a-777eba7ec8af", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/phorpiex.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/phorpiex.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/phorpiex", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/botnet-protection", "sample_count": 115 }, { "family": "ardamax", "family_name": "Ardamax", "category": "infostealer", "rule_id": "cd173634-7593-5d28-84f6-943c83298502", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/ardamax.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/ardamax.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/ardamax", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/infostealer-protection", "sample_count": 114 }, { "family": "gozi", "family_name": "Gozi", "category": "banking_trojan", "rule_id": "799ccdff-4802-5f81-b978-8d45641b7b30", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/gozi.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/gozi.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/gozi", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/banking-trojan-protection", "sample_count": 113 }, { "family": "bitmin", "family_name": "Bitmin", "category": "coinminer", "rule_id": "bae80e23-0526-5ac1-9de2-da19901a043b", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/bitmin.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/bitmin.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/bitmin", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 112 }, { "family": "umbra", "family_name": "Umbra", "category": "loader", "rule_id": "a7042579-bdb6-5a7d-b802-3d5161734d3b", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/umbra.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/umbra.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/umbra", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 111 }, { "family": "unwaders", "family_name": "Unwaders", "category": "adware", "rule_id": "f46637d9-ab79-52fa-becf-2f3cfa71302c", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/unwaders.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/unwaders.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/unwaders", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 111 }, { "family": "wews", "family_name": "Wews", "category": "exploit", "rule_id": "ef563247-dc08-5fe9-8b32-a034eed44714", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/wews.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/wews.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/wews", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 111 }, { "family": "dynamer", "family_name": "Dynamer", "category": "trojan", "rule_id": "d86f8a92-480e-573b-a86c-52bb6cc29477", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/dynamer.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/dynamer.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/dynamer", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 110 }, { "family": "fuerboos", "family_name": "Fuerboos", "category": "trojan", "rule_id": "ecdb6430-8178-5ce2-b471-a4b6ad20353a", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/fuerboos.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/fuerboos.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/fuerboos", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 110 }, { "family": "ngrbot", "family_name": "Ngrbot", "category": "worm", "rule_id": "e42d3df7-67bf-5b07-a47d-a4070faf8107", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/ngrbot.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/ngrbot.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/ngrbot", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 110 }, { "family": "opencandy", "family_name": "Opencandy", "category": "adware", "rule_id": "1db0836a-bffc-511d-bc91-3ac26dea9819", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/opencandy.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/opencandy.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/opencandy", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 110 }, { "family": "raccoon", "family_name": "Raccoon", "category": "infostealer", "rule_id": "279d88b1-eb26-5869-93b6-12ac5e497513", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/raccoon.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/raccoon.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/raccoon", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/infostealer-protection", "sample_count": 110 }, { "family": "apost", "family_name": "Apost", "category": "trojan", "rule_id": "45b1bfc2-f593-584f-a1d7-3e27d4d4e7ea", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/apost.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/apost.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/apost", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 109 }, { "family": "guildma", "family_name": "Guildma", "category": "banking_trojan", "rule_id": "7b0edae0-ef84-510c-8a4b-c4a64b9720fb", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/guildma.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/guildma.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/guildma", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/banking-trojan-protection", "sample_count": 109 }, { "family": "hpdefender", "family_name": "Hpdefender", "category": "rogue_antivirus", "rule_id": "c569cea8-4210-5fb5-957d-7493acc923d4", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/hpdefender.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/hpdefender.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/hpdefender", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 109 }, { "family": "rbot", "family_name": "Rbot", "category": "backdoor", "rule_id": "0064a642-fa36-57a5-b002-651bc4630ed4", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/rbot.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/rbot.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/rbot", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 109 }, { "family": "explorerhijack", "family_name": "Explorerhijack", "category": "trojan", "rule_id": "99dd19cc-5ee3-592d-87c8-5804d36d9b86", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/explorerhijack.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/explorerhijack.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/explorerhijack", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 106 }, { "family": "palevo", "family_name": "Palevo", "category": "botnet", "rule_id": "04e842e3-a710-5933-bdab-3a8899160226", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/palevo.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/palevo.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/palevo", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/botnet-protection", "sample_count": 106 }, { "family": "netsky", "family_name": "Netsky", "category": "worm", "rule_id": "e3cc925b-5edd-5997-b251-534eaf8e953a", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/netsky.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/netsky.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/netsky", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 105 }, { "family": "fusioncore", "family_name": "Fusioncore", "category": "adware", "rule_id": "783cfa8d-b51d-5dad-b37a-9d985c1bbf23", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/fusioncore.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/fusioncore.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/fusioncore", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 104 }, { "family": "llac", "family_name": "Llac", "category": "trojan", "rule_id": "58c2a0e1-e4ac-5439-ad45-3a2cdab6fb69", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/llac.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/llac.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/llac", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 104 }, { "family": "tempedreve", "family_name": "Tempedreve", "category": "downloader", "rule_id": "b23868ad-46fb-5e21-a345-0fc4ee916151", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/tempedreve.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/tempedreve.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/tempedreve", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 104 }, { "family": "addrop", "family_name": "Addrop", "category": "adware", "rule_id": "89b721cd-aeff-5125-82e2-d40797d7bff2", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/addrop.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/addrop.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/addrop", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 103 }, { "family": "nemesis", "family_name": "Nemesis", "category": "bootkit", "rule_id": "df5f1e56-0555-522d-adc1-7896f168ad0e", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/nemesis.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/nemesis.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/nemesis", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 103 }, { "family": "nisloder", "family_name": "Nisloder", "category": "loader", "rule_id": "bb9aab9a-910f-5f2a-ad93-8f7f48dab4ee", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/nisloder.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/nisloder.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/nisloder", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 103 }, { "family": "nymeria", "family_name": "Nymeria", "category": "downloader", "rule_id": "bf4a1235-748f-5a43-ae13-720f115e1020", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/nymeria.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/nymeria.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/nymeria", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 102 }, { "family": "chir", "family_name": "Chir", "category": "worm", "rule_id": "14b159bc-c65d-5bb9-85b6-ae3629b9fca0", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/chir.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/chir.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/chir", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 99 }, { "family": "powp", "family_name": "Powp", "category": "adware", "rule_id": "fb7430e3-7d27-51f1-b227-271148cf09eb", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/powp.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/powp.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/powp", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 99 }, { "family": "sysn", "family_name": "Sysn", "category": "trojan", "rule_id": "e5d43bb9-a9df-5fcf-af7b-b8bcef3247d9", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/sysn.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/sysn.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/sysn", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 99 }, { "family": "wronginf", "family_name": "Wronginf", "category": "rogue_antivirus", "rule_id": "b725a782-009e-5609-af40-daf042a48de8", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/wronginf.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/wronginf.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/wronginf", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 99 }, { "family": "adaebook", "family_name": "Adaebook", "category": "adware", "rule_id": "03a66f87-68a9-5956-bac3-b0736d7d8a10", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/adaebook.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/adaebook.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/adaebook", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 98 }, { "family": "mansabo", "family_name": "Mansabo", "category": "trojan", "rule_id": "c2b86107-551d-52f9-9fa2-eda32bb7add1", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/mansabo.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/mansabo.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/mansabo", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 98 }, { "family": "dllinject", "family_name": "Dllinject", "category": "hacktool", "rule_id": "7227e319-3221-5e6a-bc36-e5877a95a6b0", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/dllinject.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/dllinject.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/dllinject", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 97 }, { "family": "convertad", "family_name": "Convertad", "category": "adware", "rule_id": "02ef186a-cd27-5ceb-9955-e202e92276d5", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/convertad.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/convertad.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/convertad", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 96 }, { "family": "bifrost", "family_name": "Bifrost", "category": "rat", "rule_id": "ce046ae2-4add-59d5-95f3-6a883c33c7df", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/bifrost.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/bifrost.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/bifrost", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 95 }, { "family": "remoteadmin", "family_name": "Remoteadmin", "category": "hacktool", "rule_id": "1b369580-20fe-5848-bd63-d866b1b7d128", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/remoteadmin.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/remoteadmin.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/remoteadmin", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 95 }, { "family": "skypespam", "family_name": "Skypespam", "category": "worm", "rule_id": "314efb1b-75ab-574f-a2f3-fd191bd7bacd", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/skypespam.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/skypespam.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/skypespam", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 95 }, { "family": "asyncrat", "family_name": "Asyncrat", "category": "rat", "rule_id": "983e913b-7ae7-5431-ba37-5cc409050da8", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/asyncrat.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/asyncrat.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/asyncrat", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 95 }, { "family": "hesv", "family_name": "Hesv", "category": "trojan", "rule_id": "1518d3a9-47d2-575e-995d-8f5515c72802", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/hesv.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/hesv.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/hesv", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 93 }, { "family": "trickster", "family_name": "Trickster", "category": "banking_trojan", "rule_id": "42a837ee-19c9-5d13-8fbe-40cb04aa830d", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/trickster.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/trickster.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/trickster", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/banking-trojan-protection", "sample_count": 93 }, { "family": "cutwail", "family_name": "Cutwail", "category": "botnet", "rule_id": "da5936aa-802d-53de-9b8f-534c5b086ed0", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/cutwail.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/cutwail.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/cutwail", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/botnet-protection", "sample_count": 92 }, { "family": "hijacker", "family_name": "Hijacker", "category": "adware", "rule_id": "2a672672-855f-5578-bbc3-94df827db2ed", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/hijacker.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/hijacker.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/hijacker", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 92 }, { "family": "bancteian", "family_name": "Bancteian", "category": "downloader", "rule_id": "b2726929-9e3b-507b-9d8c-fd7a76be5984", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/bancteian.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/bancteian.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/bancteian", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 91 }, { "family": "opensupdater", "family_name": "Opensupdater", "category": "adware", "rule_id": "dbd0d69a-4edd-5e22-b7a2-b50d1a28d0e9", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/opensupdater.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/opensupdater.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/opensupdater", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 91 }, { "family": "dofoil", "family_name": "Dofoil", "category": "downloader", "rule_id": "7a765b5f-d523-556d-bb11-c29375f104cf", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/dofoil.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/dofoil.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/dofoil", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 90 }, { "family": "yobrowser", "family_name": "Yobrowser", "category": "adware", "rule_id": "f54aa1d4-5971-5617-93db-bbfe97484717", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/yobrowser.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yobrowser.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/yobrowser", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 90 }, { "family": "cambot", "family_name": "Cambot", "category": "worm", "rule_id": "ae9b908c-2a17-56a7-a264-b56bbf30eee4", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/cambot.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/cambot.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/cambot", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 89 }, { "family": "mydoom", "family_name": "Mydoom", "category": "worm", "rule_id": "61cd7039-626a-514b-8903-7fc89de6f1b6", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/mydoom.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/mydoom.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/mydoom", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 88 }, { "family": "binder", "family_name": "Binder", "category": "hacktool", "rule_id": "6107ac86-db7b-5e1a-9099-b58611a9e046", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/binder.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/binder.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/binder", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 87 }, { "family": "rubinurd", "family_name": "Rubinurd", "category": "downloader", "rule_id": "d258259b-6a39-5b66-b772-9c562389dfbb", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/rubinurd.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/rubinurd.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/rubinurd", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 87 }, { "family": "vmprotbad", "family_name": "Vmprotbad", "category": "trojan", "rule_id": "ac6355ee-9abe-5ccf-ae52-d0d4b35e51dd", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/vmprotbad.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/vmprotbad.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/vmprotbad", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 87 }, { "family": "dorkbot", "family_name": "Dorkbot", "category": "botnet", "rule_id": "3834b61b-21c6-564f-82ec-a7e5281a8fa5", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/dorkbot.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/dorkbot.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/dorkbot", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/botnet-protection", "sample_count": 86 }, { "family": "chindo", "family_name": "Chindo", "category": "worm", "rule_id": "4ae56076-97a9-5595-9844-f39e6b402809", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/chindo.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/chindo.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/chindo", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 85 }, { "family": "lumma", "family_name": "Lumma", "category": "infostealer", "rule_id": "774b2585-9f47-5982-a608-cc0972e92f9f", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/lumma.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/lumma.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/lumma", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/infostealer-protection", "sample_count": 85 }, { "family": "cerbu", "family_name": "Cerbu", "category": "backdoor", "rule_id": "ff3c8a80-aed1-51d5-b559-7a4dfb436d62", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/cerbu.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/cerbu.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/cerbu", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 84 }, { "family": "eyestye", "family_name": "Eyestye", "category": "infostealer", "rule_id": "436cc4f1-6f55-532b-b4a4-bbd1573f3e10", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/eyestye.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/eyestye.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/eyestye", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/infostealer-protection", "sample_count": 84 }, { "family": "youxun", "family_name": "Youxun", "category": "adware", "rule_id": "4a12ff63-6789-594f-9950-5fc0703be6ab", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/youxun.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/youxun.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/youxun", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 84 }, { "family": "taranis", "family_name": "Taranis", "category": "trojan", "rule_id": "83914379-82ce-5280-8f01-c564c58bf367", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/taranis.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/taranis.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/taranis", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 83 }, { "family": "delphi", "family_name": "Delphi", "category": "trojan", "rule_id": "6e27edaa-69c9-5557-8f69-df3ee71c6cb2", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/delphi.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/delphi.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/delphi", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 82 }, { "family": "elemental", "family_name": "Elemental", "category": "adware", "rule_id": "3fc9f94d-92b8-57c8-a5d3-78bd7ca68d7d", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/elemental.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/elemental.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/elemental", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 82 }, { "family": "picsys", "family_name": "Picsys", "category": "trojan", "rule_id": "18565ba9-d107-5db7-a4c1-5a8ab3fb18fb", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/picsys.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/picsys.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/picsys", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 82 }, { "family": "sugar", "family_name": "Sugar", "category": "ransomware", "rule_id": "5496a1cb-47ca-545f-80bf-c24c5b70def0", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/sugar.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/sugar.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/sugar", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 80 }, { "family": "bazarloader", "family_name": "Bazarloader", "category": "loader", "rule_id": "f6cff60e-b8d4-5429-ba9e-791306db1d1d", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/bazarloader.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/bazarloader.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/bazarloader", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 80 }, { "family": "meterpreter", "family_name": "Meterpreter", "category": "hacktool", "rule_id": "43c9e076-01f9-5d57-89e2-402503734968", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/meterpreter.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/meterpreter.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/meterpreter", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 78 }, { "family": "buterat", "family_name": "Buterat", "category": "backdoor", "rule_id": "ae6e1e1f-f1c9-5124-bd67-f80edb537c53", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/buterat.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/buterat.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/buterat", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 77 }, { "family": "bitrep", "family_name": "Bitrep", "category": "trojan", "rule_id": "0a9a131b-12b3-55de-981b-151c2c2ef331", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/bitrep.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/bitrep.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/bitrep", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 76 }, { "family": "shodi", "family_name": "Shodi", "category": "backdoor", "rule_id": "035a454d-73fe-5dae-8980-080860caf619", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/shodi.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/shodi.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/shodi", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 76 }, { "family": "dovs", "family_name": "Dovs", "category": "trojan", "rule_id": "af3d8072-e129-5722-9962-7282b3b260a9", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/dovs.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/dovs.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/dovs", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 75 }, { "family": "rozena", "family_name": "Rozena", "category": "backdoor", "rule_id": "19ae7a18-a888-5393-a390-046c12397774", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/rozena.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/rozena.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/rozena", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 75 }, { "family": "darkside", "family_name": "Darkside", "category": "ransomware", "rule_id": "9a779625-6c68-5de4-9883-ee3268d3f6b6", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/darkside.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/darkside.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/darkside", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 75 }, { "family": "bayrob", "family_name": "Bayrob", "category": "trojan", "rule_id": "81589cc6-4ebb-5cf0-93e4-b93eeca30e0b", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/bayrob.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/bayrob.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/bayrob", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 74 }, { "family": "bloored", "family_name": "Bloored", "category": "trojan", "rule_id": "c0a6ba8f-aefb-52d6-95b6-bac4349fc04f", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/bloored.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/bloored.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/bloored", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 74 }, { "family": "uniblue", "family_name": "Uniblue", "category": "pua", "rule_id": "38360c85-8f92-5ace-b637-467e6859a56e", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/uniblue.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/uniblue.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/uniblue", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 74 }, { "family": "vilsel", "family_name": "Vilsel", "category": "trojan", "rule_id": "50452bbc-1cc6-508e-8db1-8ca2360b41bb", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/vilsel.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/vilsel.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/vilsel", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 74 }, { "family": "browsefox", "family_name": "Browsefox", "category": "adware", "rule_id": "dc8da65c-047d-5bbe-90ca-7677d0efc4fd", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/browsefox.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/browsefox.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/browsefox", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 73 }, { "family": "netwiredrc", "family_name": "Netwiredrc", "category": "rat", "rule_id": "9e438e63-e88b-5a8c-9783-f5a02b4f2571", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/netwiredrc.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/netwiredrc.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/netwiredrc", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 72 }, { "family": "shade", "family_name": "Shade", "category": "ransomware", "rule_id": "eac2457c-cac4-5be1-96a4-5535e7115315", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/shade.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/shade.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/shade", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 72 }, { "family": "wecod", "family_name": "Wecod", "category": "trojan", "rule_id": "08f81bcb-b389-5245-8b5e-fbe71a7bb103", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/wecod.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/wecod.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/wecod", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 71 }, { "family": "skorik", "family_name": "Skorik", "category": "trojan", "rule_id": "b74e0831-690f-5627-9edf-2d7718d70d68", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/skorik.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/skorik.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/skorik", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 70 }, { "family": "snarasite", "family_name": "Snarasite", "category": "trojan", "rule_id": "2d621af5-7b56-5b35-aaeb-48c5f3273f50", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/snarasite.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/snarasite.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/snarasite", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 70 }, { "family": "vundo", "family_name": "Vundo", "category": "trojan", "rule_id": "26554303-2a59-57ef-a15c-6973d3c56c3c", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/vundo.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/vundo.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/vundo", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 70 }, { "family": "appset", "family_name": "Appset", "category": "pua", "rule_id": "1812e1ea-2dee-5693-9d72-f4f156139775", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/appset.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/appset.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/appset", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 69 }, { "family": "buzus", "family_name": "Buzus", "category": "trojan", "rule_id": "24e7972b-68e2-59f5-aa69-29738efce783", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/buzus.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/buzus.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/buzus", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 69 }, { "family": "jacard", "family_name": "Jacard", "category": "trojan", "rule_id": "21fab6e4-694b-53e1-8e4f-9bae920b4cce", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/jacard.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/jacard.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/jacard", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 69 }, { "family": "mepaow", "family_name": "Mepaow", "category": "trojan", "rule_id": "8bfd25e0-8ab8-5aae-9c06-191d40a71abd", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/mepaow.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/mepaow.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/mepaow", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 68 }, { "family": "neurevt", "family_name": "Neurevt", "category": "trojan", "rule_id": "f3b4af3b-1a00-5f37-b0f2-1944b7b0a3e6", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/neurevt.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/neurevt.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/neurevt", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 68 }, { "family": "cloudscout", "family_name": "Cloudscout", "category": "advanced_threat", "rule_id": "c3751716-13c8-5c18-ab1b-a2ea149ed3a4", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/cloudscout.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/cloudscout.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/cloudscout", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 67 }, { "family": "genericrxdt", "family_name": "Genericrxdt", "category": "ransomware", "rule_id": "7bba5785-09e8-5515-8803-2fd837ec6c20", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/genericrxdt.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/genericrxdt.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/genericrxdt", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 67 }, { "family": "propagate", "family_name": "Propagate", "category": "ransomware", "rule_id": "c5e9dddf-9532-534c-8e4f-8d9d9df2f482", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/propagate.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/propagate.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/propagate", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 67 }, { "family": "pynamer", "family_name": "Pynamer", "category": "trojan", "rule_id": "ae55771e-7877-57be-a7ef-4f57f7e67126", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/pynamer.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/pynamer.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/pynamer", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 67 }, { "family": "mogoogwi", "family_name": "Mogoogwi", "category": "worm", "rule_id": "8422bbcc-2fc3-5356-988f-1795309392fb", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/mogoogwi.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/mogoogwi.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/mogoogwi", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 66 }, { "family": "omaneat", "family_name": "Omaneat", "category": "trojan", "rule_id": "3e598316-95be-53af-93fa-a7206e0ef60d", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/omaneat.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/omaneat.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/omaneat", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 66 }, { "family": "orcus", "family_name": "Orcus", "category": "backdoor", "rule_id": "a3d9a82e-9541-5326-a53d-3997ce1b404d", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/orcus.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/orcus.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/orcus", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 66 }, { "family": "waldek", "family_name": "Waldek", "category": "trojan", "rule_id": "e4ed7cc4-cea8-510e-bbdb-68015a014e04", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/waldek.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/waldek.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/waldek", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 65 }, { "family": "cuegoe", "family_name": "Cuegoe", "category": "advanced_threat", "rule_id": "0a15dc3b-7355-53f4-ab83-70748f100e12", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/cuegoe.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/cuegoe.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/cuegoe", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 64 }, { "family": "domaiq", "family_name": "Domaiq", "category": "pua", "rule_id": "49ccceed-6743-57f8-8129-b9e64e6b3eaf", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/domaiq.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/domaiq.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/domaiq", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 63 }, { "family": "genericrxgp", "family_name": "Genericrxgp", "category": "ransomware", "rule_id": "4aa692bf-7877-523f-abab-e3334bdcfddd", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/genericrxgp.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/genericrxgp.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/genericrxgp", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 63 }, { "family": "magania", "family_name": "Magania", "category": "trojan", "rule_id": "828fcafe-8a4e-5864-87cc-e113aa7f2a91", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/magania.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/magania.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/magania", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 63 }, { "family": "vindor", "family_name": "Vindor", "category": "trojan", "rule_id": "16ba2c73-8674-5b76-baf0-c07a43c4444f", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/vindor.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/vindor.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/vindor", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 63 }, { "family": "stormattack", "family_name": "Stormattack", "category": "trojan", "rule_id": "b02377b6-602a-5718-9af8-e02f602c9a9a", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/stormattack.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/stormattack.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/stormattack", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 62 }, { "family": "carberp", "family_name": "Carberp", "category": "banking_trojan", "rule_id": "500cabb8-59f5-5233-9143-f22dca251fb8", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/carberp.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/carberp.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/carberp", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/banking-trojan-protection", "sample_count": 61 }, { "family": "downloadadmin", "family_name": "Downloadadmin", "category": "pua", "rule_id": "f368e47a-065c-57c8-988f-d745bfa0098d", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/downloadadmin.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/downloadadmin.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/downloadadmin", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 61 }, { "family": "4shared", "family_name": "4shared", "category": "pua", "rule_id": "220398e5-88c3-5240-8208-53ddf278af26", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/4shared.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/4shared.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/4shared", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 60 }, { "family": "neutrinopos", "family_name": "Neutrinopos", "category": "trojan", "rule_id": "1f4b369d-4eb7-5e97-9b24-52f38f5f1f05", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/neutrinopos.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/neutrinopos.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/neutrinopos", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 60 }, { "family": "bifrose", "family_name": "Bifrose", "category": "backdoor", "rule_id": "44e09531-b565-5991-a3b5-e12aee57d416", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/bifrose.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/bifrose.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/bifrose", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 59 }, { "family": "dridex", "family_name": "Dridex", "category": "banking_trojan", "rule_id": "1d12992b-7ddc-5a57-8e7b-0736c9b89b2e", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/dridex.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/dridex.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/dridex", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/banking-trojan-protection", "sample_count": 59 }, { "family": "asparnet", "family_name": "Asparnet", "category": "trojan", "rule_id": "e001fb29-714d-5db9-a5de-ec9d682d2a39", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/asparnet.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/asparnet.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/asparnet", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 58 }, { "family": "hploki", "family_name": "Hploki", "category": "infostealer", "rule_id": "4b0a9d41-9c7b-5aae-9601-e6e13946ff58", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/hploki.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/hploki.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/hploki", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/infostealer-protection", "sample_count": 58 }, { "family": "brontok", "family_name": "Brontok", "category": "worm", "rule_id": "a0756648-151b-5f7f-a234-677335b2e37f", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/brontok.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/brontok.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/brontok", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 57 }, { "family": "jimmy", "family_name": "Jimmy", "category": "ransomware", "rule_id": "a583862c-ac9b-561c-9957-4fecc649ba6d", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/jimmy.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/jimmy.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/jimmy", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 57 }, { "family": "obsidium", "family_name": "Obsidium", "category": "packer", "rule_id": "bdcf73a7-5a93-58f6-8282-b8d0ab62bc6f", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/obsidium.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/obsidium.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/obsidium", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 57 }, { "family": "scarab", "family_name": "Scarab", "category": "ransomware", "rule_id": "a75adfe7-f0ff-56bc-92b1-b59fca64307d", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/scarab.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/scarab.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/scarab", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 57 }, { "family": "shelma", "family_name": "Shelma", "category": "trojan", "rule_id": "30afcf4e-7c26-563e-97eb-5f2a9ea600b3", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/shelma.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/shelma.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/shelma", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 57 }, { "family": "noancooe", "family_name": "Noancooe", "category": "backdoor", "rule_id": "72fd1fe2-deb8-506e-aced-d061c6492187", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/noancooe.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/noancooe.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/noancooe", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 56 }, { "family": "stubrc", "family_name": "Stubrc", "category": "trojan_downloader", "rule_id": "72acb755-231e-5aeb-8814-520d8fcdfd05", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/stubrc.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/stubrc.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/stubrc", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 56 }, { "family": "bancos", "family_name": "Bancos", "category": "banking_trojan", "rule_id": "6d1ad8d1-c728-566c-95f9-b0f757c340ae", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/bancos.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/bancos.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/bancos", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/banking-trojan-protection", "sample_count": 55 }, { "family": "boilod", "family_name": "Boilod", "category": "adware", "rule_id": "4dce0868-6586-517e-bcbd-4320bcc4fbce", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/boilod.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/boilod.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/boilod", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 55 }, { "family": "lokibot", "family_name": "Lokibot", "category": "infostealer", "rule_id": "79974481-37e2-58f5-b20f-23cb301bf6ef", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/lokibot.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/lokibot.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/lokibot", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/infostealer-protection", "sample_count": 55 }, { "family": "netwire", "family_name": "Netwire", "category": "rat", "rule_id": "613a1b4e-31fa-5652-9b5b-f4cd473710d5", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/netwire.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/netwire.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/netwire", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 55 }, { "family": "nsismod", "family_name": "Nsismod", "category": "trojan_downloader", "rule_id": "3c588c30-39e4-5baa-9c54-742b2009cf92", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/nsismod.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/nsismod.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/nsismod", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 55 }, { "family": "swizzor", "family_name": "Swizzor", "category": "adware", "rule_id": "82048fdd-deab-5272-b1fd-b8fb990d9da2", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/swizzor.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/swizzor.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/swizzor", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 55 }, { "family": "ulpm", "family_name": "Ulpm", "category": "adware", "rule_id": "6b605326-a3ef-5344-be1e-8a11d5623893", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/ulpm.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/ulpm.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/ulpm", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 55 }, { "family": "warezov", "family_name": "Warezov", "category": "worm", "rule_id": "fe93bc10-572c-517b-ac1b-9547e21f7b8a", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/warezov.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/warezov.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/warezov", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 55 }, { "family": "gator", "family_name": "Gator", "category": "adware", "rule_id": "b8ebdbb6-5f0c-5619-bf80-d16a6cafc8aa", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/gator.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/gator.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/gator", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 54 }, { "family": "steam", "family_name": "Steam", "category": "infostealer", "rule_id": "74331c65-3006-5c60-94d3-38cb85e6ac1b", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/steam.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/steam.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/steam", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/infostealer-protection", "sample_count": 54 }, { "family": "banbra", "family_name": "Banbra", "category": "banking_trojan", "rule_id": "30b32d60-eec8-5557-89d7-8de4d90ea769", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/banbra.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/banbra.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/banbra", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/banking-trojan-protection", "sample_count": 53 }, { "family": "kuaiba", "family_name": "Kuaiba", "category": "adware", "rule_id": "4543835a-d70e-5da3-8b0a-3490eb466547", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/kuaiba.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/kuaiba.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/kuaiba", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 53 }, { "family": "multiplug", "family_name": "Multiplug", "category": "adware", "rule_id": "04f7fc0d-77dc-534b-8a0d-144050e697ac", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/multiplug.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/multiplug.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/multiplug", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 53 }, { "family": "murofet", "family_name": "Murofet", "category": "trojan", "rule_id": "fadfc841-cfe9-5314-bd33-c81cf9a7e1e9", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/murofet.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/murofet.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/murofet", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 53 }, { "family": "scrop", "family_name": "Scrop", "category": "trojan_downloader", "rule_id": "b66eba64-cdad-54ac-85a3-11584776ac0a", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/scrop.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/scrop.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/scrop", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 53 }, { "family": "aliser", "family_name": "Aliser", "category": "file_infector", "rule_id": "10a76a8c-aecc-55c0-81ff-ba82835e1919", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/aliser.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/aliser.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/aliser", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 52 }, { "family": "coinstealer", "family_name": "Coinstealer", "category": "infostealer", "rule_id": "ec4e7b89-3e09-592d-b215-74ecf0c70c3a", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/coinstealer.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/coinstealer.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/coinstealer", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/infostealer-protection", "sample_count": 52 }, { "family": "crytex", "family_name": "Crytex", "category": "ransomware", "rule_id": "a0c1f072-0a41-5adb-a780-e54315a385b3", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/crytex.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/crytex.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/crytex", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 52 }, { "family": "tpyn", "family_name": "Tpyn", "category": "trojan", "rule_id": "ec6b5037-f53d-5fd0-9ec9-a0382a1e6aec", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/tpyn.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/tpyn.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/tpyn", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 52 }, { "family": "dothetuk", "family_name": "Dothetuk", "category": "infostealer", "rule_id": "600ae68c-75ea-54e3-867a-2ff1e896dedc", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/dothetuk.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/dothetuk.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/dothetuk", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/infostealer-protection", "sample_count": 51 }, { "family": "enigmaprotector", "family_name": "Enigmaprotector", "category": "packer", "rule_id": "c67eb16a-e5ec-5c6f-8199-1a96cbf3e07d", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/enigmaprotector.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/enigmaprotector.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/enigmaprotector", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 50 }, { "family": "revetrat", "family_name": "Revetrat", "category": "trojan", "rule_id": "1f128551-778f-5dc7-852b-010d078e6da4", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/revetrat.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/revetrat.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/revetrat", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 50 }, { "family": "shyape", "family_name": "Shyape", "category": "adware", "rule_id": "3882e88d-feb2-5fd9-bfeb-ff391f3a8610", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/shyape.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/shyape.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/shyape", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 50 }, { "family": "tenga", "family_name": "Tenga", "category": "file_infector", "rule_id": "bd9a8af9-751e-5338-a902-8b7048d789f8", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/tenga.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/tenga.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/tenga", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 50 }, { "family": "vawtrak", "family_name": "Vawtrak", "category": "banking_trojan", "rule_id": "82fddfca-1e52-5295-991f-e1d9e984d863", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/vawtrak.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/vawtrak.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/vawtrak", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/banking-trojan-protection", "sample_count": 50 }, { "family": "bunitu", "family_name": "Bunitu", "category": "trojan", "rule_id": "449523f4-861d-56ef-81df-092dc981fdc4", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/bunitu.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/bunitu.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/bunitu", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 49 }, { "family": "bestafera", "family_name": "Bestafera", "category": "banking_trojan", "rule_id": "26e8d01b-c2c8-5e46-af4b-15a4e4c6a903", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/bestafera.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/bestafera.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/bestafera", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/banking-trojan-protection", "sample_count": 48 }, { "family": "hoax", "family_name": "Hoax", "category": "ransomware", "rule_id": "80c87b50-bda6-57e3-8513-ba07fefe0658", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/hoax.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/hoax.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/hoax", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 48 }, { "family": "shakblades", "family_name": "Shakblades", "category": "ransomware", "rule_id": "62b93b7f-7756-52aa-b29e-87a26a241211", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/shakblades.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/shakblades.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/shakblades", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 48 }, { "family": "hotbar", "family_name": "Hotbar", "category": "adware", "rule_id": "a435f831-fb14-51f3-a25a-740ddfaa4aa5", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/hotbar.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/hotbar.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/hotbar", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 47 }, { "family": "kelihos", "family_name": "Kelihos", "category": "spam_bot", "rule_id": "7bdc175a-b9f1-5141-a955-2d3eb37a369f", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/kelihos.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/kelihos.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/kelihos", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 47 }, { "family": "lmir", "family_name": "Lmir", "category": "infostealer", "rule_id": "d32631fd-1cc2-556b-86fa-0237cd2b6f8c", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/lmir.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/lmir.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/lmir", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/infostealer-protection", "sample_count": 47 }, { "family": "shiotob", "family_name": "Shiotob", "category": "banking_trojan", "rule_id": "80739d89-a9ea-509b-9ce0-2f8e7b47ad4a", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/shiotob.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/shiotob.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/shiotob", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/banking-trojan-protection", "sample_count": 47 }, { "family": "siscos", "family_name": "Siscos", "category": "trojan", "rule_id": "189f0e48-ba08-5c15-ae3f-83c65fa39917", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/siscos.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/siscos.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/siscos", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 47 }, { "family": "ruskill", "family_name": "Ruskill", "category": "ransomware", "rule_id": "1f78b4f8-9ea6-551a-9b8f-012ccd44a0c7", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/ruskill.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/ruskill.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/ruskill", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 46 }, { "family": "zepfod", "family_name": "Zepfod", "category": "trojan", "rule_id": "f8c14310-3971-549e-b674-f75d7540134a", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/zepfod.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/zepfod.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/zepfod", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 46 }, { "family": "filerepmalware", "family_name": "Filerepmalware", "category": "trojan", "rule_id": "3b40d61a-308f-5f53-b4be-e5b176766c25", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/filerepmalware.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/filerepmalware.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/filerepmalware", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 45 }, { "family": "gjue", "family_name": "Gjue", "category": "adware", "rule_id": "efe8c8e4-7dad-57bf-b54e-8f16be074025", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/gjue.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/gjue.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/gjue", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 45 }, { "family": "mudrop", "family_name": "Mudrop", "category": "trojan", "rule_id": "097b8f05-edc5-5823-a0ad-c8bd3f18fbb3", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/mudrop.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/mudrop.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/mudrop", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 45 }, { "family": "regrun", "family_name": "Regrun", "category": "trojan", "rule_id": "3a5995b5-231e-53e8-8d53-cc398941e976", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/regrun.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/regrun.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/regrun", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 45 }, { "family": "vigorf", "family_name": "Vigorf", "category": "trojan", "rule_id": "1aaba073-aafb-508f-9287-156a39021370", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/vigorf.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/vigorf.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/vigorf", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 45 }, { "family": "winsecsrv", "family_name": "Winsecsrv", "category": "trojan", "rule_id": "0e0c8ba0-b9f3-5ba4-9446-bc8c73997a01", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/winsecsrv.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/winsecsrv.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/winsecsrv", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 45 }, { "family": "stealc", "family_name": "Stealc", "category": "infostealer", "rule_id": "1c721545-0cca-5274-809a-970f6152eb56", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/stealc.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/stealc.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/stealc", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/infostealer-protection", "sample_count": 45 }, { "family": "candiru", "family_name": "Candiru", "category": "spyware", "rule_id": "a7d9aca0-7e98-581c-98fa-0ec5f4cf4a45", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/candiru.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/candiru.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/candiru", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 45 }, { "family": "cardspy", "family_name": "Cardspy", "category": "infostealer", "rule_id": "c19198f9-95ec-53a0-ab4e-68722cd26d69", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/cardspy.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/cardspy.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/cardspy", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/infostealer-protection", "sample_count": 44 }, { "family": "jaiko", "family_name": "Jaiko", "category": "ransomware", "rule_id": "fc9eda45-2c98-5ad1-bb23-caaff3ef461c", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/jaiko.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/jaiko.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/jaiko", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 44 }, { "family": "mekotio", "family_name": "Mekotio", "category": "banking_trojan", "rule_id": "4e91dabc-1e34-5a9f-981f-f1f3af788318", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/mekotio.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/mekotio.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/mekotio", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/banking-trojan-protection", "sample_count": 44 }, { "family": "tuscas", "family_name": "Tuscas", "category": "adware", "rule_id": "a7ec1f58-610f-5a6b-9845-a299355e711a", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/tuscas.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/tuscas.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/tuscas", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 44 }, { "family": "xiclog", "family_name": "Xiclog", "category": "backdoor", "rule_id": "dd8bdb61-6d6d-5f19-b387-c7b1ab5b52db", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/xiclog.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/xiclog.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/xiclog", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 44 }, { "family": "agenttesla", "family_name": "Agenttesla", "category": "infostealer", "rule_id": "54198b01-7d97-5e29-bac0-aa69ba135f2b", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/agenttesla.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/agenttesla.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/agenttesla", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/infostealer-protection", "sample_count": 43 }, { "family": "alman", "family_name": "Alman", "category": "file_infector", "rule_id": "df2fa8ae-9bd7-5c68-83d2-f91d7ede71aa", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/alman.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/alman.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/alman", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 43 }, { "family": "installerex", "family_name": "Installerex", "category": "adware", "rule_id": "4028c41b-cac8-52e7-9021-789c4abc64ae", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/installerex.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/installerex.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/installerex", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 43 }, { "family": "packedent", "family_name": "Packedent", "category": "packer", "rule_id": "a324d106-d5ff-58a7-ac25-3bf1368d36d6", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/packedent.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/packedent.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/packedent", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 43 }, { "family": "ceeinject", "family_name": "Ceeinject", "category": "trojan", "rule_id": "64d3c954-4ba9-577b-9a7c-6f615f95dba7", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/ceeinject.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/ceeinject.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/ceeinject", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 42 }, { "family": "diztakun", "family_name": "Diztakun", "category": "trojan", "rule_id": "51f32d01-65f8-5469-b640-3f2909c99073", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/diztakun.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/diztakun.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/diztakun", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 42 }, { "family": "mucc", "family_name": "Mucc", "category": "adware", "rule_id": "72e081b9-98cd-5a2d-b476-9729e0acc601", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/mucc.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/mucc.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/mucc", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 42 }, { "family": "fujacks", "family_name": "Fujacks", "category": "file_infector", "rule_id": "f267e8f9-72fa-5916-b1ed-2a713d108d0c", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/fujacks.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/fujacks.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/fujacks", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 41 }, { "family": "mimikatz", "family_name": "Mimikatz", "category": "credential_dumper", "rule_id": "bb133c7c-bf9d-5bc7-b2d4-49b6cd7ba219", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/mimikatz.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/mimikatz.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/mimikatz", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 41 }, { "family": "psdownload", "family_name": "Psdownload", "category": "trojan_downloader", "rule_id": "2b00dacf-7921-5481-8fa4-91291d7e30ab", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/psdownload.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/psdownload.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/psdownload", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 41 }, { "family": "revenge", "family_name": "Revenge", "category": "backdoor", "rule_id": "b024edac-643f-5ccf-b670-8177c52337fa", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/revenge.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/revenge.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/revenge", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 41 }, { "family": "techsnab", "family_name": "Techsnab", "category": "adware", "rule_id": "28dfde28-8eee-57f9-a3e8-11ba659de3e0", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/techsnab.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/techsnab.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/techsnab", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 41 }, { "family": "evital", "family_name": "Evital", "category": "trojan", "rule_id": "d8a2d7d3-bad3-548a-bc06-665c416be775", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/evital.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/evital.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/evital", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 40 }, { "family": "rungbu", "family_name": "Rungbu", "category": "adware", "rule_id": "bf92acf4-fc90-50dd-bf6a-5927893cb43b", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/rungbu.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/rungbu.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/rungbu", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 40 }, { "family": "zippyloader", "family_name": "Zippyloader", "category": "trojan_downloader", "rule_id": "63344db2-9394-5bc5-9b01-8092889a69f1", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/zippyloader.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/zippyloader.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/zippyloader", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 40 }, { "family": "crossrider", "family_name": "Crossrider", "category": "adware", "rule_id": "2355eda7-c9f2-5069-9304-82de5de9a3d4", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/crossrider.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/crossrider.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/crossrider", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 39 }, { "family": "jaik", "family_name": "Jaik", "category": "trojan", "rule_id": "29d63a4f-fea2-5dd5-9bb9-62f9ae29a6ef", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/jaik.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/jaik.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/jaik", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 39 }, { "family": "packy", "family_name": "Packy", "category": "packer", "rule_id": "d8823143-449d-596e-8741-ccdddc939cb5", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/packy.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/packy.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/packy", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 39 }, { "family": "redcap", "family_name": "Redcap", "category": "backdoor", "rule_id": "6701f265-f067-5381-9b2e-c3a042006e84", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/redcap.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/redcap.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/redcap", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 39 }, { "family": "tescrypt", "family_name": "Tescrypt", "category": "ransomware", "rule_id": "fb0357cb-b0ee-56fb-b5a2-346830874fc6", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/tescrypt.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/tescrypt.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/tescrypt", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 39 }, { "family": "wowlik", "family_name": "Wowlik", "category": "adware", "rule_id": "112e9f53-5d87-53af-a3ff-df5f999e4ff2", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/wowlik.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/wowlik.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/wowlik", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 39 }, { "family": "badur", "family_name": "Badur", "category": "trojan", "rule_id": "19bf57f7-a16a-5e8d-aacf-0e1149d1993d", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/badur.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/badur.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/badur", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 38 }, { "family": "centrumdownloader", "family_name": "Centrumdownloader", "category": "trojan_downloader", "rule_id": "9c06d667-78a5-53a4-9a8f-1564acd59b14", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/centrumdownloader.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/centrumdownloader.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/centrumdownloader", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 38 }, { "family": "chisburg", "family_name": "Chisburg", "category": "infostealer", "rule_id": "b05d9f2d-2790-5faf-8fc3-b5ebb3e6e826", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/chisburg.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/chisburg.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/chisburg", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/infostealer-protection", "sample_count": 38 }, { "family": "detrahere", "family_name": "Detrahere", "category": "rootkit", "rule_id": "caaa02d3-3439-5784-8415-838e7f012d3c", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/detrahere.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/detrahere.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/detrahere", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 38 }, { "family": "facido", "family_name": "Facido", "category": "trojan_downloader", "rule_id": "1baa79c1-23d8-51cf-a901-0adaf80c39cd", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/facido.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/facido.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/facido", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 38 }, { "family": "ldpinch", "family_name": "Ldpinch", "category": "infostealer", "rule_id": "a6451a8f-a978-56b0-9ec7-c8480ad6c49d", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/ldpinch.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/ldpinch.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/ldpinch", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/infostealer-protection", "sample_count": 38 }, { "family": "spesr", "family_name": "Spesr", "category": "trojan", "rule_id": "fcdae56a-9605-52fe-8f8f-3db1f20bd37b", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/spesr.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/spesr.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/spesr", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 38 }, { "family": "tweakbitdu", "family_name": "Tweakbitdu", "category": "pua", "rule_id": "118667e0-22bc-537c-b70e-e88c38e01f74", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/tweakbitdu.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/tweakbitdu.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/tweakbitdu", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 38 }, { "family": "cometer", "family_name": "Cometer", "category": "rat", "rule_id": "981fdba5-fd24-51f0-a2b5-49ccf4b2e31e", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/cometer.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/cometer.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/cometer", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 37 }, { "family": "bang5mai", "family_name": "Bang5mai", "category": "backdoor", "rule_id": "8e0a597c-3f64-5d67-9149-a178524d1fdf", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/bang5mai.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/bang5mai.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/bang5mai", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 36 }, { "family": "bublik", "family_name": "Bublik", "category": "trojan_downloader", "rule_id": "1899f52c-2743-525a-9e4b-6d795359c47e", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/bublik.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/bublik.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/bublik", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 36 }, { "family": "mabezat", "family_name": "Mabezat", "category": "worm", "rule_id": "ba75e96d-216d-5da7-b47b-b5aae59cf110", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/mabezat.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/mabezat.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/mabezat", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 36 }, { "family": "multipacked", "family_name": "Multipacked", "category": "packer", "rule_id": "8db2a2e1-031a-59f9-8ddd-1337fa8ed775", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/multipacked.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/multipacked.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/multipacked", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 36 }, { "family": "shadowbrokers", "family_name": "Shadowbrokers", "category": "advanced_threat", "rule_id": "58d92eb5-9c67-5378-9261-1ef01f74c03b", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/shadowbrokers.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/shadowbrokers.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/shadowbrokers", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 36 }, { "family": "tasker", "family_name": "Tasker", "category": "trojan", "rule_id": "469d035e-6561-5311-9a0d-03c5f5babf8b", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/tasker.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/tasker.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/tasker", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 36 }, { "family": "clipbanker", "family_name": "Clipbanker", "category": "banking_trojan", "rule_id": "afec24a9-d16d-5361-9521-8b4b76448264", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/clipbanker.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/clipbanker.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/clipbanker", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/banking-trojan-protection", "sample_count": 35 }, { "family": "dostre", "family_name": "Dostre", "category": "trojan", "rule_id": "21aeab4a-7860-5ab5-aaed-557fc7792ed7", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/dostre.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/dostre.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/dostre", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 35 }, { "family": "formbook", "family_name": "Formbook", "category": "spyware", "rule_id": "2019b411-8ac1-5145-b737-2af9f96631b7", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/formbook.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/formbook.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/formbook", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 35 }, { "family": "gify", "family_name": "Gify", "category": "trojan_downloader", "rule_id": "7f97101c-87f0-5ea3-897c-68109a59dff1", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/gify.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/gify.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/gify", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 35 }, { "family": "mokes", "family_name": "Mokes", "category": "rat", "rule_id": "11c4e5c1-79fe-574a-b7a5-75e194b1c59a", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/mokes.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/mokes.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/mokes", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 35 }, { "family": "oxypumper", "family_name": "Oxypumper", "category": "pua_tool", "rule_id": "07ceedd2-1126-5820-b884-aa956dca273e", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/oxypumper.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/oxypumper.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/oxypumper", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 35 }, { "family": "pincav", "family_name": "Pincav", "category": "adware", "rule_id": "7545a862-d131-5b7e-81df-3b1ad17bd33d", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/pincav.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/pincav.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/pincav", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 35 }, { "family": "softonic", "family_name": "Softonic", "category": "pua", "rule_id": "658a8565-4886-5c50-90c1-9cde0e9ab0e0", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/softonic.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/softonic.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/softonic", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 35 }, { "family": "subti", "family_name": "Subti", "category": "trojan_downloader", "rule_id": "98c95914-de72-58c6-9c9a-a83723623b66", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/subti.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/subti.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/subti", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 35 }, { "family": "tdss", "family_name": "Tdss", "category": "rootkit", "rule_id": "ba0400ce-9e81-58ed-9d1c-4e0faec6a928", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/tdss.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/tdss.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/tdss", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 35 }, { "family": "turla", "family_name": "Turla", "category": "advanced_threat", "rule_id": "47dedc18-c7f9-5f63-a2f9-0fe34f51a7ea", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/turla.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/turla.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/turla", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 35 }, { "family": "bumblebee", "family_name": "Bumblebee", "category": "loader", "rule_id": "7bcbd15d-0c09-57ab-89e3-273c1a541c53", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/bumblebee.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/bumblebee.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/bumblebee", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 35 }, { "family": "celesty", "family_name": "Celesty", "category": "trojan", "rule_id": "e149d7a2-94cc-5655-ad83-f9def359f040", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/celesty.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/celesty.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/celesty", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 34 }, { "family": "gorillaprice", "family_name": "Gorillaprice", "category": "adware", "rule_id": "79ed0485-a7f6-53ca-8c90-15741ee63118", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/gorillaprice.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/gorillaprice.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/gorillaprice", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 34 }, { "family": "houndhack", "family_name": "Houndhack", "category": "rat", "rule_id": "e0bd25c7-e748-5444-8c14-ae0e0f68ae92", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/houndhack.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/houndhack.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/houndhack", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 34 }, { "family": "outbrowse", "family_name": "Outbrowse", "category": "pua", "rule_id": "f36ddbbc-cf3f-51c7-bedc-caec8039e251", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/outbrowse.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/outbrowse.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/outbrowse", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 34 }, { "family": "webalta", "family_name": "Webalta", "category": "adware", "rule_id": "53ddb8cd-aa13-5952-a750-0690cbc5d99d", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/webalta.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/webalta.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/webalta", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 34 }, { "family": "cloudwrapper", "family_name": "Cloudwrapper", "category": "pua", "rule_id": "ae08ba67-4aee-5d52-8299-ea6f86d4cfde", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/cloudwrapper.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/cloudwrapper.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/cloudwrapper", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 33 }, { "family": "pakes", "family_name": "Pakes", "category": "packer", "rule_id": "c3d233f2-312e-5f70-9543-a6b581904beb", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/pakes.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/pakes.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/pakes", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 33 }, { "family": "protux", "family_name": "Protux", "category": "rat", "rule_id": "1096e05c-c46e-580a-b96e-d8be1c0a9ee5", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/protux.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/protux.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/protux", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 33 }, { "family": "pupstudio", "family_name": "Pupstudio", "category": "pua", "rule_id": "2f0bc36c-17ff-538c-8617-a3d8a7bf6aac", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/pupstudio.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/pupstudio.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/pupstudio", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 33 }, { "family": "skintrim", "family_name": "Skintrim", "category": "adware", "rule_id": "1e64224a-f214-5da9-9eec-02dfcac78dce", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/skintrim.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/skintrim.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/skintrim", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 33 }, { "family": "czyk", "family_name": "Czyk", "category": "trojan", "rule_id": "8504e953-ecc6-56ca-b7bd-f37af5012ad6", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/czyk.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/czyk.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/czyk", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 32 }, { "family": "danabot", "family_name": "Danabot", "category": "banking_trojan", "rule_id": "adeba208-32ce-5d2f-903c-ad1f6a014644", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/danabot.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/danabot.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/danabot", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/banking-trojan-protection", "sample_count": 32 }, { "family": "funshion", "family_name": "Funshion", "category": "adware", "rule_id": "ac40a811-19f2-562b-ab72-b4590d29e444", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/funshion.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/funshion.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/funshion", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 32 }, { "family": "glupteba", "family_name": "Glupteba", "category": "botnet", "rule_id": "483f1f81-e0d3-567e-a07c-2ccf3f674cc4", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/glupteba.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/glupteba.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/glupteba", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/botnet-protection", "sample_count": 32 }, { "family": "jawego", "family_name": "Jawego", "category": "adware", "rule_id": "cf020463-4dd0-5fdb-8f49-491ce0a7cd30", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/jawego.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/jawego.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/jawego", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 32 }, { "family": "tordev", "family_name": "Tordev", "category": "botnet", "rule_id": "0b9351b1-e9ae-59dc-8572-a9b3b5766ced", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/tordev.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/tordev.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/tordev", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/botnet-protection", "sample_count": 32 }, { "family": "vabushky", "family_name": "Vabushky", "category": "ransomware", "rule_id": "40f9c5e4-7086-5dd0-89dd-4724c077f834", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/vabushky.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/vabushky.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/vabushky", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 32 }, { "family": "yuner", "family_name": "Yuner", "category": "file_infector", "rule_id": "e56087ce-5539-5ff4-8882-e8b6027fc4f6", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/yuner.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yuner.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/yuner", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 32 }, { "family": "zapchast", "family_name": "Zapchast", "category": "infostealer", "rule_id": "76c76cf3-d2b4-5f4e-a815-698a0667943c", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/zapchast.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/zapchast.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/zapchast", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/infostealer-protection", "sample_count": 32 }, { "family": "elex", "family_name": "Elex", "category": "adware", "rule_id": "3fd8fd51-00c3-5fd1-b203-5ae25c40db46", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/elex.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/elex.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/elex", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 31 }, { "family": "hebogo", "family_name": "Hebogo", "category": "ransomware", "rule_id": "d77f654d-233f-5823-b24c-84120e80504e", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/hebogo.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/hebogo.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/hebogo", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 31 }, { "family": "pcclient", "family_name": "Pcclient", "category": "rat", "rule_id": "5fe98468-6e10-57c2-9c9a-596e709d9ad6", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/pcclient.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/pcclient.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/pcclient", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 31 }, { "family": "rasftuby", "family_name": "Rasftuby", "category": "ransomware", "rule_id": "fea64295-39a0-53c4-a9c0-52838678dde4", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/rasftuby.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/rasftuby.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/rasftuby", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 31 }, { "family": "slugin", "family_name": "Slugin", "category": "trojan_downloader", "rule_id": "898d3746-a52a-53c0-8031-86d689683666", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/slugin.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/slugin.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/slugin", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 31 }, { "family": "upantix", "family_name": "Upantix", "category": "trojan_downloader", "rule_id": "499e7a65-5c34-55a4-ade7-444146ba3a78", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/upantix.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/upantix.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/upantix", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 31 }, { "family": "zurgop", "family_name": "Zurgop", "category": "trojan", "rule_id": "3bec8281-6eef-54a8-ad35-1b6a40702753", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/zurgop.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/zurgop.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/zurgop", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 31 }, { "family": "malex", "family_name": "Malex", "category": "trojan", "rule_id": "7144427f-4d1e-5253-a173-91b43dc26f20", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/malex.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/malex.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/malex", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 30 }, { "family": "primarypass", "family_name": "Primarypass", "category": "adware", "rule_id": "a5791d7b-4b80-546c-b624-2a5f9b5b17f3", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/primarypass.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/primarypass.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/primarypass", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 30 }, { "family": "recam", "family_name": "Recam", "category": "rat", "rule_id": "8b0b7720-d2b4-5a0e-a9b9-797095bc610c", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/recam.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/recam.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/recam", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 30 }, { "family": "volt", "family_name": "Volt", "category": "trojan", "rule_id": "26cdbc35-fc0d-5208-bd16-ad6c48ca4591", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/volt.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/volt.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/volt", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 30 }, { "family": "yelloader", "family_name": "Yelloader", "category": "trojan_downloader", "rule_id": "da7fe249-ebc0-5d9b-8a68-e09fdb12da28", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/yelloader.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yelloader.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/yelloader", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 30 }, { "family": "blaster", "family_name": "Blaster", "category": "worm", "rule_id": "1ce5084e-801d-5307-a86f-5e138dbccfb7", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/blaster.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/blaster.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/blaster", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 30 }, { "family": "qqlogger", "family_name": "Qqlogger", "category": "spyware", "rule_id": "3d8b47ff-4622-51ed-b596-b8b13883a0a5", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/qqlogger.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/qqlogger.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/qqlogger", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 29 }, { "family": "fuery", "family_name": "Fuery", "category": "trojan", "rule_id": "a7987f44-555d-5351-be73-0ccf80885bab", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/fuery.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/fuery.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/fuery", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 28 }, { "family": "msilkrypt", "family_name": "Msilkrypt", "category": "crypter", "rule_id": "60781a80-97fb-5b27-9430-1e049e196320", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/msilkrypt.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/msilkrypt.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/msilkrypt", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 28 }, { "family": "systemhealer", "family_name": "Systemhealer", "category": "rogue", "rule_id": "52d7e0b3-bfe9-5dac-9613-a33826e52690", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/systemhealer.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/systemhealer.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/systemhealer", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 28 }, { "family": "tufik", "family_name": "Tufik", "category": "ransomware", "rule_id": "d9168d95-a78c-5199-b3e3-b500a6cfa5a7", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/tufik.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/tufik.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/tufik", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 28 }, { "family": "usteal", "family_name": "Usteal", "category": "infostealer", "rule_id": "6cca5823-5371-52a2-8b81-660127d14cf8", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/usteal.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/usteal.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/usteal", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/infostealer-protection", "sample_count": 28 }, { "family": "zeroaccess", "family_name": "Zeroaccess", "category": "rootkit", "rule_id": "54cdccfb-f026-59f0-89de-135b13b0f318", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/zeroaccess.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/zeroaccess.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/zeroaccess", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 28 }, { "family": "invader", "family_name": "Invader", "category": "file_infector", "rule_id": "8c54dacf-6113-5975-afe6-4080f80b02c9", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/invader.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/invader.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/invader", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 27 }, { "family": "lockscreen", "family_name": "Lockscreen", "category": "ransomware", "rule_id": "29c6d3c8-d5dd-587b-9c45-34d39fb3d151", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/lockscreen.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/lockscreen.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/lockscreen", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 27 }, { "family": "lyposit", "family_name": "Lyposit", "category": "ransomware", "rule_id": "4b6c830d-e5aa-5a5b-b73b-bf82a76bc8a8", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/lyposit.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/lyposit.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/lyposit", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 27 }, { "family": "xetapp", "family_name": "Xetapp", "category": "adware", "rule_id": "4f1db92e-ae1a-5093-b963-2cbc51cbb1c8", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/xetapp.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/xetapp.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/xetapp", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 27 }, { "family": "zenpak", "family_name": "Zenpak", "category": "ransomware", "rule_id": "1570cd1a-b2df-5027-8e0b-6a9293457090", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/zenpak.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/zenpak.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/zenpak", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 27 }, { "family": "1clickdownload", "family_name": "1clickdownload", "category": "adware", "rule_id": "f2b721eb-944f-514d-831c-478cf62e2b49", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/1clickdownload.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/1clickdownload.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/1clickdownload", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 26 }, { "family": "airinstaller", "family_name": "Airinstaller", "category": "adware", "rule_id": "f137e151-3fb5-54fc-855c-f4dbd7732de6", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/airinstaller.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/airinstaller.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/airinstaller", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 26 }, { "family": "blouiroet", "family_name": "Blouiroet", "category": "ransomware", "rule_id": "b89d94e4-2ca8-5efe-8de9-d50d8c68e853", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/blouiroet.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/blouiroet.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/blouiroet", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 26 }, { "family": "delfinject", "family_name": "Delfinject", "category": "trojan", "rule_id": "5360e043-b61f-57db-a506-d063b833c435", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/delfinject.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/delfinject.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/delfinject", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 26 }, { "family": "downloadassistant", "family_name": "Downloadassistant", "category": "adware", "rule_id": "021234ed-ed75-5dc5-b9d1-09e7f0d2b5ba", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/downloadassistant.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/downloadassistant.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/downloadassistant", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 26 }, { "family": "dropware", "family_name": "Dropware", "category": "trojan_dropper", "rule_id": "c1764445-c000-5163-8916-f8d7f43d0518", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/dropware.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/dropware.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/dropware", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 26 }, { "family": "genericrxdw", "family_name": "Genericrxdw", "category": "ransomware", "rule_id": "8f8c0045-e2d8-5e23-ba6b-0e5c2cd45c1a", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/genericrxdw.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/genericrxdw.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/genericrxdw", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 26 }, { "family": "refinka", "family_name": "Refinka", "category": "ransomware", "rule_id": "3cf904fb-c674-5161-90c8-676fa9c397bd", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/refinka.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/refinka.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/refinka", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 26 }, { "family": "rescoms", "family_name": "Rescoms", "category": "rat", "rule_id": "2467af69-65ff-50bc-9e36-3281e500afdb", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/rescoms.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/rescoms.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/rescoms", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 26 }, { "family": "satan", "family_name": "Satan", "category": "ransomware", "rule_id": "fc59f81a-4c61-52f7-bf07-9eccb8cff1df", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/satan.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/satan.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/satan", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 26 }, { "family": "vemply", "family_name": "Vemply", "category": "ransomware", "rule_id": "ea5ad4a5-d53d-5d45-acce-5b1e2735ab96", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/vemply.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/vemply.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/vemply", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 26 }, { "family": "websearch", "family_name": "Websearch", "category": "adware", "rule_id": "145c6cca-2587-5d19-a3eb-63e032235d2c", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/websearch.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/websearch.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/websearch", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 26 }, { "family": "babylon", "family_name": "Babylon", "category": "adware", "rule_id": "26329b2a-de39-5f6d-9af0-273ed568cc00", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/babylon.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/babylon.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/babylon", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 25 }, { "family": "downeks", "family_name": "Downeks", "category": "trojan_downloader", "rule_id": "13be3542-7390-54a9-83aa-f34edc18dc66", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/downeks.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/downeks.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/downeks", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 25 }, { "family": "equationdrug", "family_name": "Equationdrug", "category": "advanced_threat", "rule_id": "abe413e5-7f64-598b-bf64-b9c97ec95466", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/equationdrug.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/equationdrug.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/equationdrug", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 25 }, { "family": "fontra", "family_name": "Fontra", "category": "adware", "rule_id": "b2469ab5-1da7-5278-b1bc-c955bf290115", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/fontra.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/fontra.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/fontra", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 25 }, { "family": "fraudload", "family_name": "Fraudload", "category": "trojan_downloader", "rule_id": "25f3793b-08d9-536c-a71d-b4092a8e8327", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/fraudload.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/fraudload.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/fraudload", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 25 }, { "family": "gimemo", "family_name": "Gimemo", "category": "ransomware", "rule_id": "8006b085-bfd9-51fc-9e54-475a0f969342", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/gimemo.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/gimemo.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/gimemo", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 25 }, { "family": "godzilla", "family_name": "Godzilla", "category": "webshell", "rule_id": "5300c4a8-0470-5f87-80d5-1511f26101e1", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/godzilla.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/godzilla.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/godzilla", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 25 }, { "family": "neksminer", "family_name": "Neksminer", "category": "cryptominer", "rule_id": "d9d4e138-2eac-57cb-b9cb-f614df7ec13d", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/neksminer.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/neksminer.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/neksminer", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 25 }, { "family": "phny", "family_name": "Phny", "category": "ransomware", "rule_id": "566cec54-eb02-5a3d-aba0-e1bb82fe8da8", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/phny.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/phny.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/phny", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 25 }, { "family": "trymedia", "family_name": "Trymedia", "category": "adware", "rule_id": "5138ec8b-9d9d-5632-8dde-7f3deefeb1d5", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/trymedia.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/trymedia.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/trymedia", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 25 }, { "family": "xorer", "family_name": "Xorer", "category": "worm", "rule_id": "94a26ee9-46bb-5221-b18b-4dec5ac53f90", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/xorer.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/xorer.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/xorer", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 25 }, { "family": "sasser", "family_name": "Sasser", "category": "worm", "rule_id": "dac26e01-a85f-550d-8e51-9e67f9b20fbe", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/sasser.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/sasser.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/sasser", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 25 }, { "family": "crysis", "family_name": "Crysis", "category": "ransomware", "rule_id": "61e08b30-662e-5c44-ac78-bf08080142a5", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/crysis.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/crysis.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/crysis", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 24 }, { "family": "ibryte", "family_name": "Ibryte", "category": "adware", "rule_id": "5f050c7d-d6f0-51a9-b5fb-756b6d1957c7", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/ibryte.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/ibryte.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/ibryte", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 24 }, { "family": "perinet", "family_name": "Perinet", "category": "worm", "rule_id": "506ecf6f-c9eb-57f8-ae13-51971abc5ce9", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/perinet.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/perinet.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/perinet", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 24 }, { "family": "renos", "family_name": "Renos", "category": "trojan_downloader", "rule_id": "c91e9c8d-697c-569c-a063-a09571a8fd07", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/renos.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/renos.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/renos", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 24 }, { "family": "staser", "family_name": "Staser", "category": "trojan", "rule_id": "0337e27a-f664-56b7-8d81-f973c24e9442", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/staser.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/staser.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/staser", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 24 }, { "family": "cool_remote_control", "family_name": "Cool_remote_control", "category": "trojan", "rule_id": "763775c8-4167-5636-b0ad-b5babd90dbdc", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/cool_remote_control.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/cool_remote_control.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/cool_remote_control", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 23 }, { "family": "crypmod", "family_name": "Crypmod", "category": "ransomware", "rule_id": "87aab326-032e-5ae0-adb6-0b90b91284c7", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/crypmod.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/crypmod.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/crypmod", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 23 }, { "family": "nettool", "family_name": "Nettool", "category": "hacktool", "rule_id": "8b929b64-9a3d-5613-9b8d-b4a5dbc2d760", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/nettool.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/nettool.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/nettool", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 23 }, { "family": "pedex", "family_name": "Pedex", "category": "crypter", "rule_id": "baa79649-dc3a-5652-94ff-5e8c42df9301", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/pedex.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/pedex.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/pedex", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 23 }, { "family": "pidgeon", "family_name": "Pidgeon", "category": "trojan_downloader", "rule_id": "24cf804d-69b8-5fd2-a7b1-0d663213a894", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/pidgeon.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/pidgeon.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/pidgeon", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 23 }, { "family": "pliskal", "family_name": "Pliskal", "category": "trojan", "rule_id": "149af7fe-4c68-5861-ae4e-3bd1b5e9f400", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/pliskal.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/pliskal.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/pliskal", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 23 }, { "family": "reimage", "family_name": "Reimage", "category": "rogue", "rule_id": "11370b12-f763-5957-9bfd-05760b6bd8b0", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/reimage.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/reimage.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/reimage", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 23 }, { "family": "systweak", "family_name": "Systweak", "category": "pua", "rule_id": "b0eb0dbd-4652-5179-966a-125f0a0f9c9d", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/systweak.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/systweak.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/systweak", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 23 }, { "family": "ytddownloader", "family_name": "Ytddownloader", "category": "pua", "rule_id": "af35c166-1960-52d8-9c71-08ad00ee1a97", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/ytddownloader.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/ytddownloader.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/ytddownloader", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 23 }, { "family": "aenjaris", "family_name": "Aenjaris", "category": "trojan", "rule_id": "aea10737-a0e6-5d94-9953-b7cae0f98fb5", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/aenjaris.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/aenjaris.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/aenjaris", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 22 }, { "family": "backboot", "family_name": "Backboot", "category": "trojan", "rule_id": "985279a0-12f3-541a-96de-fee328e98aba", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/backboot.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/backboot.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/backboot", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 22 }, { "family": "blamon", "family_name": "Blamon", "category": "ransomware", "rule_id": "72796745-0bea-5fee-a773-2dcbedda4f22", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/blamon.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/blamon.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/blamon", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 22 }, { "family": "downloadshield", "family_name": "Downloadshield", "category": "pua", "rule_id": "6ea9f28a-f9a9-5e7d-933d-a1efcfcea140", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/downloadshield.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/downloadshield.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/downloadshield", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 22 }, { "family": "elzob", "family_name": "Elzob", "category": "ransomware", "rule_id": "54ed319f-12b8-5b01-90f4-e9d0d2cff6b1", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/elzob.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/elzob.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/elzob", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 22 }, { "family": "guagua", "family_name": "Guagua", "category": "trojan", "rule_id": "ce9fa3ca-08f1-5aeb-870d-df7b04e812d0", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/guagua.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/guagua.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/guagua", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 22 }, { "family": "inbox", "family_name": "Inbox", "category": "adware", "rule_id": "bef49228-a600-51d5-9f31-c75c98ac61f0", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/inbox.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/inbox.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/inbox", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 22 }, { "family": "krucky", "family_name": "Krucky", "category": "ransomware", "rule_id": "f5af6a68-efe6-5743-aac6-b2b25cb90bb4", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/krucky.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/krucky.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/krucky", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 22 }, { "family": "kuluoz", "family_name": "Kuluoz", "category": "trojan", "rule_id": "a87913eb-a333-5d17-8275-18665aff4fa5", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/kuluoz.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/kuluoz.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/kuluoz", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 22 }, { "family": "matrix", "family_name": "Matrix", "category": "ransomware", "rule_id": "6016b550-1206-5f59-b8ec-a07cdd189c51", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/matrix.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/matrix.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/matrix", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 22 }, { "family": "miniduke", "family_name": "Miniduke", "category": "trojan", "rule_id": "3ccc695f-8fed-5be3-b4ce-7ac538fff36c", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/miniduke.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/miniduke.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/miniduke", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 22 }, { "family": "pbot", "family_name": "Pbot", "category": "trojan", "rule_id": "dccb241d-80b5-5cb0-a3eb-a01817345681", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/pbot.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/pbot.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/pbot", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 22 }, { "family": "tspy", "family_name": "Tspy", "category": "trojan", "rule_id": "0961e037-d4bf-5a85-be95-4bfadbda3455", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/tspy.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/tspy.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/tspy", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 22 }, { "family": "asktoolbar", "family_name": "Asktoolbar", "category": "adware", "rule_id": "a73bb417-6f03-5356-b6d8-437c531069e6", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/asktoolbar.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/asktoolbar.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/asktoolbar", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 21 }, { "family": "autoruns", "family_name": "Autoruns", "category": "hacktool", "rule_id": "19caca4f-64cd-5d1c-b117-4a373f75c28a", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/autoruns.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/autoruns.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/autoruns", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 21 }, { "family": "garrun", "family_name": "Garrun", "category": "trojan", "rule_id": "b5d38c69-1ae1-5845-9cc2-0624318ac4ac", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/garrun.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/garrun.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/garrun", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 21 }, { "family": "golroted", "family_name": "Golroted", "category": "ransomware", "rule_id": "aea8dbee-ad23-550f-ad4c-c218abd9c41e", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/golroted.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/golroted.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/golroted", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 21 }, { "family": "krbanker", "family_name": "Krbanker", "category": "trojan", "rule_id": "03bc807a-a4e4-5b4f-9abd-538ce2993a54", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/krbanker.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/krbanker.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/krbanker", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 21 }, { "family": "neobar", "family_name": "Neobar", "category": "adware", "rule_id": "dd82ea52-c09e-59ce-a99f-b7caf165e384", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/neobar.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/neobar.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/neobar", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 21 }, { "family": "pajetbin", "family_name": "Pajetbin", "category": "ransomware", "rule_id": "20992ab8-e1e1-5578-a0cb-e6460a9f9d22", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/pajetbin.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/pajetbin.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/pajetbin", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 21 }, { "family": "runbooster", "family_name": "Runbooster", "category": "pua", "rule_id": "66e80b32-e4a0-51eb-b8c8-9aee013b196c", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/runbooster.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/runbooster.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/runbooster", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 21 }, { "family": "schoolboy", "family_name": "Schoolboy", "category": "ransomware", "rule_id": "9f3f0316-64a6-5e78-9410-309358134148", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/schoolboy.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/schoolboy.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/schoolboy", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 21 }, { "family": "shylock", "family_name": "Shylock", "category": "banking_trojan", "rule_id": "06403711-d657-58d0-8b7b-b3ee57f678d2", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/shylock.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/shylock.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/shylock", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/banking-trojan-protection", "sample_count": 21 }, { "family": "sixxpack", "family_name": "Sixxpack", "category": "trojan", "rule_id": "1333429a-dfc4-515d-8d35-e09ed0ee6560", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/sixxpack.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/sixxpack.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/sixxpack", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 21 }, { "family": "smokeloader", "family_name": "Smokeloader", "category": "loader", "rule_id": "0111d55c-3372-5482-8f60-7dd5fd3069f4", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/smokeloader.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/smokeloader.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/smokeloader", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 21 }, { "family": "tonmye", "family_name": "Tonmye", "category": "ransomware", "rule_id": "125cff25-b8a7-5f23-ba1a-073fd9b49d8f", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/tonmye.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/tonmye.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/tonmye", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 21 }, { "family": "blihan", "family_name": "Blihan", "category": "ransomware", "rule_id": "aea4e89b-912c-5ac5-9856-c93614c34441", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/blihan.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/blihan.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/blihan", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 20 }, { "family": "dexel", "family_name": "Dexel", "category": "trojan", "rule_id": "a026ded5-dc41-505c-9a68-16fc27d5e77d", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/dexel.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/dexel.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/dexel", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 20 }, { "family": "faketool", "family_name": "Faketool", "category": "trojan", "rule_id": "9fa79d13-7bd7-5b5c-8f1e-7ded29b39c25", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/faketool.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/faketool.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/faketool", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 20 }, { "family": "gt32supportgeeks", "family_name": "Gt32supportgeeks", "category": "pua", "rule_id": "29af7d79-3b0d-5ba2-a919-babce349e614", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/gt32supportgeeks.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/gt32supportgeeks.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/gt32supportgeeks", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 20 }, { "family": "pasta", "family_name": "Pasta", "category": "ransomware", "rule_id": "a27f0c3c-7fe9-5388-aa02-dc8144c0752d", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/pasta.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/pasta.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/pasta", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 20 }, { "family": "qzonit", "family_name": "Qzonit", "category": "ransomware", "rule_id": "cdbbee9f-1063-54aa-8274-68f12d7ebd48", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/qzonit.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/qzonit.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/qzonit", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 20 }, { "family": "toggle", "family_name": "Toggle", "category": "adware", "rule_id": "abb87919-9ab2-57cd-ae5c-7f2257a2a4e5", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/toggle.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/toggle.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/toggle", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 20 }, { "family": "wdjiange", "family_name": "Wdjiange", "category": "ransomware", "rule_id": "bf792542-2abf-5aa6-8b80-2389fef164c0", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/wdjiange.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/wdjiange.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/wdjiange", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 20 }, { "family": "winlock", "family_name": "Winlock", "category": "ransomware", "rule_id": "eb0f0076-0c17-5a63-96dc-daaf2e2454ee", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/winlock.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/winlock.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/winlock", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 20 }, { "family": "alien", "family_name": "Alien", "category": "banking_trojan", "rule_id": "718bc494-4904-5a0c-9070-0f8a7285a95f", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/alien.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/alien.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/alien", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/banking-trojan-protection", "sample_count": 19 }, { "family": "crusis", "family_name": "Crusis", "category": "ransomware", "rule_id": "16513a9c-054d-56ba-b598-1c2c9a4d49ed", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/crusis.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/crusis.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/crusis", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 19 }, { "family": "deceptpcclean", "family_name": "Deceptpcclean", "category": "pua", "rule_id": "3a979163-49d4-599c-8ce9-d72d6afb18c4", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/deceptpcclean.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/deceptpcclean.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/deceptpcclean", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 19 }, { "family": "dorifel", "family_name": "Dorifel", "category": "trojan", "rule_id": "2ad68977-fc90-5e83-9e7f-c9e972e36b23", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/dorifel.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/dorifel.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/dorifel", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 19 }, { "family": "lynx", "family_name": "Lynx", "category": "infostealer", "rule_id": "725971ce-ab31-59df-bef6-00badfbf3441", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/lynx.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/lynx.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/lynx", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/infostealer-protection", "sample_count": 19 }, { "family": "pterodo", "family_name": "Pterodo", "category": "backdoor", "rule_id": "1a7ed195-ba15-582a-bb65-055cd53430ba", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/pterodo.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/pterodo.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/pterodo", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 19 }, { "family": "resod", "family_name": "Resod", "category": "ransomware", "rule_id": "35715185-7bc5-531c-9de7-05728969b479", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/resod.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/resod.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/resod", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 19 }, { "family": "tinynuke", "family_name": "Tinynuke", "category": "banking_trojan", "rule_id": "70b9a05a-3ccf-5d85-b761-852775170d6d", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/tinynuke.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/tinynuke.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/tinynuke", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/banking-trojan-protection", "sample_count": 19 }, { "family": "truew", "family_name": "Truew", "category": "ransomware", "rule_id": "e6745572-862f-58b2-91a5-46c882d45d8a", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/truew.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/truew.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/truew", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 19 }, { "family": "veil", "family_name": "Veil", "category": "virtool", "rule_id": "28485214-977f-57e7-8686-e5be2bb9771f", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/veil.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/veil.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/veil", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 19 }, { "family": "zonidel", "family_name": "Zonidel", "category": "ransomware", "rule_id": "d5c9c7d2-bbd7-5f02-811e-13c2423d3557", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/zonidel.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/zonidel.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/zonidel", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 19 }, { "family": "zylom", "family_name": "Zylom", "category": "adware", "rule_id": "ff32b263-fb95-5d3c-9e11-c43378fab900", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/zylom.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/zylom.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/zylom", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 19 }, { "family": "ardurk", "family_name": "Ardurk", "category": "ransomware", "rule_id": "13d295dc-09c0-5287-87a7-c8db0b5b8977", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/ardurk.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/ardurk.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/ardurk", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 18 }, { "family": "aspm", "family_name": "Aspm", "category": "ransomware", "rule_id": "4b742add-4b46-5f1a-81c7-c959c13fb812", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/aspm.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/aspm.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/aspm", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 18 }, { "family": "capsfin", "family_name": "Capsfin", "category": "ransomware", "rule_id": "23b79d90-5c70-5251-a764-828602ffca08", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/capsfin.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/capsfin.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/capsfin", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 18 }, { "family": "demp", "family_name": "Demp", "category": "ransomware", "rule_id": "8593f7e2-40fe-5c65-a934-021fcdab2163", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/demp.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/demp.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/demp", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 18 }, { "family": "fraudrop", "family_name": "Fraudrop", "category": "downloader", "rule_id": "8ee5537f-3c8e-510c-b314-535ddddc3205", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/fraudrop.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/fraudrop.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/fraudrop", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 18 }, { "family": "imali", "family_name": "Imali", "category": "ransomware", "rule_id": "2244fd36-ee8d-5aa4-a896-ecc58e1df954", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/imali.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/imali.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/imali", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 18 }, { "family": "installtoolbar", "family_name": "Installtoolbar", "category": "adware", "rule_id": "9cfd8adc-4c7a-5ccb-b7f4-5e64964ad8e0", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/installtoolbar.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/installtoolbar.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/installtoolbar", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 18 }, { "family": "iobit", "family_name": "Iobit", "category": "pua", "rule_id": "a269671d-2384-5dcf-91e8-70dbd9ee3179", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/iobit.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/iobit.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/iobit", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 18 }, { "family": "kolovorot", "family_name": "Kolovorot", "category": "ransomware", "rule_id": "b31e841d-4251-51b4-a719-aaf150804acd", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/kolovorot.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/kolovorot.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/kolovorot", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 18 }, { "family": "netstream", "family_name": "Netstream", "category": "backdoor", "rule_id": "daf25319-d1f2-5406-b12c-161c4fcd21ca", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/netstream.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/netstream.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/netstream", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 18 }, { "family": "pswtool", "family_name": "Pswtool", "category": "hacktool", "rule_id": "a706423c-2f95-5043-840d-cef0f2265d4c", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/pswtool.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/pswtool.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/pswtool", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 18 }, { "family": "rapid", "family_name": "Rapid", "category": "ransomware", "rule_id": "15e967d9-652e-5164-933a-2703de529ee9", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/rapid.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/rapid.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/rapid", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 18 }, { "family": "runner", "family_name": "Runner", "category": "trojan", "rule_id": "18afcf01-b076-5588-a5d6-461be17f3670", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/runner.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/runner.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/runner", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 18 }, { "family": "azden", "family_name": "Azden", "category": "ransomware", "rule_id": "de0edd58-b18b-54ba-8f3f-73b6e6d8844c", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/azden.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/azden.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/azden", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 17 }, { "family": "bodegun", "family_name": "Bodegun", "category": "ransomware", "rule_id": "3dd8d7f9-a512-5bfa-ad2e-50d198c49030", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/bodegun.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/bodegun.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/bodegun", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 17 }, { "family": "diskwriter", "family_name": "Diskwriter", "category": "trojan", "rule_id": "51e476c5-946e-572b-a5a6-2f30c19e0313", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/diskwriter.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/diskwriter.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/diskwriter", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 17 }, { "family": "dreambot", "family_name": "Dreambot", "category": "banking_trojan", "rule_id": "0406ce93-c065-5bb7-b29e-5bf8df9f4169", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/dreambot.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/dreambot.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/dreambot", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/banking-trojan-protection", "sample_count": 17 }, { "family": "fraudpack", "family_name": "Fraudpack", "category": "exploit_kit", "rule_id": "947c0bb0-7efa-56f2-a051-ab0401fd1185", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/fraudpack.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/fraudpack.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/fraudpack", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 17 }, { "family": "fugrafa", "family_name": "Fugrafa", "category": "ransomware", "rule_id": "5e775bb4-7a7f-5b77-b592-17cc9703ad47", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/fugrafa.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/fugrafa.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/fugrafa", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 17 }, { "family": "gametool", "family_name": "Gametool", "category": "trojan", "rule_id": "0e8bd573-2aa8-53db-b4d3-2d1b8ab36e35", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/gametool.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/gametool.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/gametool", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 17 }, { "family": "genasom", "family_name": "Genasom", "category": "ransomware", "rule_id": "3351b967-be44-5dac-83ba-f96077db4099", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/genasom.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/genasom.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/genasom", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 17 }, { "family": "hookey", "family_name": "Hookey", "category": "spyware", "rule_id": "0e0848b9-5821-5ab2-b530-156aba04732f", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/hookey.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/hookey.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/hookey", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 17 }, { "family": "immirat", "family_name": "Immirat", "category": "rat", "rule_id": "806a735a-2f82-5250-adb0-3d09f59ae390", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/immirat.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/immirat.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/immirat", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 17 }, { "family": "jackservn", "family_name": "Jackservn", "category": "trojan_downloader", "rule_id": "5f50fa2a-2bec-56ff-8a83-7e5d2a89e2e8", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/jackservn.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/jackservn.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/jackservn", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 17 }, { "family": "multidropper", "family_name": "Multidropper", "category": "trojan_dropper", "rule_id": "39f076b1-abaf-5a9b-accb-614d8ff21553", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/multidropper.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/multidropper.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/multidropper", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 17 }, { "family": "ntrootkit", "family_name": "Ntrootkit", "category": "rootkit", "rule_id": "7256aedf-4ccb-5c7c-b792-65ca0d9db46a", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/ntrootkit.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/ntrootkit.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/ntrootkit", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 17 }, { "family": "pccleaner", "family_name": "Pccleaner", "category": "pua", "rule_id": "d0a089b7-5dd7-5395-8548-952f8c054195", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/pccleaner.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/pccleaner.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/pccleaner", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 17 }, { "family": "perion", "family_name": "Perion", "category": "adware", "rule_id": "db8ecf8d-b4ea-5de2-abf8-5a113a773723", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/perion.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/perion.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/perion", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 17 }, { "family": "searchpage", "family_name": "Searchpage", "category": "browser_modifier", "rule_id": "2982a47d-9085-500c-99a6-a8166475acd8", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/searchpage.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/searchpage.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/searchpage", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 17 }, { "family": "winwebsec", "family_name": "Winwebsec", "category": "rogueware", "rule_id": "65c9508f-602f-5ca1-a962-232867282744", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/winwebsec.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/winwebsec.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/winwebsec", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 17 }, { "family": "birele", "family_name": "Birele", "category": "ransomware", "rule_id": "b20f2577-3b37-54ee-be4e-460a27147a72", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/birele.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/birele.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/birele", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 16 }, { "family": "bundlore", "family_name": "Bundlore", "category": "adware", "rule_id": "d73ff348-9cfb-5df4-ae7b-d6dcd142d55e", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/bundlore.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/bundlore.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/bundlore", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 16 }, { "family": "cmy3u", "family_name": "Cmy3u", "category": "ransomware", "rule_id": "c3e6bcde-3ee7-51e8-a2a9-197d808f2f52", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/cmy3u.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/cmy3u.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/cmy3u", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 16 }, { "family": "coolvibes", "family_name": "Coolvibes", "category": "trojan", "rule_id": "64301d36-6b5a-5029-99b5-86a4e024dfb3", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/coolvibes.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/coolvibes.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/coolvibes", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 16 }, { "family": "cwqw", "family_name": "Cwqw", "category": "ransomware", "rule_id": "5bc16561-e0a8-56c2-a18c-5bbdfda7de50", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/cwqw.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/cwqw.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/cwqw", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 16 }, { "family": "dico", "family_name": "Dico", "category": "ransomware", "rule_id": "e9f2173b-451e-59e4-9c82-49709aebf488", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/dico.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/dico.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/dico", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 16 }, { "family": "freekeylogger", "family_name": "Freekeylogger", "category": "spyware", "rule_id": "14cc8673-c65c-5cff-9eb0-ac65c1472acc", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/freekeylogger.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/freekeylogger.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/freekeylogger", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 16 }, { "family": "jigsaw", "family_name": "Jigsaw", "category": "ransomware", "rule_id": "e74016e4-5040-5953-bbf4-24a27ac61b9e", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/jigsaw.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/jigsaw.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/jigsaw", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 16 }, { "family": "jottix", "family_name": "Jottix", "category": "ransomware", "rule_id": "4279f902-37c8-5bea-9be7-e4b8a9b2bd01", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/jottix.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/jottix.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/jottix", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 16 }, { "family": "krserv", "family_name": "Krserv", "category": "ransomware", "rule_id": "29738802-d35c-563b-92f0-44d44d95f79b", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/krserv.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/krserv.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/krserv", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 16 }, { "family": "redirect", "family_name": "Redirect", "category": "browser_modifier", "rule_id": "f12fa9e8-b406-5576-b607-9c6551a54fec", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/redirect.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/redirect.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/redirect", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 16 }, { "family": "sixer", "family_name": "Sixer", "category": "ransomware", "rule_id": "5784b6f4-0164-5e44-9aef-c7ec67c83590", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/sixer.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/sixer.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/sixer", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 16 }, { "family": "vools", "family_name": "Vools", "category": "ransomware", "rule_id": "66271343-dbcc-578a-bf77-81dd286a0c66", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/vools.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/vools.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/vools", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 16 }, { "family": "webwatcher", "family_name": "Webwatcher", "category": "spyware", "rule_id": "0effbc11-1d48-58e1-9c43-8adc04fef54b", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/webwatcher.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/webwatcher.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/webwatcher", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 16 }, { "family": "adject", "family_name": "Adject", "category": "ransomware", "rule_id": "6d31c5e3-4267-5fcd-be8a-a58925ea5520", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/adject.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/adject.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/adject", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 15 }, { "family": "betload", "family_name": "Betload", "category": "ransomware", "rule_id": "8dc329c5-c675-5773-8128-26ab90855d2d", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/betload.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/betload.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/betload", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 15 }, { "family": "blackv", "family_name": "Blackv", "category": "ransomware", "rule_id": "ed013f6b-ff10-55e6-8988-6d574a68d73e", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/blackv.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/blackv.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/blackv", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 15 }, { "family": "cryptinject", "family_name": "Cryptinject", "category": "ransomware", "rule_id": "4b6ef230-8bb7-578e-9a9c-411d73f382e3", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/cryptinject.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/cryptinject.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/cryptinject", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 15 }, { "family": "generickdz", "family_name": "Generickdz", "category": "ransomware", "rule_id": "2633d21a-f140-5559-ada1-14b0538f4c02", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/generickdz.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/generickdz.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/generickdz", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 15 }, { "family": "gotango", "family_name": "Gotango", "category": "browser_modifier", "rule_id": "b4b32eba-87e7-561d-bafa-3c54a2b2047b", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/gotango.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/gotango.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/gotango", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 15 }, { "family": "jaiks", "family_name": "Jaiks", "category": "ransomware", "rule_id": "ebc60121-2aba-59d4-a53b-1aed79ee9113", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/jaiks.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/jaiks.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/jaiks", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 15 }, { "family": "lovgate", "family_name": "Lovgate", "category": "worm", "rule_id": "a6fa87bb-fb4a-5520-885a-751183971858", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/lovgate.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/lovgate.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/lovgate", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 15 }, { "family": "nssm", "family_name": "Nssm", "category": "hacktool", "rule_id": "56f0e0e3-620d-5b4e-868c-7be8f119841c", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/nssm.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/nssm.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/nssm", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 15 }, { "family": "papras", "family_name": "Papras", "category": "infostealer", "rule_id": "ce2c186b-c214-5154-854f-c8693377202c", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/papras.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/papras.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/papras", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/infostealer-protection", "sample_count": 15 }, { "family": "powzip", "family_name": "Powzip", "category": "ransomware", "rule_id": "e2bd37d9-06fc-55e4-b03d-fa1849e64b30", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/powzip.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/powzip.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/powzip", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 15 }, { "family": "scriptkd", "family_name": "Scriptkd", "category": "ransomware", "rule_id": "bc91e5f1-a825-53c7-83f2-ccfd2d9e2003", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/scriptkd.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/scriptkd.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/scriptkd", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 15 }, { "family": "umbald", "family_name": "Umbald", "category": "ransomware", "rule_id": "5c6e3cba-d08d-57d2-a5d8-ac8a06884720", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/umbald.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/umbald.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/umbald", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 15 }, { "family": "vehidis", "family_name": "Vehidis", "category": "ransomware", "rule_id": "c1303f10-14ea-5241-a5f5-1dcd886e8e0f", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/vehidis.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/vehidis.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/vehidis", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 15 }, { "family": "vkontaktedj", "family_name": "Vkontaktedj", "category": "adware", "rule_id": "0bb8e422-8145-5a25-a101-b30a4408d512", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/vkontaktedj.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/vkontaktedj.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/vkontaktedj", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 15 }, { "family": "wsgame", "family_name": "Wsgame", "category": "infostealer", "rule_id": "de6c2ef5-1728-5dbf-996d-fb616e037f1b", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/wsgame.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/wsgame.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/wsgame", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/infostealer-protection", "sample_count": 15 }, { "family": "xorist", "family_name": "Xorist", "category": "ransomware", "rule_id": "f8d3fe00-6986-5940-95fe-a4807bbb2229", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/xorist.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/xorist.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/xorist", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 15 }, { "family": "yantai", "family_name": "Yantai", "category": "trojan_downloader", "rule_id": "bc7dc59e-48bc-5a38-93e2-b0a162f8f607", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/yantai.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yantai.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/yantai", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 15 }, { "family": "zlob", "family_name": "Zlob", "category": "trojan", "rule_id": "493e7e4a-6d3e-5e76-bf7e-0a2994b3dd41", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/zlob.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/zlob.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/zlob", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 15 }, { "family": "zvuzona", "family_name": "Zvuzona", "category": "ransomware", "rule_id": "8db8a3c8-badd-51da-af77-a98634e2674b", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/zvuzona.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/zvuzona.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/zvuzona", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 15 }, { "family": "stuxnet", "family_name": "Stuxnet", "category": "advanced_threat", "rule_id": "65bf01d9-c4a6-5eb3-88f8-9102bc28a675", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/stuxnet.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/stuxnet.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/stuxnet", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 15 }, { "family": "attack", "family_name": "Attack", "category": "hacktool", "rule_id": "da38fd20-afe0-5bd2-bbf3-9f2bbffa71ff", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/attack.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/attack.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/attack", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 14 }, { "family": "babar", "family_name": "Babar", "category": "advanced_threat", "rule_id": "2faa6fad-2bde-5d9d-b9bf-94736531e1f9", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/babar.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/babar.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/babar", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 14 }, { "family": "blackhole", "family_name": "Blackhole", "category": "exploit_kit", "rule_id": "73875167-3abd-5901-b658-469735ef7f37", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/blackhole.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/blackhole.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/blackhole", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 14 }, { "family": "chopper", "family_name": "Chopper", "category": "backdoor", "rule_id": "71ce2624-55fc-5c9c-a85e-5a8bab540459", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/chopper.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/chopper.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/chopper", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 14 }, { "family": "chthonic", "family_name": "Chthonic", "category": "banking_trojan", "rule_id": "137ac124-c599-57e8-aefa-d8708f8aeaf8", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/chthonic.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/chthonic.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/chthonic", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/banking-trojan-protection", "sample_count": 14 }, { "family": "cloudguard", "family_name": "Cloudguard", "category": "pua", "rule_id": "fb198977-84e7-52f8-8aaf-1a228750824e", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/cloudguard.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/cloudguard.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/cloudguard", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 14 }, { "family": "dnscleaner", "family_name": "Dnscleaner", "category": "pua", "rule_id": "73e1dc3e-0d93-5440-99b5-bd22ff01a13b", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/dnscleaner.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/dnscleaner.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/dnscleaner", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 14 }, { "family": "enigma", "family_name": "Enigma", "category": "ransomware", "rule_id": "0c3e8e0d-93b4-5792-bf02-3fde28889e88", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/enigma.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/enigma.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/enigma", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 14 }, { "family": "genericrxdz", "family_name": "Genericrxdz", "category": "ransomware", "rule_id": "325560af-37e4-5c98-874c-2f4e0599c76c", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/genericrxdz.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/genericrxdz.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/genericrxdz", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 14 }, { "family": "geral", "family_name": "Geral", "category": "ransomware", "rule_id": "08f86308-a421-585a-bd2c-6172fa99ba57", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/geral.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/geral.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/geral", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 14 }, { "family": "hydrapos", "family_name": "Hydrapos", "category": "pos_malware", "rule_id": "1d84d287-42ce-5ea8-bb2c-01cd450c7f0e", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/hydrapos.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/hydrapos.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/hydrapos", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 14 }, { "family": "installermonetizer", "family_name": "Installermonetizer", "category": "adware", "rule_id": "99be429c-cc8f-552a-909c-167a5d89244e", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/installermonetizer.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/installermonetizer.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/installermonetizer", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 14 }, { "family": "microfake", "family_name": "Microfake", "category": "scareware", "rule_id": "4a175112-5900-590d-84f7-98914429471f", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/microfake.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/microfake.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/microfake", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 14 }, { "family": "mofksys", "family_name": "Mofksys", "category": "worm", "rule_id": "a762997d-8182-5a8b-9c85-26b68f3e188b", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/mofksys.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/mofksys.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/mofksys", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 14 }, { "family": "onesystemcare", "family_name": "Onesystemcare", "category": "pua", "rule_id": "8cf966cd-7fbb-52da-8310-3d39f4e882eb", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/onesystemcare.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/onesystemcare.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/onesystemcare", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 14 }, { "family": "openinstall", "family_name": "Openinstall", "category": "adware", "rule_id": "f9075799-203f-5545-ac2c-6daf04e55d4d", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/openinstall.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/openinstall.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/openinstall", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 14 }, { "family": "optimizer", "family_name": "Optimizer", "category": "pua", "rule_id": "7fadee43-441e-5f17-9b53-9feba5324cba", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/optimizer.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/optimizer.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/optimizer", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 14 }, { "family": "prorat", "family_name": "Prorat", "category": "rat", "rule_id": "66591b2b-1931-5e0c-b97e-83ade4e8e399", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/prorat.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/prorat.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/prorat", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 14 }, { "family": "qqware", "family_name": "Qqware", "category": "browser_modifier", "rule_id": "3c7f5171-e3a6-514d-99d0-fc56e49af634", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/qqware.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/qqware.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/qqware", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 14 }, { "family": "screenconnect", "family_name": "Screenconnect", "category": "hacktool", "rule_id": "9d83e979-d7cd-5f4d-8aa4-1c4331575850", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/screenconnect.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/screenconnect.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/screenconnect", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 14 }, { "family": "troldesh", "family_name": "Troldesh", "category": "ransomware", "rule_id": "7334566f-9392-5a2a-b536-e248b80280af", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/troldesh.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/troldesh.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/troldesh", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 14 }, { "family": "vmpbad", "family_name": "Vmpbad", "category": "ransomware", "rule_id": "2611cb1d-2f9d-59dc-9679-91d22faea5be", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/vmpbad.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/vmpbad.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/vmpbad", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 14 }, { "family": "winloadsda", "family_name": "Winloadsda", "category": "trojan_downloader", "rule_id": "fa3e5c6f-3dda-5159-a818-d2d1e4ec9593", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/winloadsda.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/winloadsda.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/winloadsda", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 14 }, { "family": "woozlist", "family_name": "Woozlist", "category": "browser_modifier", "rule_id": "d5120d12-5eba-5104-999c-87c5a3106894", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/woozlist.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/woozlist.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/woozlist", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 14 }, { "family": "xpaj", "family_name": "Xpaj", "category": "file_infector", "rule_id": "7a1e232c-3fcb-54b6-ab09-7f5b8fe9be76", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/xpaj.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/xpaj.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/xpaj", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 14 }, { "family": "aauto", "family_name": "Aauto", "category": "trojan", "rule_id": "4edec271-953f-501f-98f6-32d431fc7077", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/aauto.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/aauto.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/aauto", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 13 }, { "family": "appscience", "family_name": "Appscience", "category": "adware", "rule_id": "4c410ead-f037-5fcc-b5bd-a535bfeaaeb1", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/appscience.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/appscience.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/appscience", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 13 }, { "family": "bruteforce", "family_name": "Bruteforce", "category": "hacktool", "rule_id": "fa4130ae-94d5-5deb-bce3-de199b0eb07e", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/bruteforce.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/bruteforce.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/bruteforce", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 13 }, { "family": "dimnie", "family_name": "Dimnie", "category": "infostealer", "rule_id": "fb1f7292-bb7e-5b07-bb4a-3ea09de7b5e1", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/dimnie.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/dimnie.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/dimnie", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/infostealer-protection", "sample_count": 13 }, { "family": "driverupdate", "family_name": "Driverupdate", "category": "pua", "rule_id": "8ca9fc81-691d-5cdc-8ca7-0004da620666", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/driverupdate.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/driverupdate.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/driverupdate", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 13 }, { "family": "gootkit", "family_name": "Gootkit", "category": "trojan", "rule_id": "1a274645-d17a-5fac-9d92-36df4bbe914e", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/gootkit.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/gootkit.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/gootkit", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 13 }, { "family": "gorgon", "family_name": "Gorgon", "category": "apt", "rule_id": "a71c2440-def2-51fb-bad0-a0ed5894c373", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/gorgon.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/gorgon.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/gorgon", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 13 }, { "family": "installbrain", "family_name": "Installbrain", "category": "adware", "rule_id": "7ce99c43-dfb7-557c-b06b-919f5128b6f7", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/installbrain.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/installbrain.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/installbrain", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 13 }, { "family": "kirts", "family_name": "Kirts", "category": "ransomware", "rule_id": "2e59ad58-0b78-5850-9a5d-d8ff7dd8b117", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/kirts.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/kirts.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/kirts", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 13 }, { "family": "kraddare", "family_name": "Kraddare", "category": "ransomware", "rule_id": "c4dfb8ee-0bd2-5ab7-b674-ae08f55b4fc7", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/kraddare.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/kraddare.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/kraddare", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 13 }, { "family": "macri", "family_name": "Macri", "category": "ransomware", "rule_id": "7a5201ba-54d3-5006-aedb-122e6a026b9a", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/macri.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/macri.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/macri", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 13 }, { "family": "opendownloadmanager", "family_name": "Opendownloadmanager", "category": "adware", "rule_id": "904b5a36-ab16-57c0-8d58-11f496200c4d", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/opendownloadmanager.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/opendownloadmanager.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/opendownloadmanager", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 13 }, { "family": "pirminay", "family_name": "Pirminay", "category": "infostealer", "rule_id": "eaeadcab-1b0f-59e5-801c-0e953155cc35", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/pirminay.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/pirminay.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/pirminay", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/infostealer-protection", "sample_count": 13 }, { "family": "reptile", "family_name": "Reptile", "category": "rootkit", "rule_id": "8809a2b8-7830-5a48-b819-fbe7621b5aaf", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/reptile.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/reptile.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/reptile", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 13 }, { "family": "reset", "family_name": "Reset", "category": "ransomware", "rule_id": "66ca0206-5b8e-57aa-ac0b-796c57bb7915", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/reset.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/reset.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/reset", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 13 }, { "family": "retefe", "family_name": "Retefe", "category": "trojan", "rule_id": "7f9887cd-e222-55e7-a4df-d986d1229112", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/retefe.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/retefe.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/retefe", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 13 }, { "family": "sinowal", "family_name": "Sinowal", "category": "banking_trojan", "rule_id": "95dd5b1c-9030-51eb-9d6c-5ad706dbc4f8", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/sinowal.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/sinowal.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/sinowal", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/banking-trojan-protection", "sample_count": 13 }, { "family": "talent", "family_name": "Talent", "category": "ransomware", "rule_id": "91dc878b-de94-570f-bc58-e6f4378bbf58", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/talent.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/talent.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/talent", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 13 }, { "family": "turkojan", "family_name": "Turkojan", "category": "rat", "rule_id": "8070ddca-000e-5682-901d-caf78ed9dd53", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/turkojan.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/turkojan.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/turkojan", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 13 }, { "family": "webcompanion", "family_name": "Webcompanion", "category": "advanced_threat", "rule_id": "a9fbdde0-72db-534c-b42d-713ffe9ed846", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/webcompanion.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/webcompanion.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/webcompanion", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 13 }, { "family": "widgi", "family_name": "Widgi", "category": "advanced_threat", "rule_id": "362ef3ca-ab78-5ab7-ba8d-5663790b9378", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/widgi.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/widgi.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/widgi", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 13 }, { "family": "zboter", "family_name": "Zboter", "category": "trojan", "rule_id": "15009fe3-bb51-5b54-b5a8-a6756f4fac1b", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/zboter.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/zboter.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/zboter", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 13 }, { "family": "zerber", "family_name": "Zerber", "category": "ransomware", "rule_id": "bde94d53-b2fc-520b-9be6-033f3eb960b4", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/zerber.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/zerber.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/zerber", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 13 }, { "family": "3proxy", "family_name": "3proxy", "category": "trojan", "rule_id": "769b5f32-a757-5b1a-a683-5e04b02b2f9d", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/3proxy.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/3proxy.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/3proxy", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 12 }, { "family": "addlyrics", "family_name": "Addlyrics", "category": "trojan", "rule_id": "a688c102-5199-511d-9545-6e3e2cace516", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/addlyrics.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/addlyrics.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/addlyrics", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 12 }, { "family": "banpak", "family_name": "Banpak", "category": "trojan", "rule_id": "deb112a1-70da-5148-b9c7-578676ade09b", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/banpak.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/banpak.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/banpak", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 12 }, { "family": "casinoonline", "family_name": "Casinoonline", "category": "trojan", "rule_id": "440af76f-14c1-570c-8690-e6f39aefc271", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/casinoonline.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/casinoonline.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/casinoonline", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 12 }, { "family": "centrumloader", "family_name": "Centrumloader", "category": "trojan_downloader", "rule_id": "aa473863-2d69-5e50-a8b4-687045a0a565", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/centrumloader.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/centrumloader.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/centrumloader", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 12 }, { "family": "cia", "family_name": "Cia", "category": "file_infector", "rule_id": "ca6a1ed9-c048-59c9-8159-f085461d3f6a", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/cia.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/cia.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/cia", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 12 }, { "family": "crypren", "family_name": "Crypren", "category": "ransomware", "rule_id": "2a509078-ae1c-5dab-b505-2e1b742cc773", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/crypren.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/crypren.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/crypren", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 12 }, { "family": "csrb", "family_name": "Csrb", "category": "ransomware", "rule_id": "014798d5-e232-5de8-b7dc-d25179f8822d", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/csrb.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/csrb.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/csrb", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 12 }, { "family": "exescript", "family_name": "Exescript", "category": "ransomware", "rule_id": "be6f6fd4-3b0f-5db2-898a-1e4e6c57490c", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/exescript.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/exescript.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/exescript", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 12 }, { "family": "eyooun", "family_name": "Eyooun", "category": "advanced_threat", "rule_id": "07974e3b-0d1b-5584-9cf5-3fe3b738d58e", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/eyooun.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/eyooun.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/eyooun", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 12 }, { "family": "fasong", "family_name": "Fasong", "category": "ransomware", "rule_id": "a4a399d6-ea64-57b2-99e4-00cb1f1165bf", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/fasong.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/fasong.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/fasong", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 12 }, { "family": "gendal", "family_name": "Gendal", "category": "ransomware", "rule_id": "cfe33c73-5d08-5760-b0df-f0e15280a025", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/gendal.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/gendal.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/gendal", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 12 }, { "family": "ggpass", "family_name": "Ggpass", "category": "trojan", "rule_id": "e2a1d350-0661-56fb-a42c-be482dd6bee2", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/ggpass.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/ggpass.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/ggpass", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 12 }, { "family": "mapsgory", "family_name": "Mapsgory", "category": "advanced_threat", "rule_id": "777f2e55-780f-52ea-be0f-2e49746acd26", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/mapsgory.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/mapsgory.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/mapsgory", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 12 }, { "family": "quant", "family_name": "Quant", "category": "ransomware", "rule_id": "87338654-f916-5dd6-b442-1697cadb591e", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/quant.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/quant.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/quant", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 12 }, { "family": "redosdru", "family_name": "Redosdru", "category": "ransomware", "rule_id": "20fba37e-9a19-5b13-9969-5bb95f3690a3", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/redosdru.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/redosdru.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/redosdru", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 12 }, { "family": "systex", "family_name": "Systex", "category": "ransomware", "rule_id": "607cd5f1-ad28-5400-9734-30ce58684c9d", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/systex.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/systex.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/systex", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 12 }, { "family": "ubar", "family_name": "Ubar", "category": "advanced_threat", "rule_id": "d54819e1-5f77-5cc3-a324-7d9956402d41", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/ubar.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/ubar.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/ubar", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 12 }, { "family": "vimditator", "family_name": "Vimditator", "category": "advanced_threat", "rule_id": "714ad2f7-cb33-5c33-8082-6aeafcfa7ae3", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/vimditator.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/vimditator.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/vimditator", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 12 }, { "family": "webdown", "family_name": "Webdown", "category": "ransomware", "rule_id": "07396896-937a-579e-81fb-28e280fee73f", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/webdown.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/webdown.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/webdown", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 12 }, { "family": "autit", "family_name": "Autit", "category": "trojan", "rule_id": "c009bcb4-5847-5422-9b18-ddc18432b6ce", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/autit.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/autit.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/autit", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 11 }, { "family": "bandoo", "family_name": "Bandoo", "category": "trojan", "rule_id": "5938084f-e7d6-581a-a679-6e1f9c8b1090", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/bandoo.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/bandoo.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/bandoo", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 11 }, { "family": "bluteal", "family_name": "Bluteal", "category": "ransomware", "rule_id": "207686ee-fe1c-506b-ba8f-b6950f8af9aa", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/bluteal.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/bluteal.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/bluteal", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 11 }, { "family": "bytefence", "family_name": "Bytefence", "category": "trojan", "rule_id": "6430d8a5-ca0f-51cc-809e-1ebb4551e087", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/bytefence.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/bytefence.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/bytefence", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 11 }, { "family": "cloxer", "family_name": "Cloxer", "category": "ransomware", "rule_id": "99dd203c-592a-53a7-bc31-864fa0f41c1f", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/cloxer.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/cloxer.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/cloxer", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 11 }, { "family": "conficker", "family_name": "Conficker", "category": "worm", "rule_id": "1255fa65-bf4b-5f30-b7fd-5cc20746bc2c", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/conficker.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/conficker.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/conficker", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 11 }, { "family": "cybernetic", "family_name": "Cybernetic", "category": "botnet", "rule_id": "1b3ce20d-116d-55dd-b6cc-517b12a7d977", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/cybernetic.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/cybernetic.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/cybernetic", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/botnet-protection", "sample_count": 11 }, { "family": "dnschanger", "family_name": "Dnschanger", "category": "trojan", "rule_id": "5024f2bc-d251-5ac3-99a1-34864523abb9", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/dnschanger.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/dnschanger.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/dnschanger", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 11 }, { "family": "exploder", "family_name": "Exploder", "category": "ransomware", "rule_id": "38449741-7fe4-57ee-a014-a28be46f7f23", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/exploder.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/exploder.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/exploder", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 11 }, { "family": "gamevance", "family_name": "Gamevance", "category": "trojan", "rule_id": "7aa13077-63ad-51e9-a783-c16adbc207ef", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/gamevance.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/gamevance.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/gamevance", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 11 }, { "family": "gendwnurl", "family_name": "Gendwnurl", "category": "ransomware", "rule_id": "9366e6db-6273-5a90-a318-6c66d9529a32", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/gendwnurl.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/gendwnurl.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/gendwnurl", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 11 }, { "family": "genericrxea", "family_name": "Genericrxea", "category": "ransomware", "rule_id": "e9c263e6-b217-5a74-9634-98d5c7e989d0", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/genericrxea.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/genericrxea.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/genericrxea", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 11 }, { "family": "genericrxeg", "family_name": "Genericrxeg", "category": "ransomware", "rule_id": "72bac0a5-dc8a-5002-af3d-45aa491506c1", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/genericrxeg.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/genericrxeg.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/genericrxeg", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 11 }, { "family": "jord", "family_name": "Jord", "category": "ransomware", "rule_id": "bc4edc0b-e87d-58dc-9d94-56c3c74c386c", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/jord.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/jord.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/jord", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 11 }, { "family": "koutodoor", "family_name": "Koutodoor", "category": "backdoor", "rule_id": "ab10f82e-fd32-529b-81ad-8224d730d338", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/koutodoor.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/koutodoor.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/koutodoor", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 11 }, { "family": "locky", "family_name": "Locky", "category": "ransomware", "rule_id": "893380da-8517-584e-9573-b92ab78ba365", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/locky.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/locky.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/locky", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 11 }, { "family": "menti", "family_name": "Menti", "category": "advanced_threat", "rule_id": "c0f20eac-63da-5ec4-9914-986231ab2e30", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/menti.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/menti.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/menti", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 11 }, { "family": "midia", "family_name": "Midia", "category": "ransomware", "rule_id": "5688f3dd-3088-500d-977f-765a1315f9a9", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/midia.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/midia.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/midia", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 11 }, { "family": "multidl", "family_name": "Multidl", "category": "trojan", "rule_id": "cc594a15-85e4-5c3e-a41a-a568be820ab0", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/multidl.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/multidl.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/multidl", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 11 }, { "family": "paph", "family_name": "Paph", "category": "ransomware", "rule_id": "62cb97f7-d35a-55d4-a93c-19e849b3129f", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/paph.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/paph.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/paph", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 11 }, { "family": "perflogger", "family_name": "Perflogger", "category": "trojan", "rule_id": "9a509bf5-7537-5302-8917-75d00cc57804", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/perflogger.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/perflogger.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/perflogger", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 11 }, { "family": "polypatch", "family_name": "Polypatch", "category": "trojan", "rule_id": "0f023800-eea7-5db0-a088-e30457d491ef", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/polypatch.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/polypatch.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/polypatch", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 11 }, { "family": "pornoblocker", "family_name": "Pornoblocker", "category": "ransomware", "rule_id": "45b54962-3686-5e45-acad-e43450b93a63", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/pornoblocker.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/pornoblocker.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/pornoblocker", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 11 }, { "family": "ranos", "family_name": "Ranos", "category": "ransomware", "rule_id": "b13e804d-5383-5365-b79f-e7651ad15aa7", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/ranos.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/ranos.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/ranos", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 11 }, { "family": "refroso", "family_name": "Refroso", "category": "ransomware", "rule_id": "6ffa438f-e8bc-533f-b045-2f108c7dfb11", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/refroso.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/refroso.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/refroso", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 11 }, { "family": "sefnit", "family_name": "Sefnit", "category": "trojan", "rule_id": "c858afc3-c630-5604-b5b0-44da62cd771a", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/sefnit.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/sefnit.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/sefnit", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 11 }, { "family": "smartapps", "family_name": "Smartapps", "category": "advanced_threat", "rule_id": "a8f727ce-020c-5cbc-86fb-cf2e504034bc", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/smartapps.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/smartapps.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/smartapps", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 11 }, { "family": "sogou", "family_name": "Sogou", "category": "advanced_threat", "rule_id": "effeabe8-9831-5f9e-a1fa-98d9890dd46a", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/sogou.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/sogou.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/sogou", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 11 }, { "family": "sohanad", "family_name": "Sohanad", "category": "trojan", "rule_id": "f29bcc0a-4053-553a-be8b-703d64ad18dd", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/sohanad.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/sohanad.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/sohanad", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 11 }, { "family": "stimilik", "family_name": "Stimilik", "category": "ransomware", "rule_id": "cd7e4138-f0e9-5a5b-845a-3e69f87f1502", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/stimilik.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/stimilik.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/stimilik", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 11 }, { "family": "trash", "family_name": "Trash", "category": "trojan", "rule_id": "033d4a37-ae94-5188-80cc-e4bd594a1628", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/trash.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/trash.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/trash", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 11 }, { "family": "ubibila", "family_name": "Ubibila", "category": "ransomware", "rule_id": "282821fc-3215-5974-adbe-6d2bdbf2eb76", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/ubibila.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/ubibila.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/ubibila", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 11 }, { "family": "updater", "family_name": "Updater", "category": "ransomware", "rule_id": "3b37b091-d03e-5dab-afe2-7a046051a20d", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/updater.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/updater.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/updater", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 11 }, { "family": "vitro", "family_name": "Vitro", "category": "trojan", "rule_id": "5bdbcd46-1771-5c76-95cf-f21be6fe997f", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/vitro.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/vitro.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/vitro", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 11 }, { "family": "vrbrothers", "family_name": "Vrbrothers", "category": "advanced_threat", "rule_id": "5de1ed5e-337a-504f-a1b8-a69965f2b2b3", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/vrbrothers.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/vrbrothers.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/vrbrothers", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 11 }, { "family": "zebrocy", "family_name": "Zebrocy", "category": "trojan", "rule_id": "f18f70c1-1b0d-5c7c-9b0a-dbb50e5b2711", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/zebrocy.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/zebrocy.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/zebrocy", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 11 }, { "family": "zzinfor", "family_name": "Zzinfor", "category": "ransomware", "rule_id": "0bd9309b-72f1-5889-bdcc-aa6701cb8002", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/zzinfor.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/zzinfor.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/zzinfor", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 11 }, { "family": "adgazelle", "family_name": "Adgazelle", "category": "trojan", "rule_id": "a3aad28e-d304-5fad-8634-e1622fdaf198", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/adgazelle.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/adgazelle.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/adgazelle", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 10 }, { "family": "bandit", "family_name": "Bandit", "category": "ransomware", "rule_id": "fd354c4c-29b9-59af-ae0d-e72972a3a77f", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/bandit.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/bandit.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/bandit", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 10 }, { "family": "casbaneiro", "family_name": "Casbaneiro", "category": "trojan", "rule_id": "4e4a7dae-9015-5d41-9b30-50ffbc017905", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/casbaneiro.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/casbaneiro.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/casbaneiro", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 10 }, { "family": "codiby", "family_name": "Codiby", "category": "ransomware", "rule_id": "d90d364e-0e01-5b8f-a4a0-65adbe803020", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/codiby.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/codiby.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/codiby", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 10 }, { "family": "crawler", "family_name": "Crawler", "category": "advanced_threat", "rule_id": "4bf091e3-ac66-537b-863e-abd5621249a8", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/crawler.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/crawler.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/crawler", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 10 }, { "family": "cryptolocker", "family_name": "Cryptolocker", "category": "ransomware", "rule_id": "b94945a6-88a1-52f6-9b34-6f81336c36e5", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/cryptolocker.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/cryptolocker.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/cryptolocker", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 10 }, { "family": "cryptos", "family_name": "Cryptos", "category": "ransomware", "rule_id": "e35795e7-111e-57f0-91f4-c4fce4ecc573", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/cryptos.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/cryptos.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/cryptos", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 10 }, { "family": "dial", "family_name": "Dial", "category": "ransomware", "rule_id": "65b31ff4-3778-5863-b477-6c80e92e26b8", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/dial.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/dial.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/dial", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 10 }, { "family": "disabler", "family_name": "Disabler", "category": "ransomware", "rule_id": "5c0f84e5-3c60-5238-a244-0d3bcf0d6875", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/disabler.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/disabler.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/disabler", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 10 }, { "family": "dlboost", "family_name": "Dlboost", "category": "advanced_threat", "rule_id": "63f8f81a-5a3b-5b02-80fd-b93847bef61a", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/dlboost.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/dlboost.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/dlboost", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 10 }, { "family": "driverupdater", "family_name": "Driverupdater", "category": "ransomware", "rule_id": "00b81113-5072-570d-80ac-f876efb861bd", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/driverupdater.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/driverupdater.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/driverupdater", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 10 }, { "family": "drmsoft", "family_name": "Drmsoft", "category": "advanced_threat", "rule_id": "98fb8f19-0bbe-5f60-99a0-90f354aea225", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/drmsoft.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/drmsoft.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/drmsoft", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 10 }, { "family": "hilevel", "family_name": "Hilevel", "category": "ransomware", "rule_id": "c84e3726-f4ff-5f31-99ca-ef4ad6690848", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/hilevel.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/hilevel.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/hilevel", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 10 }, { "family": "idlekms", "family_name": "Idlekms", "category": "ransomware", "rule_id": "a7d01893-1257-5f26-bb11-141331ae09df", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/idlekms.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/idlekms.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/idlekms", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 10 }, { "family": "jaike", "family_name": "Jaike", "category": "ransomware", "rule_id": "f1ada150-c8ea-5403-8cd5-e6d1b618c01e", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/jaike.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/jaike.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/jaike", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 10 }, { "family": "jintor", "family_name": "Jintor", "category": "ransomware", "rule_id": "21289e7c-ba73-5ead-aacd-0e9cda2958b4", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/jintor.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/jintor.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/jintor", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 10 }, { "family": "korplug", "family_name": "Korplug", "category": "trojan", "rule_id": "4a14c001-2bcc-5f76-a058-b8c68cf5cc6a", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/korplug.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/korplug.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/korplug", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 10 }, { "family": "lollipop", "family_name": "Lollipop", "category": "advanced_threat", "rule_id": "50c4b626-39f9-5d1d-b6f9-a9961d7f3bba", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/lollipop.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/lollipop.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/lollipop", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 10 }, { "family": "malwarecrypter", "family_name": "Malwarecrypter", "category": "ransomware", "rule_id": "569913b8-973b-5d49-aafb-dc025a39da53", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/malwarecrypter.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/malwarecrypter.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/malwarecrypter", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 10 }, { "family": "mine", "family_name": "Mine", "category": "advanced_threat", "rule_id": "a6ae99a0-7ab5-54fb-8461-c1451f45dd38", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/mine.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/mine.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/mine", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 10 }, { "family": "mirc", "family_name": "Mirc", "category": "trojan", "rule_id": "b29cbfa7-2ddf-50cb-9d12-45922341b3a5", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/mirc.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/mirc.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/mirc", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 10 }, { "family": "moleboxvs", "family_name": "Moleboxvs", "category": "trojan", "rule_id": "f9a1a8d6-63ec-54e4-a223-2762009d6cf3", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/moleboxvs.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/moleboxvs.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/moleboxvs", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 10 }, { "family": "nagoot", "family_name": "Nagoot", "category": "ransomware", "rule_id": "c66c1881-839b-58f0-91d0-84ba073728ee", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/nagoot.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/nagoot.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/nagoot", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 10 }, { "family": "pony", "family_name": "Pony", "category": "infostealer", "rule_id": "75d4c5dc-55d8-5338-b276-7c72baba398a", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/pony.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/pony.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/pony", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/infostealer-protection", "sample_count": 10 }, { "family": "redyms", "family_name": "Redyms", "category": "ransomware", "rule_id": "2cf9dde8-407a-551a-bd9b-66a5c1a590e2", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/redyms.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/redyms.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/redyms", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 10 }, { "family": "silentall", "family_name": "Silentall", "category": "advanced_threat", "rule_id": "72ab384f-d10f-5659-8647-244a3c9555d9", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/silentall.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/silentall.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/silentall", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 10 }, { "family": "sisbot", "family_name": "Sisbot", "category": "ransomware", "rule_id": "944ace4a-86d7-5f79-9bef-3ca141e2ad5c", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/sisbot.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/sisbot.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/sisbot", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 10 }, { "family": "spybot", "family_name": "Spybot", "category": "advanced_threat", "rule_id": "262a5370-fd17-5720-be6a-535fe0bcec06", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/spybot.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/spybot.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/spybot", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 10 }, { "family": "tovus", "family_name": "Tovus", "category": "ransomware", "rule_id": "f7ce3600-9451-562e-9666-5d19222cf9b3", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/tovus.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/tovus.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/tovus", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 10 }, { "family": "trick", "family_name": "Trick", "category": "ransomware", "rule_id": "7f36be2c-4694-598f-aa3d-1fedbe0c99de", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/trick.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/trick.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/trick", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 10 }, { "family": "vopak", "family_name": "Vopak", "category": "ransomware", "rule_id": "faeb254f-ebd5-5d70-9f8e-077f6e5108f1", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/vopak.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/vopak.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/vopak", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 10 }, { "family": "pegasus", "family_name": "Pegasus", "category": "spyware", "rule_id": "6bd49481-be49-5840-b1d7-ca8869b159c7", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/pegasus.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/pegasus.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/pegasus", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 10 }, { "family": "antavmu", "family_name": "Antavmu", "category": "ransomware", "rule_id": "404e6ba0-e591-56b4-9661-754190375072", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/antavmu.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/antavmu.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/antavmu", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 9 }, { "family": "aspxor", "family_name": "Aspxor", "category": "trojan", "rule_id": "ba47b9e3-9816-5e63-9e17-02528cf22084", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/aspxor.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/aspxor.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/aspxor", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 9 }, { "family": "buzy", "family_name": "Buzy", "category": "ransomware", "rule_id": "92f6254d-aa0d-5ca7-a282-add272d6bac7", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/buzy.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/buzy.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/buzy", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 9 }, { "family": "cobalt", "family_name": "Cobalt", "category": "ransomware", "rule_id": "0d0bc26c-f89d-53e8-8eae-404e1c92c7ca", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/cobalt.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/cobalt.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/cobalt", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 9 }, { "family": "cossta", "family_name": "Cossta", "category": "ransomware", "rule_id": "c5fc7de7-afe2-5bb1-b095-f66aa648741c", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/cossta.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/cossta.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/cossta", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 9 }, { "family": "delbar", "family_name": "Delbar", "category": "ransomware", "rule_id": "d8ddd659-24f1-54e9-b5f2-43a57ad8f801", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/delbar.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/delbar.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/delbar", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 9 }, { "family": "dervec", "family_name": "Dervec", "category": "ransomware", "rule_id": "e4669bc1-837f-50f9-8976-394959650f82", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/dervec.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/dervec.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/dervec", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 9 }, { "family": "enfal", "family_name": "Enfal", "category": "trojan", "rule_id": "0e5a8f7a-7e2e-58cf-864b-d4e32cbbc6ea", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/enfal.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/enfal.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/enfal", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 9 }, { "family": "evrial", "family_name": "Evrial", "category": "ransomware", "rule_id": "0b879fa7-588e-5ca8-af14-6e9807a11df7", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/evrial.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/evrial.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/evrial", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 9 }, { "family": "hiru", "family_name": "Hiru", "category": "ransomware", "rule_id": "2f9eb44a-a79b-5f3a-b5b8-2f17100fe0de", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/hiru.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/hiru.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/hiru", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 9 }, { "family": "imestartup", "family_name": "Imestartup", "category": "advanced_threat", "rule_id": "1732377d-fdf5-56e0-9707-6c5e1eb5a429", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/imestartup.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/imestartup.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/imestartup", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 9 }, { "family": "induc", "family_name": "Induc", "category": "advanced_threat", "rule_id": "02037b98-387e-57d0-a4c8-07f6abebb138", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/induc.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/induc.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/induc", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 9 }, { "family": "joke", "family_name": "Joke", "category": "advanced_threat", "rule_id": "3d361a5f-ebf7-56d1-a146-0d56bdc51e09", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/joke.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/joke.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/joke", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 9 }, { "family": "ksdler", "family_name": "Ksdler", "category": "ransomware", "rule_id": "cb0f3e74-e30e-5792-b0f9-55d4d56c6682", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/ksdler.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/ksdler.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/ksdler", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 9 }, { "family": "lebag", "family_name": "Lebag", "category": "ransomware", "rule_id": "f10dc950-68e7-5619-8731-3258063bb684", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/lebag.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/lebag.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/lebag", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 9 }, { "family": "loader", "family_name": "Loader", "category": "ransomware", "rule_id": "79f3df89-0d27-5055-ad4e-84368ff0555c", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/loader.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/loader.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/loader", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 9 }, { "family": "lunam", "family_name": "Lunam", "category": "ransomware", "rule_id": "29b6a89a-3474-5819-8772-e08a0f0e9f5b", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/lunam.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/lunam.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/lunam", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 9 }, { "family": "mediaget", "family_name": "Mediaget", "category": "ransomware", "rule_id": "25fe3ac9-3de4-56e6-8fc8-ef713ee288c0", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/mediaget.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/mediaget.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/mediaget", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 9 }, { "family": "miancha", "family_name": "Miancha", "category": "ransomware", "rule_id": "bcc9bab3-ea55-53e5-b7bd-773cf2e9b032", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/miancha.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/miancha.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/miancha", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 9 }, { "family": "microjoin", "family_name": "Microjoin", "category": "ransomware", "rule_id": "916a8e67-62bd-573d-b3a3-b7f25ddbcc56", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/microjoin.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/microjoin.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/microjoin", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 9 }, { "family": "mwpm", "family_name": "Mwpm", "category": "ransomware", "rule_id": "ced270e4-dc6d-55d3-af8f-4de0bb0af852", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/mwpm.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/mwpm.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/mwpm", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 9 }, { "family": "mybeesearch", "family_name": "Mybeesearch", "category": "advanced_threat", "rule_id": "c7e0d9d9-b928-519e-8c4b-f0dfbf061f30", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/mybeesearch.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/mybeesearch.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/mybeesearch", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 9 }, { "family": "mypcbackup", "family_name": "Mypcbackup", "category": "advanced_threat", "rule_id": "1c3547cb-9cf5-59b8-bb77-c66f02a38f5d", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/mypcbackup.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/mypcbackup.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/mypcbackup", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 9 }, { "family": "netpass", "family_name": "Netpass", "category": "trojan", "rule_id": "59cbb314-2538-5291-ad7b-32aa460f5d40", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/netpass.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/netpass.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/netpass", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 9 }, { "family": "nspm", "family_name": "Nspm", "category": "advanced_threat", "rule_id": "a817aee9-c47d-569a-90d4-091457db07f2", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/nspm.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/nspm.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/nspm", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 9 }, { "family": "opanki", "family_name": "Opanki", "category": "backdoor", "rule_id": "f93e1c3b-d430-57a9-bc8c-847e14f51536", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/opanki.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/opanki.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/opanki", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 9 }, { "family": "pckeeper", "family_name": "Pckeeper", "category": "advanced_threat", "rule_id": "d8603024-8f09-5027-b9af-f8886c4493dd", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/pckeeper.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/pckeeper.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/pckeeper", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 9 }, { "family": "primecasino", "family_name": "Primecasino", "category": "advanced_threat", "rule_id": "06dbc414-0eb3-5ed4-88aa-ad5a26591a67", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/primecasino.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/primecasino.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/primecasino", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 9 }, { "family": "ranapama", "family_name": "Ranapama", "category": "ransomware", "rule_id": "5640bbf4-28fd-588d-bb2f-0f7e08041768", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/ranapama.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/ranapama.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/ranapama", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 9 }, { "family": "regcure", "family_name": "Regcure", "category": "advanced_threat", "rule_id": "82d95a0a-7968-5f32-9c10-1ef1e9611710", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/regcure.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/regcure.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/regcure", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 9 }, { "family": "remotemanipulator", "family_name": "Remotemanipulator", "category": "ransomware", "rule_id": "b23a1a2e-4dd8-5421-91d3-8b0b414c9541", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/remotemanipulator.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/remotemanipulator.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/remotemanipulator", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 9 }, { "family": "schoolgirl", "family_name": "Schoolgirl", "category": "trojan", "rule_id": "5850febb-8120-5ec6-83e9-292c57fa2536", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/schoolgirl.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/schoolgirl.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/schoolgirl", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 9 }, { "family": "shandaadd", "family_name": "Shandaadd", "category": "advanced_threat", "rule_id": "3fe2529f-2044-5e09-9b6b-09a5860b7bcd", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/shandaadd.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/shandaadd.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/shandaadd", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 9 }, { "family": "slingup", "family_name": "Slingup", "category": "advanced_threat", "rule_id": "af0883ca-1c24-5855-a7a2-7702cd88f83b", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/slingup.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/slingup.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/slingup", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 9 }, { "family": "snobar", "family_name": "Snobar", "category": "ransomware", "rule_id": "27b586cf-d121-54c3-8c8f-6250d6da60b3", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/snobar.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/snobar.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/snobar", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 9 }, { "family": "speedchecker", "family_name": "Speedchecker", "category": "advanced_threat", "rule_id": "8bd3e8f0-ad76-5fd2-a393-6a02e0b184b7", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/speedchecker.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/speedchecker.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/speedchecker", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 9 }, { "family": "teslacrypt", "family_name": "Teslacrypt", "category": "ransomware", "rule_id": "a58e7405-890e-5b67-9b7d-1015c1a6ea0b", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/teslacrypt.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/teslacrypt.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/teslacrypt", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 9 }, { "family": "wirzemro", "family_name": "Wirzemro", "category": "ransomware", "rule_id": "d35e18e3-bfaf-5ac5-842e-b2e0e69bfa11", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/wirzemro.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/wirzemro.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/wirzemro", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 9 }, { "family": "yoddos", "family_name": "Yoddos", "category": "trojan", "rule_id": "ef533dae-c9b6-5455-a496-84faf62aac94", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/yoddos.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yoddos.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/yoddos", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 9 }, { "family": "adspy", "family_name": "Adspy", "category": "infostealer", "rule_id": "b8affb8d-65fd-57ce-baac-87e394ab7b27", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/adspy.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/adspy.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/adspy", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/infostealer-protection", "sample_count": 8 }, { "family": "bagle", "family_name": "Bagle", "category": "backdoor", "rule_id": "365a31a8-dfba-5cd2-85f4-2a6b2a67f4b6", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/bagle.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/bagle.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/bagle", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 8 }, { "family": "beyondkeylogger", "family_name": "Beyondkeylogger", "category": "infostealer", "rule_id": "f351c4c4-a318-55eb-a648-f430ac8f060c", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/beyondkeylogger.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/beyondkeylogger.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/beyondkeylogger", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/infostealer-protection", "sample_count": 8 }, { "family": "bitman", "family_name": "Bitman", "category": "ransomware", "rule_id": "517c2e96-7027-5b3b-86ce-9fb51d5a4f71", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/bitman.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/bitman.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/bitman", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 8 }, { "family": "blueh", "family_name": "Blueh", "category": "ransomware", "rule_id": "24fd15f8-9396-5298-8389-46ef2c2d8214", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/blueh.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/blueh.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/blueh", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 8 }, { "family": "brresmon", "family_name": "Brresmon", "category": "ransomware", "rule_id": "0dec50bd-4082-5ed2-a28c-f05bdaacfe9e", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/brresmon.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/brresmon.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/brresmon", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 8 }, { "family": "casper", "family_name": "Casper", "category": "trojan", "rule_id": "9d67f707-bf78-563e-bde5-d1765df88b13", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/casper.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/casper.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/casper", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 8 }, { "family": "citeary", "family_name": "Citeary", "category": "ransomware", "rule_id": "156142a0-8f83-5474-9ade-8ccab1e48038", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/citeary.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/citeary.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/citeary", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 8 }, { "family": "cnopa", "family_name": "Cnopa", "category": "ransomware", "rule_id": "ce280628-67aa-5a6d-85bc-300a988a6639", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/cnopa.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/cnopa.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/cnopa", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 8 }, { "family": "collector", "family_name": "Collector", "category": "trojan", "rule_id": "edebf768-9e05-555e-a4cb-bee6c6bab817", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/collector.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/collector.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/collector", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 8 }, { "family": "cryakl", "family_name": "Cryakl", "category": "ransomware", "rule_id": "4734e465-01e9-517e-88a0-50c388278183", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/cryakl.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/cryakl.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/cryakl", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 8 }, { "family": "cycbot", "family_name": "Cycbot", "category": "ransomware", "rule_id": "219fbbab-e95a-52f6-acfb-f3895c63d816", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/cycbot.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/cycbot.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/cycbot", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 8 }, { "family": "dalexis", "family_name": "Dalexis", "category": "ransomware", "rule_id": "bc0ee898-fed5-59a0-bf0e-b38c5e3b64ac", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/dalexis.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/dalexis.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/dalexis", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 8 }, { "family": "enistery", "family_name": "Enistery", "category": "ransomware", "rule_id": "65c1209d-81ec-5ab2-9e4a-e65f22b3f71c", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/enistery.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/enistery.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/enistery", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 8 }, { "family": "fullscreen", "family_name": "Fullscreen", "category": "ransomware", "rule_id": "384ce563-de15-5f87-833e-76f9b6fe55d2", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/fullscreen.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/fullscreen.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/fullscreen", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 8 }, { "family": "gamehuck", "family_name": "Gamehuck", "category": "trojan", "rule_id": "a6108033-06fb-5413-a7c6-d0787e3289e8", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/gamehuck.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/gamehuck.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/gamehuck", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 8 }, { "family": "heye", "family_name": "Heye", "category": "advanced_threat", "rule_id": "86d2f17a-72c9-5747-aab4-4bfb7c6f5164", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/heye.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/heye.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/heye", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 8 }, { "family": "hiddentear", "family_name": "Hiddentear", "category": "ransomware", "rule_id": "16698cf2-4b7a-5158-b92e-45e819b77c46", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/hiddentear.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/hiddentear.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/hiddentear", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 8 }, { "family": "informer", "family_name": "Informer", "category": "trojan", "rule_id": "32afab0a-1119-512c-afdf-979c605871e9", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/informer.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/informer.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/informer", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 8 }, { "family": "kingsoft", "family_name": "Kingsoft", "category": "advanced_threat", "rule_id": "3d2ac9bf-430c-50df-b859-943a432cb938", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/kingsoft.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/kingsoft.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/kingsoft", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 8 }, { "family": "klez", "family_name": "Klez", "category": "advanced_threat", "rule_id": "55ab14b9-d60c-52b8-ad1a-677a02d52656", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/klez.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/klez.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/klez", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 8 }, { "family": "lydra", "family_name": "Lydra", "category": "ransomware", "rule_id": "11b82b6c-5b74-5f9b-b43f-c68c587b0727", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/lydra.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/lydra.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/lydra", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 8 }, { "family": "minerbot", "family_name": "Minerbot", "category": "ransomware", "rule_id": "c84bad2e-ced6-5e1f-8fc2-79e4a16ced63", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/minerbot.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/minerbot.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/minerbot", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 8 }, { "family": "mokssteal", "family_name": "Mokssteal", "category": "trojan", "rule_id": "b2e8871e-13af-5fd6-9ec5-560d4e18264e", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/mokssteal.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/mokssteal.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/mokssteal", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 8 }, { "family": "montp", "family_name": "Montp", "category": "ransomware", "rule_id": "d98771fe-cb07-504c-a4c2-c5f2a72de7d9", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/montp.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/montp.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/montp", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 8 }, { "family": "neos", "family_name": "Neos", "category": "ransomware", "rule_id": "8ae65c40-8de0-5508-b45a-6634decd51b8", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/neos.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/neos.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/neos", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 8 }, { "family": "orbus", "family_name": "Orbus", "category": "ransomware", "rule_id": "332cafc6-6612-5a04-9411-280574da1fea", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/orbus.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/orbus.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/orbus", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 8 }, { "family": "pandex", "family_name": "Pandex", "category": "ransomware", "rule_id": "9bc0bf90-62d8-52d6-a2fd-beb02a85503a", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/pandex.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/pandex.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/pandex", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 8 }, { "family": "pcacceleratepro", "family_name": "Pcacceleratepro", "category": "advanced_threat", "rule_id": "a94ff3a1-c981-541a-a07d-4651b420d7be", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/pcacceleratepro.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/pcacceleratepro.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/pcacceleratepro", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 8 }, { "family": "pcmedic", "family_name": "Pcmedic", "category": "advanced_threat", "rule_id": "495ceddf-d4fe-5f0e-b6fe-51f2afc6f61a", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/pcmedic.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/pcmedic.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/pcmedic", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 8 }, { "family": "pespin", "family_name": "Pespin", "category": "ransomware", "rule_id": "b023e169-c148-51eb-9242-cfd418b645bf", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/pespin.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/pespin.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/pespin", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 8 }, { "family": "plugx", "family_name": "Plugx", "category": "rat", "rule_id": "5c8691ef-bd4b-5cf8-bd05-e811b00e1e11", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/plugx.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/plugx.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/plugx", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 8 }, { "family": "prochack", "family_name": "Prochack", "category": "advanced_threat", "rule_id": "2eff4372-dc31-5eee-89f8-fa7cedc20b35", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/prochack.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/prochack.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/prochack", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 8 }, { "family": "puwaders", "family_name": "Puwaders", "category": "ransomware", "rule_id": "b7367c05-02e1-5209-a20f-50777c425ad0", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/puwaders.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/puwaders.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/puwaders", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 8 }, { "family": "ramdo", "family_name": "Ramdo", "category": "click_fraud", "rule_id": "f1f0ceb7-b1ca-5f2f-930b-4f17d7d23f3b", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/ramdo.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/ramdo.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/ramdo", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 8 }, { "family": "restoro", "family_name": "Restoro", "category": "advanced_threat", "rule_id": "4647c6e4-f77a-53cc-af1b-527c0b83b12e", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/restoro.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/restoro.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/restoro", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 8 }, { "family": "resur", "family_name": "Resur", "category": "ransomware", "rule_id": "c547dc67-ac54-575d-a74f-4d1a421b514f", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/resur.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/resur.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/resur", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 8 }, { "family": "simda", "family_name": "Simda", "category": "botnet", "rule_id": "6331d332-02bb-5b56-93fb-b93d50493837", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/simda.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/simda.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/simda", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/botnet-protection", "sample_count": 8 }, { "family": "surveyer", "family_name": "Surveyer", "category": "advanced_threat", "rule_id": "3b126859-95f0-569f-8943-1c651e595c21", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/surveyer.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/surveyer.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/surveyer", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 8 }, { "family": "ubot", "family_name": "Ubot", "category": "trojan", "rule_id": "f7072b6a-2cc7-51c2-ae19-dfe16079d2d7", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/ubot.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/ubot.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/ubot", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 8 }, { "family": "virtu", "family_name": "Virtu", "category": "trojan", "rule_id": "2858537e-59b2-545c-9383-6a51b3cbf8eb", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/virtu.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/virtu.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/virtu", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 8 }, { "family": "vosteran", "family_name": "Vosteran", "category": "advanced_threat", "rule_id": "e983560b-1265-5dc1-bf3e-da43e4c7c651", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/vosteran.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/vosteran.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/vosteran", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 8 }, { "family": "wenper", "family_name": "Wenper", "category": "ransomware", "rule_id": "b2892739-4d85-5320-b32e-50e3f2b160a0", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/wenper.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/wenper.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/wenper", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 8 }, { "family": "winreg", "family_name": "Winreg", "category": "trojan", "rule_id": "5f28eef9-f609-5c02-bfcf-ba8c229e6472", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/winreg.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/winreg.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/winreg", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 8 }, { "family": "winvnc", "family_name": "Winvnc", "category": "backdoor", "rule_id": "a8d62aed-6de6-5151-8259-4fe71bd67a5c", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/winvnc.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/winvnc.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/winvnc", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 8 }, { "family": "wyhymyz", "family_name": "Wyhymyz", "category": "ransomware", "rule_id": "f96036fa-1cd0-5b8c-9abe-f1ab05717351", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/wyhymyz.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/wyhymyz.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/wyhymyz", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 8 }, { "family": "ytdownloader", "family_name": "Ytdownloader", "category": "advanced_threat", "rule_id": "3ebb46c4-f820-58b2-8494-4f40cfeb5ec3", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/ytdownloader.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/ytdownloader.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/ytdownloader", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 8 }, { "family": "adinstaller", "family_name": "Adinstaller", "category": "trojan", "rule_id": "39477ee3-9d42-5921-8e2f-f941579375fe", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/adinstaller.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/adinstaller.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/adinstaller", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 7 }, { "family": "adkdllwrapper", "family_name": "Adkdllwrapper", "category": "trojan", "rule_id": "83000304-f98e-5628-86ab-30b687737e28", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/adkdllwrapper.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/adkdllwrapper.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/adkdllwrapper", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 7 }, { "family": "adkor", "family_name": "Adkor", "category": "trojan", "rule_id": "067a96e0-f527-5b27-ac15-8bff689d0ba7", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/adkor.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/adkor.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/adkor", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 7 }, { "family": "agobot", "family_name": "Agobot", "category": "backdoor", "rule_id": "ea40afea-3e48-5c6f-9d0c-8f0a7a2561a0", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/agobot.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/agobot.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/agobot", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 7 }, { "family": "axespec", "family_name": "Axespec", "category": "trojan", "rule_id": "276aa24a-6281-5e39-9390-852da7a379de", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/axespec.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/axespec.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/axespec", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 7 }, { "family": "chatzum", "family_name": "Chatzum", "category": "advanced_threat", "rule_id": "7b1b7876-e831-581a-82ff-eb30504cee6c", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/chatzum.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/chatzum.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/chatzum", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 7 }, { "family": "comrerop", "family_name": "Comrerop", "category": "ransomware", "rule_id": "7043b210-8082-5431-a125-086882b97ab6", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/comrerop.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/comrerop.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/comrerop", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 7 }, { "family": "corebot", "family_name": "Corebot", "category": "trojan", "rule_id": "37814a6d-4e8b-5f24-a7f7-069c377a766a", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/corebot.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/corebot.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/corebot", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 7 }, { "family": "corrempa", "family_name": "Corrempa", "category": "ransomware", "rule_id": "85628f4e-bdad-5fc8-922d-416a1c647fb3", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/corrempa.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/corrempa.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/corrempa", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 7 }, { "family": "cybergate", "family_name": "Cybergate", "category": "rat", "rule_id": "a9fe6345-99df-5e58-bc0d-f342f6b4fbb9", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/cybergate.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/cybergate.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/cybergate", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 7 }, { "family": "datakeeper", "family_name": "Datakeeper", "category": "ransomware", "rule_id": "9d7350e5-b895-5e6e-a237-770148328e90", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/datakeeper.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/datakeeper.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/datakeeper", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 7 }, { "family": "dishigy", "family_name": "Dishigy", "category": "ransomware", "rule_id": "f395e7e6-09f6-5362-a3bf-40594246b22c", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/dishigy.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/dishigy.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/dishigy", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 7 }, { "family": "dllhijacker", "family_name": "Dllhijacker", "category": "ransomware", "rule_id": "66bc7b13-57a5-5745-8d80-82107c807d26", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/dllhijacker.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/dllhijacker.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/dllhijacker", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 7 }, { "family": "donex", "family_name": "Donex", "category": "ransomware", "rule_id": "0692d0fc-9388-5ba8-8da0-051141263ef3", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/donex.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/donex.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/donex", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 7 }, { "family": "dorv", "family_name": "Dorv", "category": "ransomware", "rule_id": "f013fe86-5d07-5426-9943-8848ebd7bcbc", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/dorv.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/dorv.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/dorv", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 7 }, { "family": "egroupdial", "family_name": "Egroupdial", "category": "advanced_threat", "rule_id": "00ec8249-4afe-5103-b732-e6d9b461d603", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/egroupdial.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/egroupdial.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/egroupdial", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 7 }, { "family": "erbon", "family_name": "Erbon", "category": "ransomware", "rule_id": "9341b11b-3e29-575d-81f9-f7f474299c0c", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/erbon.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/erbon.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/erbon", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 7 }, { "family": "fakefolder", "family_name": "Fakefolder", "category": "ransomware", "rule_id": "4836ebbe-bd7e-57ec-b95a-99ef06698753", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/fakefolder.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/fakefolder.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/fakefolder", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 7 }, { "family": "fareitvb", "family_name": "Fareitvb", "category": "trojan", "rule_id": "4e6dfe06-734c-5580-94ff-aab428ee90f5", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/fareitvb.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/fareitvb.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/fareitvb", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 7 }, { "family": "genericrxda", "family_name": "Genericrxda", "category": "ransomware", "rule_id": "f5937fd4-5f29-5afc-8e7e-d713343736df", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/genericrxda.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/genericrxda.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/genericrxda", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 7 }, { "family": "gippers", "family_name": "Gippers", "category": "ransomware", "rule_id": "aa1221fd-0841-57b5-b696-b6fcb28303b0", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/gippers.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/gippers.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/gippers", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 7 }, { "family": "grenam", "family_name": "Grenam", "category": "advanced_threat", "rule_id": "cd8a9e54-d3ec-5145-89a0-b95543fc9b4a", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/grenam.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/grenam.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/grenam", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 7 }, { "family": "hermes", "family_name": "Hermes", "category": "ransomware", "rule_id": "d9cfc5fd-05e0-593e-bc9f-55a46f6059f9", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/hermes.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/hermes.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/hermes", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 7 }, { "family": "idlebuddy", "family_name": "Idlebuddy", "category": "advanced_threat", "rule_id": "a07acef3-35ce-5289-a401-011427745c9c", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/idlebuddy.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/idlebuddy.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/idlebuddy", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 7 }, { "family": "installpack", "family_name": "Installpack", "category": "advanced_threat", "rule_id": "4e16dd55-be4b-5ba9-b654-a6baea26636a", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/installpack.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/installpack.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/installpack", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 7 }, { "family": "klone", "family_name": "Klone", "category": "ransomware", "rule_id": "72701008-ae00-5e76-88bf-b617284aa1b0", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/klone.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/klone.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/klone", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 7 }, { "family": "komodia", "family_name": "Komodia", "category": "advanced_threat", "rule_id": "7090cb88-e8db-5f08-b04e-2257f77357c4", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/komodia.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/komodia.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/komodia", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 7 }, { "family": "lolojan", "family_name": "Lolojan", "category": "ransomware", "rule_id": "c4d75db3-dd98-581b-b587-2f6309a3b689", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/lolojan.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/lolojan.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/lolojan", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 7 }, { "family": "loskad", "family_name": "Loskad", "category": "ransomware", "rule_id": "9d2aef78-25c3-5509-9241-e9320023686f", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/loskad.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/loskad.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/loskad", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 7 }, { "family": "magala", "family_name": "Magala", "category": "trojan", "rule_id": "0de3e4e7-09ac-5f7f-8ba6-9000bfafbd7c", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/magala.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/magala.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/magala", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 7 }, { "family": "mago", "family_name": "Mago", "category": "ransomware", "rule_id": "7b176c70-010b-5a7f-b03d-7cd9738a0ea9", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/mago.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/mago.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/mago", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 7 }, { "family": "mbrlock", "family_name": "Mbrlock", "category": "ransomware", "rule_id": "8522ca05-1a71-5955-96af-de3f5eacd7c6", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/mbrlock.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/mbrlock.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/mbrlock", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 7 }, { "family": "mediamagnet", "family_name": "Mediamagnet", "category": "advanced_threat", "rule_id": "070f8062-3ad9-5a5d-b37e-c2193e7e89de", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/mediamagnet.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/mediamagnet.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/mediamagnet", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 7 }, { "family": "miuref", "family_name": "Miuref", "category": "click_fraud", "rule_id": "677b3011-480b-5c81-b204-1fec6150dff3", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/miuref.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/miuref.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/miuref", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 7 }, { "family": "molock", "family_name": "Molock", "category": "ransomware", "rule_id": "f761086f-f11d-58ce-8f42-c0e06348d6d4", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/molock.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/molock.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/molock", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 7 }, { "family": "mongolock", "family_name": "Mongolock", "category": "ransomware", "rule_id": "3b7dff8a-4aa4-5f67-9044-ee6b2eb745dc", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/mongolock.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/mongolock.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/mongolock", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 7 }, { "family": "moonlight", "family_name": "Moonlight", "category": "ransomware", "rule_id": "ea4e8abf-ea91-5827-8858-a3a6a6c65288", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/moonlight.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/moonlight.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/moonlight", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 7 }, { "family": "morphine", "family_name": "Morphine", "category": "ransomware", "rule_id": "2ca0dd4c-b943-5ec3-9497-4776d879e1c8", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/morphine.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/morphine.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/morphine", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 7 }, { "family": "noonlight", "family_name": "Noonlight", "category": "ransomware", "rule_id": "92ff063a-359a-5e36-bb28-ac641bd0fb5d", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/noonlight.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/noonlight.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/noonlight", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 7 }, { "family": "nrww", "family_name": "Nrww", "category": "ransomware", "rule_id": "f7c7ca25-c6f4-5b31-8ec3-f9fc11111624", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/nrww.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/nrww.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/nrww", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 7 }, { "family": "nsanti", "family_name": "Nsanti", "category": "ransomware", "rule_id": "c0ffaa3b-c195-559d-8345-4b54478f4e68", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/nsanti.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/nsanti.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/nsanti", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 7 }, { "family": "passview", "family_name": "Passview", "category": "advanced_threat", "rule_id": "fcd76902-5af9-58bb-b829-1179aa3c3ab8", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/passview.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/passview.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/passview", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 7 }, { "family": "passwordstealer", "family_name": "Passwordstealer", "category": "ransomware", "rule_id": "a31ea34c-b94b-5489-a418-dbc8dcda6f78", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/passwordstealer.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/passwordstealer.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/passwordstealer", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 7 }, { "family": "pcclean", "family_name": "Pcclean", "category": "ransomware", "rule_id": "572d6709-291a-5391-9aa4-7197c0a46806", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/pcclean.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/pcclean.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/pcclean", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 7 }, { "family": "pepm", "family_name": "Pepm", "category": "ransomware", "rule_id": "61a1ed32-813e-5a88-9ea0-faeda7f689e2", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/pepm.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/pepm.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/pepm", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 7 }, { "family": "porntool", "family_name": "Porntool", "category": "ransomware", "rule_id": "2ccdbdd0-7bd4-5dbe-b1fa-6163b7630623", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/porntool.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/porntool.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/porntool", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 7 }, { "family": "pullupdate", "family_name": "Pullupdate", "category": "advanced_threat", "rule_id": "cf63a82c-d805-577f-b670-1b470de88b99", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/pullupdate.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/pullupdate.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/pullupdate", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 7 }, { "family": "resdro", "family_name": "Resdro", "category": "ransomware", "rule_id": "9580257b-21fe-554c-a0c8-1768c4f822b5", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/resdro.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/resdro.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/resdro", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 7 }, { "family": "satwancrypt", "family_name": "Satwancrypt", "category": "ransomware", "rule_id": "ac3578e9-a17c-5ccc-8643-29e4eaadbac5", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/satwancrypt.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/satwancrypt.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/satwancrypt", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 7 }, { "family": "shopbot", "family_name": "Shopbot", "category": "advanced_threat", "rule_id": "91db7b1e-56e3-5594-8766-d3dfb22ba213", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/shopbot.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/shopbot.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/shopbot", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 7 }, { "family": "simplified", "family_name": "Simplified", "category": "advanced_threat", "rule_id": "79ad0d65-6c8f-5e9d-9cb6-24d55b0e2695", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/simplified.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/simplified.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/simplified", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 7 }, { "family": "slimdrivers", "family_name": "Slimdrivers", "category": "advanced_threat", "rule_id": "58ad2384-6f8f-5d93-97f8-aed050be94ae", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/slimdrivers.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/slimdrivers.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/slimdrivers", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 7 }, { "family": "smal", "family_name": "Smal", "category": "advanced_threat", "rule_id": "627dd113-4334-5c9c-9025-66adadf4afe9", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/smal.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/smal.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/smal", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 7 }, { "family": "smshoax", "family_name": "Smshoax", "category": "trojan", "rule_id": "830b0bdb-229f-5e5e-ab8c-3ee2245ec3c5", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/smshoax.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/smshoax.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/smshoax", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 7 }, { "family": "speedbit", "family_name": "Speedbit", "category": "advanced_threat", "rule_id": "82cc26b4-d731-572c-92d2-8040a037a40e", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/speedbit.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/speedbit.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/speedbit", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 7 }, { "family": "spnr", "family_name": "Spnr", "category": "ransomware", "rule_id": "97ac829a-fe52-5e47-91b5-67902e0e5d00", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/spnr.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/spnr.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/spnr", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 7 }, { "family": "squarenet", "family_name": "Squarenet", "category": "ransomware", "rule_id": "755b540f-bc24-5d1d-a5b3-ec63a03e17c8", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/squarenet.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/squarenet.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/squarenet", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 7 }, { "family": "stufffull", "family_name": "Stufffull", "category": "advanced_threat", "rule_id": "6ccea8cd-35ba-534f-9fde-cd51c0b2faad", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/stufffull.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/stufffull.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/stufffull", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 7 }, { "family": "taily", "family_name": "Taily", "category": "ransomware", "rule_id": "1e0d43a2-74d1-576f-ba35-72a3afc6e2d8", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/taily.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/taily.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/taily", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 7 }, { "family": "tainp", "family_name": "Tainp", "category": "ransomware", "rule_id": "f6b2d104-22b5-543b-8a12-37a5f6f98e04", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/tainp.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/tainp.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/tainp", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 7 }, { "family": "ultrasurf", "family_name": "Ultrasurf", "category": "advanced_threat", "rule_id": "3a103d57-3f98-52b3-861d-35688763bf2a", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/ultrasurf.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/ultrasurf.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/ultrasurf", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 7 }, { "family": "upkm", "family_name": "Upkm", "category": "ransomware", "rule_id": "96ab70fd-371a-5305-8fcb-edfe8d55f457", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/upkm.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/upkm.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/upkm", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 7 }, { "family": "vbcryptent", "family_name": "Vbcryptent", "category": "trojan", "rule_id": "b89307cb-4d51-5467-aa50-e2aaf191f034", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/vbcryptent.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/vbcryptent.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/vbcryptent", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 7 }, { "family": "vemptik", "family_name": "Vemptik", "category": "ransomware", "rule_id": "05a1a9d6-1d11-56c3-a478-620a433c9eaa", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/vemptik.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/vemptik.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/vemptik", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 7 }, { "family": "vibem", "family_name": "Vibem", "category": "ransomware", "rule_id": "f13ea323-9575-5843-bdfb-a2d622fd14cf", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/vibem.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/vibem.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/vibem", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 7 }, { "family": "virledi", "family_name": "Virledi", "category": "trojan", "rule_id": "a65e2850-64b0-5be6-8e49-c8897e809196", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/virledi.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/virledi.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/virledi", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 7 }, { "family": "visicom", "family_name": "Visicom", "category": "advanced_threat", "rule_id": "331b91cd-a707-5c12-af8d-ed08db223d7b", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/visicom.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/visicom.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/visicom", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 7 }, { "family": "yahlover", "family_name": "Yahlover", "category": "advanced_threat", "rule_id": "afc16836-d017-5a25-9ae5-0f3be8b37c1c", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/yahlover.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yahlover.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/yahlover", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 7 }, { "family": "zmem", "family_name": "Zmem", "category": "ransomware", "rule_id": "bb8aaa1b-56d1-5e8d-ae14-b9bc71fd488f", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/zmem.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/zmem.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/zmem", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 7 }, { "family": "zumanek", "family_name": "Zumanek", "category": "ransomware", "rule_id": "d889c1d3-d5cc-58dd-9c9e-5e3a494d4f31", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/zumanek.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/zumanek.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/zumanek", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 7 }, { "family": "adwind", "family_name": "Adwind", "category": "trojan", "rule_id": "b1ffbd42-93f0-5870-bdbd-983db0c1d85b", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/adwind.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/adwind.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/adwind", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 6 }, { "family": "bicololo", "family_name": "Bicololo", "category": "ransomware", "rule_id": "f6eee08c-2112-5e1f-b193-a1446583d1c3", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/bicololo.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/bicololo.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/bicololo", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 6 }, { "family": "bulta", "family_name": "Bulta", "category": "ransomware", "rule_id": "4d09427f-a4a9-5c85-bf4c-f33dade60cac", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/bulta.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/bulta.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/bulta", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 6 }, { "family": "cekar", "family_name": "Cekar", "category": "ransomware", "rule_id": "dab65424-7898-5d78-8719-dd39f1df018a", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/cekar.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/cekar.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/cekar", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 6 }, { "family": "chepro", "family_name": "Chepro", "category": "ransomware", "rule_id": "0feeec7a-19d9-525c-9497-4a1daf57e680", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/chepro.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/chepro.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/chepro", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 6 }, { "family": "cjishu", "family_name": "Cjishu", "category": "ransomware", "rule_id": "11a2d2e6-1ce3-5e8e-8e80-72f4d3f9f2f0", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/cjishu.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/cjishu.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/cjishu", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 6 }, { "family": "creprote", "family_name": "Creprote", "category": "ransomware", "rule_id": "c49e2b84-5b65-5882-9b63-9baf0f6e9163", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/creprote.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/creprote.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/creprote", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 6 }, { "family": "crypmodadv", "family_name": "Crypmodadv", "category": "ransomware", "rule_id": "836399dc-629e-5b1d-84ea-037d3fa6f715", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/crypmodadv.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/crypmodadv.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/crypmodadv", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 6 }, { "family": "deepscan", "family_name": "Deepscan", "category": "advanced_threat", "rule_id": "fceeba4f-b7e1-59ee-b309-3929076f8b98", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/deepscan.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/deepscan.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/deepscan", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 6 }, { "family": "delfidelfi", "family_name": "Delfidelfi", "category": "trojan", "rule_id": "6793c0d8-c5f2-56e7-baa9-684313785a62", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/delfidelfi.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/delfidelfi.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/delfidelfi", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 6 }, { "family": "delikle", "family_name": "Delikle", "category": "ransomware", "rule_id": "14b90101-eac5-57e5-8aec-5329699ab4d8", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/delikle.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/delikle.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/delikle", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 6 }, { "family": "detroie", "family_name": "Detroie", "category": "ransomware", "rule_id": "d4d6c759-919b-5497-a18b-d4ddab5aca54", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/detroie.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/detroie.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/detroie", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 6 }, { "family": "dotnet", "family_name": "Dotnet", "category": "ransomware", "rule_id": "7b1582ad-6f25-5893-b82b-6bff1d06d241", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/dotnet.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/dotnet.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/dotnet", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 6 }, { "family": "dotto", "family_name": "Dotto", "category": "ransomware", "rule_id": "182a205d-9868-55d6-b05a-88ea678acf76", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/dotto.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/dotto.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/dotto", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 6 }, { "family": "doyo", "family_name": "Doyo", "category": "advanced_threat", "rule_id": "a362989f-e007-5ef0-b971-e6b657a02e12", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/doyo.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/doyo.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/doyo", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 6 }, { "family": "duphead", "family_name": "Duphead", "category": "ransomware", "rule_id": "dbf604d1-e867-5039-bae6-44bd3bb283e6", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/duphead.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/duphead.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/duphead", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 6 }, { "family": "ekidoa", "family_name": "Ekidoa", "category": "ransomware", "rule_id": "d5d34d94-524c-54fe-b17d-1489156ad37a", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/ekidoa.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/ekidoa.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/ekidoa", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 6 }, { "family": "epack", "family_name": "Epack", "category": "ransomware", "rule_id": "b3f8c14b-0bb5-51ea-8758-5abe3ce71363", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/epack.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/epack.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/epack", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 6 }, { "family": "fbtaken", "family_name": "Fbtaken", "category": "ransomware", "rule_id": "c02864cb-66a9-5a35-8aa1-1cfe58c7764c", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/fbtaken.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/fbtaken.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/fbtaken", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 6 }, { "family": "firstinj", "family_name": "Firstinj", "category": "ransomware", "rule_id": "3de2afbb-7df7-58a2-bdf5-1f928a2f1209", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/firstinj.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/firstinj.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/firstinj", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 6 }, { "family": "freenew", "family_name": "Freenew", "category": "advanced_threat", "rule_id": "28089ea9-9564-5188-85f1-525fef2010b1", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/freenew.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/freenew.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/freenew", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 6 }, { "family": "genericgb", "family_name": "Genericgb", "category": "ransomware", "rule_id": "c35e342f-2d0f-5141-b01a-c7629a1abf4e", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/genericgb.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/genericgb.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/genericgb", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 6 }, { "family": "genericrxau", "family_name": "Genericrxau", "category": "ransomware", "rule_id": "cbe01335-53eb-58af-b828-0402d080b892", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/genericrxau.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/genericrxau.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/genericrxau", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 6 }, { "family": "hiloti", "family_name": "Hiloti", "category": "ransomware", "rule_id": "050f173f-fc52-505c-b1fa-17220a542886", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/hiloti.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/hiloti.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/hiloti", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 6 }, { "family": "hostspatcher", "family_name": "Hostspatcher", "category": "trojan", "rule_id": "c46848e7-c0fc-5c67-b26a-286fb229dc33", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/hostspatcher.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/hostspatcher.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/hostspatcher", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 6 }, { "family": "huhk", "family_name": "Huhk", "category": "ransomware", "rule_id": "8357391e-06bf-5ed3-81e1-6e37bfee7f9c", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/huhk.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/huhk.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/huhk", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 6 }, { "family": "hype", "family_name": "Hype", "category": "ransomware", "rule_id": "e90703fa-222f-51b4-93d8-173a6cb4e6f7", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/hype.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/hype.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/hype", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 6 }, { "family": "idsohtu", "family_name": "Idsohtu", "category": "ransomware", "rule_id": "a7fee015-40c4-5965-bc34-bad749957fbf", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/idsohtu.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/idsohtu.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/idsohtu", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 6 }, { "family": "imminent", "family_name": "Imminent", "category": "trojan", "rule_id": "b359ac2f-4085-575d-b801-9b7d21ac516b", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/imminent.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/imminent.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/imminent", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 6 }, { "family": "installiq", "family_name": "Installiq", "category": "advanced_threat", "rule_id": "4a40ce5b-c156-56b9-9da3-a9500be3a503", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/installiq.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/installiq.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/installiq", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 6 }, { "family": "installmetrix", "family_name": "Installmetrix", "category": "advanced_threat", "rule_id": "c12b161a-b4a7-51a0-a7ec-a31b2dc1428d", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/installmetrix.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/installmetrix.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/installmetrix", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 6 }, { "family": "installmonetizer", "family_name": "Installmonetizer", "category": "advanced_threat", "rule_id": "69ec1185-b257-5582-99c3-40430990d96f", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/installmonetizer.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/installmonetizer.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/installmonetizer", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 6 }, { "family": "jumpta", "family_name": "Jumpta", "category": "ransomware", "rule_id": "c12b561e-ce8a-5404-9c7a-0158583d7a09", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/jumpta.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/jumpta.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/jumpta", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 6 }, { "family": "lazagne", "family_name": "Lazagne", "category": "advanced_threat", "rule_id": "34971afd-5efb-58f6-b387-c0cfe4198b83", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/lazagne.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/lazagne.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/lazagne", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 6 }, { "family": "leivion", "family_name": "Leivion", "category": "ransomware", "rule_id": "e6ccecc7-8dcc-5544-b036-7b3224b2c39d", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/leivion.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/leivion.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/leivion", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 6 }, { "family": "lotoor", "family_name": "Lotoor", "category": "trojan", "rule_id": "fae86cb8-16d0-5a26-8d6a-06d04c961afc", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/lotoor.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/lotoor.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/lotoor", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 6 }, { "family": "netcat", "family_name": "Netcat", "category": "advanced_threat", "rule_id": "fc86405f-1840-56de-a67a-d9829e5f2d3f", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/netcat.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/netcat.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/netcat", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 6 }, { "family": "nilage", "family_name": "Nilage", "category": "ransomware", "rule_id": "16601497-219e-5a51-8ae2-93627c44093d", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/nilage.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/nilage.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/nilage", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 6 }, { "family": "nivdort", "family_name": "Nivdort", "category": "trojan", "rule_id": "3cbd8cb7-d2d7-5517-9ec9-5bc5b1b6418c", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/nivdort.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/nivdort.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/nivdort", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 6 }, { "family": "orsam", "family_name": "Orsam", "category": "ransomware", "rule_id": "b52c430f-f584-5549-9196-b0839eb68b19", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/orsam.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/orsam.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/orsam", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 6 }, { "family": "pavica", "family_name": "Pavica", "category": "ransomware", "rule_id": "c3bbcf5c-b42a-56b9-bab3-bdd1d1f20def", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/pavica.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/pavica.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/pavica", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 6 }, { "family": "peals", "family_name": "Peals", "category": "ransomware", "rule_id": "494b15d5-fb2c-54b6-8b46-dab82f904bd0", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/peals.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/peals.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/peals", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 6 }, { "family": "poscardstealer", "family_name": "Poscardstealer", "category": "trojan", "rule_id": "307e20a3-ee0c-5fa8-b971-f2621468123d", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/poscardstealer.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/poscardstealer.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/poscardstealer", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 6 }, { "family": "psloader", "family_name": "Psloader", "category": "ransomware", "rule_id": "c8008dd1-c536-5466-8628-fad159406e0f", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/psloader.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/psloader.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/psloader", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 6 }, { "family": "rastarby", "family_name": "Rastarby", "category": "ransomware", "rule_id": "aeedb550-dd2f-5dd3-9610-583733d31a3f", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/rastarby.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/rastarby.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/rastarby", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 6 }, { "family": "recex", "family_name": "Recex", "category": "ransomware", "rule_id": "a323555f-189f-54c9-bebb-b0bca28b0a17", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/recex.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/recex.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/recex", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 6 }, { "family": "refog", "family_name": "Refog", "category": "advanced_threat", "rule_id": "25759969-7c59-5c98-9b2e-6ae4852e1508", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/refog.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/refog.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/refog", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 6 }, { "family": "safeterra", "family_name": "Safeterra", "category": "advanced_threat", "rule_id": "34e8edd9-730c-5d34-9438-dee1b91c3447", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/safeterra.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/safeterra.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/safeterra", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 6 }, { "family": "sagecrypt", "family_name": "Sagecrypt", "category": "ransomware", "rule_id": "d32f9be4-9f3d-5be8-92c7-01c617914608", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/sagecrypt.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/sagecrypt.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/sagecrypt", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 6 }, { "family": "samas", "family_name": "Samas", "category": "ransomware", "rule_id": "70f33c2b-d6c3-552f-9b74-f3f53b82ca0e", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/samas.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/samas.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/samas", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 6 }, { "family": "samca", "family_name": "Samca", "category": "ransomware", "rule_id": "c2432838-ed93-5c45-9c95-944ea417e072", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/samca.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/samca.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/samca", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 6 }, { "family": "sciagnij", "family_name": "Sciagnij", "category": "advanced_threat", "rule_id": "f9f4c5a7-d68b-545e-a5cd-bf118d6138e7", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/sciagnij.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/sciagnij.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/sciagnij", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 6 }, { "family": "screenmate", "family_name": "Screenmate", "category": "advanced_threat", "rule_id": "171efb71-5dbc-5ce6-b21e-486c2fb6217a", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/screenmate.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/screenmate.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/screenmate", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 6 }, { "family": "sinresby", "family_name": "Sinresby", "category": "ransomware", "rule_id": "7055a0df-bf26-5722-a83e-3743c8b61341", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/sinresby.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/sinresby.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/sinresby", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 6 }, { "family": "smartinstaller", "family_name": "Smartinstaller", "category": "advanced_threat", "rule_id": "5bf9994e-5750-56f5-b98b-4a9ed3fbe3e7", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/smartinstaller.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/smartinstaller.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/smartinstaller", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 6 }, { "family": "smee", "family_name": "Smee", "category": "ransomware", "rule_id": "ea941324-f24f-56a3-9ca6-78b13149a4a0", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/smee.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/smee.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/smee", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 6 }, { "family": "softobase", "family_name": "Softobase", "category": "advanced_threat", "rule_id": "3656b9e7-f28a-53ad-ac60-489812a38970", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/softobase.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/softobase.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/softobase", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 6 }, { "family": "speedcat", "family_name": "Speedcat", "category": "advanced_threat", "rule_id": "73510301-11e0-53e1-99d1-97c802fa253a", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/speedcat.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/speedcat.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/speedcat", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 6 }, { "family": "swotter", "family_name": "Swotter", "category": "ransomware", "rule_id": "d7ee5e32-72bb-566c-9cb5-82cd29a6451c", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/swotter.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/swotter.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/swotter", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 6 }, { "family": "systemcare", "family_name": "Systemcare", "category": "advanced_threat", "rule_id": "d2b28dae-b7e7-5dd3-bb6d-1e75c8d05ce3", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/systemcare.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/systemcare.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/systemcare", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 6 }, { "family": "tilken", "family_name": "Tilken", "category": "ransomware", "rule_id": "aaa922b5-50f0-52fa-a73c-0713bf67ae75", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/tilken.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/tilken.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/tilken", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 6 }, { "family": "toga", "family_name": "Toga", "category": "ransomware", "rule_id": "5d1af436-ab29-5995-bf58-5982ce00839a", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/toga.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/toga.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/toga", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 6 }, { "family": "toptools", "family_name": "Toptools", "category": "advanced_threat", "rule_id": "d619c089-0b5b-563c-ad93-b19acc41916b", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/toptools.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/toptools.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/toptools", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 6 }, { "family": "torntv", "family_name": "Torntv", "category": "advanced_threat", "rule_id": "985a29fc-681e-5269-bbfe-f24adf3e7ee6", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/torntv.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/torntv.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/torntv", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 6 }, { "family": "vanilloader", "family_name": "Vanilloader", "category": "ransomware", "rule_id": "183da680-2cb0-5a58-b7a5-27109b1da524", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/vanilloader.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/vanilloader.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/vanilloader", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 6 }, { "family": "venik", "family_name": "Venik", "category": "ransomware", "rule_id": "cb97bb15-627c-51af-b82d-ff81db349237", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/venik.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/venik.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/venik", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 6 }, { "family": "veriato", "family_name": "Veriato", "category": "advanced_threat", "rule_id": "ba887c6c-7567-56ba-a45d-45642eaab5c9", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/veriato.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/veriato.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/veriato", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 6 }, { "family": "vidro", "family_name": "Vidro", "category": "ransomware", "rule_id": "c8f6f96f-ea30-55e0-b9af-b8c34d8a7d8f", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/vidro.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/vidro.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/vidro", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 6 }, { "family": "xpyn", "family_name": "Xpyn", "category": "ransomware", "rule_id": "d466c222-2eab-5050-9ac7-4928fb920736", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/xpyn.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/xpyn.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/xpyn", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 6 }, { "family": "zygug", "family_name": "Zygug", "category": "ransomware", "rule_id": "648db4d9-1e45-53eb-a85b-89aea92559aa", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/zygug.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/zygug.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/zygug", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 6 }, { "family": "agentwdcr", "family_name": "Agentwdcr", "category": "ransomware", "rule_id": "1693bcbc-30fc-59c4-91ab-846424a9b1fa", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/agentwdcr.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/agentwdcr.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/agentwdcr", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 5 }, { "family": "amavaldo", "family_name": "Amavaldo", "category": "trojan", "rule_id": "46b44138-1498-5388-841c-08ec8214b878", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/amavaldo.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/amavaldo.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/amavaldo", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 5 }, { "family": "autoitscript", "family_name": "Autoitscript", "category": "trojan", "rule_id": "d1d79d76-3fe4-5af3-8278-fc518b17975d", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/autoitscript.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/autoitscript.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/autoitscript", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 5 }, { "family": "baserch", "family_name": "Baserch", "category": "ransomware", "rule_id": "ca2089c9-9517-5b19-b037-128e72982bbc", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/baserch.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/baserch.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/baserch", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 5 }, { "family": "bero", "family_name": "Bero", "category": "ransomware", "rule_id": "bc83fabf-7821-5869-ad24-1a9acb1231cc", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/bero.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/bero.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/bero", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 5 }, { "family": "bobax", "family_name": "Bobax", "category": "trojan", "rule_id": "baf7a1ad-3479-5077-ad74-90aa0deb58a8", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/bobax.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/bobax.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/bobax", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 5 }, { "family": "bunndle", "family_name": "Bunndle", "category": "trojan", "rule_id": "5b46faad-2b11-58eb-af5e-fadb05f37d40", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/bunndle.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/bunndle.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/bunndle", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 5 }, { "family": "candyopen", "family_name": "Candyopen", "category": "trojan", "rule_id": "fc3b934d-811e-508a-8c41-ff404fe1b114", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/candyopen.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/candyopen.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/candyopen", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 5 }, { "family": "cardinal", "family_name": "Cardinal", "category": "ransomware", "rule_id": "323fc67f-9420-56b5-b455-8be6c40eb165", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/cardinal.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/cardinal.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/cardinal", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 5 }, { "family": "chifrax", "family_name": "Chifrax", "category": "ransomware", "rule_id": "9eb327f1-23a6-5bbf-bae1-7750c6dd2a11", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/chifrax.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/chifrax.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/chifrax", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 5 }, { "family": "conjar", "family_name": "Conjar", "category": "ransomware", "rule_id": "344e57d6-1a22-5dbf-8fd5-4de1326e067c", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/conjar.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/conjar.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/conjar", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 5 }, { "family": "coupons", "family_name": "Coupons", "category": "advanced_threat", "rule_id": "07ae6654-969b-59d9-aa07-0ea46b9b1d5a", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/coupons.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/coupons.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/coupons", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 5 }, { "family": "cryrar", "family_name": "Cryrar", "category": "ransomware", "rule_id": "779308e0-07c6-5ceb-96a9-bb3bce27b178", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/cryrar.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/cryrar.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/cryrar", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 5 }, { "family": "cslz", "family_name": "Cslz", "category": "ransomware", "rule_id": "bd60672c-5a3f-56c5-a712-f6468db0850c", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/cslz.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/cslz.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/cslz", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 5 }, { "family": "cyfin", "family_name": "Cyfin", "category": "ransomware", "rule_id": "f2ddbe72-c5ce-527c-a8c8-ea822f5212f4", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/cyfin.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/cyfin.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/cyfin", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 5 }, { "family": "cyn", "family_name": "Cyn", "category": "file_infector", "rule_id": "3e46475e-0f38-5020-ad07-5b345fdc381f", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/cyn.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/cyn.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/cyn", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 5 }, { "family": "dadobra", "family_name": "Dadobra", "category": "ransomware", "rule_id": "df3eee60-186f-5e5f-948e-71d3207706a8", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/dadobra.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/dadobra.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/dadobra", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 5 }, { "family": "delfiles", "family_name": "Delfiles", "category": "ransomware", "rule_id": "28622c1f-f59f-5e4b-bdf6-322f6047f592", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/delfiles.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/delfiles.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/delfiles", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 5 }, { "family": "directdownloader", "family_name": "Directdownloader", "category": "advanced_threat", "rule_id": "15f26278-1a5c-596a-847f-c831b26401b7", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/directdownloader.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/directdownloader.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/directdownloader", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 5 }, { "family": "dnschange", "family_name": "Dnschange", "category": "trojan", "rule_id": "09ff99ce-ea2f-5628-beea-7a36704c4ca6", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/dnschange.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/dnschange.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/dnschange", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 5 }, { "family": "dodiw", "family_name": "Dodiw", "category": "ransomware", "rule_id": "a2a1bb8a-203b-541d-aeba-4ab22f14df11", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/dodiw.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/dodiw.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/dodiw", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 5 }, { "family": "dominator", "family_name": "Dominator", "category": "ransomware", "rule_id": "258d118d-7f2f-5960-9679-7d822c080491", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/dominator.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/dominator.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/dominator", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 5 }, { "family": "downer", "family_name": "Downer", "category": "ransomware", "rule_id": "429b5c61-4741-50cf-8e47-830deb09d933", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/downer.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/downer.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/downer", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 5 }, { "family": "downloadsoft", "family_name": "Downloadsoft", "category": "advanced_threat", "rule_id": "bf43e9cd-d8ca-5f67-8ab8-bdd7d3d17d66", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/downloadsoft.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/downloadsoft.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/downloadsoft", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 5 }, { "family": "drivertalent", "family_name": "Drivertalent", "category": "advanced_threat", "rule_id": "0939e033-0be1-5964-bfff-5038eba9cec9", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/drivertalent.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/drivertalent.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/drivertalent", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 5 }, { "family": "elitekeylogger", "family_name": "Elitekeylogger", "category": "advanced_threat", "rule_id": "2936d216-4f8e-557d-ac84-4de9c3e7c7a9", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/elitekeylogger.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/elitekeylogger.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/elitekeylogger", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 5 }, { "family": "enestedel", "family_name": "Enestedel", "category": "ransomware", "rule_id": "d787d3a1-1a1f-5599-b5ad-c2d3b7d155cf", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/enestedel.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/enestedel.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/enestedel", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 5 }, { "family": "eziriznetreactor", "family_name": "Eziriznetreactor", "category": "ransomware", "rule_id": "d2b297d1-0e9c-596e-b5b8-4b9a66706c21", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/eziriznetreactor.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/eziriznetreactor.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/eziriznetreactor", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 5 }, { "family": "fakeie", "family_name": "Fakeie", "category": "ransomware", "rule_id": "ef30aa85-3a7f-5e51-a380-ca57e4d1615e", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/fakeie.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/fakeie.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/fakeie", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 5 }, { "family": "fbsi", "family_name": "Fbsi", "category": "ransomware", "rule_id": "0997d771-866b-589d-bc79-a832a69ec8e0", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/fbsi.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/fbsi.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/fbsi", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 5 }, { "family": "forcestartpage", "family_name": "Forcestartpage", "category": "advanced_threat", "rule_id": "0cbd3a88-e51e-5189-82ee-08f8bcb81052", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/forcestartpage.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/forcestartpage.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/forcestartpage", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 5 }, { "family": "fraudster", "family_name": "Fraudster", "category": "ransomware", "rule_id": "4e018a7b-31a8-5a0f-abdc-dd205cd910b7", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/fraudster.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/fraudster.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/fraudster", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 5 }, { "family": "gamebox", "family_name": "Gamebox", "category": "advanced_threat", "rule_id": "194e4528-9388-59e4-af00-4818043feb63", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/gamebox.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/gamebox.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/gamebox", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 5 }, { "family": "gatak", "family_name": "Gatak", "category": "ransomware", "rule_id": "08f6ec1c-8cc2-56c5-a174-d568dda79cae", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/gatak.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/gatak.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/gatak", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 5 }, { "family": "genericrxcl", "family_name": "Genericrxcl", "category": "ransomware", "rule_id": "249bd60f-cd06-56c8-9856-f88882303682", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/genericrxcl.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/genericrxcl.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/genericrxcl", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 5 }, { "family": "genericrxen", "family_name": "Genericrxen", "category": "ransomware", "rule_id": "1bcd3272-ed08-5696-8878-bab2b6e5195b", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/genericrxen.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/genericrxen.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/genericrxen", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 5 }, { "family": "gojdue", "family_name": "Gojdue", "category": "ransomware", "rule_id": "dcdb66cd-ad72-5a84-a1c9-2ea7111bc7e4", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/gojdue.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/gojdue.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/gojdue", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 5 }, { "family": "haperlock", "family_name": "Haperlock", "category": "ransomware", "rule_id": "f39ccce8-da2d-539c-9293-f024b1fe7a25", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/haperlock.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/haperlock.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/haperlock", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 5 }, { "family": "hideproc", "family_name": "Hideproc", "category": "trojan", "rule_id": "e5341bca-63d7-5b34-b783-3c907d978808", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/hideproc.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/hideproc.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/hideproc", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 5 }, { "family": "inegery", "family_name": "Inegery", "category": "ransomware", "rule_id": "be233dae-2e64-5893-96b7-776f887f0b79", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/inegery.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/inegery.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/inegery", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 5 }, { "family": "inno", "family_name": "Inno", "category": "advanced_threat", "rule_id": "44384d0d-b090-5e3e-b7bf-37e3f7d540ff", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/inno.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/inno.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/inno", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 5 }, { "family": "jyuqet", "family_name": "Jyuqet", "category": "ransomware", "rule_id": "7506e6db-b3bd-5edc-9ed2-6f107e4b07a4", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/jyuqet.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/jyuqet.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/jyuqet", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 5 }, { "family": "kasinst", "family_name": "Kasinst", "category": "ransomware", "rule_id": "eadaae43-ec3f-5835-81d2-20fbf1b8196d", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/kasinst.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/kasinst.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/kasinst", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 5 }, { "family": "kaymundler", "family_name": "Kaymundler", "category": "advanced_threat", "rule_id": "4394f28b-ad5c-5778-81f0-8fc53de47e23", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/kaymundler.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/kaymundler.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/kaymundler", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 5 }, { "family": "kido", "family_name": "Kido", "category": "advanced_threat", "rule_id": "bafc129b-26de-5921-88df-71946406929d", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/kido.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/kido.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/kido", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 5 }, { "family": "laban", "family_name": "Laban", "category": "ransomware", "rule_id": "eebf9b7f-5695-5622-b975-a95659ed8318", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/laban.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/laban.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/laban", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 5 }, { "family": "loki", "family_name": "Loki", "category": "trojan", "rule_id": "4e6b8f88-3d6b-50de-9ecf-e0cc6963633b", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/loki.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/loki.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/loki", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 5 }, { "family": "mdrop", "family_name": "Mdrop", "category": "ransomware", "rule_id": "a44fc61f-e18d-5d7d-a0e8-b5519bb611c3", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/mdrop.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/mdrop.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/mdrop", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 5 }, { "family": "megasearch", "family_name": "Megasearch", "category": "advanced_threat", "rule_id": "a37966d4-5cb6-5566-b453-c4808d345c4f", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/megasearch.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/megasearch.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/megasearch", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 5 }, { "family": "mensa", "family_name": "Mensa", "category": "ransomware", "rule_id": "89798753-7e27-52c9-9076-916fb4c28b2b", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/mensa.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/mensa.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/mensa", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 5 }, { "family": "mods", "family_name": "Mods", "category": "advanced_threat", "rule_id": "2296cac3-1b02-5eee-bd03-8c365db58a1f", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/mods.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/mods.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/mods", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 5 }, { "family": "mosucker", "family_name": "Mosucker", "category": "trojan", "rule_id": "aab27f22-c2be-599d-909d-3349e8b8af1d", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/mosucker.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/mosucker.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/mosucker", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 5 }, { "family": "msildrop", "family_name": "Msildrop", "category": "ransomware", "rule_id": "ffdd22c3-2ec0-5aeb-b332-9ed670c786cf", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/msildrop.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/msildrop.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/msildrop", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 5 }, { "family": "mufanom", "family_name": "Mufanom", "category": "ransomware", "rule_id": "8298375a-2cde-5ad0-926a-88f9a8311e80", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/mufanom.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/mufanom.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/mufanom", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 5 }, { "family": "multibar", "family_name": "Multibar", "category": "advanced_threat", "rule_id": "fcab42be-f77b-5036-8452-1a3ccf1863db", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/multibar.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/multibar.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/multibar", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 5 }, { "family": "naprat", "family_name": "Naprat", "category": "ransomware", "rule_id": "71d027fd-4ef0-5e91-ab39-2dda8ee0ed15", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/naprat.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/naprat.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/naprat", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 5 }, { "family": "necne", "family_name": "Necne", "category": "ransomware", "rule_id": "72754883-f466-5cc9-b9c8-8cce5eea8e98", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/necne.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/necne.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/necne", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 5 }, { "family": "offerinstall", "family_name": "Offerinstall", "category": "advanced_threat", "rule_id": "ced27f72-8966-549f-b1b6-42956b24cf81", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/offerinstall.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/offerinstall.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/offerinstall", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 5 }, { "family": "olympicdestroyer", "family_name": "Olympicdestroyer", "category": "ransomware", "rule_id": "b18997bf-33fb-5fc0-aa7a-69f3ee75ff46", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/olympicdestroyer.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/olympicdestroyer.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/olympicdestroyer", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 5 }, { "family": "passcrypt", "family_name": "Passcrypt", "category": "ransomware", "rule_id": "0eee24cf-826d-51be-8723-c052438af340", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/passcrypt.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/passcrypt.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/passcrypt", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 5 }, { "family": "perkiler", "family_name": "Perkiler", "category": "ransomware", "rule_id": "aa7719b2-ecae-5701-b84a-d71716ecfefe", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/perkiler.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/perkiler.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/perkiler", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 5 }, { "family": "pintu", "family_name": "Pintu", "category": "ransomware", "rule_id": "c0bad289-d41e-5d7d-8eb1-06b85676d2d2", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/pintu.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/pintu.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/pintu", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 5 }, { "family": "pres", "family_name": "Pres", "category": "ransomware", "rule_id": "59a07cc4-2cf6-5333-9d61-557d68c73989", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/pres.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/pres.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/pres", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 5 }, { "family": "purga", "family_name": "Purga", "category": "ransomware", "rule_id": "e1e1224c-db33-5eb6-afe4-734f0fba4cb2", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/purga.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/purga.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/purga", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 5 }, { "family": "qadars", "family_name": "Qadars", "category": "trojan", "rule_id": "ae0c7e18-6ecd-5984-9778-d74d4190fc9a", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/qadars.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/qadars.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/qadars", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 5 }, { "family": "ranserkd", "family_name": "Ranserkd", "category": "ransomware", "rule_id": "8753ccfa-b172-5eec-b7b8-f7557dc17bb0", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/ranserkd.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/ranserkd.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/ranserkd", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 5 }, { "family": "rantest", "family_name": "Rantest", "category": "ransomware", "rule_id": "5094bb66-2a94-5b41-a4d3-c3290fc51cb7", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/rantest.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/rantest.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/rantest", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 5 }, { "family": "remoh", "family_name": "Remoh", "category": "ransomware", "rule_id": "95339933-c76c-5ce8-962c-b479803fde68", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/remoh.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/remoh.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/remoh", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 5 }, { "family": "rontokbr", "family_name": "Rontokbr", "category": "advanced_threat", "rule_id": "2e116cb5-2f82-5d00-8b55-db5313587857", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/rontokbr.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/rontokbr.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/rontokbr", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 5 }, { "family": "rovnix", "family_name": "Rovnix", "category": "bootkit", "rule_id": "6b0817e2-0e51-5a67-896c-fac8f64839cf", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/rovnix.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/rovnix.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/rovnix", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 5 }, { "family": "ruco", "family_name": "Ruco", "category": "ransomware", "rule_id": "c0119cb4-e886-5008-ab76-3c5931f16adf", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/ruco.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/ruco.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/ruco", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 5 }, { "family": "sahat", "family_name": "Sahat", "category": "ransomware", "rule_id": "d59b47f4-2919-581e-a85f-d2e4e271bed0", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/sahat.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/sahat.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/sahat", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 5 }, { "family": "sasfis", "family_name": "Sasfis", "category": "trojan", "rule_id": "61bbfd3a-99b4-5cf2-86f7-770a0c6c9c16", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/sasfis.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/sasfis.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/sasfis", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 5 }, { "family": "schwarzesonne", "family_name": "Schwarzesonne", "category": "ransomware", "rule_id": "b92f89e7-f7d5-5795-ab1d-2a650de14275", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/schwarzesonne.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/schwarzesonne.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/schwarzesonne", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 5 }, { "family": "separ", "family_name": "Separ", "category": "trojan", "rule_id": "6123daa5-afe3-50d8-977b-630a2f3019c1", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/separ.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/separ.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/separ", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 5 }, { "family": "singleclickoptimizer", "family_name": "Singleclickoptimizer", "category": "advanced_threat", "rule_id": "fdc5a10e-8215-51a2-8f22-d878b4ce7408", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/singleclickoptimizer.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/singleclickoptimizer.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/singleclickoptimizer", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 5 }, { "family": "skillis", "family_name": "Skillis", "category": "ransomware", "rule_id": "addadf5f-ec8b-530e-a796-3e99255fdb89", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/skillis.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/skillis.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/skillis", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 5 }, { "family": "smbd", "family_name": "Smbd", "category": "advanced_threat", "rule_id": "35be6b0a-c52d-5292-9bfe-bdb2b07b76bd", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/smbd.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/smbd.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/smbd", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 5 }, { "family": "smearpasse", "family_name": "Smearpasse", "category": "ransomware", "rule_id": "c0f04677-fff7-53eb-9c1e-11404bf2d148", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/smearpasse.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/smearpasse.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/smearpasse", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 5 }, { "family": "snare", "family_name": "Snare", "category": "trojan", "rule_id": "04956b67-c6f3-55a2-a842-d8af2faa33c7", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/snare.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/snare.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/snare", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 5 }, { "family": "sofacy", "family_name": "Sofacy", "category": "trojan", "rule_id": "5b0ed574-d4f9-5087-9d22-337f877e64f3", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/sofacy.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/sofacy.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/sofacy", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 5 }, { "family": "softomate", "family_name": "Softomate", "category": "advanced_threat", "rule_id": "e4a25541-8dec-57de-9b23-de0ee38c1187", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/softomate.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/softomate.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/softomate", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 5 }, { "family": "stocde", "family_name": "Stocde", "category": "ransomware", "rule_id": "e5eb131c-09f1-521b-a82b-bff999ffe2bb", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/stocde.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/stocde.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/stocde", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 5 }, { "family": "strongpity", "family_name": "Strongpity", "category": "trojan", "rule_id": "2cc7a878-c966-5beb-b97d-adc6389f8926", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/strongpity.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/strongpity.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/strongpity", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 5 }, { "family": "tanske", "family_name": "Tanske", "category": "ransomware", "rule_id": "7e745208-e534-587f-b99c-8cd3235e1384", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/tanske.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/tanske.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/tanske", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 5 }, { "family": "tar4rkdi", "family_name": "Tar4rkdi", "category": "ransomware", "rule_id": "47bcad53-98dd-50db-a9d4-7985d2b3ac6d", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/tar4rkdi.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/tar4rkdi.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/tar4rkdi", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 5 }, { "family": "tibs", "family_name": "Tibs", "category": "trojan", "rule_id": "aebb6bb8-22c7-5d3c-b46f-0c2ee1240042", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/tibs.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/tibs.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/tibs", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 5 }, { "family": "tinukebot", "family_name": "Tinukebot", "category": "trojan", "rule_id": "1ead12b1-1653-558f-ae49-5facc60fce80", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/tinukebot.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/tinukebot.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/tinukebot", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 5 }, { "family": "uacme", "family_name": "Uacme", "category": "ransomware", "rule_id": "efb058ae-0f43-57a3-8443-58efce69d519", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/uacme.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/uacme.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/uacme", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 5 }, { "family": "ukpa", "family_name": "Ukpa", "category": "ransomware", "rule_id": "03bb375b-cbfd-5134-9a16-97c4d0cc7e4f", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/ukpa.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/ukpa.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/ukpa", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 5 }, { "family": "vapsup", "family_name": "Vapsup", "category": "ransomware", "rule_id": "b373e18d-1e7a-56a5-97b2-e4df32e6c259", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/vapsup.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/vapsup.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/vapsup", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 5 }, { "family": "vbinder", "family_name": "Vbinder", "category": "trojan", "rule_id": "d2c833a8-3831-538b-a892-ed92273c513b", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/vbinder.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/vbinder.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/vbinder", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 5 }, { "family": "wigon", "family_name": "Wigon", "category": "ransomware", "rule_id": "684a3118-3b6e-5d39-bf78-abf0b9d9708b", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/wigon.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/wigon.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/wigon", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 5 }, { "family": "winevar", "family_name": "Winevar", "category": "trojan", "rule_id": "f44b9e48-b236-575a-819d-c58be1c1a7fb", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/winevar.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/winevar.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/winevar", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 5 }, { "family": "winspy", "family_name": "Winspy", "category": "advanced_threat", "rule_id": "fafed627-cfb1-5f93-94d0-44b581d2e672", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/winspy.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/winspy.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/winspy", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 5 }, { "family": "wintrim", "family_name": "Wintrim", "category": "trojan", "rule_id": "f2e6298b-5296-581d-986e-084192672880", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/wintrim.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/wintrim.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/wintrim", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 5 }, { "family": "zafi", "family_name": "Zafi", "category": "advanced_threat", "rule_id": "7df6696a-661a-5a7c-904f-21a883e058dc", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/zafi.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/zafi.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/zafi", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 5 }, { "family": "000c", "family_name": "000c", "category": "ransomware", "rule_id": "e67041bf-1543-57fa-af79-f0152ec4ee62", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/000c.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/000c.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/000c", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 4 }, { "family": "adduser", "family_name": "Adduser", "category": "backdoor", "rule_id": "8665ab40-ae44-5ade-9376-6752145843b2", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/adduser.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/adduser.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/adduser", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 4 }, { "family": "arcdoor", "family_name": "Arcdoor", "category": "backdoor", "rule_id": "a5bb91f6-3585-5d0d-8b53-2c21807a377b", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/arcdoor.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/arcdoor.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/arcdoor", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 4 }, { "family": "armadillo", "family_name": "Armadillo", "category": "ransomware", "rule_id": "43e1eb5c-6921-5f80-acc2-c2a0aa59a853", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/armadillo.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/armadillo.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/armadillo", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 4 }, { "family": "blakamba", "family_name": "Blakamba", "category": "ransomware", "rule_id": "fbc239b0-f3e7-5c54-8c0b-7f38e5f35e90", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/blakamba.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/blakamba.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/blakamba", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 4 }, { "family": "boht", "family_name": "Boht", "category": "ransomware", "rule_id": "f22a44ad-b576-593e-bcfa-42f51480c9d6", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/boht.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/boht.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/boht", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 4 }, { "family": "bzub", "family_name": "Bzub", "category": "trojan", "rule_id": "eb6a211e-2115-58c2-897c-2c1809863d17", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/bzub.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/bzub.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/bzub", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 4 }, { "family": "canbis", "family_name": "Canbis", "category": "ransomware", "rule_id": "2a619199-ab2e-5cb6-be15-3d7ca1116010", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/canbis.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/canbis.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/canbis", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 4 }, { "family": "clickmein", "family_name": "Clickmein", "category": "advanced_threat", "rule_id": "dff29e52-e408-52a5-80ed-c8c9a3fab458", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/clickmein.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/clickmein.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/clickmein", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 4 }, { "family": "cnbtech", "family_name": "Cnbtech", "category": "advanced_threat", "rule_id": "b4a50d73-e7bd-5a95-9c04-890c9a8c6290", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/cnbtech.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/cnbtech.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/cnbtech", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 4 }, { "family": "cpuminer", "family_name": "Cpuminer", "category": "ransomware", "rule_id": "11d107b5-4d08-515f-9eb3-55c0ad65a9d6", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/cpuminer.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/cpuminer.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/cpuminer", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 4 }, { "family": "cryfile", "family_name": "Cryfile", "category": "ransomware", "rule_id": "43f8e8ba-b925-5966-bc5e-cf4f30b09d43", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/cryfile.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/cryfile.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/cryfile", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 4 }, { "family": "cryptconsole", "family_name": "Cryptconsole", "category": "ransomware", "rule_id": "53fc4d5d-3eae-5f15-8810-b01a4019ba80", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/cryptconsole.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/cryptconsole.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/cryptconsole", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 4 }, { "family": "denes", "family_name": "Denes", "category": "ransomware", "rule_id": "ae47d21f-c4c8-5375-8ea1-9500285e727f", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/denes.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/denes.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/denes", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 4 }, { "family": "dubfot", "family_name": "Dubfot", "category": "ransomware", "rule_id": "cd45e29c-58b8-57b5-9c69-1f3c3d936d99", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/dubfot.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/dubfot.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/dubfot", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 4 }, { "family": "dumpy", "family_name": "Dumpy", "category": "trojan", "rule_id": "0f5f83a4-7f77-51e1-bca9-48a4a81d2a9e", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/dumpy.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/dumpy.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/dumpy", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 4 }, { "family": "dycler", "family_name": "Dycler", "category": "ransomware", "rule_id": "4f6ae27e-5be3-54b3-afcf-9901d02156ce", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/dycler.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/dycler.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/dycler", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 4 }, { "family": "eggnog", "family_name": "Eggnog", "category": "ransomware", "rule_id": "461f9807-f53a-523d-9a57-0e9b161c33de", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/eggnog.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/eggnog.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/eggnog", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 4 }, { "family": "emelent", "family_name": "Emelent", "category": "ransomware", "rule_id": "bf6f8aa3-80bd-5bb4-a824-f06848c7b338", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/emelent.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/emelent.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/emelent", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 4 }, { "family": "emogen", "family_name": "Emogen", "category": "ransomware", "rule_id": "ade2721f-b871-5869-b549-6be0b1810a6d", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/emogen.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/emogen.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/emogen", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 4 }, { "family": "eqtonex", "family_name": "Eqtonex", "category": "ransomware", "rule_id": "030d0ca5-5713-598c-83f1-337840794c9f", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/eqtonex.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/eqtonex.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/eqtonex", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 4 }, { "family": "fakeime", "family_name": "Fakeime", "category": "ransomware", "rule_id": "bf96fcc0-b142-535b-bdca-7c69e700399f", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/fakeime.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/fakeime.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/fakeime", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 4 }, { "family": "fakeoff", "family_name": "Fakeoff", "category": "advanced_threat", "rule_id": "2d401a21-3331-52fa-ab1e-3baf793b42e3", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/fakeoff.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/fakeoff.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/fakeoff", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 4 }, { "family": "fesber", "family_name": "Fesber", "category": "ransomware", "rule_id": "d5165d82-2986-5828-a228-e0c440b75dce", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/fesber.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/fesber.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/fesber", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 4 }, { "family": "filefinder", "family_name": "Filefinder", "category": "ransomware", "rule_id": "28effc23-a02b-56ae-a025-fe74b2b16bd0", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/filefinder.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/filefinder.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/filefinder", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 4 }, { "family": "floder", "family_name": "Floder", "category": "ransomware", "rule_id": "327a0adc-ca44-5d0a-8770-5005d6483bae", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/floder.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/floder.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/floder", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 4 }, { "family": "fwwy", "family_name": "Fwwy", "category": "ransomware", "rule_id": "237e13a7-04fc-5c3b-8379-a910959ab54d", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/fwwy.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/fwwy.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/fwwy", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 4 }, { "family": "gamania", "family_name": "Gamania", "category": "trojan", "rule_id": "ff1ce846-69b7-5595-af26-b1265046d42a", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/gamania.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/gamania.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/gamania", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 4 }, { "family": "gamup", "family_name": "Gamup", "category": "ransomware", "rule_id": "5e7867b8-9591-5dbc-8650-d92ff24f479e", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/gamup.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/gamup.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/gamup", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 4 }, { "family": "genericrxdr", "family_name": "Genericrxdr", "category": "ransomware", "rule_id": "cbbe977b-718c-5f1d-8220-bf155c23c2eb", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/genericrxdr.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/genericrxdr.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/genericrxdr", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 4 }, { "family": "gh0st", "family_name": "Gh0st", "category": "rat", "rule_id": "3cae79df-f14f-5e06-b4a0-85e5aaa52c9e", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/gh0st.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/gh0st.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/gh0st", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 4 }, { "family": "globeimposter", "family_name": "Globeimposter", "category": "ransomware", "rule_id": "19f96740-1a16-52aa-9dee-b5600dae4daf", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/globeimposter.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/globeimposter.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/globeimposter", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 4 }, { "family": "gocloudnet", "family_name": "Gocloudnet", "category": "advanced_threat", "rule_id": "847afdb2-a0fe-59f7-ab8c-21454ef28669", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/gocloudnet.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/gocloudnet.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/gocloudnet", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 4 }, { "family": "hckpk", "family_name": "Hckpk", "category": "advanced_threat", "rule_id": "d605d9e7-e547-5a16-8b68-cd259cb8a89a", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/hckpk.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/hckpk.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/hckpk", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 4 }, { "family": "hlux", "family_name": "Hlux", "category": "trojan", "rule_id": "b10dd836-4d70-55f9-8fc1-1ed6de5b97b0", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/hlux.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/hlux.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/hlux", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 4 }, { "family": "hvnc", "family_name": "Hvnc", "category": "trojan", "rule_id": "9141ef0d-79f8-57e1-b2de-8334fa619ce6", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/hvnc.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/hvnc.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/hvnc", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 4 }, { "family": "hvom", "family_name": "Hvom", "category": "ransomware", "rule_id": "30b547fd-ecca-5450-a9ed-4e0064010e7f", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/hvom.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/hvom.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/hvom", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 4 }, { "family": "inservice", "family_name": "Inservice", "category": "ransomware", "rule_id": "518225ba-a05d-5610-a4a3-1ec3dbc2f252", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/inservice.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/inservice.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/inservice", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 4 }, { "family": "ircnite", "family_name": "Ircnite", "category": "trojan", "rule_id": "36a01666-82e5-5d9a-9c00-cbfadde29d12", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/ircnite.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/ircnite.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/ircnite", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 4 }, { "family": "irplan", "family_name": "Irplan", "category": "ransomware", "rule_id": "163466af-6596-528e-aedf-1a01713178f5", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/irplan.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/irplan.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/irplan", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 4 }, { "family": "itorrent", "family_name": "Itorrent", "category": "advanced_threat", "rule_id": "4dccca5e-4b54-5759-af43-303c28c83832", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/itorrent.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/itorrent.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/itorrent", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 4 }, { "family": "jenxcus", "family_name": "Jenxcus", "category": "trojan", "rule_id": "44547656-e1e9-5241-a756-62d2d97f5f62", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/jenxcus.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/jenxcus.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/jenxcus", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 4 }, { "family": "jigsawlocker", "family_name": "Jigsawlocker", "category": "ransomware", "rule_id": "59b76ac5-4b9d-5fff-8933-2078a5226557", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/jigsawlocker.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/jigsawlocker.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/jigsawlocker", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 4 }, { "family": "kapucen", "family_name": "Kapucen", "category": "ransomware", "rule_id": "97c5654c-ae43-545c-8aeb-7b247d5ecef3", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/kapucen.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/kapucen.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/kapucen", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 4 }, { "family": "kelios", "family_name": "Kelios", "category": "ransomware", "rule_id": "1293366a-f8d2-5d0e-9f10-b1dd9afc900f", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/kelios.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/kelios.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/kelios", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 4 }, { "family": "kriskynote", "family_name": "Kriskynote", "category": "ransomware", "rule_id": "c1562b74-6586-5c79-a727-d3a4bb753ee1", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/kriskynote.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/kriskynote.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/kriskynote", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 4 }, { "family": "kuping", "family_name": "Kuping", "category": "advanced_threat", "rule_id": "c5a9f510-e70c-59ca-9d3b-9be4418b24bb", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/kuping.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/kuping.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/kuping", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 4 }, { "family": "listicka", "family_name": "Listicka", "category": "ransomware", "rule_id": "fdff5ddb-da58-551b-9d03-7833a0e11f0a", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/listicka.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/listicka.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/listicka", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 4 }, { "family": "lsslogger", "family_name": "Lsslogger", "category": "trojan", "rule_id": "e3b9a90e-ae2d-5336-a395-cc8ca05a3d47", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/lsslogger.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/lsslogger.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/lsslogger", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 4 }, { "family": "mahato", "family_name": "Mahato", "category": "ransomware", "rule_id": "72465a72-7b10-5f09-ba94-cb33e91f8c4f", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/mahato.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/mahato.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/mahato", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 4 }, { "family": "marocan", "family_name": "Marocan", "category": "ransomware", "rule_id": "c465f18f-a186-5255-a43f-1898102e3b4a", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/marocan.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/marocan.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/marocan", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 4 }, { "family": "mazben", "family_name": "Mazben", "category": "ransomware", "rule_id": "798935db-ac1b-5316-9f58-13c37b832797", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/mazben.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/mazben.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/mazben", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 4 }, { "family": "mkar", "family_name": "Mkar", "category": "ransomware", "rule_id": "73921499-5787-54c4-a042-a6396ed3d027", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/mkar.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/mkar.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/mkar", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 4 }, { "family": "morphex", "family_name": "Morphex", "category": "ransomware", "rule_id": "225c8ac8-2e09-5328-904c-3e44e7619f0b", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/morphex.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/morphex.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/morphex", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 4 }, { "family": "morto", "family_name": "Morto", "category": "advanced_threat", "rule_id": "0093061c-d81d-5a9b-af9b-2689a9ff164f", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/morto.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/morto.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/morto", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 4 }, { "family": "nieguide", "family_name": "Nieguide", "category": "advanced_threat", "rule_id": "68f5f5a2-8e64-516f-aef3-8ad3833f83bb", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/nieguide.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/nieguide.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/nieguide", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 4 }, { "family": "njlogger", "family_name": "Njlogger", "category": "trojan", "rule_id": "910578b5-d557-563c-b1ba-292c4d93e71e", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/njlogger.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/njlogger.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/njlogger", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 4 }, { "family": "nukesped", "family_name": "Nukesped", "category": "trojan", "rule_id": "5d95ef08-2a54-5690-9f07-fdab7b73ce48", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/nukesped.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/nukesped.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/nukesped", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 4 }, { "family": "oneclick", "family_name": "Oneclick", "category": "advanced_threat", "rule_id": "8848136b-f1ca-517e-b227-895fa11018c8", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/oneclick.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/oneclick.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/oneclick", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 4 }, { "family": "paradise", "family_name": "Paradise", "category": "ransomware", "rule_id": "0fd8439d-7422-52e0-8f56-ac481fa1cadf", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/paradise.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/paradise.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/paradise", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 4 }, { "family": "patpoopy", "family_name": "Patpoopy", "category": "ransomware", "rule_id": "46c5c721-6eb2-59e1-8b1b-771cb382132b", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/patpoopy.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/patpoopy.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/patpoopy", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 4 }, { "family": "pcfixer", "family_name": "Pcfixer", "category": "trojan", "rule_id": "1e4c827c-1922-58b0-be8c-90cd2800516c", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/pcfixer.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/pcfixer.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/pcfixer", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 4 }, { "family": "pcreviver", "family_name": "Pcreviver", "category": "trojan", "rule_id": "9adadca6-0d3b-5778-85ac-d4dbd7067f3e", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/pcreviver.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/pcreviver.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/pcreviver", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 4 }, { "family": "perfectoptimizer", "family_name": "Perfectoptimizer", "category": "trojan", "rule_id": "251c8276-fc00-507f-a00c-ac2f21f0b437", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/perfectoptimizer.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/perfectoptimizer.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/perfectoptimizer", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 4 }, { "family": "perseus", "family_name": "Perseus", "category": "ransomware", "rule_id": "f28b7df7-7448-5634-99c8-5e8e91c1108c", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/perseus.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/perseus.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/perseus", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 4 }, { "family": "polip", "family_name": "Polip", "category": "trojan", "rule_id": "21158ed4-0f02-5c4e-a9f6-ff0a8fba4448", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/polip.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/polip.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/polip", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 4 }, { "family": "polycrypt", "family_name": "Polycrypt", "category": "ransomware", "rule_id": "f2673652-8046-5e4c-98f0-1cfe7c359287", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/polycrypt.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/polycrypt.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/polycrypt", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 4 }, { "family": "ponmocup", "family_name": "Ponmocup", "category": "trojan", "rule_id": "b45f0f71-d343-5ff0-9078-d332d7c4e955", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/ponmocup.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/ponmocup.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/ponmocup", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 4 }, { "family": "prosti", "family_name": "Prosti", "category": "ransomware", "rule_id": "2d17039f-00e8-5f24-8671-d6bd52849ffa", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/prosti.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/prosti.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/prosti", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 4 }, { "family": "proxyweb", "family_name": "Proxyweb", "category": "trojan", "rule_id": "49877dcc-bd6c-5629-8e68-6dcbf19f2508", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/proxyweb.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/proxyweb.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/proxyweb", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 4 }, { "family": "pwsime", "family_name": "Pwsime", "category": "ransomware", "rule_id": "40ec0ed2-d2c2-53b3-a3b7-17f0c0c0811b", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/pwsime.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/pwsime.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/pwsime", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 4 }, { "family": "pwszbot", "family_name": "Pwszbot", "category": "trojan", "rule_id": "ba387193-dd79-54e8-b10b-bfd2b04bf6ea", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/pwszbot.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/pwszbot.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/pwszbot", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 4 }, { "family": "pyfiledel", "family_name": "Pyfiledel", "category": "ransomware", "rule_id": "cd435376-c30f-5a1f-a5b9-95bb5bf81179", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/pyfiledel.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/pyfiledel.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/pyfiledel", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 4 }, { "family": "qqten", "family_name": "Qqten", "category": "ransomware", "rule_id": "a9ef11b6-497e-53a2-8ae6-df35a803d0aa", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/qqten.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/qqten.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/qqten", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 4 }, { "family": "rabased", "family_name": "Rabased", "category": "ransomware", "rule_id": "9e2fe94c-6797-54e4-9f55-d23518076fda", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/rabased.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/rabased.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/rabased", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 4 }, { "family": "regger", "family_name": "Regger", "category": "trojan", "rule_id": "7a55f489-f6ae-5260-8f8c-e30b74ff0ab8", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/regger.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/regger.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/regger", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 4 }, { "family": "reveton", "family_name": "Reveton", "category": "ransomware", "rule_id": "2e745857-0f4f-5231-9a62-1da49f47f045", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/reveton.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/reveton.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/reveton", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 4 }, { "family": "rkit", "family_name": "Rkit", "category": "trojan", "rule_id": "105e862f-7265-5666-8a36-e9dfebe62b85", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/rkit.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/rkit.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/rkit", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 4 }, { "family": "scribble", "family_name": "Scribble", "category": "ransomware", "rule_id": "23658366-f91e-5ae6-8d8d-098cc897652d", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/scribble.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/scribble.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/scribble", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 4 }, { "family": "shaosmine", "family_name": "Shaosmine", "category": "ransomware", "rule_id": "41ac4162-721c-5271-940c-af01bdf65059", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/shaosmine.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/shaosmine.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/shaosmine", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 4 }, { "family": "sigma", "family_name": "Sigma", "category": "ransomware", "rule_id": "e8abcb2e-86e3-553c-8ef7-2a62de7aab1a", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/sigma.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/sigma.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/sigma", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 4 }, { "family": "sillysharecopy", "family_name": "Sillysharecopy", "category": "advanced_threat", "rule_id": "3b892ace-35c5-5a4c-a481-60881a0d1335", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/sillysharecopy.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/sillysharecopy.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/sillysharecopy", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 4 }, { "family": "slowpcfighter", "family_name": "Slowpcfighter", "category": "trojan", "rule_id": "eb65407e-815c-5fb3-9121-a5d25a701a88", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/slowpcfighter.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/slowpcfighter.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/slowpcfighter", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 4 }, { "family": "spora", "family_name": "Spora", "category": "ransomware", "rule_id": "3a519aaf-e618-5dbb-ab7a-67fa7ca75a63", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/spora.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/spora.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/spora", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 4 }, { "family": "stagol", "family_name": "Stagol", "category": "ransomware", "rule_id": "08d8773a-ae19-5cb6-9718-4c14e0dbd99f", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/stagol.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/stagol.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/stagol", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 4 }, { "family": "startserv", "family_name": "Startserv", "category": "ransomware", "rule_id": "ba21d4fb-36dd-5a13-b81b-a68b9da7ca5e", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/startserv.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/startserv.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/startserv", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 4 }, { "family": "sysupdate", "family_name": "Sysupdate", "category": "ransomware", "rule_id": "0d6bcbf9-fe18-5d39-bd90-423fad7a6b3e", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/sysupdate.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/sysupdate.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/sysupdate", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 4 }, { "family": "tarayt", "family_name": "Tarayt", "category": "ransomware", "rule_id": "a6adf52c-4e81-5def-a440-c8f2bdc0fb1a", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/tarayt.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/tarayt.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/tarayt", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 4 }, { "family": "tbma", "family_name": "Tbma", "category": "ransomware", "rule_id": "44172cef-d559-5770-b648-c822c5ee1dcf", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/tbma.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/tbma.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/tbma", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 4 }, { "family": "testfile", "family_name": "Testfile", "category": "advanced_threat", "rule_id": "9e510c80-f8e7-520d-8423-e10aeb564283", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/testfile.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/testfile.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/testfile", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 4 }, { "family": "titirez", "family_name": "Titirez", "category": "ransomware", "rule_id": "e6946ef0-d232-53de-9a36-d02a5a4b70e8", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/titirez.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/titirez.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/titirez", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 4 }, { "family": "tsingsoft", "family_name": "Tsingsoft", "category": "advanced_threat", "rule_id": "8f2aef63-3f5a-551f-97d0-76fefb60bee5", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/tsingsoft.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/tsingsoft.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/tsingsoft", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 4 }, { "family": "tsklnk", "family_name": "Tsklnk", "category": "trojan", "rule_id": "7d72b390-c774-5954-ba6c-76049b574a54", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/tsklnk.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/tsklnk.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/tsklnk", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 4 }, { "family": "upadter", "family_name": "Upadter", "category": "ransomware", "rule_id": "bd0b4763-a5f3-5f8a-ac91-db3d3fb33cbb", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/upadter.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/upadter.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/upadter", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 4 }, { "family": "weiduan", "family_name": "Weiduan", "category": "ransomware", "rule_id": "5d987658-2718-5d60-b410-60ebb7b394c9", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/weiduan.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/weiduan.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/weiduan", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 4 }, { "family": "werly", "family_name": "Werly", "category": "ransomware", "rule_id": "ce14016c-7b35-5a11-9f77-31563489248e", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/werly.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/werly.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/werly", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 4 }, { "family": "widdit", "family_name": "Widdit", "category": "advanced_threat", "rule_id": "3e6816fc-79cb-5ee0-bff7-e1218b471523", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/widdit.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/widdit.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/widdit", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 4 }, { "family": "xdata", "family_name": "Xdata", "category": "ransomware", "rule_id": "6d21cca9-5b4c-5e5a-8c16-c1953b1a9e5f", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/xdata.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/xdata.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/xdata", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 4 }, { "family": "xiazai", "family_name": "Xiazai", "category": "ransomware", "rule_id": "ae53c56e-13ce-507c-a16a-24f9cf49bb62", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/xiazai.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/xiazai.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/xiazai", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 4 }, { "family": "xrat", "family_name": "Xrat", "category": "trojan", "rule_id": "e02c9dc8-2382-529b-9190-3769f4d834a7", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/xrat.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/xrat.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/xrat", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 4 }, { "family": "xylauncher", "family_name": "Xylauncher", "category": "ransomware", "rule_id": "d9e07492-a34b-5d1c-aa63-84b8d90c76c0", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/xylauncher.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/xylauncher.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/xylauncher", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 4 }, { "family": "yakbeex", "family_name": "Yakbeex", "category": "ransomware", "rule_id": "70fbd1b3-ae00-551d-8b6f-329dab265435", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/yakbeex.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yakbeex.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/yakbeex", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 4 }, { "family": "zard", "family_name": "Zard", "category": "ransomware", "rule_id": "5b77d407-8f47-5fcd-9887-01640c91d2d6", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/zard.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/zard.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/zard", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 4 }, { "family": "zesibund", "family_name": "Zesibund", "category": "ransomware", "rule_id": "bbf8712c-d6ad-5236-b2af-292de4e17197", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/zesibund.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/zesibund.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/zesibund", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 4 }, { "family": "accelerator", "family_name": "Accelerator", "category": "backdoor", "rule_id": "53974d63-3d51-572e-be76-1b9c9012062e", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/accelerator.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/accelerator.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/accelerator", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 3 }, { "family": "activitymonitor", "family_name": "Activitymonitor", "category": "trojan", "rule_id": "6e2c39f9-d445-5c47-b56a-5c2690e887e4", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/activitymonitor.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/activitymonitor.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/activitymonitor", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 3 }, { "family": "admoke", "family_name": "Admoke", "category": "ransomware", "rule_id": "9bd3c4d8-32ed-5d75-b250-2a873dc942a2", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/admoke.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/admoke.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/admoke", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 3 }, { "family": "adwapper", "family_name": "Adwapper", "category": "trojan", "rule_id": "0db23e98-1cbc-5a00-90c2-638a06d7c1f3", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/adwapper.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/adwapper.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/adwapper", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 3 }, { "family": "allinonekeylogger", "family_name": "Allinonekeylogger", "category": "infostealer", "rule_id": "26d1e053-19db-50e1-89eb-0e0a657ce6f4", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/allinonekeylogger.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/allinonekeylogger.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/allinonekeylogger", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/infostealer-protection", "sample_count": 3 }, { "family": "aotoit", "family_name": "Aotoit", "category": "ransomware", "rule_id": "8ff277c3-05da-5669-be7e-7623f4f232cb", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/aotoit.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/aotoit.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/aotoit", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 3 }, { "family": "autofixerpro", "family_name": "Autofixerpro", "category": "adware", "rule_id": "e7db6409-252b-5f22-9f75-2ac06654d598", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/autofixerpro.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/autofixerpro.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/autofixerpro", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 3 }, { "family": "autohit", "family_name": "Autohit", "category": "trojan", "rule_id": "9f85283f-e6d2-55b7-8818-1ec19bca0f39", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/autohit.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/autohit.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/autohit", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 3 }, { "family": "bandios", "family_name": "Bandios", "category": "ransomware", "rule_id": "dfa1605c-9e81-59c3-945a-2b4b0213bb01", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/bandios.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/bandios.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/bandios", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 3 }, { "family": "banz", "family_name": "Banz", "category": "ransomware", "rule_id": "0b0f5168-3e42-51da-ae35-82125c33a0ee", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/banz.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/banz.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/banz", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 3 }, { "family": "basine", "family_name": "Basine", "category": "ransomware", "rule_id": "e8966838-f9d6-5edf-9b64-c086721ca697", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/basine.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/basine.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/basine", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 3 }, { "family": "batlauncher", "family_name": "Batlauncher", "category": "ransomware", "rule_id": "b2bd6a4f-efe0-5a37-9f58-3bf08132e9d9", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/batlauncher.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/batlauncher.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/batlauncher", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 3 }, { "family": "beaugrit", "family_name": "Beaugrit", "category": "ransomware", "rule_id": "3a925230-b42f-5ea8-95d7-04ef71725e2d", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/beaugrit.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/beaugrit.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/beaugrit", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 3 }, { "family": "bebloh", "family_name": "Bebloh", "category": "trojan", "rule_id": "e9aa8a15-2293-5497-b0cc-e27355d35cff", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/bebloh.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/bebloh.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/bebloh", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 3 }, { "family": "bedep", "family_name": "Bedep", "category": "ransomware", "rule_id": "0fe2a288-10ce-5cd1-b1ad-490d5c83a247", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/bedep.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/bedep.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/bedep", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 3 }, { "family": "belonard", "family_name": "Belonard", "category": "ransomware", "rule_id": "668afb32-c465-52ec-b8ca-c5dbd599bb27", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/belonard.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/belonard.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/belonard", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 3 }, { "family": "betabot", "family_name": "Betabot", "category": "trojan", "rule_id": "4ac98a1c-4cd8-5fcf-a24b-99f5e827e186", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/betabot.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/betabot.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/betabot", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 3 }, { "family": "blacked", "family_name": "Blacked", "category": "ransomware", "rule_id": "2cc17ff7-67b0-5988-aee9-8d2874168049", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/blacked.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/blacked.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/blacked", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 3 }, { "family": "blubot", "family_name": "Blubot", "category": "ransomware", "rule_id": "f9dd5c26-433b-5ae7-ae93-c4ff3992449e", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/blubot.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/blubot.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/blubot", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 3 }, { "family": "boaxxe", "family_name": "Boaxxe", "category": "ransomware", "rule_id": "9880db04-7676-506c-aa6c-0182a4841967", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/boaxxe.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/boaxxe.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/boaxxe", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 3 }, { "family": "browseban", "family_name": "Browseban", "category": "trojan", "rule_id": "a884e56c-c3e5-5e2d-a1ce-2de63280404a", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/browseban.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/browseban.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/browseban", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 3 }, { "family": "catalina", "family_name": "Catalina", "category": "trojan", "rule_id": "eb359b4d-163f-50e4-83b9-9f5392a02110", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/catalina.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/catalina.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/catalina", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 3 }, { "family": "cgmu", "family_name": "Cgmu", "category": "ransomware", "rule_id": "fc32a721-9f40-5a21-ae94-77b88775d3c8", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/cgmu.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/cgmu.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/cgmu", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 3 }, { "family": "clickshell", "family_name": "Clickshell", "category": "advanced_threat", "rule_id": "39fa0108-715b-5178-94f0-7bcef08010d4", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/clickshell.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/clickshell.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/clickshell", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 3 }, { "family": "coma", "family_name": "Coma", "category": "file_infector", "rule_id": "d2871eb4-8660-5309-9a23-8b0d7a68f5bc", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/coma.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/coma.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/coma", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 3 }, { "family": "comei", "family_name": "Comei", "category": "ransomware", "rule_id": "a0c6ad73-4dd5-502d-82c9-31604622d921", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/comei.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/comei.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/comei", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 3 }, { "family": "conduit", "family_name": "Conduit", "category": "adware", "rule_id": "156d1ea5-c3ad-5eed-aa61-26126f77835f", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/conduit.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/conduit.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/conduit", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 3 }, { "family": "coolmirage", "family_name": "Coolmirage", "category": "ransomware", "rule_id": "6f1e33dc-baae-540b-b94f-dd850fd10ff2", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/coolmirage.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/coolmirage.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/coolmirage", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 3 }, { "family": "crastic", "family_name": "Crastic", "category": "ransomware", "rule_id": "1054dfbf-f82f-5265-8073-aa7c816c21cb", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/crastic.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/crastic.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/crastic", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 3 }, { "family": "crcf", "family_name": "Crcf", "category": "ransomware", "rule_id": "4744e6a5-ee2e-551e-b9cd-9b64c1133559", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/crcf.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/crcf.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/crcf", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 3 }, { "family": "crowti", "family_name": "Crowti", "category": "ransomware", "rule_id": "63508b36-d50f-56e2-8a8c-10f96338e529", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/crowti.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/crowti.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/crowti", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 3 }, { "family": "ctqc", "family_name": "Ctqc", "category": "ransomware", "rule_id": "8cfc7aaf-0c84-542a-8e59-7995f64a5043", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/ctqc.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/ctqc.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/ctqc", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 3 }, { "family": "darkvnc", "family_name": "Darkvnc", "category": "ransomware", "rule_id": "bbaa32ed-a144-5877-9e36-69dd2a69c752", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/darkvnc.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/darkvnc.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/darkvnc", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 3 }, { "family": "deleter", "family_name": "Deleter", "category": "ransomware", "rule_id": "dea35e44-6dbf-5214-baa6-2abe72411585", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/deleter.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/deleter.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/deleter", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 3 }, { "family": "democry", "family_name": "Democry", "category": "ransomware", "rule_id": "6cb4bfd3-eb9a-553d-8a2b-01ecd438d9b6", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/democry.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/democry.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/democry", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 3 }, { "family": "deshacop", "family_name": "Deshacop", "category": "ransomware", "rule_id": "58098464-d341-5e36-b453-f658aa4b798a", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/deshacop.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/deshacop.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/deshacop", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 3 }, { "family": "diss", "family_name": "Diss", "category": "ransomware", "rule_id": "a59ee70c-d5bd-5b4a-92a9-90dd0664b2d3", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/diss.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/diss.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/diss", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 3 }, { "family": "driverassist", "family_name": "Driverassist", "category": "trojan", "rule_id": "63eb3a3c-86ae-5963-955f-4be93c35383e", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/driverassist.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/driverassist.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/driverassist", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 3 }, { "family": "dunco", "family_name": "Dunco", "category": "ransomware", "rule_id": "3887caab-adff-5734-a941-b850dc784889", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/dunco.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/dunco.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/dunco", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 3 }, { "family": "dyamar", "family_name": "Dyamar", "category": "ransomware", "rule_id": "d7a0fec9-06f2-5257-969d-30441aa171ee", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/dyamar.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/dyamar.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/dyamar", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 3 }, { "family": "enosch", "family_name": "Enosch", "category": "ransomware", "rule_id": "8552519c-0ecf-5ab8-abe6-2201311b3106", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/enosch.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/enosch.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/enosch", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 3 }, { "family": "eroyee", "family_name": "Eroyee", "category": "ransomware", "rule_id": "791712e4-708e-537b-a983-847088042ea6", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/eroyee.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/eroyee.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/eroyee", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 3 }, { "family": "exdek", "family_name": "Exdek", "category": "ransomware", "rule_id": "c10c6ea4-3b56-5316-876e-66e84dab65c1", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/exdek.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/exdek.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/exdek", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 3 }, { "family": "exeaqtor", "family_name": "Exeaqtor", "category": "ransomware", "rule_id": "e77e09c8-1447-5f2f-a71b-ad777a3ab6bd", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/exeaqtor.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/exeaqtor.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/exeaqtor", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 3 }, { "family": "expressdownloader", "family_name": "Expressdownloader", "category": "trojan", "rule_id": "2e271820-6e4c-5be3-be1a-ffb84906b3db", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/expressdownloader.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/expressdownloader.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/expressdownloader", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 3 }, { "family": "ezoons", "family_name": "Ezoons", "category": "ransomware", "rule_id": "4d53c5ef-d039-5822-83ea-9358afdc47fb", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/ezoons.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/ezoons.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/ezoons", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 3 }, { "family": "fadok", "family_name": "Fadok", "category": "ransomware", "rule_id": "1973b8a0-53df-5ab8-8478-f41030777e2a", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/fadok.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/fadok.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/fadok", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 3 }, { "family": "fakerean", "family_name": "Fakerean", "category": "advanced_threat", "rule_id": "569cc22e-412d-5331-9934-f235b95198ca", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/fakerean.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/fakerean.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/fakerean", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 3 }, { "family": "fakesmoke", "family_name": "Fakesmoke", "category": "trojan", "rule_id": "4b4c1d45-e3db-5404-b3de-ecb27b18750b", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/fakesmoke.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/fakesmoke.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/fakesmoke", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 3 }, { "family": "finfish", "family_name": "Finfish", "category": "advanced_threat", "rule_id": "a76bc848-6861-535d-9fef-5fcfcef6c748", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/finfish.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/finfish.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/finfish", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 3 }, { "family": "fourthrem", "family_name": "Fourthrem", "category": "ransomware", "rule_id": "e2deadff-76c3-5fc9-8dcb-8a355f325f4a", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/fourthrem.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/fourthrem.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/fourthrem", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 3 }, { "family": "gamsoft", "family_name": "Gamsoft", "category": "trojan", "rule_id": "578da93f-3cf2-5069-8cc4-6878b30232b8", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/gamsoft.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/gamsoft.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/gamsoft", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 3 }, { "family": "gasti", "family_name": "Gasti", "category": "ransomware", "rule_id": "06f2466c-d4e5-53c6-a3fc-08338447a04a", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/gasti.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/gasti.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/gasti", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 3 }, { "family": "gate", "family_name": "Gate", "category": "ransomware", "rule_id": "fec75193-811d-5987-821a-e34d50942f7e", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/gate.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/gate.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/gate", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 3 }, { "family": "genericrxaa", "family_name": "Genericrxaa", "category": "ransomware", "rule_id": "b61b43ee-f43d-598a-b1a9-e69598654d4d", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/genericrxaa.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/genericrxaa.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/genericrxaa", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 3 }, { "family": "genericrxaq", "family_name": "Genericrxaq", "category": "ransomware", "rule_id": "8c24aaa0-a2cd-5c99-9f83-4c0e433a6930", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/genericrxaq.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/genericrxaq.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/genericrxaq", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 3 }, { "family": "genericrxbg", "family_name": "Genericrxbg", "category": "trojan", "rule_id": "cf4093e4-440a-5360-a3f6-e4f44ba134af", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/genericrxbg.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/genericrxbg.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/genericrxbg", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 3 }, { "family": "genericrxce", "family_name": "Genericrxce", "category": "trojan", "rule_id": "5d45941f-5f7e-53ce-aa7d-471c59c97452", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/genericrxce.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/genericrxce.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/genericrxce", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 3 }, { "family": "genericrxev", "family_name": "Genericrxev", "category": "ransomware", "rule_id": "ed6dfe11-1110-54d5-99ad-61302409c2d5", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/genericrxev.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/genericrxev.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/genericrxev", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 3 }, { "family": "genericrxgl", "family_name": "Genericrxgl", "category": "ransomware", "rule_id": "bc57bbc8-85b8-50ac-88b3-cd2a9a1c3afe", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/genericrxgl.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/genericrxgl.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/genericrxgl", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 3 }, { "family": "genericrxgm", "family_name": "Genericrxgm", "category": "ransomware", "rule_id": "fcee53bb-1655-58d6-881b-8b5fb1d40d16", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/genericrxgm.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/genericrxgm.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/genericrxgm", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 3 }, { "family": "ghoul", "family_name": "Ghoul", "category": "ransomware", "rule_id": "ae6e9889-3b91-5994-9af9-d02c0b7f7a4e", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/ghoul.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/ghoul.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/ghoul", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 3 }, { "family": "glox", "family_name": "Glox", "category": "ransomware", "rule_id": "c6fb0e42-884d-500b-a8cb-17c240e74e20", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/glox.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/glox.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/glox", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 3 }, { "family": "goabeny", "family_name": "Goabeny", "category": "ransomware", "rule_id": "727a5999-bd93-52a0-917c-9b36aef8aa10", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/goabeny.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/goabeny.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/goabeny", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 3 }, { "family": "gobot", "family_name": "Gobot", "category": "trojan", "rule_id": "8da4485d-73ed-5b95-b6f4-417f75126a99", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/gobot.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/gobot.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/gobot", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 3 }, { "family": "gottle", "family_name": "Gottle", "category": "ransomware", "rule_id": "1d06dd51-726f-572a-bec8-c123ea9e5711", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/gottle.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/gottle.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/gottle", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 3 }, { "family": "hancitor", "family_name": "Hancitor", "category": "ransomware", "rule_id": "1c057cee-f5fb-5b0f-8ce7-23b6e5627f9f", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/hancitor.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/hancitor.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/hancitor", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 3 }, { "family": "higuniel", "family_name": "Higuniel", "category": "ransomware", "rule_id": "d3ed887d-07e4-5443-a39d-003fb254048b", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/higuniel.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/higuniel.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/higuniel", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 3 }, { "family": "hlubea", "family_name": "Hlubea", "category": "ransomware", "rule_id": "4e3646de-04b3-5f05-8eae-04d4fd202206", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/hlubea.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/hlubea.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/hlubea", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 3 }, { "family": "horst", "family_name": "Horst", "category": "ransomware", "rule_id": "7f6e383e-f021-52fb-bd03-ccc11dd455fd", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/horst.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/horst.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/horst", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 3 }, { "family": "hostmodifier", "family_name": "Hostmodifier", "category": "advanced_threat", "rule_id": "71e70741-e820-508d-b49a-97dae4b563cc", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/hostmodifier.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/hostmodifier.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/hostmodifier", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 3 }, { "family": "hostschanger", "family_name": "Hostschanger", "category": "advanced_threat", "rule_id": "d35489d7-dc94-5583-b15d-cc5205787250", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/hostschanger.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/hostschanger.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/hostschanger", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 3 }, { "family": "hotkeyshook", "family_name": "Hotkeyshook", "category": "trojan", "rule_id": "3db6f9b1-0b8d-54e2-a108-4ec5a7af5b17", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/hotkeyshook.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/hotkeyshook.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/hotkeyshook", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 3 }, { "family": "ilomo", "family_name": "Ilomo", "category": "ransomware", "rule_id": "88bc8ba7-5573-56d6-885f-3b049145d128", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/ilomo.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/ilomo.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/ilomo", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 3 }, { "family": "incredimail", "family_name": "Incredimail", "category": "advanced_threat", "rule_id": "9da12495-7f81-5734-88aa-986dec760ac0", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/incredimail.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/incredimail.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/incredimail", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 3 }, { "family": "injectorlib", "family_name": "Injectorlib", "category": "ransomware", "rule_id": "091edb27-1734-5e54-b8c5-6347615c73f6", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/injectorlib.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/injectorlib.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/injectorlib", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 3 }, { "family": "installflash", "family_name": "Installflash", "category": "trojan", "rule_id": "374ebf85-d40e-5daa-83c1-ce960cc6b82c", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/installflash.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/installflash.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/installflash", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 3 }, { "family": "installmate", "family_name": "Installmate", "category": "trojan", "rule_id": "5d5e872e-55e1-5dfd-abf7-4ea61cfb7347", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/installmate.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/installmate.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/installmate", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 3 }, { "family": "jobaka", "family_name": "Jobaka", "category": "ransomware", "rule_id": "ab135335-0e48-5ecf-aa9d-965f8e101c15", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/jobaka.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/jobaka.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/jobaka", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 3 }, { "family": "joiner", "family_name": "Joiner", "category": "ransomware", "rule_id": "f019abf7-e446-5a5c-bc38-a7f8db92d9aa", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/joiner.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/joiner.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/joiner", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 3 }, { "family": "kaseya", "family_name": "Kaseya", "category": "ransomware", "rule_id": "820d51f3-d335-5b47-88a0-f3511f42cd02", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/kaseya.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/kaseya.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/kaseya", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 3 }, { "family": "keywordfind", "family_name": "Keywordfind", "category": "advanced_threat", "rule_id": "c37757d2-00c3-5985-ba36-f5826dbc91b7", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/keywordfind.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/keywordfind.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/keywordfind", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 3 }, { "family": "koal", "family_name": "Koal", "category": "ransomware", "rule_id": "cd8ae403-6e08-5284-97f7-3f4dbe948306", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/koal.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/koal.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/koal", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 3 }, { "family": "konus", "family_name": "Konus", "category": "ransomware", "rule_id": "cbf589e2-80e0-5722-9839-b03da6940767", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/konus.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/konus.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/konus", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 3 }, { "family": "koobcafe", "family_name": "Koobcafe", "category": "ransomware", "rule_id": "abab198e-356c-54c6-96cd-ce7e1cea04e8", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/koobcafe.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/koobcafe.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/koobcafe", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 3 }, { "family": "krepper", "family_name": "Krepper", "category": "trojan", "rule_id": "72e53b6c-834f-5ebc-801b-de15f41e8d65", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/krepper.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/krepper.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/krepper", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 3 }, { "family": "krunchy", "family_name": "Krunchy", "category": "ransomware", "rule_id": "fda92760-cd62-5ca1-9c9f-3aeabf6bc873", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/krunchy.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/krunchy.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/krunchy", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 3 }, { "family": "kwampirs", "family_name": "Kwampirs", "category": "trojan", "rule_id": "11cfae60-b26a-5fd8-b9bc-7196e0107d3b", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/kwampirs.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/kwampirs.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/kwampirs", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 3 }, { "family": "lapka", "family_name": "Lapka", "category": "ransomware", "rule_id": "c05fc1f6-5453-5e6b-ac0e-eb3ac9aaf4cf", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/lapka.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/lapka.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/lapka", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 3 }, { "family": "lenwadu", "family_name": "Lenwadu", "category": "ransomware", "rule_id": "cacab891-2ef5-5bf9-bcbc-12c0122885d9", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/lenwadu.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/lenwadu.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/lenwadu", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 3 }, { "family": "liev", "family_name": "Liev", "category": "ransomware", "rule_id": "7725de28-c4ae-538f-9df9-94db6272d0d9", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/liev.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/liev.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/liev", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 3 }, { "family": "linkular", "family_name": "Linkular", "category": "advanced_threat", "rule_id": "2953da86-564c-5605-a1f5-73d69e3f506b", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/linkular.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/linkular.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/linkular", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 3 }, { "family": "lipler", "family_name": "Lipler", "category": "ransomware", "rule_id": "f75969d5-f2c3-5aa3-8d2c-fa6d2b5f4a6a", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/lipler.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/lipler.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/lipler", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 3 }, { "family": "lodbak", "family_name": "Lodbak", "category": "ransomware", "rule_id": "9b33eaec-6b44-58c9-88dd-4a7340b3e371", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/lodbak.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/lodbak.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/lodbak", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 3 }, { "family": "luder", "family_name": "Luder", "category": "ransomware", "rule_id": "e7f07e41-f0a0-5016-b48a-98e6e58e1a1d", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/luder.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/luder.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/luder", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 3 }, { "family": "macoute", "family_name": "Macoute", "category": "ransomware", "rule_id": "4eadc279-c61f-5569-b207-34a54f7e5405", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/macoute.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/macoute.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/macoute", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 3 }, { "family": "maesorn", "family_name": "Maesorn", "category": "ransomware", "rule_id": "349b89a1-0ec2-5fe1-875e-19e225a70079", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/maesorn.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/maesorn.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/maesorn", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 3 }, { "family": "maxdriver", "family_name": "Maxdriver", "category": "trojan", "rule_id": "9cdb51b3-8998-5598-8483-0c5f035637d9", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/maxdriver.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/maxdriver.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/maxdriver", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 3 }, { "family": "mdeclass", "family_name": "Mdeclass", "category": "ransomware", "rule_id": "c93d13b7-f6ff-5287-8a62-8e340b6beaa1", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/mdeclass.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/mdeclass.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/mdeclass", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 3 }, { "family": "mewsspy", "family_name": "Mewsspy", "category": "ransomware", "rule_id": "2ecaaa60-e90d-5d20-a103-f57a013a54f5", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/mewsspy.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/mewsspy.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/mewsspy", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 3 }, { "family": "mlwr", "family_name": "Mlwr", "category": "trojan", "rule_id": "69606ec4-5b9c-54ad-8def-8e49c3458cd4", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/mlwr.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/mlwr.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/mlwr", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 3 }, { "family": "mobogenie", "family_name": "Mobogenie", "category": "advanced_threat", "rule_id": "ab5e7602-a305-5a33-8c59-c677c4f0364f", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/mobogenie.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/mobogenie.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/mobogenie", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 3 }, { "family": "monder", "family_name": "Monder", "category": "advanced_threat", "rule_id": "90a9a899-2257-50a3-b34a-225baae3353c", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/monder.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/monder.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/monder", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 3 }, { "family": "moneyinst", "family_name": "Moneyinst", "category": "trojan", "rule_id": "63c506c6-5440-55b3-8e28-c1eae8a9c3b9", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/moneyinst.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/moneyinst.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/moneyinst", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 3 }, { "family": "msidrop", "family_name": "Msidrop", "category": "ransomware", "rule_id": "6a5f9d28-4879-58f3-93be-01e655b83b5b", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/msidrop.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/msidrop.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/msidrop", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 3 }, { "family": "multiminer", "family_name": "Multiminer", "category": "ransomware", "rule_id": "14193ed5-0cca-5db1-b74f-cd627ca92a25", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/multiminer.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/multiminer.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/multiminer", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 3 }, { "family": "mutant", "family_name": "Mutant", "category": "ransomware", "rule_id": "fa5ec3e4-7a6c-5326-877d-f4591a349489", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/mutant.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/mutant.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/mutant", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 3 }, { "family": "mycop", "family_name": "Mycop", "category": "ransomware", "rule_id": "5f25bbf7-02f2-57ec-ba5a-32f82a5e5c0e", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/mycop.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/mycop.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/mycop", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 3 }, { "family": "myransom", "family_name": "Myransom", "category": "ransomware", "rule_id": "ace9c115-6f0e-5829-93a3-72c518305084", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/myransom.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/myransom.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/myransom", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 3 }, { "family": "myxah", "family_name": "Myxah", "category": "ransomware", "rule_id": "48719304-5f8b-5f18-bfaa-ac6b2d3bc065", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/myxah.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/myxah.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/myxah", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 3 }, { "family": "navipromo", "family_name": "Navipromo", "category": "advanced_threat", "rule_id": "14f1fd7b-6e06-5bc8-9f9e-911c40f54578", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/navipromo.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/navipromo.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/navipromo", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 3 }, { "family": "netshrink", "family_name": "Netshrink", "category": "ransomware", "rule_id": "d5370673-aa3d-5362-84c9-120c211555a2", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/netshrink.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/netshrink.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/netshrink", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 3 }, { "family": "nystprac", "family_name": "Nystprac", "category": "ransomware", "rule_id": "07b94747-1b1d-5064-a1df-b08a514badf8", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/nystprac.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/nystprac.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/nystprac", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 3 }, { "family": "octopus", "family_name": "Octopus", "category": "ransomware", "rule_id": "6a98bbed-2828-5743-8d1b-dcb91adcdff9", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/octopus.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/octopus.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/octopus", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 3 }, { "family": "offergenerator", "family_name": "Offergenerator", "category": "advanced_threat", "rule_id": "150ad5fd-5aaf-5a04-8b9e-441c7981f8f0", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/offergenerator.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/offergenerator.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/offergenerator", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 3 }, { "family": "onescan", "family_name": "Onescan", "category": "advanced_threat", "rule_id": "6d26c1b9-83e0-5076-98ce-cd059a7590aa", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/onescan.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/onescan.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/onescan", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 3 }, { "family": "onesyscare", "family_name": "Onesyscare", "category": "trojan", "rule_id": "741c11db-aa19-5d36-a52c-bfc661347822", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/onesyscare.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/onesyscare.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/onesyscare", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 3 }, { "family": "opesup", "family_name": "Opesup", "category": "ransomware", "rule_id": "180837e0-a71d-5d83-8e22-9d4cdce3a1b1", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/opesup.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/opesup.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/opesup", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 3 }, { "family": "palibu", "family_name": "Palibu", "category": "ransomware", "rule_id": "89e18183-0cec-57a6-9e67-c47f96cb9ce0", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/palibu.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/palibu.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/palibu", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 3 }, { "family": "passma", "family_name": "Passma", "category": "ransomware", "rule_id": "20a94600-673e-569a-9dd8-799c1540833c", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/passma.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/passma.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/passma", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 3 }, { "family": "pcmega", "family_name": "Pcmega", "category": "trojan", "rule_id": "e1db6dda-dc7b-5400-8b9e-b538b66326cb", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/pcmega.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/pcmega.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/pcmega", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 3 }, { "family": "pennybee", "family_name": "Pennybee", "category": "advanced_threat", "rule_id": "d88553d5-2de2-5fc4-a628-f86ff96beb1b", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/pennybee.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/pennybee.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/pennybee", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 3 }, { "family": "petun", "family_name": "Petun", "category": "ransomware", "rule_id": "316e4410-8a56-5b30-aa87-4929697844c6", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/petun.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/petun.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/petun", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 3 }, { "family": "pinkblocker", "family_name": "Pinkblocker", "category": "ransomware", "rule_id": "3c34e2b0-9733-5c49-a114-321a1dbb4f21", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/pinkblocker.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/pinkblocker.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/pinkblocker", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 3 }, { "family": "povertel", "family_name": "Povertel", "category": "ransomware", "rule_id": "cf5f694e-d586-5883-89eb-232847505415", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/povertel.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/povertel.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/povertel", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 3 }, { "family": "powerless", "family_name": "Powerless", "category": "ransomware", "rule_id": "22a2d8c9-42db-5c3b-9642-584cf5e9a595", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/powerless.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/powerless.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/powerless", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 3 }, { "family": "premium", "family_name": "Premium", "category": "trojan", "rule_id": "bbec2b89-9f28-5012-9e3c-467e8afb76f7", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/premium.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/premium.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/premium", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 3 }, { "family": "procpatcher", "family_name": "Procpatcher", "category": "trojan", "rule_id": "14cf9fd6-bb0e-5eda-b21f-206cf7c5b99f", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/procpatcher.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/procpatcher.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/procpatcher", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 3 }, { "family": "proinstall", "family_name": "Proinstall", "category": "advanced_threat", "rule_id": "6b1b2d4e-87c3-5f9d-b64a-de762139a2ee", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/proinstall.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/proinstall.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/proinstall", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 3 }, { "family": "pshell", "family_name": "Pshell", "category": "ransomware", "rule_id": "a37d687a-7849-56b0-995d-a1045f75199f", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/pshell.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/pshell.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/pshell", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 3 }, { "family": "pstinb", "family_name": "Pstinb", "category": "ransomware", "rule_id": "cd2ff00d-ba5f-5019-90dd-6623d9575f6f", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/pstinb.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/pstinb.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/pstinb", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 3 }, { "family": "purgen", "family_name": "Purgen", "category": "ransomware", "rule_id": "30356e93-4f75-5156-8b91-b6dd4ea66a2c", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/purgen.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/purgen.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/purgen", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 3 }, { "family": "qaccel", "family_name": "Qaccel", "category": "advanced_threat", "rule_id": "4fee0b21-94c1-5fe0-a812-1725db96a28e", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/qaccel.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/qaccel.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/qaccel", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 3 }, { "family": "qqfarmer", "family_name": "Qqfarmer", "category": "ransomware", "rule_id": "5dbe0653-4e25-50f7-976a-6baa4c16c40e", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/qqfarmer.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/qqfarmer.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/qqfarmer", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 3 }, { "family": "randrew", "family_name": "Randrew", "category": "ransomware", "rule_id": "3f0aa0d9-f27e-5958-a723-40e67c24f39b", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/randrew.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/randrew.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/randrew", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 3 }, { "family": "ransomkd", "family_name": "Ransomkd", "category": "ransomware", "rule_id": "aa7afe92-7d84-57c9-8a10-f4caf06e288f", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/ransomkd.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/ransomkd.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/ransomkd", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 3 }, { "family": "redlonam", "family_name": "Redlonam", "category": "ransomware", "rule_id": "a5b46908-c30d-5e3b-b856-36a7d348a5c9", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/redlonam.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/redlonam.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/redlonam", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 3 }, { "family": "rifdoor", "family_name": "Rifdoor", "category": "ransomware", "rule_id": "2fb5d30c-34f1-5c9a-855d-e2f22f4659ab", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/rifdoor.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/rifdoor.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/rifdoor", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 3 }, { "family": "rising", "family_name": "Rising", "category": "ransomware", "rule_id": "b9c3b036-a429-5470-9ea4-386ba8709d09", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/rising.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/rising.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/rising", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 3 }, { "family": "rootkitdrv", "family_name": "Rootkitdrv", "category": "advanced_threat", "rule_id": "a44c6d2a-70af-5b36-9992-3d2549ff0acb", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/rootkitdrv.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/rootkitdrv.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/rootkitdrv", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 3 }, { "family": "rpcdcom", "family_name": "Rpcdcom", "category": "advanced_threat", "rule_id": "bf218b0f-8188-5bd0-89ef-7334931113f8", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/rpcdcom.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/rpcdcom.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/rpcdcom", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 3 }, { "family": "ruandmel", "family_name": "Ruandmel", "category": "ransomware", "rule_id": "d4d5b1b6-af35-508c-ac24-0422c4d1d4fb", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/ruandmel.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/ruandmel.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/ruandmel", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 3 }, { "family": "rukometa", "family_name": "Rukometa", "category": "ransomware", "rule_id": "88a431ac-d8bd-5308-b9ca-d271b7d6ea37", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/rukometa.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/rukometa.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/rukometa", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 3 }, { "family": "sage", "family_name": "Sage", "category": "ransomware", "rule_id": "4a1b7a57-99d1-5b31-8fe4-5be5ee8f8e82", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/sage.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/sage.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/sage", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 3 }, { "family": "samsam", "family_name": "Samsam", "category": "ransomware", "rule_id": "58dfa50c-f873-512b-af82-a6c0eb214f52", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/samsam.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/samsam.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/samsam", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 3 }, { "family": "sasquor", "family_name": "Sasquor", "category": "ransomware", "rule_id": "bf5f0338-e400-51e2-b87c-31691c14b23d", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/sasquor.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/sasquor.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/sasquor", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 3 }, { "family": "sbdbat2exe", "family_name": "Sbdbat2exe", "category": "advanced_threat", "rule_id": "8b866ee8-d15d-5e86-b3ce-f1cbdf5a844f", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/sbdbat2exe.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/sbdbat2exe.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/sbdbat2exe", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 3 }, { "family": "scano", "family_name": "Scano", "category": "ransomware", "rule_id": "04b381ac-d6d4-51ed-afc0-5f9f0bcd12b0", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/scano.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/scano.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/scano", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 3 }, { "family": "sdld", "family_name": "Sdld", "category": "ransomware", "rule_id": "3b907951-673a-51b7-8415-7736dcc9f754", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/sdld.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/sdld.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/sdld", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 3 }, { "family": "searchgo", "family_name": "Searchgo", "category": "advanced_threat", "rule_id": "0be70afa-7a06-545b-957f-1aaf13919967", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/searchgo.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/searchgo.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/searchgo", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 3 }, { "family": "securityxploded", "family_name": "Securityxploded", "category": "advanced_threat", "rule_id": "468ff203-7f69-593b-bcf1-d1c34a621437", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/securityxploded.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/securityxploded.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/securityxploded", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 3 }, { "family": "shenzhen", "family_name": "Shenzhen", "category": "advanced_threat", "rule_id": "7e64787d-d5e4-51c6-a8d9-fe8f6795048e", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/shenzhen.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/shenzhen.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/shenzhen", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 3 }, { "family": "shepher", "family_name": "Shepher", "category": "ransomware", "rule_id": "59accf5e-dd83-564d-8bb6-0bd0b1d26f02", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/shepher.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/shepher.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/shepher", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 3 }, { "family": "sigrun", "family_name": "Sigrun", "category": "ransomware", "rule_id": "63e1889d-4bdb-5d23-97a0-abe1b3f00701", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/sigrun.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/sigrun.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/sigrun", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 3 }, { "family": "smalo", "family_name": "Smalo", "category": "ransomware", "rule_id": "8ca9d7a2-8da3-56d3-a38f-6f1c39072902", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/smalo.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/smalo.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/smalo", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 3 }, { "family": "smartassembly", "family_name": "Smartassembly", "category": "ransomware", "rule_id": "a35537a4-b441-5f9f-8aca-019edac7dd09", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/smartassembly.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/smartassembly.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/smartassembly", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 3 }, { "family": "socstealer", "family_name": "Socstealer", "category": "trojan", "rule_id": "e2973d80-d102-5e68-b763-c61cb5d969ed", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/socstealer.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/socstealer.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/socstealer", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 3 }, { "family": "somoto", "family_name": "Somoto", "category": "advanced_threat", "rule_id": "6e20e82e-1eb4-58a1-84fb-b0270f7d2909", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/somoto.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/somoto.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/somoto", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 3 }, { "family": "speesipro", "family_name": "Speesipro", "category": "advanced_threat", "rule_id": "1da3e2a2-db7f-5a62-bfaf-c3fcee177005", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/speesipro.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/speesipro.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/speesipro", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 3 }, { "family": "sperolz", "family_name": "Sperolz", "category": "ransomware", "rule_id": "98ea1199-8f5c-54e1-bec0-9c13582f7f51", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/sperolz.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/sperolz.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/sperolz", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 3 }, { "family": "spyagent", "family_name": "Spyagent", "category": "advanced_threat", "rule_id": "c3312507-369e-5fa2-907b-da76bb7b9474", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/spyagent.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/spyagent.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/spyagent", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 3 }, { "family": "spynomore", "family_name": "Spynomore", "category": "ransomware", "rule_id": "334c85ab-586a-5efe-8fbf-08d73987922b", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/spynomore.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/spynomore.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/spynomore", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 3 }, { "family": "spyrecon", "family_name": "Spyrecon", "category": "advanced_threat", "rule_id": "78e94955-c297-59cf-b8b6-eb6f05edf12f", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/spyrecon.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/spyrecon.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/spyrecon", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 3 }, { "family": "suloc", "family_name": "Suloc", "category": "ransomware", "rule_id": "89e0c1b9-2efb-5002-b34f-1efd6f9027ed", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/suloc.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/suloc.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/suloc", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 3 }, { "family": "takbum", "family_name": "Takbum", "category": "ransomware", "rule_id": "0ccda927-0960-5acc-9316-93a8f63d0ced", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/takbum.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/takbum.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/takbum", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 3 }, { "family": "tarctox", "family_name": "Tarctox", "category": "ransomware", "rule_id": "6fce2a6e-e2e9-5bea-9183-8ed9f220a9fc", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/tarctox.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/tarctox.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/tarctox", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 3 }, { "family": "taterf", "family_name": "Taterf", "category": "advanced_threat", "rule_id": "935d575a-70d9-5827-8deb-b6ef5612529b", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/taterf.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/taterf.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/taterf", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 3 }, { "family": "temr", "family_name": "Temr", "category": "ransomware", "rule_id": "59d60a03-d2f9-5af1-aff2-f65276afc303", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/temr.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/temr.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/temr", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 3 }, { "family": "tenavt", "family_name": "Tenavt", "category": "ransomware", "rule_id": "e1eb69c3-bb27-51ed-bc8e-43a6fd9deddc", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/tenavt.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/tenavt.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/tenavt", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 3 }, { "family": "tencent", "family_name": "Tencent", "category": "advanced_threat", "rule_id": "11f37adc-4851-509b-801a-b6e84c275792", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/tencent.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/tencent.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/tencent", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 3 }, { "family": "tftpd", "family_name": "Tftpd", "category": "ransomware", "rule_id": "6eb5407f-dc7d-55b6-b4ef-1bb83c8ecd56", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/tftpd.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/tftpd.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/tftpd", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 3 }, { "family": "thanatos", "family_name": "Thanatos", "category": "ransomware", "rule_id": "c703f245-d067-5f2f-88ae-b2b964de3fcf", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/thanatos.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/thanatos.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/thanatos", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 3 }, { "family": "therat", "family_name": "Therat", "category": "ransomware", "rule_id": "0e01af81-717c-5272-bdba-566ff60cdb77", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/therat.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/therat.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/therat", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 3 }, { "family": "tibia", "family_name": "Tibia", "category": "advanced_threat", "rule_id": "a1ab185b-772f-5f39-b765-6240bba46429", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/tibia.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/tibia.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/tibia", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 3 }, { "family": "timesink", "family_name": "Timesink", "category": "advanced_threat", "rule_id": "75cac5f8-0845-5603-a119-b0d6200852e3", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/timesink.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/timesink.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/timesink", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 3 }, { "family": "torjok", "family_name": "Torjok", "category": "ransomware", "rule_id": "96e63a85-0166-5d9b-a3aa-337745d68c49", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/torjok.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/torjok.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/torjok", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 3 }, { "family": "tovicrypt", "family_name": "Tovicrypt", "category": "ransomware", "rule_id": "8369c42b-5e08-5993-be26-406268c45525", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/tovicrypt.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/tovicrypt.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/tovicrypt", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 3 }, { "family": "trjgen", "family_name": "Trjgen", "category": "trojan", "rule_id": "684da62d-ce0e-5e3d-a40f-52d93791e367", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/trjgen.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/trjgen.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/trjgen", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 3 }, { "family": "tyhos", "family_name": "Tyhos", "category": "ransomware", "rule_id": "2a8a9da1-c7fc-56cd-a5d8-6607982c15e2", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/tyhos.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/tyhos.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/tyhos", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 3 }, { "family": "unpacked", "family_name": "Unpacked", "category": "ransomware", "rule_id": "3680ce24-7e0a-585d-a132-6119166d0506", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/unpacked.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/unpacked.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/unpacked", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 3 }, { "family": "uptodown", "family_name": "Uptodown", "category": "advanced_threat", "rule_id": "163d5fd2-7b58-5c24-bced-958fd25d1f64", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/uptodown.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/uptodown.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/uptodown", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 3 }, { "family": "ursumdt", "family_name": "Ursumdt", "category": "ransomware", "rule_id": "f5f2df0c-b0f3-5703-bb7e-7db6d19dab0f", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/ursumdt.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/ursumdt.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/ursumdt", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 3 }, { "family": "uwamson", "family_name": "Uwamson", "category": "ransomware", "rule_id": "eec22416-39df-5c21-9b28-0e86a374fe4c", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/uwamson.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/uwamson.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/uwamson", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 3 }, { "family": "uztub", "family_name": "Uztub", "category": "ransomware", "rule_id": "21a1a754-75f8-5d29-9d87-669ab6b92863", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/uztub.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/uztub.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/uztub", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 3 }, { "family": "uztuby", "family_name": "Uztuby", "category": "ransomware", "rule_id": "dffd67d4-7521-5347-a5df-05c181a745dd", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/uztuby.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/uztuby.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/uztuby", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 3 }, { "family": "vanbot", "family_name": "Vanbot", "category": "trojan", "rule_id": "9fd7d1d8-9e32-5965-8e4c-036119153f8c", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/vanbot.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/vanbot.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/vanbot", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 3 }, { "family": "vbcryptor", "family_name": "Vbcryptor", "category": "ransomware", "rule_id": "bd43bfc3-27be-5820-a1e7-cfbb32ae6d89", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/vbcryptor.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/vbcryptor.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/vbcryptor", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 3 }, { "family": "vbklog", "family_name": "Vbklog", "category": "ransomware", "rule_id": "d4f61c11-f1b9-5a18-a636-0f97fc30880b", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/vbklog.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/vbklog.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/vbklog", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 3 }, { "family": "veilev", "family_name": "Veilev", "category": "ransomware", "rule_id": "c6f029ab-ae8a-536c-a5bb-434993d747b2", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/veilev.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/veilev.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/veilev", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 3 }, { "family": "vkont", "family_name": "Vkont", "category": "ransomware", "rule_id": "93de0737-8eaa-5095-ba8e-d0ac68b7e946", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/vkont.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/vkont.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/vkont", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 3 }, { "family": "vonteera", "family_name": "Vonteera", "category": "advanced_threat", "rule_id": "ae6c6aab-0b3a-5c42-81a4-cd935794aaa9", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/vonteera.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/vonteera.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/vonteera", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 3 }, { "family": "vucha", "family_name": "Vucha", "category": "ransomware", "rule_id": "1aa09d82-d7e5-5523-b8dd-a24005a5b478", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/vucha.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/vucha.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/vucha", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 3 }, { "family": "webdiscover", "family_name": "Webdiscover", "category": "advanced_threat", "rule_id": "6de7624c-b5e3-51a5-bcd2-216260571fb4", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/webdiscover.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/webdiscover.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/webdiscover", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 3 }, { "family": "webprefix", "family_name": "Webprefix", "category": "advanced_threat", "rule_id": "5a45ac3e-54a3-53b4-896c-07e653b339cc", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/webprefix.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/webprefix.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/webprefix", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 3 }, { "family": "woool", "family_name": "Woool", "category": "trojan", "rule_id": "32904cf1-21be-5310-84ba-d9acb8180a07", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/woool.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/woool.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/woool", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 3 }, { "family": "wpepro", "family_name": "Wpepro", "category": "advanced_threat", "rule_id": "61a169f8-d254-5672-8f52-da2664023921", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/wpepro.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/wpepro.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/wpepro", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 3 }, { "family": "xorala", "family_name": "Xorala", "category": "ransomware", "rule_id": "d1f29e2b-3183-56e7-a937-07bf87923cbe", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/xorala.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/xorala.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/xorala", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 3 }, { "family": "xyligan", "family_name": "Xyligan", "category": "ransomware", "rule_id": "10677ca7-5a68-5ab8-ae5b-b7c543504b9a", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/xyligan.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/xyligan.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/xyligan", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 3 }, { "family": "zxshell", "family_name": "Zxshell", "category": "backdoor", "rule_id": "6d1a83c0-d902-500f-baff-5f7690a06110", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/zxshell.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/zxshell.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/zxshell", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 3 }, { "family": "5hex", "family_name": "5hex", "category": "ransomware", "rule_id": "66acf29d-74ce-50ca-8cde-ef4507a5379e", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/5hex.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/5hex.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/5hex", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 2 }, { "family": "adodb", "family_name": "Adodb", "category": "backdoor", "rule_id": "afd54825-cadd-5e11-8ccc-0214669813b7", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/adodb.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/adodb.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/adodb", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 2 }, { "family": "advancedpccare", "family_name": "Advancedpccare", "category": "adware", "rule_id": "db8b616f-b226-55b0-9029-2180af856390", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/advancedpccare.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/advancedpccare.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/advancedpccare", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 2 }, { "family": "advload", "family_name": "Advload", "category": "trojan", "rule_id": "aa1d8988-b2f9-5ce6-82e2-4ef23fe8057b", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/advload.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/advload.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/advload", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 2 }, { "family": "agentus", "family_name": "Agentus", "category": "ransomware", "rule_id": "8a0924be-53e2-5e65-9a35-29068e1317ea", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/agentus.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/agentus.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/agentus", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 2 }, { "family": "alinaos", "family_name": "Alinaos", "category": "trojan", "rule_id": "01595594-d2db-5f52-b470-abd3b217cb56", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/alinaos.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/alinaos.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/alinaos", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 2 }, { "family": "alphaeon", "family_name": "Alphaeon", "category": "ransomware", "rule_id": "82b43667-1fba-5744-b7ce-a3984256b7bb", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/alphaeon.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/alphaeon.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/alphaeon", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 2 }, { "family": "alreay", "family_name": "Alreay", "category": "ransomware", "rule_id": "dc40afc7-d832-5f55-a290-5d9bcea6fa2f", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/alreay.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/alreay.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/alreay", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 2 }, { "family": "ammyy", "family_name": "Ammyy", "category": "ransomware", "rule_id": "60f042be-c685-5cc4-ae33-7d5b59d5c527", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/ammyy.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/ammyy.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/ammyy", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 2 }, { "family": "aque", "family_name": "Aque", "category": "ransomware", "rule_id": "439f0fab-16ba-55c6-8961-3dcc13b21626", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/aque.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/aque.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/aque", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 2 }, { "family": "arhost", "family_name": "Arhost", "category": "ransomware", "rule_id": "9392ab1b-b60a-55f8-88c3-4e974cbd0bd6", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/arhost.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/arhost.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/arhost", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 2 }, { "family": "autocleanpro", "family_name": "Autocleanpro", "category": "trojan", "rule_id": "7f06cc6e-30e8-529f-89bf-7746fab8b4fe", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/autocleanpro.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/autocleanpro.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/autocleanpro", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 2 }, { "family": "autorunerent", "family_name": "Autorunerent", "category": "trojan", "rule_id": "f42320b5-eb68-567f-90ff-1be1eab253a7", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/autorunerent.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/autorunerent.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/autorunerent", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 2 }, { "family": "backswap", "family_name": "Backswap", "category": "trojan", "rule_id": "015fc9fd-e945-5d2a-bf3c-fd8d2b9f58c7", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/backswap.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/backswap.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/backswap", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 2 }, { "family": "bagsu", "family_name": "Bagsu", "category": "ransomware", "rule_id": "c5942dfa-c050-546a-bdb1-262e75f33d86", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/bagsu.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/bagsu.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/bagsu", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 2 }, { "family": "baidu", "family_name": "Baidu", "category": "ransomware", "rule_id": "2f613200-b41e-54ae-ad94-5b2ebb45e607", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/baidu.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/baidu.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/baidu", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 2 }, { "family": "baidusearch", "family_name": "Baidusearch", "category": "trojan", "rule_id": "beb8608a-bc08-5229-ab2c-9da66e4a2632", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/baidusearch.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/baidusearch.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/baidusearch", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 2 }, { "family": "bank", "family_name": "Bank", "category": "ransomware", "rule_id": "b41b9141-830e-5d73-b4b8-537305f57d00", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/bank.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/bank.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/bank", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 2 }, { "family": "banspy", "family_name": "Banspy", "category": "infostealer", "rule_id": "726aeb70-d230-55cc-9b7a-a0553192ca92", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/banspy.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/banspy.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/banspy", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/infostealer-protection", "sample_count": 2 }, { "family": "bccrypt", "family_name": "Bccrypt", "category": "ransomware", "rule_id": "768d6ead-9afa-5abc-916b-14b12ec6265e", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/bccrypt.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/bccrypt.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/bccrypt", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 2 }, { "family": "begseabug", "family_name": "Begseabug", "category": "ransomware", "rule_id": "cbf594bf-1479-58c3-99e5-b8059a5db946", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/begseabug.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/begseabug.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/begseabug", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 2 }, { "family": "behav", "family_name": "Behav", "category": "ransomware", "rule_id": "b09dac00-d495-52bd-8633-e9b2f8f80a88", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/behav.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/behav.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/behav", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 2 }, { "family": "bisonal", "family_name": "Bisonal", "category": "trojan", "rule_id": "16574625-a59d-5292-87df-2538e0230bfe", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/bisonal.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/bisonal.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/bisonal", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 2 }, { "family": "bluewushu", "family_name": "Bluewushu", "category": "ransomware", "rule_id": "b7e4e6ba-9275-546e-a4b4-b59054a512eb", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/bluewushu.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/bluewushu.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/bluewushu", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 2 }, { "family": "boopcel", "family_name": "Boopcel", "category": "ransomware", "rule_id": "e8673687-fc9d-5d2e-a888-354b692f9374", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/boopcel.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/boopcel.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/boopcel", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 2 }, { "family": "brambul", "family_name": "Brambul", "category": "worm", "rule_id": "504edb82-6600-5a3f-922e-838246d5c974", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/brambul.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/brambul.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/brambul", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 2 }, { "family": "browserpassview", "family_name": "Browserpassview", "category": "infostealer", "rule_id": "070dc79b-4810-51fb-bea3-740195891e4c", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/browserpassview.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/browserpassview.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/browserpassview", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/infostealer-protection", "sample_count": 2 }, { "family": "browserpwdstealer", "family_name": "Browserpwdstealer", "category": "infostealer", "rule_id": "5c99a278-4525-5d61-a77d-8dc3cb594145", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/browserpwdstealer.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/browserpwdstealer.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/browserpwdstealer", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/infostealer-protection", "sample_count": 2 }, { "family": "bruhorn", "family_name": "Bruhorn", "category": "ransomware", "rule_id": "7ca40f11-4225-5ab2-b923-f8c36d78e784", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/bruhorn.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/bruhorn.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/bruhorn", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 2 }, { "family": "bundleloader", "family_name": "Bundleloader", "category": "trojan_downloader", "rule_id": "5c3887b8-5a61-5a5e-acb5-40116d459b4a", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/bundleloader.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/bundleloader.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/bundleloader", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 2 }, { "family": "bustem", "family_name": "Bustem", "category": "ransomware", "rule_id": "dab6a2ae-cbdf-56d8-889e-b6dfb22feb5a", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/bustem.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/bustem.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/bustem", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 2 }, { "family": "bybz", "family_name": "Bybz", "category": "ransomware", "rule_id": "8a50b66a-e825-5778-a771-12d08463c03c", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/bybz.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/bybz.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/bybz", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 2 }, { "family": "cakl", "family_name": "Cakl", "category": "ransomware", "rule_id": "0e47d95d-0202-52d4-bab6-a05aadb00af7", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/cakl.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/cakl.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/cakl", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 2 }, { "family": "capredeam", "family_name": "Capredeam", "category": "ransomware", "rule_id": "017b2c60-17a8-5a4d-b08e-068632301ceb", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/capredeam.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/capredeam.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/capredeam", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 2 }, { "family": "carambisdu", "family_name": "Carambisdu", "category": "trojan", "rule_id": "aa2b043e-4838-5e29-9cf5-3f66ab2f4d5c", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/carambisdu.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/carambisdu.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/carambisdu", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 2 }, { "family": "carbanak", "family_name": "Carbanak", "category": "banking_trojan", "rule_id": "2de846e7-b616-54af-8a56-f44100cae1a9", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/carbanak.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/carbanak.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/carbanak", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/banking-trojan-protection", "sample_count": 2 }, { "family": "cdvq", "family_name": "Cdvq", "category": "ransomware", "rule_id": "4470529f-b7df-5011-94b5-ea3233c73ec8", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/cdvq.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/cdvq.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/cdvq", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 2 }, { "family": "ceckno", "family_name": "Ceckno", "category": "ransomware", "rule_id": "b4242c77-18b2-557e-88b8-e2bdca89896b", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/ceckno.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/ceckno.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/ceckno", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 2 }, { "family": "chanitor", "family_name": "Chanitor", "category": "ransomware", "rule_id": "20c0fbab-16c7-5035-976f-0e1237036b10", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/chanitor.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/chanitor.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/chanitor", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 2 }, { "family": "chekafev", "family_name": "Chekafev", "category": "ransomware", "rule_id": "2982da1c-a9ff-5017-8355-0d2c4b5f9700", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/chekafev.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/chekafev.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/chekafev", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 2 }, { "family": "chextad", "family_name": "Chextad", "category": "ransomware", "rule_id": "03e29fe1-0450-54ee-9f67-5c48f383d9a2", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/chextad.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/chextad.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/chextad", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 2 }, { "family": "chistudi", "family_name": "Chistudi", "category": "ransomware", "rule_id": "8a919e98-afb7-5c66-bf85-40c51391430a", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/chistudi.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/chistudi.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/chistudi", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 2 }, { "family": "chromepass", "family_name": "Chromepass", "category": "advanced_threat", "rule_id": "2c245784-f329-5b77-aed2-ca31d6a4005e", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/chromepass.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/chromepass.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/chromepass", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 2 }, { "family": "chupik", "family_name": "Chupik", "category": "ransomware", "rule_id": "688d878f-ada6-5890-b065-bec8b195ddcb", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/chupik.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/chupik.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/chupik", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 2 }, { "family": "clearlog", "family_name": "Clearlog", "category": "advanced_threat", "rule_id": "18a545fb-8c8d-5929-ae52-a7793c99c0f2", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/clearlog.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/clearlog.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/clearlog", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 2 }, { "family": "cloverplus", "family_name": "Cloverplus", "category": "ransomware", "rule_id": "8110f45d-e8ff-5a76-a4c0-c26e416f5bbb", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/cloverplus.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/cloverplus.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/cloverplus", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 2 }, { "family": "coantor", "family_name": "Coantor", "category": "ransomware", "rule_id": "7905a220-4423-52f3-9599-154fb9964d79", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/coantor.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/coantor.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/coantor", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 2 }, { "family": "cobra", "family_name": "Cobra", "category": "ransomware", "rule_id": "ca9cdeed-3e4f-5476-8955-5d340335c972", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/cobra.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/cobra.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/cobra", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 2 }, { "family": "codecpa", "family_name": "Codecpa", "category": "trojan", "rule_id": "f96637f7-527f-54eb-8954-c91ec8bb11e0", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/codecpa.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/codecpa.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/codecpa", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 2 }, { "family": "codewall", "family_name": "Codewall", "category": "ransomware", "rule_id": "d30ea213-6182-508f-808b-7ca7f927f62b", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/codewall.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/codewall.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/codewall", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 2 }, { "family": "comisproc", "family_name": "Comisproc", "category": "ransomware", "rule_id": "e0b73d08-5c38-564a-9dfc-755358bb1a22", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/comisproc.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/comisproc.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/comisproc", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 2 }, { "family": "confucius", "family_name": "Confucius", "category": "trojan", "rule_id": "aeb02557-141a-5f86-acc9-3ee4d320b9b5", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/confucius.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/confucius.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/confucius", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 2 }, { "family": "cordis", "family_name": "Cordis", "category": "ransomware", "rule_id": "92e0ea42-03e4-57a8-8b7b-75fb9ea5f464", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/cordis.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/cordis.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/cordis", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 2 }, { "family": "crime", "family_name": "Crime", "category": "ransomware", "rule_id": "5746619b-8ca9-5671-b313-7b572a01a5fc", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/crime.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/crime.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/crime", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 2 }, { "family": "crisisht", "family_name": "Crisisht", "category": "ransomware", "rule_id": "98fdc085-9117-56b0-a85a-3a610afee775", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/crisisht.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/crisisht.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/crisisht", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 2 }, { "family": "crypt0l0cker", "family_name": "Crypt0l0cker", "category": "ransomware", "rule_id": "87a17541-ff1e-5bbb-b906-dd70bfc6a572", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/crypt0l0cker.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/crypt0l0cker.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/crypt0l0cker", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 2 }, { "family": "cryptexe", "family_name": "Cryptexe", "category": "ransomware", "rule_id": "3d40115f-7204-594a-a4c7-faf7837c9ac4", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/cryptexe.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/cryptexe.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/cryptexe", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 2 }, { "family": "cryptoload", "family_name": "Cryptoload", "category": "ransomware", "rule_id": "35aab304-ef94-5090-9aa3-801b9637675f", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/cryptoload.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/cryptoload.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/cryptoload", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 2 }, { "family": "cryptpack", "family_name": "Cryptpack", "category": "ransomware", "rule_id": "75ec213e-7153-5296-a4ac-92dde331373a", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/cryptpack.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/cryptpack.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/cryptpack", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 2 }, { "family": "d0f3570c", "family_name": "D0f3570c", "category": "ransomware", "rule_id": "f4f5354e-96a2-5726-8d13-1c010acced4a", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/d0f3570c.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/d0f3570c.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/d0f3570c", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 2 }, { "family": "dacic", "family_name": "Dacic", "category": "ransomware", "rule_id": "48d6647a-a8d7-558a-a5f5-8069af00ff61", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/dacic.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/dacic.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/dacic", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 2 }, { "family": "darkmoon", "family_name": "Darkmoon", "category": "ransomware", "rule_id": "55d57169-4ff4-5535-b653-a9a79d3175ee", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/darkmoon.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/darkmoon.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/darkmoon", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 2 }, { "family": "darkneuron", "family_name": "Darkneuron", "category": "ransomware", "rule_id": "d100b848-696e-56a2-acfa-836b70affee0", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/darkneuron.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/darkneuron.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/darkneuron", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 2 }, { "family": "daum", "family_name": "Daum", "category": "advanced_threat", "rule_id": "af2e24ca-75b6-58c6-a6bc-1cd0eae0e20b", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/daum.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/daum.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/daum", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 2 }, { "family": "davobevix", "family_name": "Davobevix", "category": "ransomware", "rule_id": "6c95cc05-1c49-532d-ac5d-bc2d9ecabadf", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/davobevix.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/davobevix.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/davobevix", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 2 }, { "family": "dazi", "family_name": "Dazi", "category": "ransomware", "rule_id": "24e6fed5-42ba-5f38-a698-e5fc6ea69288", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/dazi.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/dazi.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/dazi", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 2 }, { "family": "defaulttab", "family_name": "Defaulttab", "category": "trojan", "rule_id": "02b89aa9-15a9-5c8d-bf32-cd3c1eca8340", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/defaulttab.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/defaulttab.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/defaulttab", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 2 }, { "family": "deliric", "family_name": "Deliric", "category": "ransomware", "rule_id": "e1daad94-b589-584b-84c7-ad715c145af3", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/deliric.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/deliric.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/deliric", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 2 }, { "family": "delpem", "family_name": "Delpem", "category": "ransomware", "rule_id": "bd4d204b-5ddf-5b6a-85fc-c3d393692095", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/delpem.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/delpem.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/delpem", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 2 }, { "family": "desktop", "family_name": "Desktop", "category": "ransomware", "rule_id": "d4a15701-5eb5-5d59-94d8-edf500f13d2a", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/desktop.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/desktop.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/desktop", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 2 }, { "family": "desurou", "family_name": "Desurou", "category": "ransomware", "rule_id": "ff882dd7-4f44-5410-8d06-45d7cfca42a8", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/desurou.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/desurou.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/desurou", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 2 }, { "family": "detplock", "family_name": "Detplock", "category": "ransomware", "rule_id": "821f2bfd-681a-5eb8-a45c-d4a328abba16", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/detplock.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/detplock.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/detplock", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 2 }, { "family": "dlassistant", "family_name": "Dlassistant", "category": "advanced_threat", "rule_id": "807b2189-c69e-5a5e-9f93-be88f5a3e978", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/dlassistant.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/dlassistant.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/dlassistant", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 2 }, { "family": "dotbundle", "family_name": "Dotbundle", "category": "advanced_threat", "rule_id": "5bc1a718-9586-50c4-a4ce-1a9f3208a9f5", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/dotbundle.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/dotbundle.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/dotbundle", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 2 }, { "family": "downloaderb", "family_name": "Downloaderb", "category": "ransomware", "rule_id": "a729ba7a-b319-5059-b083-94286516210b", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/downloaderb.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/downloaderb.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/downloaderb", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 2 }, { "family": "droma", "family_name": "Droma", "category": "ransomware", "rule_id": "0f574077-338e-5d7c-b55f-cb15f54d44d1", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/droma.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/droma.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/droma", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 2 }, { "family": "dyloader", "family_name": "Dyloader", "category": "trojan", "rule_id": "9c3f6bf5-8824-5787-a114-99f7cdc01783", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/dyloader.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/dyloader.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/dyloader", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 2 }, { "family": "ekisoli", "family_name": "Ekisoli", "category": "ransomware", "rule_id": "94a1dcb9-cbbb-5c26-8aa9-0337c1b502b0", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/ekisoli.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/ekisoli.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/ekisoli", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 2 }, { "family": "elevate", "family_name": "Elevate", "category": "ransomware", "rule_id": "f6333574-19ad-53b7-a369-b5f2c25b8aba", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/elevate.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/elevate.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/elevate", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 2 }, { "family": "epicscale", "family_name": "Epicscale", "category": "advanced_threat", "rule_id": "70e84d6e-fdd8-5dd8-a24c-38d1bf672f96", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/epicscale.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/epicscale.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/epicscale", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 2 }, { "family": "eszjuxuan", "family_name": "Eszjuxuan", "category": "ransomware", "rule_id": "a7222007-54a9-5e8f-8a02-b3f0ce6785c3", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/eszjuxuan.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/eszjuxuan.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/eszjuxuan", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 2 }, { "family": "etap", "family_name": "Etap", "category": "ransomware", "rule_id": "e681fc8b-b4b7-5dde-91ff-f51ae45621c2", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/etap.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/etap.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/etap", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 2 }, { "family": "exfriendalert", "family_name": "Exfriendalert", "category": "advanced_threat", "rule_id": "4f4650ad-fd66-5b04-987b-301d4b0277bd", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/exfriendalert.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/exfriendalert.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/exfriendalert", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 2 }, { "family": "extcrome", "family_name": "Extcrome", "category": "advanced_threat", "rule_id": "aa97e037-b422-5bbb-abd8-f799af0d9a1b", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/extcrome.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/extcrome.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/extcrome", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 2 }, { "family": "extinstaller", "family_name": "Extinstaller", "category": "advanced_threat", "rule_id": "39b9d306-87b6-5b8a-835b-b83024596b5e", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/extinstaller.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/extinstaller.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/extinstaller", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 2 }, { "family": "ezula", "family_name": "Ezula", "category": "advanced_threat", "rule_id": "ebe82538-ae66-542e-a22a-9a20d8fa13b1", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/ezula.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/ezula.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/ezula", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 2 }, { "family": "facemoi", "family_name": "Facemoi", "category": "ransomware", "rule_id": "33a5c2a2-7300-5878-9ccf-fcc0601e71ba", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/facemoi.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/facemoi.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/facemoi", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 2 }, { "family": "fakeinstaller", "family_name": "Fakeinstaller", "category": "trojan", "rule_id": "19fff95b-1b8a-5d03-9efb-5f0cb308fa73", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/fakeinstaller.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/fakeinstaller.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/fakeinstaller", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 2 }, { "family": "fakesupport", "family_name": "Fakesupport", "category": "ransomware", "rule_id": "41f5c7e7-dbca-5088-b43b-a12a3c193c36", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/fakesupport.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/fakesupport.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/fakesupport", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 2 }, { "family": "fakesysdef", "family_name": "Fakesysdef", "category": "advanced_threat", "rule_id": "4c767539-ff2f-5a3c-a865-99030ef6aeb8", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/fakesysdef.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/fakesysdef.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/fakesysdef", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 2 }, { "family": "famvt", "family_name": "Famvt", "category": "ransomware", "rule_id": "5d9bc826-79ea-5b96-a743-8dff9e30c3e4", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/famvt.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/famvt.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/famvt", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 2 }, { "family": "fasem", "family_name": "Fasem", "category": "ransomware", "rule_id": "238937ec-fd58-55b5-a2ff-b57d217f789a", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/fasem.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/fasem.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/fasem", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 2 }, { "family": "fdoh", "family_name": "Fdoh", "category": "ransomware", "rule_id": "fc17fb46-d972-5520-8e7b-d5d834c44d48", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/fdoh.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/fdoh.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/fdoh", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 2 }, { "family": "fearso", "family_name": "Fearso", "category": "ransomware", "rule_id": "3adae7d1-3798-5495-b26d-dbe87beede9a", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/fearso.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/fearso.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/fearso", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 2 }, { "family": "filepatch", "family_name": "Filepatch", "category": "ransomware", "rule_id": "e93a8c8e-4f22-5463-bc7e-b55dbfb0374e", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/filepatch.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/filepatch.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/filepatch", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 2 }, { "family": "filerepmetagen", "family_name": "Filerepmetagen", "category": "advanced_threat", "rule_id": "c6fbf222-25ab-513b-b806-d0b6957c6d29", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/filerepmetagen.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/filerepmetagen.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/filerepmetagen", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 2 }, { "family": "flawedammyy", "family_name": "Flawedammyy", "category": "ransomware", "rule_id": "f8a30189-3442-5495-a23c-dc8fd479b9ce", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/flawedammyy.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/flawedammyy.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/flawedammyy", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 2 }, { "family": "fleercivet", "family_name": "Fleercivet", "category": "advanced_threat", "rule_id": "395ca041-119f-5970-933e-417c59d00e00", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/fleercivet.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/fleercivet.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/fleercivet", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 2 }, { "family": "fotopapps", "family_name": "Fotopapps", "category": "ransomware", "rule_id": "e7188728-e553-5495-bd3e-565bb56a4d9c", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/fotopapps.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/fotopapps.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/fotopapps", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 2 }, { "family": "gamaredon", "family_name": "Gamaredon", "category": "trojan", "rule_id": "bc3c4593-fc1e-5d1c-b5b1-033e510e56ae", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/gamaredon.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/gamaredon.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/gamaredon", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 2 }, { "family": "gameserver", "family_name": "Gameserver", "category": "trojan", "rule_id": "c071fb78-4d04-5153-bf34-062351f1cd65", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/gameserver.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/gameserver.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/gameserver", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 2 }, { "family": "gamethief", "family_name": "Gamethief", "category": "trojan", "rule_id": "0a1dfc30-799e-5a39-a59c-745f3ffcdc1c", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/gamethief.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/gamethief.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/gamethief", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 2 }, { "family": "gampass", "family_name": "Gampass", "category": "trojan", "rule_id": "f3f1641a-4d5e-5e1e-9810-b0028a431ae9", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/gampass.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/gampass.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/gampass", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 2 }, { "family": "gena", "family_name": "Gena", "category": "ransomware", "rule_id": "91896c4a-b15a-5ebe-8dbd-b9d3e9f4820c", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/gena.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/gena.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/gena", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 2 }, { "family": "genasep", "family_name": "Genasep", "category": "ransomware", "rule_id": "00e23e51-9f70-54c9-9007-c99a9f2f3ded", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/genasep.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/genasep.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/genasep", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 2 }, { "family": "genericrxaz", "family_name": "Genericrxaz", "category": "ransomware", "rule_id": "a05fb7a6-5fd4-5fb7-8238-cbdec2928e5a", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/genericrxaz.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/genericrxaz.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/genericrxaz", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 2 }, { "family": "genericrxbx", "family_name": "Genericrxbx", "category": "ransomware", "rule_id": "f8d9487a-23cb-5a70-a7b6-7bacac88c4b5", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/genericrxbx.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/genericrxbx.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/genericrxbx", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 2 }, { "family": "genericrxca", "family_name": "Genericrxca", "category": "ransomware", "rule_id": "605cdc21-9579-5a81-8633-f6fe2ca03fd4", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/genericrxca.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/genericrxca.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/genericrxca", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 2 }, { "family": "genericrxdc", "family_name": "Genericrxdc", "category": "ransomware", "rule_id": "7f0e5ffb-de0d-5b02-8bdc-14b3502a306f", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/genericrxdc.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/genericrxdc.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/genericrxdc", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 2 }, { "family": "genericrxdm", "family_name": "Genericrxdm", "category": "ransomware", "rule_id": "00c0f966-067f-5b49-bb20-0cd950e88d3b", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/genericrxdm.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/genericrxdm.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/genericrxdm", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 2 }, { "family": "genericrxeo", "family_name": "Genericrxeo", "category": "ransomware", "rule_id": "b7308024-b52a-5d48-88d1-f411b004e8cb", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/genericrxeo.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/genericrxeo.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/genericrxeo", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 2 }, { "family": "genericrxep", "family_name": "Genericrxep", "category": "ransomware", "rule_id": "bf97bf1f-e6dc-5c1b-8c75-f9c25df8d9fd", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/genericrxep.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/genericrxep.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/genericrxep", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 2 }, { "family": "genericrxeq", "family_name": "Genericrxeq", "category": "ransomware", "rule_id": "dacf0b7b-2b54-5283-a1f2-18f1cd6eb5cc", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/genericrxeq.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/genericrxeq.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/genericrxeq", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 2 }, { "family": "genericrxer", "family_name": "Genericrxer", "category": "ransomware", "rule_id": "89a68950-a7d3-55cd-a32b-f3bc578d4332", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/genericrxer.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/genericrxer.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/genericrxer", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 2 }, { "family": "genericrxew", "family_name": "Genericrxew", "category": "ransomware", "rule_id": "32a7abf6-3b3d-5ad9-97fb-c5a958767e08", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/genericrxew.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/genericrxew.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/genericrxew", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 2 }, { "family": "genericrxfq", "family_name": "Genericrxfq", "category": "ransomware", "rule_id": "190eee8f-6626-5502-9624-f35ff6e919cc", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/genericrxfq.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/genericrxfq.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/genericrxfq", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 2 }, { "family": "genericrxft", "family_name": "Genericrxft", "category": "ransomware", "rule_id": "efbb39d7-622e-54bb-a7f9-4387fc6645a0", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/genericrxft.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/genericrxft.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/genericrxft", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 2 }, { "family": "genericrxfv", "family_name": "Genericrxfv", "category": "ransomware", "rule_id": "4a86ba82-25d8-5387-86f7-eee779055140", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/genericrxfv.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/genericrxfv.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/genericrxfv", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 2 }, { "family": "genericrxgb", "family_name": "Genericrxgb", "category": "ransomware", "rule_id": "fa5e295f-028d-585b-97a6-de1b9a299c12", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/genericrxgb.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/genericrxgb.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/genericrxgb", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 2 }, { "family": "genericrxgf", "family_name": "Genericrxgf", "category": "ransomware", "rule_id": "c054bca7-34b1-5c64-88f0-95b7a523beb5", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/genericrxgf.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/genericrxgf.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/genericrxgf", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 2 }, { "family": "genericrxgj", "family_name": "Genericrxgj", "category": "ransomware", "rule_id": "78d57fa8-78ab-5a03-9a09-8fc3423ff158", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/genericrxgj.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/genericrxgj.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/genericrxgj", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 2 }, { "family": "generictka", "family_name": "Generictka", "category": "trojan", "rule_id": "ffcca15a-7ffb-584c-b265-d71a176ad544", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/generictka.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/generictka.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/generictka", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 2 }, { "family": "genx", "family_name": "Genx", "category": "ransomware", "rule_id": "887f5650-853c-59b7-9f14-56ad93926420", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/genx.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/genx.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/genx", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 2 }, { "family": "globalupdate", "family_name": "Globalupdate", "category": "advanced_threat", "rule_id": "89f0086b-3d19-53b8-9a75-06ea005c491e", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/globalupdate.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/globalupdate.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/globalupdate", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 2 }, { "family": "gojdu", "family_name": "Gojdu", "category": "ransomware", "rule_id": "96f9cde9-cecc-5a4b-8bb8-031f3aee813e", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/gojdu.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/gojdu.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/gojdu", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 2 }, { "family": "goppel", "family_name": "Goppel", "category": "ransomware", "rule_id": "e06e1b1c-c719-58d2-afce-1aec264548af", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/goppel.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/goppel.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/goppel", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 2 }, { "family": "grandcrab", "family_name": "Grandcrab", "category": "ransomware", "rule_id": "c33ac0b4-9ea0-51a2-b071-1de06a374a2c", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/grandcrab.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/grandcrab.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/grandcrab", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 2 }, { "family": "habbo", "family_name": "Habbo", "category": "trojan", "rule_id": "cbd730bd-5e01-5d9b-859c-75cdf1ca2581", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/habbo.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/habbo.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/habbo", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 2 }, { "family": "hackav", "family_name": "Hackav", "category": "ransomware", "rule_id": "7597b222-e162-5c72-bfc0-0e1afcf24d11", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/hackav.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/hackav.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/hackav", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 2 }, { "family": "hallaj", "family_name": "Hallaj", "category": "ransomware", "rule_id": "42e496b0-8841-5f1d-8873-10ec1a0e43e2", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/hallaj.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/hallaj.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/hallaj", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 2 }, { "family": "harnig", "family_name": "Harnig", "category": "ransomware", "rule_id": "f12beaa9-4447-5840-b364-7080a2742af2", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/harnig.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/harnig.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/harnig", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 2 }, { "family": "havex", "family_name": "Havex", "category": "trojan", "rule_id": "11f30cff-aefd-5bc9-a006-db4efeacb75a", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/havex.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/havex.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/havex", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 2 }, { "family": "hbov", "family_name": "Hbov", "category": "ransomware", "rule_id": "a3e0d430-c170-55ca-a8ca-21462ab1ef55", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/hbov.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/hbov.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/hbov", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 2 }, { "family": "hiddeninstall", "family_name": "Hiddeninstall", "category": "advanced_threat", "rule_id": "2578bbe1-0179-5e29-98af-9e8038a89b9a", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/hiddeninstall.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/hiddeninstall.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/hiddeninstall", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 2 }, { "family": "hiddentears", "family_name": "Hiddentears", "category": "ransomware", "rule_id": "03ecacd1-253a-52dc-b3ec-63ce2198b26c", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/hiddentears.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/hiddentears.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/hiddentears", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 2 }, { "family": "homles", "family_name": "Homles", "category": "ransomware", "rule_id": "0ee4b2e7-7ae0-5f41-9c85-ce0a78b12cf5", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/homles.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/homles.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/homles", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 2 }, { "family": "hostwack", "family_name": "Hostwack", "category": "ransomware", "rule_id": "3941b517-6d79-5ce3-8305-f9b66b9fbcfa", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/hostwack.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/hostwack.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/hostwack", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 2 }, { "family": "hotdownloads", "family_name": "Hotdownloads", "category": "advanced_threat", "rule_id": "a99b2992-b49a-5d0c-a885-0e7345b2ef57", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/hotdownloads.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/hotdownloads.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/hotdownloads", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 2 }, { "family": "hpcubestlr", "family_name": "Hpcubestlr", "category": "trojan", "rule_id": "d18a8b1b-a2bc-5047-81a8-78291a7f6a8f", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/hpcubestlr.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/hpcubestlr.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/hpcubestlr", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 2 }, { "family": "hpgen", "family_name": "Hpgen", "category": "ransomware", "rule_id": "5f95210f-7cef-59e5-bf8c-cb79751c7c1b", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/hpgen.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/hpgen.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/hpgen", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 2 }, { "family": "hrup", "family_name": "Hrup", "category": "ransomware", "rule_id": "6bea3ed5-c9dd-5560-9429-f6444d4fc431", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/hrup.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/hrup.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/hrup", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 2 }, { "family": "huntpos", "family_name": "Huntpos", "category": "advanced_threat", "rule_id": "9e5b3d30-9de6-5c04-b693-002e6790be4c", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/huntpos.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/huntpos.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/huntpos", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 2 }, { "family": "installm", "family_name": "Installm", "category": "advanced_threat", "rule_id": "bd958f1a-d469-52f4-b042-3759f6eff7a8", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/installm.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/installm.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/installm", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 2 }, { "family": "instally", "family_name": "Instally", "category": "advanced_threat", "rule_id": "630c2e0f-c2de-58f1-a2d8-721187b820e3", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/instally.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/instally.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/instally", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 2 }, { "family": "instmonster", "family_name": "Instmonster", "category": "advanced_threat", "rule_id": "3389a607-6871-55dc-b74b-e362597f65a4", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/instmonster.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/instmonster.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/instmonster", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 2 }, { "family": "ipswitch", "family_name": "Ipswitch", "category": "ransomware", "rule_id": "2b923bab-1c4d-5de3-bc01-69362084f9ff", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/ipswitch.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/ipswitch.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/ipswitch", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 2 }, { "family": "ircbrute", "family_name": "Ircbrute", "category": "trojan", "rule_id": "a6063372-75a1-5197-84cd-80d81ab5b817", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/ircbrute.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/ircbrute.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/ircbrute", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 2 }, { "family": "ircfast", "family_name": "Ircfast", "category": "trojan", "rule_id": "bbeb901a-dd29-5628-b335-5f34c6cce0bf", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/ircfast.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/ircfast.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/ircfast", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 2 }, { "family": "isnev", "family_name": "Isnev", "category": "ransomware", "rule_id": "c189636d-a2a7-593e-9a60-bc0946b1c6cd", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/isnev.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/isnev.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/isnev", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 2 }, { "family": "isof", "family_name": "Isof", "category": "ransomware", "rule_id": "86448709-ddeb-5562-a210-d1e7e956fa68", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/isof.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/isof.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/isof", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 2 }, { "family": "itranslator", "family_name": "Itranslator", "category": "advanced_threat", "rule_id": "5b33e07c-f411-5421-a7a8-1ff4d4775025", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/itranslator.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/itranslator.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/itranslator", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 2 }, { "family": "itva", "family_name": "Itva", "category": "ransomware", "rule_id": "7ad84d96-0ad8-5ba5-bd80-2e718bb1cba0", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/itva.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/itva.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/itva", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 2 }, { "family": "jacksbot", "family_name": "Jacksbot", "category": "trojan", "rule_id": "ad964372-75a9-5bbd-a3a2-605ff4a2ca6c", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/jacksbot.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/jacksbot.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/jacksbot", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 2 }, { "family": "jbomi", "family_name": "Jbomi", "category": "ransomware", "rule_id": "a0dab082-57bd-578f-a20a-3c0f88ddb7ce", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/jbomi.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/jbomi.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/jbomi", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 2 }, { "family": "jetmedia", "family_name": "Jetmedia", "category": "advanced_threat", "rule_id": "73cbd792-4fe7-5fd5-99ad-2ebbd0cc9b9e", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/jetmedia.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/jetmedia.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/jetmedia", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 2 }, { "family": "joosoft", "family_name": "Joosoft", "category": "advanced_threat", "rule_id": "d4a66ed3-1843-5e1d-b455-53a593f14cba", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/joosoft.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/joosoft.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/joosoft", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 2 }, { "family": "jyfi", "family_name": "Jyfi", "category": "ransomware", "rule_id": "6bf8f40f-9309-547c-beb8-0153f854ee2c", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/jyfi.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/jyfi.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/jyfi", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 2 }, { "family": "kate", "family_name": "Kate", "category": "ransomware", "rule_id": "0eb4ddfb-d1ae-5f1b-b283-20c0496aaf2c", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/kate.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/kate.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/kate", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 2 }, { "family": "kates", "family_name": "Kates", "category": "trojan", "rule_id": "0723c1e6-1d03-5caa-8eef-25f843922686", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/kates.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/kates.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/kates", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 2 }, { "family": "kbot", "family_name": "Kbot", "category": "ransomware", "rule_id": "c0445466-c283-5119-b39f-5ea69364573b", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/kbot.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/kbot.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/kbot", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 2 }, { "family": "keybase", "family_name": "Keybase", "category": "advanced_threat", "rule_id": "6e06b523-ceaf-5e88-b6fa-2d699115c0b0", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/keybase.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/keybase.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/keybase", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 2 }, { "family": "keyboy", "family_name": "Keyboy", "category": "trojan", "rule_id": "c97b68b2-9f07-5763-ae76-d4c8e6eeecb0", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/keyboy.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/keyboy.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/keyboy", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 2 }, { "family": "kovloer", "family_name": "Kovloer", "category": "ransomware", "rule_id": "4b0afdde-f4f8-5834-98d4-69542bbbe137", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/kovloer.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/kovloer.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/kovloer", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 2 }, { "family": "krolol", "family_name": "Krolol", "category": "ransomware", "rule_id": "e2074ba2-1db1-5755-8fca-dcec951aa1bd", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/krolol.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/krolol.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/krolol", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 2 }, { "family": "launcher", "family_name": "Launcher", "category": "ransomware", "rule_id": "fdc5707a-eee5-5cc3-a872-0c7c9f655b9c", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/launcher.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/launcher.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/launcher", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 2 }, { "family": "leymo", "family_name": "Leymo", "category": "ransomware", "rule_id": "ba93168b-4d0c-5b89-ab24-da226002b14a", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/leymo.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/leymo.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/leymo", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 2 }, { "family": "lightlogger", "family_name": "Lightlogger", "category": "advanced_threat", "rule_id": "208d2c74-6f90-558c-84c2-6489560bac87", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/lightlogger.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/lightlogger.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/lightlogger", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 2 }, { "family": "lightsee", "family_name": "Lightsee", "category": "ransomware", "rule_id": "641c0601-ab1a-5467-9824-78aa504a6eb9", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/lightsee.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/lightsee.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/lightsee", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 2 }, { "family": "lineage", "family_name": "Lineage", "category": "advanced_threat", "rule_id": "5507367d-2712-56b4-a88c-3c06978afbd5", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/lineage.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/lineage.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/lineage", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 2 }, { "family": "liuliangbao", "family_name": "Liuliangbao", "category": "advanced_threat", "rule_id": "502a8254-9f60-557b-9307-7272c196f51e", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/liuliangbao.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/liuliangbao.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/liuliangbao", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 2 }, { "family": "ljoiner", "family_name": "Ljoiner", "category": "ransomware", "rule_id": "dc9af2ac-4b04-553c-bcd7-e58f0dee002b", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/ljoiner.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/ljoiner.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/ljoiner", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 2 }, { "family": "lockcrypt", "family_name": "Lockcrypt", "category": "ransomware", "rule_id": "187e0e9c-65d0-532b-a6c4-e2a2d62cdc14", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/lockcrypt.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/lockcrypt.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/lockcrypt", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 2 }, { "family": "lojulox", "family_name": "Lojulox", "category": "ransomware", "rule_id": "96c9f873-2c16-51b6-83a4-23d2c39285c5", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/lojulox.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/lojulox.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/lojulox", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 2 }, { "family": "ludicrouz", "family_name": "Ludicrouz", "category": "ransomware", "rule_id": "d598dc04-c804-5314-b59a-68c6bbcd8c1e", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/ludicrouz.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/ludicrouz.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/ludicrouz", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 2 }, { "family": "lulusoftware", "family_name": "Lulusoftware", "category": "advanced_threat", "rule_id": "9055fd13-1a4d-550b-a26f-2a92cf9f6de1", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/lulusoftware.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/lulusoftware.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/lulusoftware", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 2 }, { "family": "macrodrop", "family_name": "Macrodrop", "category": "ransomware", "rule_id": "a22c1337-05cc-571a-aacc-eab53d2af393", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/macrodrop.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/macrodrop.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/macrodrop", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 2 }, { "family": "malushka", "family_name": "Malushka", "category": "ransomware", "rule_id": "13eec2b1-66ad-5563-ad43-25df3581e8bf", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/malushka.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/malushka.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/malushka", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 2 }, { "family": "malwares", "family_name": "Malwares", "category": "ransomware", "rule_id": "e13c1c66-c745-5ff1-baac-ace895102621", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/malwares.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/malwares.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/malwares", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 2 }, { "family": "manbat", "family_name": "Manbat", "category": "ransomware", "rule_id": "2946e8ad-24ea-5257-ab32-6cad39fd1cae", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/manbat.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/manbat.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/manbat", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 2 }, { "family": "mantana", "family_name": "Mantana", "category": "ransomware", "rule_id": "23e98b76-48d4-5379-b4e2-bb45a91af993", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/mantana.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/mantana.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/mantana", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 2 }, { "family": "manuscrypt", "family_name": "Manuscrypt", "category": "trojan", "rule_id": "4d1e6456-c935-51b0-9175-9322fe8246e3", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/manuscrypt.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/manuscrypt.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/manuscrypt", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 2 }, { "family": "marketscore", "family_name": "Marketscore", "category": "advanced_threat", "rule_id": "327eb02a-cc6c-51c2-bad3-1c220ea95bee", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/marketscore.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/marketscore.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/marketscore", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 2 }, { "family": "matsnu", "family_name": "Matsnu", "category": "ransomware", "rule_id": "5a8d98a9-bf78-5f0c-910c-e2fe9f060d9c", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/matsnu.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/matsnu.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/matsnu", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 2 }, { "family": "medfos", "family_name": "Medfos", "category": "ransomware", "rule_id": "b1bdfa06-6c32-5bc9-b956-7a8b0d4de144", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/medfos.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/medfos.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/medfos", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 2 }, { "family": "mediafinder", "family_name": "Mediafinder", "category": "advanced_threat", "rule_id": "4bd20ffc-63ba-5885-8042-42ce0926bf26", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/mediafinder.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/mediafinder.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/mediafinder", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 2 }, { "family": "metel", "family_name": "Metel", "category": "trojan", "rule_id": "d26d6140-eacb-54a4-a8e9-cdaa94c721c1", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/metel.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/metel.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/metel", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 2 }, { "family": "mimilove", "family_name": "Mimilove", "category": "ransomware", "rule_id": "1e8b58d1-6dd7-55f9-b6ed-78ba97fd8cbe", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/mimilove.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/mimilove.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/mimilove", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 2 }, { "family": "minebicoin", "family_name": "Minebicoin", "category": "ransomware", "rule_id": "8de29658-c3ac-563c-9b6b-a22537f61e58", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/minebicoin.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/minebicoin.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/minebicoin", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 2 }, { "family": "minerbat", "family_name": "Minerbat", "category": "trojan", "rule_id": "b14ac4d5-c32b-5549-ad1f-6271f1b8e98f", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/minerbat.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/minerbat.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/minerbat", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 2 }, { "family": "minggy", "family_name": "Minggy", "category": "ransomware", "rule_id": "a0c3bdb2-6309-5558-93cf-2f93d474f2a2", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/minggy.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/minggy.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/minggy", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 2 }, { "family": "moljec", "family_name": "Moljec", "category": "ransomware", "rule_id": "4d4d03eb-65fd-59bb-be3d-afcf26e45b2b", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/moljec.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/moljec.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/moljec", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 2 }, { "family": "monitortool", "family_name": "Monitortool", "category": "advanced_threat", "rule_id": "8db8934e-e7db-5f27-b05c-00cec5a2ac21", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/monitortool.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/monitortool.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/monitortool", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 2 }, { "family": "mousedisable", "family_name": "Mousedisable", "category": "ransomware", "rule_id": "831d5aba-f5a6-5d26-a1ed-a3b3e5de37c0", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/mousedisable.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/mousedisable.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/mousedisable", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 2 }, { "family": "mresmon", "family_name": "Mresmon", "category": "ransomware", "rule_id": "80332f75-9d95-5b03-b649-07314cda9d1c", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/mresmon.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/mresmon.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/mresmon", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 2 }, { "family": "msilinj", "family_name": "Msilinj", "category": "trojan", "rule_id": "cbdc9ca6-7dde-529a-a948-a64c331bd701", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/msilinj.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/msilinj.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/msilinj", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 2 }, { "family": "msposer", "family_name": "Msposer", "category": "ransomware", "rule_id": "b27950c4-8c70-55e3-bb74-8b6288ca8c06", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/msposer.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/msposer.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/msposer", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 2 }, { "family": "murlo", "family_name": "Murlo", "category": "ransomware", "rule_id": "b7c1e90d-dd8d-5a7c-96c9-66af8712c77e", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/murlo.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/murlo.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/murlo", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 2 }, { "family": "napolar", "family_name": "Napolar", "category": "trojan", "rule_id": "8f736a2f-aff6-5ce5-bade-50e42cd8e1b2", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/napolar.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/napolar.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/napolar", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 2 }, { "family": "narcha", "family_name": "Narcha", "category": "ransomware", "rule_id": "61f13ecf-b35b-5ef9-beb6-bf05b47a0cef", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/narcha.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/narcha.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/narcha", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 2 }, { "family": "nebuler", "family_name": "Nebuler", "category": "ransomware", "rule_id": "7b1bd832-b57f-583a-92ca-0a2f2f47c401", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/nebuler.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/nebuler.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/nebuler", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 2 }, { "family": "necurs", "family_name": "Necurs", "category": "spam_bot", "rule_id": "cb2f1f5a-017d-5879-a99f-2b2cae960f78", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/necurs.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/necurs.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/necurs", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 2 }, { "family": "nirsoft", "family_name": "Nirsoft", "category": "advanced_threat", "rule_id": "2f5ca4cb-27a6-5d19-8704-62225ba89c15", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/nirsoft.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/nirsoft.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/nirsoft", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 2 }, { "family": "nosok", "family_name": "Nosok", "category": "ransomware", "rule_id": "d3093a81-9251-58a6-af4e-1a6becc57b34", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/nosok.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/nosok.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/nosok", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 2 }, { "family": "npack", "family_name": "Npack", "category": "advanced_threat", "rule_id": "5fb87ada-7397-544b-babf-1c6d83a2389c", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/npack.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/npack.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/npack", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 2 }, { "family": "nscauth", "family_name": "Nscauth", "category": "ransomware", "rule_id": "342491df-c005-5de9-841b-c15712996a25", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/nscauth.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/nscauth.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/nscauth", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 2 }, { "family": "ntkrnl", "family_name": "Ntkrnl", "category": "trojan", "rule_id": "f348a9ab-9e4a-5bce-8fef-e2d61c98bf4e", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/ntkrnl.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/ntkrnl.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/ntkrnl", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 2 }, { "family": "offend", "family_name": "Offend", "category": "ransomware", "rule_id": "6af9a814-7037-5f74-a6ae-42dc0c579c76", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/offend.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/offend.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/offend", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 2 }, { "family": "oficla", "family_name": "Oficla", "category": "trojan", "rule_id": "1ff866d5-9e0e-5435-85b9-a7e68f0ab562", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/oficla.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/oficla.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/oficla", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 2 }, { "family": "ohmytabs", "family_name": "Ohmytabs", "category": "advanced_threat", "rule_id": "636e9565-800b-5c26-a45d-575df04c8710", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/ohmytabs.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/ohmytabs.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/ohmytabs", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 2 }, { "family": "olala", "family_name": "Olala", "category": "ransomware", "rule_id": "adfb7d95-7732-514e-ae96-5e41275d57b3", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/olala.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/olala.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/olala", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 2 }, { "family": "oligo", "family_name": "Oligo", "category": "ransomware", "rule_id": "dc1cb78d-5bc7-52a7-bef3-0f51c3fadf7f", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/oligo.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/oligo.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/oligo", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 2 }, { "family": "oneclickdownloader", "family_name": "Oneclickdownloader", "category": "advanced_threat", "rule_id": "97ad30d3-d45f-50d2-b249-87e91a703c72", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/oneclickdownloader.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/oneclickdownloader.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/oneclickdownloader", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 2 }, { "family": "oneinstaller", "family_name": "Oneinstaller", "category": "advanced_threat", "rule_id": "9be9af69-0c23-579c-878e-415715373b8f", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/oneinstaller.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/oneinstaller.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/oneinstaller", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 2 }, { "family": "openshopper", "family_name": "Openshopper", "category": "advanced_threat", "rule_id": "ee78cf7a-d8ed-54f8-8deb-c53fb5f3de37", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/openshopper.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/openshopper.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/openshopper", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 2 }, { "family": "outbreak", "family_name": "Outbreak", "category": "ransomware", "rule_id": "ade1ca14-82d4-5e44-9028-949171c9a88d", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/outbreak.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/outbreak.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/outbreak", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 2 }, { "family": "p2pworm", "family_name": "P2pworm", "category": "ransomware", "rule_id": "4517909e-1528-58ce-bcab-a3db885aaefd", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/p2pworm.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/p2pworm.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/p2pworm", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 2 }, { "family": "pacex", "family_name": "Pacex", "category": "ransomware", "rule_id": "c39cfade-ea5f-584f-9ee6-4b94076eb828", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/pacex.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/pacex.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/pacex", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 2 }, { "family": "patch", "family_name": "Patch", "category": "ransomware", "rule_id": "cf92bbdf-5dc5-504d-bfe7-ac14ba31b4c5", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/patch.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/patch.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/patch", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 2 }, { "family": "patchupplus", "family_name": "Patchupplus", "category": "advanced_threat", "rule_id": "d6579853-e4a2-501e-8e50-b25c5e0540f7", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/patchupplus.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/patchupplus.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/patchupplus", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 2 }, { "family": "pccleanup", "family_name": "Pccleanup", "category": "advanced_threat", "rule_id": "d6e187d5-8e68-5f56-9bf0-ca9c46804225", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/pccleanup.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/pccleanup.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/pccleanup", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 2 }, { "family": "pcmechanic", "family_name": "Pcmechanic", "category": "advanced_threat", "rule_id": "be8e0d86-4c00-53ab-8b9d-312e47f9f3b8", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/pcmechanic.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/pcmechanic.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/pcmechanic", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 2 }, { "family": "pcopticlean", "family_name": "Pcopticlean", "category": "ransomware", "rule_id": "6d019b51-726d-5045-9456-4600f3099a8d", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/pcopticlean.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/pcopticlean.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/pcopticlean", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 2 }, { "family": "pcoptimizerpro", "family_name": "Pcoptimizerpro", "category": "advanced_threat", "rule_id": "9cef9b98-2fa6-560c-8ab6-228dc72b9a71", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/pcoptimizerpro.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/pcoptimizerpro.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/pcoptimizerpro", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 2 }, { "family": "perkesh", "family_name": "Perkesh", "category": "ransomware", "rule_id": "2b8598f7-b23f-5f59-8521-76683c4a63d8", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/perkesh.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/perkesh.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/perkesh", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 2 }, { "family": "pfoenic", "family_name": "Pfoenic", "category": "ransomware", "rule_id": "181a8387-ff0d-566d-8713-a35f42c92c50", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/pfoenic.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/pfoenic.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/pfoenic", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 2 }, { "family": "pieshua", "family_name": "Pieshua", "category": "ransomware", "rule_id": "2bb2080f-d48a-5203-8481-af6f1346b009", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/pieshua.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/pieshua.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/pieshua", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 2 }, { "family": "piker", "family_name": "Piker", "category": "ransomware", "rule_id": "7c5e10cf-f789-5598-8078-db33c372e3f5", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/piker.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/piker.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/piker", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 2 }, { "family": "pincher", "family_name": "Pincher", "category": "ransomware", "rule_id": "04216ff1-ba3e-5d1b-b6de-d732f52c8182", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/pincher.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/pincher.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/pincher", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 2 }, { "family": "pjtbinder", "family_name": "Pjtbinder", "category": "ransomware", "rule_id": "e8631690-ac31-5d3d-8f5b-6d462dd0dd5c", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/pjtbinder.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/pjtbinder.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/pjtbinder", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 2 }, { "family": "plead", "family_name": "Plead", "category": "trojan", "rule_id": "1b417d3d-638d-5c8d-994f-80a1123e3244", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/plead.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/plead.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/plead", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 2 }, { "family": "plimrost", "family_name": "Plimrost", "category": "ransomware", "rule_id": "2d70cc3a-0d1d-52a4-ab4f-8181c963b8d7", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/plimrost.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/plimrost.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/plimrost", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 2 }, { "family": "pophot", "family_name": "Pophot", "category": "ransomware", "rule_id": "b44ddeb1-c849-5bac-a072-3b1f92abb542", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/pophot.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/pophot.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/pophot", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 2 }, { "family": "popwin", "family_name": "Popwin", "category": "advanced_threat", "rule_id": "0592b0b8-a558-54c0-aa9f-ed41de0373c4", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/popwin.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/popwin.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/popwin", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 2 }, { "family": "pramro", "family_name": "Pramro", "category": "ransomware", "rule_id": "fa928d24-3976-57c7-aef9-c1150af47ff3", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/pramro.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/pramro.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/pramro", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 2 }, { "family": "progressive", "family_name": "Progressive", "category": "advanced_threat", "rule_id": "6f5bc6bb-e8df-5716-910e-53c870841794", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/progressive.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/progressive.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/progressive", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 2 }, { "family": "psyokym", "family_name": "Psyokym", "category": "ransomware", "rule_id": "b0391c18-6ea1-531e-9c47-ddf5ddcc3324", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/psyokym.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/psyokym.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/psyokym", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 2 }, { "family": "purityscan", "family_name": "Purityscan", "category": "advanced_threat", "rule_id": "efa95bef-b832-50e3-9294-98f4fd98bbcb", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/purityscan.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/purityscan.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/purityscan", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 2 }, { "family": "qhosts", "family_name": "Qhosts", "category": "trojan", "rule_id": "498b7b47-9cd2-525c-ae2c-3a25e34c0933", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/qhosts.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/qhosts.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/qhosts", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 2 }, { "family": "qqrob", "family_name": "Qqrob", "category": "trojan", "rule_id": "29b34b22-138f-540b-ad3b-6bd1c120ba17", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/qqrob.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/qqrob.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/qqrob", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 2 }, { "family": "qqshou", "family_name": "Qqshou", "category": "trojan", "rule_id": "a40f2045-45e3-5edb-83ce-4b3d6518d5f3", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/qqshou.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/qqshou.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/qqshou", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 2 }, { "family": "quchispy", "family_name": "Quchispy", "category": "ransomware", "rule_id": "6e218710-04ff-5b7f-bcfb-dde59a608278", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/quchispy.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/quchispy.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/quchispy", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 2 }, { "family": "radmin", "family_name": "Radmin", "category": "ransomware", "rule_id": "f850f060-af6d-57f0-ae22-300156df1b23", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/radmin.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/radmin.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/radmin", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 2 }, { "family": "ranpax", "family_name": "Ranpax", "category": "ransomware", "rule_id": "b8765fa2-c2fc-54d8-88ff-b1ccca3a861d", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/ranpax.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/ranpax.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/ranpax", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 2 }, { "family": "rapkill", "family_name": "Rapkill", "category": "ransomware", "rule_id": "62605eda-aa92-5f1e-9aa8-b5868eab3428", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/rapkill.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/rapkill.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/rapkill", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 2 }, { "family": "redeye", "family_name": "Redeye", "category": "ransomware", "rule_id": "695a3d13-0481-5608-b1c7-26469ca95d59", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/redeye.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/redeye.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/redeye", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 2 }, { "family": "redirected", "family_name": "Redirected", "category": "trojan", "rule_id": "6246dc20-9bdf-53b6-ad6b-512b6ea88542", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/redirected.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/redirected.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/redirected", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 2 }, { "family": "refogkeylogging", "family_name": "Refogkeylogging", "category": "advanced_threat", "rule_id": "d8dcf8a2-809b-537a-a329-3364ec5204d6", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/refogkeylogging.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/refogkeylogging.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/refogkeylogging", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 2 }, { "family": "refpron", "family_name": "Refpron", "category": "ransomware", "rule_id": "137d0661-a3fb-5fe8-82ad-53e0980871a7", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/refpron.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/refpron.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/refpron", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 2 }, { "family": "remas", "family_name": "Remas", "category": "ransomware", "rule_id": "c71e1ef5-f4aa-5ca0-978e-047edcbe6a68", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/remas.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/remas.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/remas", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 2 }, { "family": "renaz", "family_name": "Renaz", "category": "ransomware", "rule_id": "db0d2453-027d-5e0e-98a9-c8a86e43535b", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/renaz.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/renaz.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/renaz", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 2 }, { "family": "revizer", "family_name": "Revizer", "category": "advanced_threat", "rule_id": "4549e9b5-c1ff-5a10-a927-6816867f9e19", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/revizer.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/revizer.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/revizer", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 2 }, { "family": "rewriteboota", "family_name": "Rewriteboota", "category": "trojan", "rule_id": "54786d29-b774-53d5-ac45-9f3b9129c612", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/rewriteboota.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/rewriteboota.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/rewriteboota", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 2 }, { "family": "rifbu", "family_name": "Rifbu", "category": "ransomware", "rule_id": "eeba8389-e31f-51de-beb1-2fa8e2c3c3bf", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/rifbu.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/rifbu.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/rifbu", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 2 }, { "family": "rofin", "family_name": "Rofin", "category": "ransomware", "rule_id": "2c7d8c8f-59a8-549c-ad18-42f8c6900c2e", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/rofin.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/rofin.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/rofin", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 2 }, { "family": "rubar", "family_name": "Rubar", "category": "advanced_threat", "rule_id": "14d75070-4304-5826-80bc-50379f7ba05f", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/rubar.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/rubar.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/rubar", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 2 }, { "family": "ruby", "family_name": "Ruby", "category": "ransomware", "rule_id": "9aaeca54-037b-595d-a455-81814e7a9adf", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/ruby.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/ruby.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/ruby", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 2 }, { "family": "ructo", "family_name": "Ructo", "category": "ransomware", "rule_id": "c3cadd2e-d943-57b8-a67e-019d7ec4d74c", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/ructo.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/ructo.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/ructo", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 2 }, { "family": "rukoma", "family_name": "Rukoma", "category": "ransomware", "rule_id": "af55eb69-db24-5102-acfa-83ae838c104d", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/rukoma.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/rukoma.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/rukoma", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 2 }, { "family": "russoturisto", "family_name": "Russoturisto", "category": "advanced_threat", "rule_id": "623de5ca-7b63-59a9-8a5a-d9ac69db962a", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/russoturisto.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/russoturisto.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/russoturisto", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 2 }, { "family": "rustock", "family_name": "Rustock", "category": "advanced_threat", "rule_id": "c45146d0-1a0b-5b2f-a2e4-97f27e969c2a", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/rustock.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/rustock.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/rustock", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 2 }, { "family": "ryzerlo", "family_name": "Ryzerlo", "category": "ransomware", "rule_id": "5cc36446-eb18-554a-8510-11514ed82644", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/ryzerlo.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/ryzerlo.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/ryzerlo", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 2 }, { "family": "saturn", "family_name": "Saturn", "category": "ransomware", "rule_id": "8e2a61c7-9d15-5330-90f1-db7cebb90eda", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/saturn.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/saturn.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/saturn", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 2 }, { "family": "selltim", "family_name": "Selltim", "category": "ransomware", "rule_id": "cdee812d-c3fc-5b7b-a02b-4290bb778973", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/selltim.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/selltim.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/selltim", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 2 }, { "family": "seodec", "family_name": "Seodec", "category": "ransomware", "rule_id": "f0f10b00-3db7-5143-841d-36fddf56dae8", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/seodec.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/seodec.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/seodec", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 2 }, { "family": "sheldor", "family_name": "Sheldor", "category": "ransomware", "rule_id": "d1bc2d1a-832f-5324-be72-bdb1acd4516d", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/sheldor.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/sheldor.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/sheldor", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 2 }, { "family": "shopro", "family_name": "Shopro", "category": "advanced_threat", "rule_id": "324cc16c-15e8-5490-9526-ce848caffb5e", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/shopro.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/shopro.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/shopro", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 2 }, { "family": "shrejh", "family_name": "Shrejh", "category": "ransomware", "rule_id": "12ebade0-2687-536a-b0ca-9d49b5bf2bef", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/shrejh.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/shrejh.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/shrejh", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 2 }, { "family": "shufab", "family_name": "Shufab", "category": "ransomware", "rule_id": "83f48dec-8ee5-5961-af00-da22fe6f0119", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/shufab.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/shufab.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/shufab", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 2 }, { "family": "silcon", "family_name": "Silcon", "category": "ransomware", "rule_id": "42213697-74aa-54fc-ae13-7699925a6d3d", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/silcon.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/silcon.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/silcon", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 2 }, { "family": "sillyfdc", "family_name": "Sillyfdc", "category": "advanced_threat", "rule_id": "6bc264e1-0084-5672-b999-82e374f25e8a", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/sillyfdc.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/sillyfdc.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/sillyfdc", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 2 }, { "family": "simpleregistrycleaner", "family_name": "Simpleregistrycleaner", "category": "advanced_threat", "rule_id": "ba538d9b-3155-5c1e-93f5-1949b6459e45", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/simpleregistrycleaner.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/simpleregistrycleaner.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/simpleregistrycleaner", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 2 }, { "family": "siplog", "family_name": "Siplog", "category": "trojan", "rule_id": "80d10e7c-a0c4-5d6f-ab8a-5d7dde9d78c0", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/siplog.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/siplog.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/siplog", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 2 }, { "family": "slefdel", "family_name": "Slefdel", "category": "ransomware", "rule_id": "115c0e9d-5d49-51c3-94b9-35d2289470b3", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/slefdel.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/slefdel.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/slefdel", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 2 }, { "family": "slenfbot", "family_name": "Slenfbot", "category": "advanced_threat", "rule_id": "e413b3a9-3d02-5a80-861c-410b8b469b14", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/slenfbot.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/slenfbot.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/slenfbot", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 2 }, { "family": "slipafext", "family_name": "Slipafext", "category": "ransomware", "rule_id": "9df74810-8da2-581e-8685-0774730bf76b", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/slipafext.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/slipafext.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/slipafext", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 2 }, { "family": "snipr", "family_name": "Snipr", "category": "advanced_threat", "rule_id": "aac43c8e-fb47-5d2d-8e1b-4825d52b9a9b", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/snipr.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/snipr.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/snipr", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 2 }, { "family": "snoload", "family_name": "Snoload", "category": "ransomware", "rule_id": "d996b467-e413-5597-8720-222a7bbb2ab5", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/snoload.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/snoload.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/snoload", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 2 }, { "family": "sorcurat", "family_name": "Sorcurat", "category": "ransomware", "rule_id": "a9eda1db-917f-5d16-817a-7d3b062282f7", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/sorcurat.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/sorcurat.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/sorcurat", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 2 }, { "family": "soul", "family_name": "Soul", "category": "ransomware", "rule_id": "60d7ffce-e92b-54de-8025-045b20100c76", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/soul.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/soul.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/soul", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 2 }, { "family": "spammy", "family_name": "Spammy", "category": "advanced_threat", "rule_id": "21c57b0b-4356-5419-94ec-e970f2868629", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/spammy.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/spammy.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/spammy", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 2 }, { "family": "spectre", "family_name": "Spectre", "category": "advanced_threat", "rule_id": "5dca8b8a-b876-51af-9083-c9ebd2206ac9", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/spectre.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/spectre.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/spectre", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 2 }, { "family": "speed", "family_name": "Speed", "category": "advanced_threat", "rule_id": "40a37906-741c-52f9-96fd-8491bc521fbb", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/speed.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/speed.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/speed", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 2 }, { "family": "sphinx", "family_name": "Sphinx", "category": "trojan", "rule_id": "1f7ff3fb-7065-5ac6-a8ea-129845bd8f33", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/sphinx.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/sphinx.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/sphinx", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 2 }, { "family": "sqlcrack", "family_name": "Sqlcrack", "category": "ransomware", "rule_id": "ecfa3b38-02c7-55af-8e58-8a4da128a74c", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/sqlcrack.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/sqlcrack.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/sqlcrack", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 2 }, { "family": "ssebot", "family_name": "Ssebot", "category": "ransomware", "rule_id": "1bf894e1-1611-5aff-a660-a9f0fd0d112a", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/ssebot.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/ssebot.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/ssebot", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 2 }, { "family": "stalk", "family_name": "Stalk", "category": "advanced_threat", "rule_id": "0bec2a10-8ca0-5c7b-a8e6-e6b4d52c2935", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/stalk.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/stalk.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/stalk", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 2 }, { "family": "startpa", "family_name": "Startpa", "category": "ransomware", "rule_id": "621b7a1a-9551-5c2a-8b69-56d67cd0d244", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/startpa.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/startpa.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/startpa", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 2 }, { "family": "sunnydigits", "family_name": "Sunnydigits", "category": "advanced_threat", "rule_id": "81c4c7b8-23b2-554e-8289-17dd9b605864", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/sunnydigits.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/sunnydigits.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/sunnydigits", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 2 }, { "family": "superthreat", "family_name": "Superthreat", "category": "advanced_threat", "rule_id": "5ce4ad47-7ddb-54f7-bc35-74507e410839", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/superthreat.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/superthreat.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/superthreat", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 2 }, { "family": "swpatch", "family_name": "Swpatch", "category": "ransomware", "rule_id": "b243c5e1-959a-50e3-ab61-b184aa9243ae", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/swpatch.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/swpatch.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/swpatch", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 2 }, { "family": "sysdrop", "family_name": "Sysdrop", "category": "ransomware", "rule_id": "8a386ecb-cc6c-5d1c-a3d1-887ad11cad1f", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/sysdrop.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/sysdrop.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/sysdrop", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 2 }, { "family": "tarifarch", "family_name": "Tarifarch", "category": "ransomware", "rule_id": "bcb70823-6686-5ac2-ab00-9594d1c09fe4", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/tarifarch.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/tarifarch.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/tarifarch", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 2 }, { "family": "teamspy", "family_name": "Teamspy", "category": "backdoor", "rule_id": "48b398f0-9a4f-5db2-a88c-c5a8c06b712f", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/teamspy.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/teamspy.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/teamspy", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 2 }, { "family": "tinypos", "family_name": "Tinypos", "category": "advanced_threat", "rule_id": "5075cc67-888a-583f-a7cf-2c5ec8a1ee1e", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/tinypos.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/tinypos.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/tinypos", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 2 }, { "family": "tirrip", "family_name": "Tirrip", "category": "ransomware", "rule_id": "cdd207cd-e96a-51da-87be-7e6a9459e601", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/tirrip.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/tirrip.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/tirrip", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 2 }, { "family": "tnega", "family_name": "Tnega", "category": "ransomware", "rule_id": "0ba7e0d4-3c15-599d-b6d3-63ad63562349", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/tnega.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/tnega.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/tnega", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 2 }, { "family": "toauta", "family_name": "Toauta", "category": "ransomware", "rule_id": "f60213a0-bb39-5ff1-82f6-63331988316d", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/toauta.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/toauta.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/toauta", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 2 }, { "family": "togapy", "family_name": "Togapy", "category": "ransomware", "rule_id": "3660ee42-03d2-50eb-a88e-0b82b26e9b58", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/togapy.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/togapy.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/togapy", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 2 }, { "family": "toptoo", "family_name": "Toptoo", "category": "ransomware", "rule_id": "e76ac121-59da-52e6-abf6-e8aca03b84d7", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/toptoo.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/toptoo.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/toptoo", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 2 }, { "family": "torr", "family_name": "Torr", "category": "ransomware", "rule_id": "e2a3a1ce-73c0-502d-b7ea-8142f73ce536", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/torr.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/torr.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/torr", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 2 }, { "family": "torrenteasy", "family_name": "Torrenteasy", "category": "advanced_threat", "rule_id": "ea84b14b-2f14-5627-9db9-5d335c9d4d2a", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/torrenteasy.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/torrenteasy.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/torrenteasy", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 2 }, { "family": "trabin", "family_name": "Trabin", "category": "ransomware", "rule_id": "0c5b91ce-58df-59ad-8e98-324d3eb61de9", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/trabin.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/trabin.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/trabin", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 2 }, { "family": "trafog", "family_name": "Trafog", "category": "ransomware", "rule_id": "69be420e-3ec1-5b3d-90f6-161ec669190e", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/trafog.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/trafog.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/trafog", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 2 }, { "family": "trojanbanker", "family_name": "Trojanbanker", "category": "ransomware", "rule_id": "aa67094a-7f0a-519b-9ca6-f575848fce9b", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/trojanbanker.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/trojanbanker.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/trojanbanker", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 2 }, { "family": "tulong", "family_name": "Tulong", "category": "ransomware", "rule_id": "05e01593-13f0-5af6-89da-9215ca9ccd38", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/tulong.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/tulong.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/tulong", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 2 }, { "family": "tvido", "family_name": "Tvido", "category": "ransomware", "rule_id": "b0cc8be6-dc1f-50dd-9984-104e2ce9eb42", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/tvido.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/tvido.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/tvido", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 2 }, { "family": "typic", "family_name": "Typic", "category": "ransomware", "rule_id": "1deb3792-2355-5d27-9cc7-dcc893f84a77", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/typic.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/typic.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/typic", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 2 }, { "family": "tzabf", "family_name": "Tzabf", "category": "ransomware", "rule_id": "c27f2963-2547-5c80-9815-6b0d2286a1e0", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/tzabf.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/tzabf.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/tzabf", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 2 }, { "family": "u8taskservice", "family_name": "U8taskservice", "category": "advanced_threat", "rule_id": "2b26d120-e21c-51ba-9206-b305e8dd70f4", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/u8taskservice.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/u8taskservice.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/u8taskservice", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 2 }, { "family": "udpos", "family_name": "Udpos", "category": "trojan", "rule_id": "f5ecdefc-4d4c-5777-b5c0-3ddb5536afae", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/udpos.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/udpos.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/udpos", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 2 }, { "family": "ufraie", "family_name": "Ufraie", "category": "ransomware", "rule_id": "6cb0d1dc-d384-5a7b-8e21-b49162facb15", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/ufraie.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/ufraie.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/ufraie", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 2 }, { "family": "uloader", "family_name": "Uloader", "category": "ransomware", "rule_id": "ad51200a-4859-5d2b-abcb-60fb06723632", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/uloader.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/uloader.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/uloader", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 2 }, { "family": "updatestar", "family_name": "Updatestar", "category": "advanced_threat", "rule_id": "a9bbe76e-6e5d-5984-9743-5aaa2d118deb", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/updatestar.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/updatestar.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/updatestar", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 2 }, { "family": "utoti", "family_name": "Utoti", "category": "ransomware", "rule_id": "2d07f9b6-fddf-54fe-b2b9-7578346a81ce", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/utoti.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/utoti.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/utoti", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 2 }, { "family": "vake", "family_name": "Vake", "category": "ransomware", "rule_id": "b11ec0ba-d4b2-50bf-aec1-183746eaa0f2", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/vake.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/vake.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/vake", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 2 }, { "family": "vbcheman", "family_name": "Vbcheman", "category": "ransomware", "rule_id": "7105a944-cefe-515a-b204-bbeb63166844", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/vbcheman.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/vbcheman.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/vbcheman", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 2 }, { "family": "vedpoz", "family_name": "Vedpoz", "category": "ransomware", "rule_id": "a742fd1f-5458-5023-b4ef-b6b3949559c3", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/vedpoz.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/vedpoz.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/vedpoz", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 2 }, { "family": "verti", "family_name": "Verti", "category": "advanced_threat", "rule_id": "01b171b8-c1a4-53bc-8eab-f1a1bc433237", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/verti.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/verti.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/verti", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 2 }, { "family": "vigram", "family_name": "Vigram", "category": "advanced_threat", "rule_id": "3a0ba0c3-f91f-5e30-bd23-9d7823d75fe1", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/vigram.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/vigram.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/vigram", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 2 }, { "family": "virtum", "family_name": "Virtum", "category": "ransomware", "rule_id": "4fb84802-f371-5b5a-a039-088d322de1fe", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/virtum.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/virtum.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/virtum", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 2 }, { "family": "virtumod", "family_name": "Virtumod", "category": "ransomware", "rule_id": "94604e5b-1cad-53cb-bf9f-ab526603707f", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/virtumod.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/virtumod.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/virtumod", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 2 }, { "family": "virtumonde", "family_name": "Virtumonde", "category": "trojan", "rule_id": "133a434d-ebfc-5d27-b47b-0f91d6ff8d64", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/virtumonde.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/virtumonde.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/virtumonde", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 2 }, { "family": "viruscure", "family_name": "Viruscure", "category": "ransomware", "rule_id": "9d6a950f-a694-518a-8485-a3968912b1cd", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/viruscure.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/viruscure.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/viruscure", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 2 }, { "family": "vjworm", "family_name": "Vjworm", "category": "backdoor", "rule_id": "ba703955-e405-5695-9f49-d2ba1fcf52e9", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/vjworm.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/vjworm.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/vjworm", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 2 }, { "family": "vkdj", "family_name": "Vkdj", "category": "ransomware", "rule_id": "bd3488b6-8f64-53db-8286-bbb53a9060bc", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/vkdj.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/vkdj.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/vkdj", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 2 }, { "family": "vkhost", "family_name": "Vkhost", "category": "trojan", "rule_id": "a59885b3-a282-5af4-8ade-313b9fb159d6", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/vkhost.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/vkhost.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/vkhost", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 2 }, { "family": "vprotect", "family_name": "Vprotect", "category": "advanced_threat", "rule_id": "522e47fd-29c1-556b-92d6-6775f5cb053e", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/vprotect.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/vprotect.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/vprotect", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 2 }, { "family": "webdevaz", "family_name": "Webdevaz", "category": "trojan", "rule_id": "80282986-deb5-5537-a736-14cd555392ed", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/webdevaz.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/webdevaz.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/webdevaz", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 2 }, { "family": "webdialer", "family_name": "Webdialer", "category": "advanced_threat", "rule_id": "11251dd2-5897-5ce3-9fbb-d8e9b32a429f", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/webdialer.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/webdialer.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/webdialer", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 2 }, { "family": "webhat", "family_name": "Webhat", "category": "ransomware", "rule_id": "55dbc9b6-e9f3-5cd5-af60-556f0b6c94ca", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/webhat.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/webhat.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/webhat", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 2 }, { "family": "wemosis", "family_name": "Wemosis", "category": "ransomware", "rule_id": "20fb719b-bdca-5216-b38d-1cdcef9352cd", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/wemosis.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/wemosis.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/wemosis", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 2 }, { "family": "wiliky", "family_name": "Wiliky", "category": "ransomware", "rule_id": "74df7a72-2b87-54c1-93eb-db9120b7c647", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/wiliky.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/wiliky.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/wiliky", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 2 }, { "family": "windapp", "family_name": "Windapp", "category": "ransomware", "rule_id": "f7f36702-9756-5dd2-88b3-37d9b0cc1725", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/windapp.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/windapp.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/windapp", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 2 }, { "family": "winexe", "family_name": "Winexe", "category": "advanced_threat", "rule_id": "c20660eb-6dee-55cc-98a6-e6e512dbb13a", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/winexe.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/winexe.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/winexe", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 2 }, { "family": "winexec", "family_name": "Winexec", "category": "ransomware", "rule_id": "38db9df1-a43e-588a-a70e-9a1122518648", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/winexec.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/winexec.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/winexec", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 2 }, { "family": "winload", "family_name": "Winload", "category": "ransomware", "rule_id": "eeaa1d53-b3ae-545a-86da-e476a4621ce8", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/winload.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/winload.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/winload", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 2 }, { "family": "winnti", "family_name": "Winnti", "category": "backdoor", "rule_id": "f20530c9-858c-5c90-9f71-4f8ea015567f", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/winnti.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/winnti.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/winnti", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 2 }, { "family": "wootbot", "family_name": "Wootbot", "category": "advanced_threat", "rule_id": "11982db5-78e4-58cb-a654-a489e46b7e70", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/wootbot.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/wootbot.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/wootbot", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 2 }, { "family": "wpakill", "family_name": "Wpakill", "category": "advanced_threat", "rule_id": "6a928dc6-43f7-5ebd-a6e8-a61c7fc12440", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/wpakill.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/wpakill.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/wpakill", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 2 }, { "family": "writos", "family_name": "Writos", "category": "ransomware", "rule_id": "113cddc0-d155-504a-8e00-c2f36074c752", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/writos.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/writos.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/writos", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 2 }, { "family": "xanfpezes", "family_name": "Xanfpezes", "category": "ransomware", "rule_id": "89fc56a1-ce08-54a8-b099-c51dc1ba0729", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/xanfpezes.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/xanfpezes.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/xanfpezes", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 2 }, { "family": "xdisccorp", "family_name": "Xdisccorp", "category": "ransomware", "rule_id": "b19c0bcc-6ca5-5944-9f1e-548b5107ae46", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/xdisccorp.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/xdisccorp.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/xdisccorp", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 2 }, { "family": "xiaoba", "family_name": "Xiaoba", "category": "ransomware", "rule_id": "3a5bb9d4-92a4-5470-9829-a9304aca657d", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/xiaoba.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/xiaoba.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/xiaoba", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 2 }, { "family": "xiaoxiong", "family_name": "Xiaoxiong", "category": "advanced_threat", "rule_id": "a37940a0-38ef-5a22-bbc0-4d53ad7fcff3", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/xiaoxiong.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/xiaoxiong.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/xiaoxiong", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 2 }, { "family": "xiquitir", "family_name": "Xiquitir", "category": "ransomware", "rule_id": "ccb665ce-7375-5739-94f7-e9656a743a59", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/xiquitir.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/xiquitir.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/xiquitir", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 2 }, { "family": "xkit", "family_name": "Xkit", "category": "ransomware", "rule_id": "ec64c179-e21f-5561-bf7d-a83089d7d1bd", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/xkit.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/xkit.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/xkit", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 2 }, { "family": "xmrigminer", "family_name": "Xmrigminer", "category": "advanced_threat", "rule_id": "4806a65f-2f7d-5def-bd44-e60077165568", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/xmrigminer.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/xmrigminer.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/xmrigminer", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 2 }, { "family": "xpun", "family_name": "Xpun", "category": "ransomware", "rule_id": "83ecbbde-c341-5c91-a17b-fadd92db63fd", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/xpun.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/xpun.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/xpun", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 2 }, { "family": "xunleihd", "family_name": "Xunleihd", "category": "advanced_threat", "rule_id": "e89f9154-74f4-53e0-b953-b201fadd3465", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/xunleihd.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/xunleihd.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/xunleihd", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 2 }, { "family": "xxyheo", "family_name": "Xxyheo", "category": "ransomware", "rule_id": "67d64b75-8669-57dd-bf26-c6a5037c25fc", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/xxyheo.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/xxyheo.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/xxyheo", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 2 }, { "family": "yabinder", "family_name": "Yabinder", "category": "ransomware", "rule_id": "ab8c3dba-9562-5463-acbe-b146deefeabb", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/yabinder.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yabinder.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/yabinder", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 2 }, { "family": "yahoopass", "family_name": "Yahoopass", "category": "trojan", "rule_id": "d67a255f-a4ee-53a9-a5b7-51efcbd007c7", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/yahoopass.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yahoopass.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/yahoopass", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 2 }, { "family": "yobdam", "family_name": "Yobdam", "category": "ransomware", "rule_id": "f010c172-ad96-5dd7-96a9-411966561d91", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/yobdam.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yobdam.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/yobdam", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 2 }, { "family": "zapinit", "family_name": "Zapinit", "category": "ransomware", "rule_id": "124e3c57-bfdf-5d17-a6a5-36a8b1f1187e", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/zapinit.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/zapinit.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/zapinit", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 2 }, { "family": "zeleffo", "family_name": "Zeleffo", "category": "ransomware", "rule_id": "ac9fa468-60cb-5e40-9487-77acbe263b2b", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/zeleffo.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/zeleffo.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/zeleffo", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 2 }, { "family": "zjaisino", "family_name": "Zjaisino", "category": "ransomware", "rule_id": "9a912f09-4cfd-5472-9a15-b27bbc43170a", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/zjaisino.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/zjaisino.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/zjaisino", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 2 }, { "family": "zombieboy", "family_name": "Zombieboy", "category": "ransomware", "rule_id": "2b8e56cd-2cd6-58a2-99f4-0a4196699f7a", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/zombieboy.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/zombieboy.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/zombieboy", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 2 }, { "family": "zugo", "family_name": "Zugo", "category": "advanced_threat", "rule_id": "5701f033-c230-5bdb-aff5-88dd3541247a", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/zugo.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/zugo.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/zugo", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 2 }, { "family": "0y0auaszpblb", "family_name": "0y0auaszpblb", "category": "ransomware", "rule_id": "1ee0ce4c-bf6d-5b42-8884-e2c31f2f4eac", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/0y0auaszpblb.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/0y0auaszpblb.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/0y0auaszpblb", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "0y1a48lx2yib", "family_name": "0y1a48lx2yib", "category": "ransomware", "rule_id": "3290a11f-79e8-557c-8402-da8b3d0a68e7", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/0y1a48lx2yib.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/0y1a48lx2yib.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/0y1a48lx2yib", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "1fb728f", "family_name": "1fb728f", "category": "ransomware", "rule_id": "cd0f48b8-5599-5748-be07-a318f2139866", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/1fb728f.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/1fb728f.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/1fb728f", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "2345cn", "family_name": "2345cn", "category": "trojan", "rule_id": "bacb633a-3979-5660-9d77-cc20642ddaf5", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/2345cn.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/2345cn.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/2345cn", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 1 }, { "family": "2345explorer", "family_name": "2345explorer", "category": "trojan", "rule_id": "0db74073-19ed-5ae7-b492-bfbeed301120", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/2345explorer.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/2345explorer.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/2345explorer", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 1 }, { "family": "27d3e5bc", "family_name": "27d3e5bc", "category": "ransomware", "rule_id": "7efc5e13-ac53-5660-bb26-b244e931ef39", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/27d3e5bc.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/27d3e5bc.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/27d3e5bc", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "5z0ba4mkpih", "family_name": "5z0ba4mkpih", "category": "ransomware", "rule_id": "548cc4a0-af7e-5a6f-b1a0-39b786076cdd", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/5z0ba4mkpih.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/5z0ba4mkpih.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/5z0ba4mkpih", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "6b47672c", "family_name": "6b47672c", "category": "trojan", "rule_id": "40452f28-e0c9-56a0-a685-6aa5d8a6e8c8", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/6b47672c.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/6b47672c.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/6b47672c", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 1 }, { "family": "a8p9eklc", "family_name": "A8p9eklc", "category": "trojan", "rule_id": "bad871eb-3ecf-523d-993f-b7651a3f5260", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/a8p9eklc.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/a8p9eklc.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/a8p9eklc", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 1 }, { "family": "activator", "family_name": "Activator", "category": "ransomware", "rule_id": "5d80652e-8ba7-55a6-9e4f-914b93fed66f", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/activator.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/activator.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/activator", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "adagent", "family_name": "Adagent", "category": "ransomware", "rule_id": "bc66df19-369a-5093-9608-71ed25e4ae6c", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/adagent.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/adagent.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/adagent", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "adanti", "family_name": "Adanti", "category": "trojan", "rule_id": "0ede653d-2c3e-55a0-bfa7-8a564ce4a7f5", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/adanti.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/adanti.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/adanti", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 1 }, { "family": "adbreak", "family_name": "Adbreak", "category": "ransomware", "rule_id": "942d516e-227f-5946-9799-7a32a0ca8554", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/adbreak.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/adbreak.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/adbreak", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "adcrypterlib", "family_name": "Adcrypterlib", "category": "ransomware", "rule_id": "6c360793-e116-51a4-82bc-2b5d28762041", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/adcrypterlib.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/adcrypterlib.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/adcrypterlib", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "addmepoint", "family_name": "Addmepoint", "category": "trojan", "rule_id": "b5eac0f8-5aad-55ce-98a3-bb1077a5b8f4", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/addmepoint.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/addmepoint.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/addmepoint", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 1 }, { "family": "adkubru", "family_name": "Adkubru", "category": "ransomware", "rule_id": "1d96a4d7-2eb7-54d3-ab03-f56c04b15f1b", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/adkubru.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/adkubru.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/adkubru", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "admedia", "family_name": "Admedia", "category": "trojan", "rule_id": "66931211-6aa2-5916-8552-aafd82648868", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/admedia.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/admedia.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/admedia", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 1 }, { "family": "adpernok", "family_name": "Adpernok", "category": "ransomware", "rule_id": "03190ce0-6d00-58b9-90a0-4df772f56dd8", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/adpernok.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/adpernok.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/adpernok", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "adpower", "family_name": "Adpower", "category": "ransomware", "rule_id": "8fc45ca6-9424-5403-886e-4fe825dad9e1", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/adpower.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/adpower.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/adpower", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "advpassman", "family_name": "Advpassman", "category": "infostealer", "rule_id": "07e9938e-a80d-55ea-881e-a2c17df61a4e", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/advpassman.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/advpassman.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/advpassman", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/infostealer-protection", "sample_count": 1 }, { "family": "adwaresig", "family_name": "Adwaresig", "category": "adware", "rule_id": "48822888-321b-555f-97fd-7fbe03754b7e", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/adwaresig.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/adwaresig.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/adwaresig", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "adylkuzz", "family_name": "Adylkuzz", "category": "ransomware", "rule_id": "e845851e-a4ec-563a-82a0-b3108fab4cd3", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/adylkuzz.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/adylkuzz.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/adylkuzz", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "agiala", "family_name": "Agiala", "category": "ransomware", "rule_id": "bbf03d2a-3bf0-5bb0-94e7-8690e76f92ec", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/agiala.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/agiala.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/agiala", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "agile", "family_name": "Agile", "category": "ransomware", "rule_id": "3292eb75-52db-5219-be6e-5b308c4aef39", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/agile.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/agile.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/agile", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "akcom", "family_name": "Akcom", "category": "ransomware", "rule_id": "1a017fc4-121c-596d-8b6d-f7dab596bc4b", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/akcom.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/akcom.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/akcom", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "akely", "family_name": "Akely", "category": "ransomware", "rule_id": "0a726079-0d8a-53c4-a9c8-d7a4bded1998", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/akely.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/akely.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/akely", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "aksula", "family_name": "Aksula", "category": "ransomware", "rule_id": "29ca8ff8-ca73-540d-a441-5f7d798e1c44", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/aksula.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/aksula.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/aksula", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "allstars", "family_name": "Allstars", "category": "trojan", "rule_id": "0c49c268-bb7b-59e7-8753-08535491a8d9", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/allstars.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/allstars.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/allstars", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 1 }, { "family": "alnaddy", "family_name": "Alnaddy", "category": "trojan", "rule_id": "30da1988-dfda-5f1c-ab39-877b43e6a0df", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/alnaddy.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/alnaddy.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/alnaddy", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 1 }, { "family": "alot", "family_name": "Alot", "category": "ransomware", "rule_id": "ff47088a-8b24-53a4-9bcf-88c8ffb558d6", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/alot.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/alot.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/alot", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "alvabrig", "family_name": "Alvabrig", "category": "ransomware", "rule_id": "083899a0-3ceb-51a4-9668-dd12da26448b", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/alvabrig.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/alvabrig.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/alvabrig", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "alyak", "family_name": "Alyak", "category": "trojan", "rule_id": "708000f3-58d0-5a1f-adfa-246c46fca301", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/alyak.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/alyak.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/alyak", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 1 }, { "family": "amber", "family_name": "Amber", "category": "ransomware", "rule_id": "e484f30a-43fb-5b4a-a6b4-3bbbfaff3d75", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/amber.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/amber.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/amber", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "amdocssims", "family_name": "Amdocssims", "category": "trojan", "rule_id": "04805116-a938-5834-92b9-941b3497611e", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/amdocssims.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/amdocssims.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/amdocssims", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 1 }, { "family": "amgfaohk2uf", "family_name": "Amgfaohk2uf", "category": "ransomware", "rule_id": "3a7abda8-5b1d-560f-a9d6-47cb141af9be", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/amgfaohk2uf.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/amgfaohk2uf.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/amgfaohk2uf", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "amgfvjgvdoaan", "family_name": "Amgfvjgvdoaan", "category": "ransomware", "rule_id": "62ed87fb-9029-5dc4-aad2-ac20307753e2", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/amgfvjgvdoaan.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/amgfvjgvdoaan.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/amgfvjgvdoaan", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "amnesia", "family_name": "Amnesia", "category": "ransomware", "rule_id": "f67f4c85-9402-5d6d-be3f-48d2c0900342", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/amnesia.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/amnesia.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/amnesia", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "amtgimon", "family_name": "Amtgimon", "category": "ransomware", "rule_id": "27409f80-4b37-5075-b957-bd48c7939acc", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/amtgimon.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/amtgimon.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/amtgimon", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "animus", "family_name": "Animus", "category": "ransomware", "rule_id": "aeb8bdc4-7d47-5779-b60c-3aa18b66559e", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/animus.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/animus.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/animus", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "anprot", "family_name": "Anprot", "category": "ransomware", "rule_id": "034f701d-fb08-5c07-be7d-101515a25a76", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/anprot.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/anprot.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/anprot", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "anserin", "family_name": "Anserin", "category": "ransomware", "rule_id": "013beca4-0161-51ef-ab4d-b21a6d5af2e2", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/anserin.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/anserin.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/anserin", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "antidenial", "family_name": "Antidenial", "category": "trojan", "rule_id": "84628ff2-2ea0-5833-97f1-e86e0539037b", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/antidenial.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/antidenial.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/antidenial", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 1 }, { "family": "antisandbox", "family_name": "Antisandbox", "category": "ransomware", "rule_id": "30b02fd4-c7fe-53f8-8000-fc9711fa2978", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/antisandbox.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/antisandbox.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/antisandbox", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "antivirus", "family_name": "Antivirus", "category": "ransomware", "rule_id": "202cd701-54bc-54eb-be76-9d203382c71a", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/antivirus.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/antivirus.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/antivirus", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "anyprotect", "family_name": "Anyprotect", "category": "trojan", "rule_id": "f0530947-e572-5255-9563-0806f6d58061", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/anyprotect.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/anyprotect.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/anyprotect", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 1 }, { "family": "apocalypse", "family_name": "Apocalypse", "category": "ransomware", "rule_id": "81956b9c-fec3-51f8-b70c-a4e0df0bb3b0", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/apocalypse.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/apocalypse.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/apocalypse", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "apropos", "family_name": "Apropos", "category": "trojan", "rule_id": "602e25e2-9f2e-50cb-aac4-5927f42d2caf", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/apropos.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/apropos.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/apropos", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 1 }, { "family": "arkeistealer", "family_name": "Arkeistealer", "category": "infostealer", "rule_id": "e69b6cdd-d263-5534-aeed-3350c2b4f0ac", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/arkeistealer.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/arkeistealer.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/arkeistealer", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/infostealer-protection", "sample_count": 1 }, { "family": "arload", "family_name": "Arload", "category": "ransomware", "rule_id": "aaddfb8e-e24f-59ca-bff3-73230783c6f8", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/arload.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/arload.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/arload", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "artel", "family_name": "Artel", "category": "ransomware", "rule_id": "f90a7c83-9aa9-5542-957f-867028a3190c", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/artel.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/artel.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/artel", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "aseye", "family_name": "Aseye", "category": "ransomware", "rule_id": "a9235805-7674-5e82-9a8b-372aa0936724", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/aseye.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/aseye.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/aseye", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "asianraw", "family_name": "Asianraw", "category": "ransomware", "rule_id": "7d139972-9ce2-5c57-8947-b8723286fb39", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/asianraw.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/asianraw.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/asianraw", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "asym", "family_name": "Asym", "category": "ransomware", "rule_id": "4e10de9f-8d81-5a45-8af9-a1ce21e9f37c", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/asym.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/asym.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/asym", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "atmrod", "family_name": "Atmrod", "category": "ransomware", "rule_id": "028b4bfa-17a2-54d5-a108-96509dbe7ecc", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/atmrod.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/atmrod.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/atmrod", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "atmulator", "family_name": "Atmulator", "category": "ransomware", "rule_id": "7fbd1859-d80b-529b-8a64-68f883803d98", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/atmulator.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/atmulator.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/atmulator", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "atom", "family_name": "Atom", "category": "ransomware", "rule_id": "c8733798-981c-5fe8-aaa2-fb591e5e1fd9", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/atom.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/atom.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/atom", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "atomicrat", "family_name": "Atomicrat", "category": "backdoor", "rule_id": "bad21cc5-69f5-5e2f-bbd4-f3c066d9dd01", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/atomicrat.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/atomicrat.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/atomicrat", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 1 }, { "family": "atomix", "family_name": "Atomix", "category": "ransomware", "rule_id": "bb7afe2d-f53f-5c13-a230-f1e4cb693a60", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/atomix.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/atomix.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/atomix", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "autophyte", "family_name": "Autophyte", "category": "trojan", "rule_id": "efdfcae7-dc0f-5e83-a599-eaf6a3c0a029", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/autophyte.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/autophyte.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/autophyte", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 1 }, { "family": "avira", "family_name": "Avira", "category": "ransomware", "rule_id": "a7d513f7-534b-5972-a661-ab33afe5f960", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/avira.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/avira.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/avira", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "avkiller", "family_name": "Avkiller", "category": "ransomware", "rule_id": "c9565fb4-c156-5b54-a6cc-a44ad6eab299", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/avkiller.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/avkiller.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/avkiller", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "awangba", "family_name": "Awangba", "category": "ransomware", "rule_id": "c3a2fcb6-e629-519d-a5b8-60c82ca3f272", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/awangba.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/awangba.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/awangba", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "axbn", "family_name": "Axbn", "category": "ransomware", "rule_id": "9580c69a-fe07-5e01-a027-0ca19efad64e", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/axbn.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/axbn.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/axbn", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "ayolog", "family_name": "Ayolog", "category": "trojan", "rule_id": "1b3dfcc5-8085-5c5c-b2bf-7ce22a738f86", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/ayolog.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/ayolog.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/ayolog", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 1 }, { "family": "azero", "family_name": "Azero", "category": "ransomware", "rule_id": "73b65aad-b068-50e0-9dd7-b03b4966d582", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/azero.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/azero.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/azero", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "babel", "family_name": "Babel", "category": "ransomware", "rule_id": "05ce9bda-33e7-54fa-b2a1-646bc402727a", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/babel.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/babel.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/babel", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "babonock", "family_name": "Babonock", "category": "ransomware", "rule_id": "bfafa402-66c0-5001-a3f3-369f3e152f25", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/babonock.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/babonock.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/babonock", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "bacalid", "family_name": "Bacalid", "category": "ransomware", "rule_id": "a2f05804-9a4c-5a6a-87e4-354d97f6010f", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/bacalid.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/bacalid.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/bacalid", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "badjoke", "family_name": "Badjoke", "category": "ransomware", "rule_id": "3e262f4c-3b98-54e0-8ee1-9da0ae75dd89", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/badjoke.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/badjoke.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/badjoke", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "bagif", "family_name": "Bagif", "category": "ransomware", "rule_id": "df218956-d9c3-5c74-854f-df9c19bd8979", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/bagif.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/bagif.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/bagif", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "baiduwrapper", "family_name": "Baiduwrapper", "category": "ransomware", "rule_id": "23ecbfa3-0693-5c99-af86-709f63c8899f", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/baiduwrapper.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/baiduwrapper.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/baiduwrapper", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "bamital", "family_name": "Bamital", "category": "ransomware", "rule_id": "cdc29ce4-a0cd-56d4-8b0d-e420c7bcde1c", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/bamital.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/bamital.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/bamital", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "bamsupr", "family_name": "Bamsupr", "category": "ransomware", "rule_id": "ebb28315-3546-55ce-abe8-43c4eef5345f", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/bamsupr.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/bamsupr.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/bamsupr", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "bancobras", "family_name": "Bancobras", "category": "trojan", "rule_id": "3621fbf6-df83-5c2f-95b2-2cb2b695e478", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/bancobras.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/bancobras.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/bancobras", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 1 }, { "family": "bandok", "family_name": "Bandok", "category": "trojan", "rule_id": "1484ef03-4016-52e8-805c-e6867f2cd2d8", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/bandok.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/bandok.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/bandok", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 1 }, { "family": "bankfraud", "family_name": "Bankfraud", "category": "trojan", "rule_id": "0430e719-c572-5d25-bcc7-61610ee8aa48", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/bankfraud.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/bankfraud.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/bankfraud", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 1 }, { "family": "bankoren", "family_name": "Bankoren", "category": "trojan", "rule_id": "b3c3ff25-b50d-5b33-b2cb-c020307fdc23", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/bankoren.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/bankoren.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/bankoren", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 1 }, { "family": "banks", "family_name": "Banks", "category": "trojan", "rule_id": "26450c5a-7620-5840-8aac-abe7688ffc38", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/banks.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/banks.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/banks", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 1 }, { "family": "bansomqare", "family_name": "Bansomqare", "category": "ransomware", "rule_id": "5f3ae794-e3fd-5bc8-aa8a-349d15968312", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/bansomqare.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/bansomqare.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/bansomqare", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "baryumka", "family_name": "Baryumka", "category": "ransomware", "rule_id": "e6ef1642-96ae-59d7-b412-6767a6504fa2", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/baryumka.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/baryumka.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/baryumka", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "batton", "family_name": "Batton", "category": "ransomware", "rule_id": "79e1b9a3-4316-5e35-b0cf-49b019bf13a9", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/batton.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/batton.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/batton", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "be3auestydmi", "family_name": "Be3auestydmi", "category": "trojan", "rule_id": "6dc2f5f3-6d7d-59af-ae3a-46aedd02de16", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/be3auestydmi.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/be3auestydmi.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/be3auestydmi", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 1 }, { "family": "beastdoor", "family_name": "Beastdoor", "category": "backdoor", "rule_id": "d4f160fa-43ae-5391-87c9-9ebfeb89c470", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/beastdoor.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/beastdoor.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/beastdoor", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 1 }, { "family": "bedefco", "family_name": "Bedefco", "category": "ransomware", "rule_id": "bc3bce11-814b-528d-9971-1f7e01ad31c4", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/bedefco.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/bedefco.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/bedefco", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "benban", "family_name": "Benban", "category": "ransomware", "rule_id": "a3755fac-4b82-512d-a96a-02557c126204", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/benban.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/benban.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/benban", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "bertle", "family_name": "Bertle", "category": "ransomware", "rule_id": "91b33ea1-8b8c-5a6b-ad2e-e986e6357d7e", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/bertle.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/bertle.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/bertle", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "betkrypt", "family_name": "Betkrypt", "category": "ransomware", "rule_id": "f2cf706f-a719-5e51-ac39-d179aa6d6f8d", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/betkrypt.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/betkrypt.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/betkrypt", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "bettersurf", "family_name": "Bettersurf", "category": "adware", "rule_id": "9ad0de6c-cde6-53ee-ac63-45b5b9060194", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/bettersurf.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/bettersurf.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/bettersurf", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "bhoint", "family_name": "Bhoint", "category": "trojan", "rule_id": "caf083d5-e027-504c-9e0e-464b31122209", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/bhoint.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/bhoint.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/bhoint", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 1 }, { "family": "bhosta", "family_name": "Bhosta", "category": "ransomware", "rule_id": "7d1f5535-40f4-5438-add0-55bd575785ea", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/bhosta.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/bhosta.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/bhosta", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "bhxu", "family_name": "Bhxu", "category": "ransomware", "rule_id": "8a032a43-8af8-53ca-8177-4bb3dcbe9d29", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/bhxu.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/bhxu.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/bhxu", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "binderon", "family_name": "Binderon", "category": "ransomware", "rule_id": "56c66595-c12d-53d5-abc2-307c3b88c4d5", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/binderon.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/binderon.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/binderon", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "bindex", "family_name": "Bindex", "category": "ransomware", "rule_id": "135d8c36-73aa-556e-ab35-1147a8b69636", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/bindex.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/bindex.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/bindex", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "bindjpg", "family_name": "Bindjpg", "category": "trojan", "rule_id": "174f7eda-5025-5413-a13d-47ea6f5ece5b", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/bindjpg.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/bindjpg.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/bindjpg", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 1 }, { "family": "bitcovar", "family_name": "Bitcovar", "category": "ransomware", "rule_id": "9788dee9-2a91-57c4-b1f8-01a65c87327a", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/bitcovar.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/bitcovar.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/bitcovar", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "bitrepeyp", "family_name": "Bitrepeyp", "category": "ransomware", "rule_id": "ee3459b4-ff08-5041-9564-b279f28a864f", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/bitrepeyp.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/bitrepeyp.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/bitrepeyp", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "bits", "family_name": "Bits", "category": "ransomware", "rule_id": "64f2a780-5ab5-57fb-94c1-2cbcc4f41d4d", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/bits.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/bits.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/bits", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "bitter", "family_name": "Bitter", "category": "trojan", "rule_id": "5582addc-f873-5129-81da-6fc394629381", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/bitter.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/bitter.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/bitter", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 1 }, { "family": "bitwallet", "family_name": "Bitwallet", "category": "trojan", "rule_id": "19c1ae15-5a60-5038-b500-4b045c07723f", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/bitwallet.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/bitwallet.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/bitwallet", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 1 }, { "family": "bkff", "family_name": "Bkff", "category": "ransomware", "rule_id": "4b8de8f0-cfbd-53bb-b171-622a72a80da8", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/bkff.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/bkff.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/bkff", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "blackenergy", "family_name": "Blackenergy", "category": "advanced_threat", "rule_id": "6226fa75-1e9c-540d-8db9-19039cd43bbe", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/blackenergy.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/blackenergy.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/blackenergy", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 1 }, { "family": "blackstealer", "family_name": "Blackstealer", "category": "infostealer", "rule_id": "a442b79f-6dc6-5249-9bcf-e3bc33d71a1e", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/blackstealer.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/blackstealer.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/blackstealer", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/infostealer-protection", "sample_count": 1 }, { "family": "blacoleref", "family_name": "Blacoleref", "category": "ransomware", "rule_id": "66d3637a-4d2e-5dfa-ab00-1768cbf26f27", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/blacoleref.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/blacoleref.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/blacoleref", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "blind", "family_name": "Blind", "category": "ransomware", "rule_id": "14b577c2-715f-5915-851c-2c6fd2a9d715", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/blind.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/blind.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/blind", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "blokrypt", "family_name": "Blokrypt", "category": "ransomware", "rule_id": "feed9f56-463b-5367-a7e4-5b9e31cdc2b3", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/blokrypt.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/blokrypt.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/blokrypt", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "blueeagle", "family_name": "Blueeagle", "category": "ransomware", "rule_id": "7e90090f-ca8b-5a4c-8253-50126b65d399", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/blueeagle.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/blueeagle.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/blueeagle", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "bmgfrznl2gfaa", "family_name": "Bmgfrznl2gfaa", "category": "ransomware", "rule_id": "26b185ab-4b41-516d-b9e7-156eb2fa1c41", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/bmgfrznl2gfaa.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/bmgfrznl2gfaa.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/bmgfrznl2gfaa", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "bmkfxasqf6ki", "family_name": "Bmkfxasqf6ki", "category": "trojan", "rule_id": "d036af78-0e99-5cc3-80ef-a9c9cd774eac", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/bmkfxasqf6ki.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/bmkfxasqf6ki.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/bmkfxasqf6ki", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 1 }, { "family": "bmmedia", "family_name": "Bmmedia", "category": "ransomware", "rule_id": "77df460c-6eed-537f-b203-b9e5771565e8", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/bmmedia.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/bmmedia.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/bmmedia", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "bmsdus4ufhei", "family_name": "Bmsdus4ufhei", "category": "ransomware", "rule_id": "05c8953a-81a1-5919-a7a7-3c59ebcea919", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/bmsdus4ufhei.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/bmsdus4ufhei.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/bmsdus4ufhei", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "bnksa", "family_name": "Bnksa", "category": "trojan", "rule_id": "b07eea8d-3ac8-566d-a7bb-3e4d884aabad", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/bnksa.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/bnksa.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/bnksa", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 1 }, { "family": "bnqp", "family_name": "Bnqp", "category": "ransomware", "rule_id": "0967791f-99c2-5a64-b899-0188b2e7ae62", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/bnqp.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/bnqp.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/bnqp", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "bnuaaewgb2fb", "family_name": "Bnuaaewgb2fb", "category": "ransomware", "rule_id": "4edc56dc-bd8c-5478-9d5a-0ecd7ed3b0d3", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/bnuaaewgb2fb.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/bnuaaewgb2fb.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/bnuaaewgb2fb", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "bolik", "family_name": "Bolik", "category": "trojan", "rule_id": "179b2673-73a6-56e0-800c-d96125651cc4", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/bolik.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/bolik.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/bolik", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 1 }, { "family": "bomka", "family_name": "Bomka", "category": "ransomware", "rule_id": "8a534cdc-bb39-5046-b8e0-d11b0600c7de", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/bomka.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/bomka.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/bomka", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "bonkyhp", "family_name": "Bonkyhp", "category": "ransomware", "rule_id": "59c8b28f-a2e7-51df-8163-2873e9f8175b", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/bonkyhp.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/bonkyhp.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/bonkyhp", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "bototer", "family_name": "Bototer", "category": "trojan", "rule_id": "51a74cfc-7979-5234-9086-b4a9635fb3aa", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/bototer.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/bototer.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/bototer", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 1 }, { "family": "boxter", "family_name": "Boxter", "category": "ransomware", "rule_id": "c57b2649-84a6-5f17-b051-54e417c7b31a", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/boxter.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/boxter.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/boxter", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "boychi", "family_name": "Boychi", "category": "ransomware", "rule_id": "7570098f-7e3c-5ade-8535-614088b6305c", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/boychi.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/boychi.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/boychi", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "bplug", "family_name": "Bplug", "category": "ransomware", "rule_id": "15b354a3-ebe5-5440-b9eb-a043532382c5", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/bplug.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/bplug.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/bplug", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "bredavi", "family_name": "Bredavi", "category": "ransomware", "rule_id": "2fa588ed-34e5-5bff-81bc-d6a334e57ad6", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/bredavi.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/bredavi.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/bredavi", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "bredo", "family_name": "Bredo", "category": "ransomware", "rule_id": "4a5d2e8a-616f-548c-871a-975a8840a0a9", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/bredo.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/bredo.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/bredo", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "bredolab", "family_name": "Bredolab", "category": "trojan", "rule_id": "9395a795-6624-597a-985a-9ed6f87c9654", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/bredolab.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/bredolab.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/bredolab", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 1 }, { "family": "bridex", "family_name": "Bridex", "category": "ransomware", "rule_id": "6bb39046-6968-5f8b-b461-e99cb0f90f3c", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/bridex.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/bridex.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/bridex", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "brobaneup", "family_name": "Brobaneup", "category": "ransomware", "rule_id": "27db0ba1-fe14-5abb-a8e5-64cd3d6e11e4", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/brobaneup.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/brobaneup.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/brobaneup", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "broduplo", "family_name": "Broduplo", "category": "ransomware", "rule_id": "98bf7765-9f7b-5254-8f35-139b49a2d9f0", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/broduplo.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/broduplo.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/broduplo", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "brosafe", "family_name": "Brosafe", "category": "trojan", "rule_id": "eedc6b8d-0bda-5c25-b5f0-4478b80743ab", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/brosafe.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/brosafe.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/brosafe", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 1 }, { "family": "broskod", "family_name": "Broskod", "category": "ransomware", "rule_id": "488476f7-e2ec-5c99-9f8b-d66430aed769", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/broskod.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/broskod.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/broskod", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "browsecx", "family_name": "Browsecx", "category": "trojan", "rule_id": "052b568c-2c1a-5cdd-b78d-3af7cb00255e", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/browsecx.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/browsecx.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/browsecx", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 1 }, { "family": "browshot", "family_name": "Browshot", "category": "trojan", "rule_id": "2c13e605-1b71-5f08-a32d-9d3c96b6a17f", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/browshot.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/browshot.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/browshot", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 1 }, { "family": "bsdownloader", "family_name": "Bsdownloader", "category": "trojan_downloader", "rule_id": "e3b0a95b-ff94-55fc-9f41-13d967976d55", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/bsdownloader.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/bsdownloader.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/bsdownloader", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "bsvsebni", "family_name": "Bsvsebni", "category": "trojan", "rule_id": "7534e9e7-7d53-5b5b-b4d0-2482477070d4", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/bsvsebni.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/bsvsebni.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/bsvsebni", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 1 }, { "family": "btcon", "family_name": "Btcon", "category": "trojan", "rule_id": "495f120b-01a9-5d00-95fe-9824a57bfd7d", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/btcon.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/btcon.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/btcon", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 1 }, { "family": "btcware", "family_name": "Btcware", "category": "ransomware", "rule_id": "d75baffa-7192-508f-8188-dbb199072051", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/btcware.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/btcware.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/btcware", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "bubbledock", "family_name": "Bubbledock", "category": "trojan", "rule_id": "4a847eba-2502-5ff4-9e68-4f9f1062a6aa", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/bubbledock.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/bubbledock.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/bubbledock", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 1 }, { "family": "buhtrap", "family_name": "Buhtrap", "category": "ransomware", "rule_id": "63d9a257-2b18-58ae-b7d2-55af4405b0c3", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/buhtrap.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/buhtrap.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/buhtrap", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "bumat", "family_name": "Bumat", "category": "ransomware", "rule_id": "d2f02d05-3ce6-5328-bad2-075f23ad3a3c", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/bumat.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/bumat.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/bumat", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "burden", "family_name": "Burden", "category": "ransomware", "rule_id": "6cbf5fdc-a84d-5c8e-9977-3d7e4f4ddb5b", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/burden.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/burden.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/burden", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "burnwoo", "family_name": "Burnwoo", "category": "ransomware", "rule_id": "41e0196d-de37-5a24-9035-ec795108fbe7", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/burnwoo.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/burnwoo.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/burnwoo", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "busky", "family_name": "Busky", "category": "ransomware", "rule_id": "650847d2-c3ac-53ab-8c63-394ac0bfeae2", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/busky.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/busky.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/busky", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "bwod", "family_name": "Bwod", "category": "ransomware", "rule_id": "bf77a197-266e-5a4b-8488-59171f220179", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/bwod.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/bwod.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/bwod", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "bypass", "family_name": "Bypass", "category": "infostealer", "rule_id": "ce5c2e04-01e6-580c-b140-881ca7db4433", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/bypass.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/bypass.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/bypass", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/infostealer-protection", "sample_count": 1 }, { "family": "caae34dd", "family_name": "Caae34dd", "category": "ransomware", "rule_id": "9e217f09-6433-5291-8b0b-c571f11b51b8", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/caae34dd.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/caae34dd.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/caae34dd", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "cachedis", "family_name": "Cachedis", "category": "ransomware", "rule_id": "61dff766-1589-548c-8cbc-d5a10c16271f", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/cachedis.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/cachedis.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/cachedis", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "cafecup", "family_name": "Cafecup", "category": "ransomware", "rule_id": "d0868313-8f86-5e5d-87d0-6d5f227b8eac", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/cafecup.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/cafecup.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/cafecup", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "candybox", "family_name": "Candybox", "category": "ransomware", "rule_id": "6e41157d-1327-5ee4-a0df-48e762b4abb5", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/candybox.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/candybox.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/candybox", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "cardtool", "family_name": "Cardtool", "category": "trojan", "rule_id": "15222043-eb98-5d4e-a298-ef3093d5b977", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/cardtool.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/cardtool.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/cardtool", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 1 }, { "family": "carrobat", "family_name": "Carrobat", "category": "ransomware", "rule_id": "79847d16-47a2-5da9-9eb6-5e3feed6f851", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/carrobat.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/carrobat.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/carrobat", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "cashfiesta", "family_name": "Cashfiesta", "category": "trojan", "rule_id": "fe1e2d85-0e2d-53e5-bf38-e270d66a74e7", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/cashfiesta.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/cashfiesta.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/cashfiesta", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 1 }, { "family": "caxnet", "family_name": "Caxnet", "category": "ransomware", "rule_id": "0541a932-2000-555e-8590-b7c69f5af31b", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/caxnet.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/caxnet.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/caxnet", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "cbot", "family_name": "Cbot", "category": "ransomware", "rule_id": "30abe5d9-7093-550f-9d31-896e30f14d61", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/cbot.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/cbot.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/cbot", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "cdnhelper", "family_name": "Cdnhelper", "category": "ransomware", "rule_id": "b394ea2e-1b39-515a-8576-98b419074aa7", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/cdnhelper.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/cdnhelper.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/cdnhelper", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "cebot", "family_name": "Cebot", "category": "ransomware", "rule_id": "487d08d9-1992-5ec3-9050-9b4471c26df6", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/cebot.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/cebot.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/cebot", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "ceram", "family_name": "Ceram", "category": "ransomware", "rule_id": "2f8f8424-f4a3-5607-8774-c5312b6be94d", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/ceram.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/ceram.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/ceram", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "cfms", "family_name": "Cfms", "category": "ransomware", "rule_id": "a5a675de-7fae-5e93-84ad-b001fee0d01c", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/cfms.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/cfms.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/cfms", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "chepdu", "family_name": "Chepdu", "category": "ransomware", "rule_id": "9fcbd1fc-7904-510b-9875-0a6355a91c2a", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/chepdu.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/chepdu.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/chepdu", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "chimera", "family_name": "Chimera", "category": "ransomware", "rule_id": "77ca126f-88eb-5726-8337-c5f1500fc722", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/chimera.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/chimera.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/chimera", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "chinad", "family_name": "Chinad", "category": "ransomware", "rule_id": "dfa78fc5-2cc1-5b34-8fdb-77424c47aafc", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/chinad.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/chinad.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/chinad", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "chinbo", "family_name": "Chinbo", "category": "ransomware", "rule_id": "6f707eab-8b4d-576f-ab59-97e3cd77709f", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/chinbo.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/chinbo.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/chinbo", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "ciadoor", "family_name": "Ciadoor", "category": "trojan", "rule_id": "07d5bc73-3bab-5143-93b3-eece4df44377", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/ciadoor.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/ciadoor.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/ciadoor", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 1 }, { "family": "cidox", "family_name": "Cidox", "category": "trojan", "rule_id": "686d66b3-e6c4-507d-baaf-fa084c08f704", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/cidox.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/cidox.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/cidox", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 1 }, { "family": "cinmus", "family_name": "Cinmus", "category": "ransomware", "rule_id": "58ea9b76-c926-55c6-ac5c-1099f563872c", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/cinmus.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/cinmus.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/cinmus", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "ciyaamgnrsg", "family_name": "Ciyaamgnrsg", "category": "ransomware", "rule_id": "63f8e7b7-6f1c-563e-880a-ec74f7edfcf0", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/ciyaamgnrsg.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/ciyaamgnrsg.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/ciyaamgnrsg", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "cleaman", "family_name": "Cleaman", "category": "ransomware", "rule_id": "92e2ed8c-7923-5806-b5c9-94d160b9a21a", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/cleaman.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/cleaman.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/cleaman", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "cleanlog", "family_name": "Cleanlog", "category": "trojan", "rule_id": "9bd612a7-d7aa-5622-95a3-0007cbcf0155", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/cleanlog.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/cleanlog.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/cleanlog", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 1 }, { "family": "cleanpcpro", "family_name": "Cleanpcpro", "category": "ransomware", "rule_id": "39635a2b-5949-574e-af3c-4be2303d3562", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/cleanpcpro.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/cleanpcpro.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/cleanpcpro", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "clearsearch", "family_name": "Clearsearch", "category": "ransomware", "rule_id": "fb106f3f-4923-587e-b7d7-46209b68b593", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/clearsearch.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/clearsearch.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/clearsearch", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "clhf", "family_name": "Clhf", "category": "ransomware", "rule_id": "19cb9a81-4ac5-58e5-a980-5490efdc9f86", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/clhf.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/clhf.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/clhf", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "client", "family_name": "Client", "category": "trojan", "rule_id": "770b8797-0a80-5c5f-88c2-0e2707079d4f", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/client.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/client.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/client", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 1 }, { "family": "clipspy", "family_name": "Clipspy", "category": "advanced_threat", "rule_id": "851ebd7c-436c-5dfa-88c2-2a34a04ac538", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/clipspy.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/clipspy.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/clipspy", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 1 }, { "family": "cliptoshuffler", "family_name": "Cliptoshuffler", "category": "trojan", "rule_id": "e809a8eb-41b1-5235-8075-02feacd8983b", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/cliptoshuffler.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/cliptoshuffler.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/cliptoshuffler", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 1 }, { "family": "cmgfaeflb9e", "family_name": "Cmgfaeflb9e", "category": "ransomware", "rule_id": "34d3faf0-904d-56c7-b10b-bbd8ce5358f6", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/cmgfaeflb9e.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/cmgfaeflb9e.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/cmgfaeflb9e", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "cmhfbw9r", "family_name": "Cmhfbw9r", "category": "ransomware", "rule_id": "e3fb6d1b-a802-5375-83a5-edbae05bfd1b", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/cmhfbw9r.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/cmhfbw9r.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/cmhfbw9r", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "cnnic", "family_name": "Cnnic", "category": "ransomware", "rule_id": "73601bdf-0550-5509-9058-8924e7df4ff4", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/cnnic.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/cnnic.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/cnnic", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "cnsmin", "family_name": "Cnsmin", "category": "advanced_threat", "rule_id": "7127447d-12cc-5c31-8079-36bcd24cb2c8", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/cnsmin.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/cnsmin.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/cnsmin", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 1 }, { "family": "cntads", "family_name": "Cntads", "category": "advanced_threat", "rule_id": "ec4a840d-e038-54ce-9ebd-a412c87d52e3", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/cntads.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/cntads.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/cntads", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 1 }, { "family": "coced", "family_name": "Coced", "category": "ransomware", "rule_id": "a9e8f286-0163-5e3b-81ed-33c54e15accd", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/coced.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/coced.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/coced", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "code", "family_name": "Code", "category": "ransomware", "rule_id": "d0d1b3fb-c320-5ed2-ba85-746d83edc321", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/code.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/code.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/code", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "cognosads", "family_name": "Cognosads", "category": "ransomware", "rule_id": "b28eb006-62e0-59b3-8269-bc81b0f2db7c", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/cognosads.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/cognosads.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/cognosads", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "coinloader", "family_name": "Coinloader", "category": "ransomware", "rule_id": "fa720531-beb1-5025-b46f-19e6279091e1", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/coinloader.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/coinloader.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/coinloader", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "comine", "family_name": "Comine", "category": "trojan", "rule_id": "6008ca0b-b661-5ac1-b48d-a2b7276b8d26", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/comine.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/comine.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/comine", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 1 }, { "family": "commandcam", "family_name": "Commandcam", "category": "trojan", "rule_id": "0edcd6ce-d699-55e9-8bac-17db049aff15", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/commandcam.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/commandcam.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/commandcam", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 1 }, { "family": "comproc", "family_name": "Comproc", "category": "trojan", "rule_id": "1b9a6787-99a4-5638-a4ba-7d38bd88db3f", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/comproc.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/comproc.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/comproc", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 1 }, { "family": "computty", "family_name": "Computty", "category": "trojan", "rule_id": "83f77af8-1d95-580b-b26c-fdd469e89e39", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/computty.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/computty.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/computty", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 1 }, { "family": "conju", "family_name": "Conju", "category": "ransomware", "rule_id": "0f7a8a83-9fda-5db6-a34c-e7ed8b5baca2", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/conju.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/conju.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/conju", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "cookiesstealer", "family_name": "Cookiesstealer", "category": "trojan", "rule_id": "df65c927-d06b-5765-b69f-95d0b38f3e80", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/cookiesstealer.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/cookiesstealer.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/cookiesstealer", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 1 }, { "family": "copperturtle", "family_name": "Copperturtle", "category": "ransomware", "rule_id": "069e1aee-c681-53a0-b016-5a3d9cb5d7c3", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/copperturtle.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/copperturtle.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/copperturtle", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "corpse", "family_name": "Corpse", "category": "ransomware", "rule_id": "10e8064b-66cd-54c4-8746-5585dc12e53c", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/corpse.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/corpse.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/corpse", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "cosratu", "family_name": "Cosratu", "category": "ransomware", "rule_id": "a22d736d-765b-5690-b3fc-23cca3b89e58", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/cosratu.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/cosratu.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/cosratu", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "couponmarvel", "family_name": "Couponmarvel", "category": "ransomware", "rule_id": "d3775ca6-fe64-5d26-af1f-69d7d69d15ba", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/couponmarvel.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/couponmarvel.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/couponmarvel", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "covus", "family_name": "Covus", "category": "ransomware", "rule_id": "1df7ebb3-cc88-5780-a1b6-97b786db30b7", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/covus.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/covus.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/covus", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "cqst", "family_name": "Cqst", "category": "ransomware", "rule_id": "92282cfc-6269-5bbc-a3ed-fcdbd8f7170d", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/cqst.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/cqst.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/cqst", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "cridex", "family_name": "Cridex", "category": "trojan", "rule_id": "70bab344-336d-54f7-a5ff-de6512052e2e", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/cridex.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/cridex.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/cridex", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 1 }, { "family": "crifi", "family_name": "Crifi", "category": "ransomware", "rule_id": "bb980349-3bcf-53c3-bdd0-7d5932f4be98", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/crifi.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/crifi.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/crifi", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "crispit", "family_name": "Crispit", "category": "ransomware", "rule_id": "3fbfe0e6-25d0-56b4-8658-394382ce922f", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/crispit.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/crispit.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/crispit", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "cromptui", "family_name": "Cromptui", "category": "ransomware", "rule_id": "a4473ccb-fb3b-5f35-a768-a465a4550178", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/cromptui.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/cromptui.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/cromptui", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "cryptear", "family_name": "Cryptear", "category": "ransomware", "rule_id": "5b1d5fb0-4107-54dd-a3ec-687cf73f908d", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/cryptear.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/cryptear.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/cryptear", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "cryptojoker", "family_name": "Cryptojoker", "category": "ransomware", "rule_id": "bac8268e-40d0-5ef1-8cc4-29b874c07466", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/cryptojoker.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/cryptojoker.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/cryptojoker", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "cryptominer", "family_name": "Cryptominer", "category": "trojan", "rule_id": "3af6d3ea-3c7d-5428-b10d-e62eaae01ea0", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/cryptominer.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/cryptominer.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/cryptominer", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 1 }, { "family": "cryptomix", "family_name": "Cryptomix", "category": "ransomware", "rule_id": "b58cfd4b-8e17-5c09-9a71-56bdd01a8893", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/cryptomix.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/cryptomix.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/cryptomix", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "crypton", "family_name": "Crypton", "category": "ransomware", "rule_id": "59f65788-1865-52c7-ab60-0c7e797daeca", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/crypton.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/crypton.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/crypton", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "cryptowall", "family_name": "Cryptowall", "category": "ransomware", "rule_id": "c271ab82-ef87-5e33-bda6-830340f57764", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/cryptowall.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/cryptowall.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/cryptowall", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "cryptowire", "family_name": "Cryptowire", "category": "ransomware", "rule_id": "6c77ad0d-14a3-53b8-97b8-7c4ad0b1ee09", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/cryptowire.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/cryptowire.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/cryptowire", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "cryptredol", "family_name": "Cryptredol", "category": "ransomware", "rule_id": "d295a1e2-de0e-5755-9278-df89c595ebe4", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/cryptredol.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/cryptredol.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/cryptredol", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "cryptxxx", "family_name": "Cryptxxx", "category": "ransomware", "rule_id": "d3f7e3ad-eec9-5dc0-9c92-50a52dae4594", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/cryptxxx.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/cryptxxx.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/cryptxxx", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "cshv", "family_name": "Cshv", "category": "ransomware", "rule_id": "43cace1b-7be0-5521-a731-8e3694f3c4f1", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/cshv.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/cshv.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/cshv", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "csom", "family_name": "Csom", "category": "ransomware", "rule_id": "0c001bee-7d00-5227-8b0a-053058dcefe2", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/csom.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/csom.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/csom", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "cussteel", "family_name": "Cussteel", "category": "advanced_threat", "rule_id": "33d8039a-8e52-54f3-bfb9-5aa75c377f69", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/cussteel.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/cussteel.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/cussteel", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 1 }, { "family": "cvky", "family_name": "Cvky", "category": "ransomware", "rule_id": "f740e73a-798e-5cfe-b23f-f48d9fe4c651", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/cvky.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/cvky.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/cvky", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "cxkh", "family_name": "Cxkh", "category": "ransomware", "rule_id": "c7283676-6b1a-5f81-b553-63b1fb9ba2b5", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/cxkh.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/cxkh.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/cxkh", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "cxkj", "family_name": "Cxkj", "category": "ransomware", "rule_id": "8ffb6501-b831-5513-83e2-4ae59a74946b", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/cxkj.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/cxkj.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/cxkj", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "cypress", "family_name": "Cypress", "category": "ransomware", "rule_id": "4ee0c167-4555-50ea-bfd7-2c2dba8ffe40", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/cypress.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/cypress.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/cypress", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "dalatar", "family_name": "Dalatar", "category": "ransomware", "rule_id": "1f00a807-87d3-5049-936a-80bd68f57402", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/dalatar.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/dalatar.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/dalatar", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "dalbot", "family_name": "Dalbot", "category": "ransomware", "rule_id": "649ebf58-ca12-5996-814c-bc801dbac8aa", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/dalbot.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/dalbot.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/dalbot", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "dalt", "family_name": "Dalt", "category": "ransomware", "rule_id": "cc849646-0923-567e-93a9-f7df256997da", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/dalt.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/dalt.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/dalt", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "darkcyrene", "family_name": "Darkcyrene", "category": "ransomware", "rule_id": "968a98d6-2cee-591c-ba1f-a6b3cb8b9afb", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/darkcyrene.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/darkcyrene.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/darkcyrene", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "darkhotel", "family_name": "Darkhotel", "category": "backdoor", "rule_id": "f8eb6296-733e-5419-93f0-8f13ffcd47ce", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/darkhotel.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/darkhotel.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/darkhotel", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 1 }, { "family": "darsing", "family_name": "Darsing", "category": "ransomware", "rule_id": "f5eb33de-6fea-57e9-a55e-7579403401cd", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/darsing.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/darsing.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/darsing", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "datper", "family_name": "Datper", "category": "ransomware", "rule_id": "922b2f27-1cc3-52d2-b90d-0eca175f8829", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/datper.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/datper.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/datper", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "datpol", "family_name": "Datpol", "category": "ransomware", "rule_id": "4806af3b-1442-5506-9a36-4848debbb1d0", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/datpol.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/datpol.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/datpol", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "davy", "family_name": "Davy", "category": "ransomware", "rule_id": "eb4cc5b0-0e20-53d9-bf76-0fb6decc7d83", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/davy.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/davy.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/davy", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "deau", "family_name": "Deau", "category": "ransomware", "rule_id": "93807de6-c485-5ec9-97e5-f0221d202fcd", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/deau.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/deau.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/deau", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "deceptor", "family_name": "Deceptor", "category": "ransomware", "rule_id": "7827755c-17b4-5ead-8ec4-f34d06b4e88f", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/deceptor.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/deceptor.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/deceptor", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "deepsea", "family_name": "Deepsea", "category": "advanced_threat", "rule_id": "9637eff0-a025-5963-9c4f-60db5484ca78", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/deepsea.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/deepsea.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/deepsea", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 1 }, { "family": "defmid", "family_name": "Defmid", "category": "ransomware", "rule_id": "5140e390-25b1-5009-a221-363c3251791c", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/defmid.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/defmid.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/defmid", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "defsel", "family_name": "Defsel", "category": "ransomware", "rule_id": "88f43911-202b-5dd5-a1a1-5f7ba3fdf4ec", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/defsel.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/defsel.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/defsel", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "delfile", "family_name": "Delfile", "category": "ransomware", "rule_id": "69b9b8f6-095e-55a8-b0a1-815189140b7d", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/delfile.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/delfile.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/delfile", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "delphinjector", "family_name": "Delphinjector", "category": "ransomware", "rule_id": "d2e56c13-d487-58ce-a744-4d6306238b16", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/delphinjector.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/delphinjector.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/delphinjector", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "destructbot", "family_name": "Destructbot", "category": "ransomware", "rule_id": "f73b9588-b1d5-5276-b547-3e440edcae74", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/destructbot.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/destructbot.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/destructbot", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "devilz", "family_name": "Devilz", "category": "ransomware", "rule_id": "d402cfaa-6acd-5a3f-b1d6-45809b5cf619", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/devilz.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/devilz.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/devilz", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "diamin", "family_name": "Diamin", "category": "ransomware", "rule_id": "67166d95-0c97-58dc-b8f9-fa34f0bc9346", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/diamin.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/diamin.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/diamin", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "dicsor", "family_name": "Dicsor", "category": "ransomware", "rule_id": "3ef44cc1-d169-59f1-b0f9-4c427e852ca5", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/dicsor.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/dicsor.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/dicsor", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "diskscanfa", "family_name": "Diskscanfa", "category": "advanced_threat", "rule_id": "35ff05b0-9480-50ad-b3fa-d6952835d156", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/diskscanfa.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/diskscanfa.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/diskscanfa", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 1 }, { "family": "district", "family_name": "District", "category": "ransomware", "rule_id": "bde0f296-8bc6-5533-ab2f-f67bdc4d80b1", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/district.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/district.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/district", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "ditertag", "family_name": "Ditertag", "category": "ransomware", "rule_id": "a69bfbf1-4ab1-59a4-9487-1c8c4c092ebe", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/ditertag.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/ditertag.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/ditertag", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "dllhijack", "family_name": "Dllhijack", "category": "ransomware", "rule_id": "10f89083-e58f-57b9-a635-c4136956353a", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/dllhijack.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/dllhijack.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/dllhijack", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "dlsecure", "family_name": "Dlsecure", "category": "ransomware", "rule_id": "fbfe02fb-502e-50c5-95d8-1bf84a7e7590", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/dlsecure.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/dlsecure.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/dlsecure", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "dluca", "family_name": "Dluca", "category": "ransomware", "rule_id": "58880e62-d1b6-5234-aaee-7fffdf56fd9f", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/dluca.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/dluca.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/dluca", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "dlzp", "family_name": "Dlzp", "category": "ransomware", "rule_id": "3af61948-d5b8-5541-ae81-784f4e0a678b", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/dlzp.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/dlzp.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/dlzp", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "dnguard", "family_name": "Dnguard", "category": "ransomware", "rule_id": "3779dee0-f59e-59b5-afc1-f09dedc1ca3e", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/dnguard.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/dnguard.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/dnguard", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "donise", "family_name": "Donise", "category": "ransomware", "rule_id": "61810308-a697-58b4-979a-238ce2a8245e", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/donise.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/donise.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/donise", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "donloz", "family_name": "Donloz", "category": "ransomware", "rule_id": "acd84dd9-d17a-51c3-b393-0ab2017dd9a1", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/donloz.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/donloz.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/donloz", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "donn", "family_name": "Donn", "category": "ransomware", "rule_id": "c080023d-542d-5826-9a0e-22509e0593b3", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/donn.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/donn.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/donn", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "donut", "family_name": "Donut", "category": "ransomware", "rule_id": "d0318d2c-bfb8-57aa-9fa3-5f1b843b1251", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/donut.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/donut.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/donut", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "doqv", "family_name": "Doqv", "category": "ransomware", "rule_id": "7f074ce7-5b12-5e09-8c7b-a4feaefeacc9", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/doqv.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/doqv.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/doqv", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "dorgam", "family_name": "Dorgam", "category": "ransomware", "rule_id": "cecb463e-23fa-51c1-9e94-8a719323b33e", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/dorgam.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/dorgam.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/dorgam", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "doser", "family_name": "Doser", "category": "trojan", "rule_id": "8c262687-9ff1-5f59-b798-461b6b607d0e", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/doser.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/doser.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/doser", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 1 }, { "family": "doubleagent", "family_name": "Doubleagent", "category": "advanced_threat", "rule_id": "47c06d01-94bd-583d-9be6-1bf3f6b7e2b4", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/doubleagent.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/doubleagent.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/doubleagent", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 1 }, { "family": "doublefantasy", "family_name": "Doublefantasy", "category": "backdoor", "rule_id": "953de660-9ea2-5fbb-89e6-a5455c479836", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/doublefantasy.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/doublefantasy.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/doublefantasy", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 1 }, { "family": "dowanun", "family_name": "Dowanun", "category": "ransomware", "rule_id": "145b391c-071e-5981-9533-25d73c27ed29", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/dowanun.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/dowanun.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/dowanun", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "downexec", "family_name": "Downexec", "category": "ransomware", "rule_id": "62d0eea0-3aac-5033-bf07-a8d59b7ac74e", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/downexec.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/downexec.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/downexec", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "dragonbot", "family_name": "Dragonbot", "category": "trojan", "rule_id": "6d48d92c-787f-5d3a-8548-df1096b442d8", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/dragonbot.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/dragonbot.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/dragonbot", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 1 }, { "family": "drefir", "family_name": "Drefir", "category": "ransomware", "rule_id": "f0592fc3-1751-5e94-84d7-fb6e9e47abe3", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/drefir.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/drefir.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/drefir", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "driverbooster", "family_name": "Driverbooster", "category": "advanced_threat", "rule_id": "9b4e3b51-de42-5744-8598-25a265da0111", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/driverbooster.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/driverbooster.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/driverbooster", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 1 }, { "family": "driverdevelop", "family_name": "Driverdevelop", "category": "trojan", "rule_id": "4b364573-aaa3-5f68-bee2-d453d6b550eb", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/driverdevelop.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/driverdevelop.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/driverdevelop", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 1 }, { "family": "driverturbo", "family_name": "Driverturbo", "category": "ransomware", "rule_id": "5caef4b5-8d37-5db6-b5e9-313b81cac5c0", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/driverturbo.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/driverturbo.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/driverturbo", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "drooptroop", "family_name": "Drooptroop", "category": "trojan", "rule_id": "6852f11e-3578-5627-bfa1-81b02408c245", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/drooptroop.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/drooptroop.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/drooptroop", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 1 }, { "family": "drowor", "family_name": "Drowor", "category": "ransomware", "rule_id": "c1731b7f-9114-5982-bade-d392ab7d1657", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/drowor.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/drowor.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/drowor", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "dsbot", "family_name": "Dsbot", "category": "trojan", "rule_id": "34269397-33be-55eb-90fc-9b390dfe6ab8", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/dsbot.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/dsbot.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/dsbot", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 1 }, { "family": "duduunion", "family_name": "Duduunion", "category": "ransomware", "rule_id": "e2600647-9c3c-5fbb-820a-3d2fa3e28179", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/duduunion.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/duduunion.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/duduunion", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "dungcoi", "family_name": "Dungcoi", "category": "ransomware", "rule_id": "b9acdf2c-389e-5df4-bc55-bdd8a7a9ab4c", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/dungcoi.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/dungcoi.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/dungcoi", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "dunik", "family_name": "Dunik", "category": "ransomware", "rule_id": "791fe8e6-e6b4-5318-a1c5-73fda713a365", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/dunik.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/dunik.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/dunik", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "duon", "family_name": "Duon", "category": "ransomware", "rule_id": "4f1cc2eb-59d5-5d77-8308-a04e964ba1b2", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/duon.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/duon.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/duon", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "dupate", "family_name": "Dupate", "category": "ransomware", "rule_id": "67b89a8b-3a5e-5d64-b101-5890248f6d9c", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/dupate.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/dupate.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/dupate", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "dzan", "family_name": "Dzan", "category": "ransomware", "rule_id": "a142dc7f-f436-577a-9f2f-88934882f085", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/dzan.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/dzan.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/dzan", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "e13044af", "family_name": "E13044af", "category": "ransomware", "rule_id": "3b8d7ca0-57fa-5a69-97ec-ba246fa3ac94", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/e13044af.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/e13044af.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/e13044af", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "e2f3f4d", "family_name": "E2f3f4d", "category": "ransomware", "rule_id": "54bde2c0-e374-5995-b672-ed8cc09f0af7", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/e2f3f4d.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/e2f3f4d.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/e2f3f4d", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "easyspeedcheck", "family_name": "Easyspeedcheck", "category": "advanced_threat", "rule_id": "c1cdba1f-f1f2-509f-8081-dd4c06b5e674", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/easyspeedcheck.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/easyspeedcheck.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/easyspeedcheck", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 1 }, { "family": "eb149b", "family_name": "Eb149b", "category": "ransomware", "rule_id": "2f6b6288-24b0-5014-8ec9-4a313bf3504b", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/eb149b.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/eb149b.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/eb149b", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "edeals", "family_name": "Edeals", "category": "advanced_threat", "rule_id": "ca341420-d42f-5cde-8e93-31e07bd93cc5", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/edeals.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/edeals.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/edeals", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 1 }, { "family": "effbee", "family_name": "Effbee", "category": "ransomware", "rule_id": "18cdbf95-2185-5bd0-b1ee-41c6065a6a79", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/effbee.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/effbee.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/effbee", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "ei0frdaui", "family_name": "Ei0frdaui", "category": "ransomware", "rule_id": "fc2e1689-7e61-53df-a526-10362cff60fd", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/ei0frdaui.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/ei0frdaui.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/ei0frdaui", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "eicardemo", "family_name": "Eicardemo", "category": "advanced_threat", "rule_id": "dfed5be0-b6b2-5cc3-9111-2ef6cf17d173", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/eicardemo.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/eicardemo.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/eicardemo", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 1 }, { "family": "eitu", "family_name": "Eitu", "category": "ransomware", "rule_id": "af615987-958e-5c62-a75b-56dac344361e", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/eitu.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/eitu.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/eitu", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "elite", "family_name": "Elite", "category": "ransomware", "rule_id": "45c86c9c-97ca-5a83-b710-4a98ed65c828", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/elite.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/elite.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/elite", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "emarketing", "family_name": "Emarketing", "category": "ransomware", "rule_id": "6961f03c-895e-5dfe-8106-6c7eafa40382", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/emarketing.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/emarketing.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/emarketing", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "emathi", "family_name": "Emathi", "category": "ransomware", "rule_id": "a6f6bf17-ad7a-529f-9276-46111e7449fb", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/emathi.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/emathi.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/emathi", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "emgfamt7gjgi", "family_name": "Emgfamt7gjgi", "category": "trojan", "rule_id": "44b80828-c370-56ee-93a2-9deed905547a", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/emgfamt7gjgi.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/emgfamt7gjgi.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/emgfamt7gjgi", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 1 }, { "family": "emmfaeuirscb", "family_name": "Emmfaeuirscb", "category": "ransomware", "rule_id": "1bfb3197-9302-5fe8-bec7-237b623db235", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/emmfaeuirscb.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/emmfaeuirscb.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/emmfaeuirscb", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "emotetn", "family_name": "Emotetn", "category": "ransomware", "rule_id": "4938e6b3-facc-53f8-aadf-4611a94e6da4", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/emotetn.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/emotetn.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/emotetn", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "emudbot", "family_name": "Emudbot", "category": "ransomware", "rule_id": "9e51e891-2957-56eb-8f73-510effbbcc73", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/emudbot.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/emudbot.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/emudbot", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "encryptpe", "family_name": "Encryptpe", "category": "ransomware", "rule_id": "e641c7db-88e2-5570-bfb4-c754f37c589e", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/encryptpe.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/encryptpe.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/encryptpe", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "esaprof", "family_name": "Esaprof", "category": "ransomware", "rule_id": "8062ea91-4829-57ed-93bd-02f6955a8590", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/esaprof.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/esaprof.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/esaprof", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "esendi", "family_name": "Esendi", "category": "ransomware", "rule_id": "5abcbeb5-f28e-53a2-8103-acb9868d90ab", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/esendi.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/esendi.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/esendi", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "esfury", "family_name": "Esfury", "category": "trojan", "rule_id": "63d6a2bc-b48f-5fc2-93e5-5da0b28a36fa", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/esfury.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/esfury.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/esfury", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 1 }, { "family": "eskimo", "family_name": "Eskimo", "category": "ransomware", "rule_id": "281ae2cb-2a32-5656-8296-0d0962631e2c", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/eskimo.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/eskimo.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/eskimo", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "esprot", "family_name": "Esprot", "category": "ransomware", "rule_id": "472ebb23-8fbf-5390-8fd4-50e53f33d807", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/esprot.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/esprot.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/esprot", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "estapa", "family_name": "Estapa", "category": "ransomware", "rule_id": "a6b7881a-7cb7-5c89-9baa-a221d72c382f", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/estapa.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/estapa.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/estapa", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "estrella", "family_name": "Estrella", "category": "ransomware", "rule_id": "5ac98fd1-1146-58de-a90c-c3145e927db3", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/estrella.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/estrella.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/estrella", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "eventmonitor", "family_name": "Eventmonitor", "category": "advanced_threat", "rule_id": "f69f7e19-348e-581c-ade4-305f96010b24", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/eventmonitor.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/eventmonitor.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/eventmonitor", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 1 }, { "family": "evillocker", "family_name": "Evillocker", "category": "ransomware", "rule_id": "83d4d214-23f3-5a4b-9cfa-f3cee137d587", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/evillocker.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/evillocker.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/evillocker", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "exchanger", "family_name": "Exchanger", "category": "ransomware", "rule_id": "cf53a20c-b688-510e-b8fb-d0f6bbac1463", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/exchanger.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/exchanger.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/exchanger", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "excrevie", "family_name": "Excrevie", "category": "ransomware", "rule_id": "33d2ac94-c836-545a-a053-0f64355f4947", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/excrevie.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/excrevie.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/excrevie", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "exebinder", "family_name": "Exebinder", "category": "trojan", "rule_id": "824dc4e2-b157-5300-915e-2cd3ddf87e89", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/exebinder.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/exebinder.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/exebinder", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 1 }, { "family": "exent", "family_name": "Exent", "category": "ransomware", "rule_id": "88c25ce3-266a-5892-a8b4-37ec95d7da76", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/exent.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/exent.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/exent", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "exksws", "family_name": "Exksws", "category": "ransomware", "rule_id": "319dbb0f-680a-5e3c-b28a-17d30fa1d363", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/exksws.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/exksws.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/exksws", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "expstart", "family_name": "Expstart", "category": "ransomware", "rule_id": "d35fb2be-ddbd-5ace-9004-01bfc6e60190", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/expstart.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/expstart.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/expstart", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "exxroute", "family_name": "Exxroute", "category": "trojan", "rule_id": "2128d51b-f411-54a8-9b1c-957b616390bd", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/exxroute.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/exxroute.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/exxroute", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 1 }, { "family": "ezsearch", "family_name": "Ezsearch", "category": "advanced_threat", "rule_id": "44f6ca6d-7f90-5239-8f5b-2f00b89991a4", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/ezsearch.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/ezsearch.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/ezsearch", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 1 }, { "family": "ezsoftwareupdater", "family_name": "Ezsoftwareupdater", "category": "ransomware", "rule_id": "889fcd87-0849-5a55-8075-7781838a3134", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/ezsoftwareupdater.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/ezsoftwareupdater.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/ezsoftwareupdater", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "fakeal", "family_name": "Fakeal", "category": "ransomware", "rule_id": "e83e38e9-698e-53e2-908f-7f5822b39e13", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/fakeal.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/fakeal.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/fakeal", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "fakecoder", "family_name": "Fakecoder", "category": "ransomware", "rule_id": "0c88a273-ee32-5385-a029-bbc287907d13", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/fakecoder.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/fakecoder.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/fakecoder", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "fakedos", "family_name": "Fakedos", "category": "trojan", "rule_id": "563a5055-1ef4-5f8c-ad50-614d6873f341", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/fakedos.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/fakedos.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/fakedos", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 1 }, { "family": "fakeff", "family_name": "Fakeff", "category": "trojan", "rule_id": "aaed2ee2-c3b7-5305-a4a6-6969268c1219", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/fakeff.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/fakeff.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/fakeff", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 1 }, { "family": "fakehack", "family_name": "Fakehack", "category": "advanced_threat", "rule_id": "ba4142c5-234e-5ed8-bea2-beccf51d41dd", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/fakehack.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/fakehack.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/fakehack", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 1 }, { "family": "fakeplayer", "family_name": "Fakeplayer", "category": "trojan", "rule_id": "c8420213-0d2a-5fcd-a71c-827796ca20ae", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/fakeplayer.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/fakeplayer.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/fakeplayer", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 1 }, { "family": "fakeransom", "family_name": "Fakeransom", "category": "ransomware", "rule_id": "a15c9685-75aa-5911-ab02-552db51f0c91", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/fakeransom.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/fakeransom.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/fakeransom", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "familykeylogger", "family_name": "Familykeylogger", "category": "advanced_threat", "rule_id": "f2a3abb8-e733-5fae-9806-c24d45539897", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/familykeylogger.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/familykeylogger.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/familykeylogger", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 1 }, { "family": "fantom", "family_name": "Fantom", "category": "ransomware", "rule_id": "65a08ea5-16c0-57db-b5c4-f657d4b97403", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/fantom.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/fantom.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/fantom", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "farsistall", "family_name": "Farsistall", "category": "ransomware", "rule_id": "4867f07a-02ee-5dcb-8819-93e9f339d3ed", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/farsistall.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/farsistall.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/farsistall", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "fastpc", "family_name": "Fastpc", "category": "ransomware", "rule_id": "85ee5cdd-a78e-54b3-a28c-7365af52e553", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/fastpc.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/fastpc.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/fastpc", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "favadd", "family_name": "Favadd", "category": "trojan", "rule_id": "4eb2b488-843d-5c37-987b-d9404a794e91", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/favadd.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/favadd.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/favadd", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 1 }, { "family": "fayu", "family_name": "Fayu", "category": "ransomware", "rule_id": "917f1204-0793-57b1-9fcb-7cd88c98fd54", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/fayu.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/fayu.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/fayu", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "fbng", "family_name": "Fbng", "category": "ransomware", "rule_id": "8b182f23-63ae-5215-bbc9-b31c21d6c7a1", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/fbng.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/fbng.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/fbng", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "fcb569f", "family_name": "Fcb569f", "category": "trojan", "rule_id": "0314ee5e-cf6c-507d-ac8f-7173c74ed26b", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/fcb569f.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/fcb569f.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/fcb569f", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 1 }, { "family": "feebs", "family_name": "Feebs", "category": "trojan", "rule_id": "576985cc-81a7-5ec3-8873-078c1c5b8046", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/feebs.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/feebs.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/feebs", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 1 }, { "family": "feedarch", "family_name": "Feedarch", "category": "ransomware", "rule_id": "8976e772-d6ac-513e-8096-7047fd96d371", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/feedarch.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/feedarch.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/feedarch", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "fenomengame", "family_name": "Fenomengame", "category": "trojan", "rule_id": "76bf7db1-30ff-5835-9e3b-af014fd4ebfb", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/fenomengame.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/fenomengame.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/fenomengame", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 1 }, { "family": "fgarb", "family_name": "Fgarb", "category": "ransomware", "rule_id": "b6d2cd79-2fd9-539b-b99a-ee539efb8c40", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/fgarb.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/fgarb.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/fgarb", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "figyek", "family_name": "Figyek", "category": "ransomware", "rule_id": "62984d7a-42b0-5965-bdf6-dc2be0c25a62", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/figyek.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/figyek.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/figyek", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "filoskeed", "family_name": "Filoskeed", "category": "ransomware", "rule_id": "558dd71a-01fd-560f-83f7-d18a39bc90a8", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/filoskeed.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/filoskeed.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/filoskeed", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "findkeyxp", "family_name": "Findkeyxp", "category": "trojan", "rule_id": "dd43d58e-dfb2-5e50-bfc9-b339a7f4c24c", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/findkeyxp.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/findkeyxp.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/findkeyxp", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 1 }, { "family": "fire", "family_name": "Fire", "category": "ransomware", "rule_id": "f052b3f4-8640-559e-8a0a-ff5076728331", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/fire.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/fire.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/fire", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "firehooker", "family_name": "Firehooker", "category": "trojan", "rule_id": "cb50d9f5-2fea-5528-966b-2b7b6d45e859", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/firehooker.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/firehooker.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/firehooker", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 1 }, { "family": "flinject", "family_name": "Flinject", "category": "ransomware", "rule_id": "45debf04-7435-56e0-9ad2-fca8e1d4685b", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/flinject.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/flinject.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/flinject", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "flowershop", "family_name": "Flowershop", "category": "ransomware", "rule_id": "fdfe6b9c-c524-5d41-87f6-5db8433eee82", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/flowershop.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/flowershop.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/flowershop", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "flowspirit", "family_name": "Flowspirit", "category": "ransomware", "rule_id": "f0dc2755-af3c-555e-b60c-f14f6de5521f", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/flowspirit.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/flowspirit.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/flowspirit", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "flusihoc", "family_name": "Flusihoc", "category": "ransomware", "rule_id": "1f7c9f1f-5110-5f1d-afc2-dbde0d762d05", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/flusihoc.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/flusihoc.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/flusihoc", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "flvdirect", "family_name": "Flvdirect", "category": "ransomware", "rule_id": "7adefd65-792e-5897-91c9-c089a7e0f818", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/flvdirect.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/flvdirect.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/flvdirect", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "flvdownloader", "family_name": "Flvdownloader", "category": "advanced_threat", "rule_id": "77e44e82-8863-5fa2-b236-c5c2541d8680", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/flvdownloader.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/flvdownloader.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/flvdownloader", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 1 }, { "family": "flymux", "family_name": "Flymux", "category": "advanced_threat", "rule_id": "fe2f22c1-6997-5c31-95c7-134934c18a65", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/flymux.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/flymux.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/flymux", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 1 }, { "family": "flystudi", "family_name": "Flystudi", "category": "ransomware", "rule_id": "5826aabd-6e52-5c75-8e4b-368ec05999a2", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/flystudi.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/flystudi.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/flystudi", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "fmgfagns0sge", "family_name": "Fmgfagns0sge", "category": "ransomware", "rule_id": "2e9941a9-a2d1-5581-b270-2a5ede401e9c", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/fmgfagns0sge.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/fmgfagns0sge.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/fmgfagns0sge", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "fnwabyxmbkm", "family_name": "Fnwabyxmbkm", "category": "ransomware", "rule_id": "674902da-5e03-545c-b321-05dfe63bd548", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/fnwabyxmbkm.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/fnwabyxmbkm.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/fnwabyxmbkm", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "foler", "family_name": "Foler", "category": "ransomware", "rule_id": "4a7737a8-11f4-5f61-b4b1-d5e6ea961122", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/foler.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/foler.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/foler", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "folstart", "family_name": "Folstart", "category": "ransomware", "rule_id": "162d4804-d5a9-51af-9c53-fa513e4696e1", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/folstart.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/folstart.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/folstart", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "food", "family_name": "Food", "category": "ransomware", "rule_id": "3c85c1e2-150f-5819-b82c-d8e4ab0851b3", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/food.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/food.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/food", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "forbot", "family_name": "Forbot", "category": "ransomware", "rule_id": "821c0e54-7fdf-57fb-b209-2fb4f671d2e0", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/forbot.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/forbot.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/forbot", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "fosniw", "family_name": "Fosniw", "category": "ransomware", "rule_id": "91b71bc9-fb6f-5e6e-9611-e2c2d0636459", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/fosniw.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/fosniw.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/fosniw", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "foxhiex", "family_name": "Foxhiex", "category": "ransomware", "rule_id": "f03102ca-1284-52b7-9250-d1bb2e28f595", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/foxhiex.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/foxhiex.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/foxhiex", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "fraud", "family_name": "Fraud", "category": "trojan", "rule_id": "795e6cba-2644-512f-924d-13e170f2eda6", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/fraud.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/fraud.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/fraud", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 1 }, { "family": "fraudkrypt", "family_name": "Fraudkrypt", "category": "ransomware", "rule_id": "664d8ca8-1153-5e89-9e63-9397214240b4", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/fraudkrypt.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/fraudkrypt.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/fraudkrypt", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "frethog", "family_name": "Frethog", "category": "trojan", "rule_id": "6aa5d5f8-34fd-59ea-87e7-84ec5272369b", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/frethog.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/frethog.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/frethog", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 1 }, { "family": "frethoq", "family_name": "Frethoq", "category": "ransomware", "rule_id": "a0564114-0a57-5cde-8228-b1beb21f2d52", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/frethoq.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/frethoq.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/frethoq", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "freyja", "family_name": "Freyja", "category": "ransomware", "rule_id": "56e1f1ee-1005-52f0-939b-320f27ee5641", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/freyja.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/freyja.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/freyja", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "frosparf", "family_name": "Frosparf", "category": "ransomware", "rule_id": "3d7539f7-f222-5277-bfbc-e9d246ec05d8", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/frosparf.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/frosparf.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/frosparf", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "fspm", "family_name": "Fspm", "category": "ransomware", "rule_id": "4a8b00d2-f97e-5453-b89f-c64f29b284cb", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/fspm.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/fspm.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/fspm", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "funmood", "family_name": "Funmood", "category": "advanced_threat", "rule_id": "f4f5d61e-c28d-5644-8eb7-2ee401020edd", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/funmood.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/funmood.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/funmood", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 1 }, { "family": "fz4aaueo2jhi", "family_name": "Fz4aaueo2jhi", "category": "ransomware", "rule_id": "f0c8aad3-7bdb-5b85-b2d5-ec07ba00e523", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/fz4aaueo2jhi.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/fz4aaueo2jhi.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/fz4aaueo2jhi", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "gameapp", "family_name": "Gameapp", "category": "advanced_threat", "rule_id": "54511fd5-fe93-58a9-845c-157cfd22f5bf", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/gameapp.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/gameapp.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/gameapp", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 1 }, { "family": "gameol", "family_name": "Gameol", "category": "advanced_threat", "rule_id": "5ac5d26b-44fc-55a1-947f-df0416599e02", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/gameol.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/gameol.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/gameol", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 1 }, { "family": "gamium", "family_name": "Gamium", "category": "advanced_threat", "rule_id": "f87b0b53-ac39-5059-8f0a-10e7145b7c74", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/gamium.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/gamium.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/gamium", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 1 }, { "family": "gamsofts", "family_name": "Gamsofts", "category": "advanced_threat", "rule_id": "143335d6-c020-5008-8b23-71070ad3035f", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/gamsofts.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/gamsofts.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/gamsofts", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 1 }, { "family": "gaofenq", "family_name": "Gaofenq", "category": "ransomware", "rule_id": "3986da5d-36c5-510c-a128-be9b8b0e34a4", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/gaofenq.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/gaofenq.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/gaofenq", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "gaofenquming", "family_name": "Gaofenquming", "category": "advanced_threat", "rule_id": "c22ee614-3cec-598a-9217-edc1a7366acc", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/gaofenquming.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/gaofenquming.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/gaofenquming", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 1 }, { "family": "garvi", "family_name": "Garvi", "category": "ransomware", "rule_id": "adde5c81-ed61-5012-8788-e60bf517e14a", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/garvi.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/garvi.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/garvi", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "gdsda", "family_name": "Gdsda", "category": "ransomware", "rule_id": "e41e1c4a-d4e9-5ba4-8704-0986d39bd70a", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/gdsda.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/gdsda.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/gdsda", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "gemius", "family_name": "Gemius", "category": "advanced_threat", "rule_id": "a3e06af0-04a2-59af-81f0-cf0c99f547d0", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/gemius.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/gemius.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/gemius", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 1 }, { "family": "gendelfan", "family_name": "Gendelfan", "category": "ransomware", "rule_id": "79c4dfcd-90b8-551b-920e-1fffb4b47247", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/gendelfan.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/gendelfan.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/gendelfan", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "genericrxad", "family_name": "Genericrxad", "category": "ransomware", "rule_id": "a8ffcae7-b217-51d8-ab84-de168997ed75", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/genericrxad.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/genericrxad.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/genericrxad", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "genericrxaf", "family_name": "Genericrxaf", "category": "ransomware", "rule_id": "a72eac31-9ebf-51d0-8f3a-e873eeda5a2a", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/genericrxaf.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/genericrxaf.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/genericrxaf", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "genericrxal", "family_name": "Genericrxal", "category": "ransomware", "rule_id": "25a14f9e-ad60-50fc-a763-e8545a6d3b6c", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/genericrxal.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/genericrxal.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/genericrxal", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "genericrxam", "family_name": "Genericrxam", "category": "ransomware", "rule_id": "349afd9c-8d19-5108-952a-22ed11c1093c", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/genericrxam.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/genericrxam.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/genericrxam", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "genericrxas", "family_name": "Genericrxas", "category": "trojan", "rule_id": "15e60837-c30d-5528-8b4d-95ba37c6414c", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/genericrxas.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/genericrxas.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/genericrxas", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 1 }, { "family": "genericrxat", "family_name": "Genericrxat", "category": "ransomware", "rule_id": "15dd16a3-f1ff-5246-bf1d-c4c417fd2ff8", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/genericrxat.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/genericrxat.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/genericrxat", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "genericrxax", "family_name": "Genericrxax", "category": "ransomware", "rule_id": "d5e9f27d-5393-5826-b845-3929984c4f74", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/genericrxax.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/genericrxax.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/genericrxax", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "genericrxbm", "family_name": "Genericrxbm", "category": "ransomware", "rule_id": "109d15c3-2438-5cab-97b3-ecf70cdab25f", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/genericrxbm.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/genericrxbm.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/genericrxbm", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "genericrxbp", "family_name": "Genericrxbp", "category": "ransomware", "rule_id": "f8bfbe25-494a-51dc-8ffa-16a5badc9c31", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/genericrxbp.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/genericrxbp.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/genericrxbp", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "genericrxbu", "family_name": "Genericrxbu", "category": "ransomware", "rule_id": "c49dccaa-ba6a-5454-9426-9a105ecd204a", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/genericrxbu.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/genericrxbu.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/genericrxbu", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "genericrxbw", "family_name": "Genericrxbw", "category": "ransomware", "rule_id": "f278eda4-bf52-5ef6-8e95-54a7ea19129f", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/genericrxbw.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/genericrxbw.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/genericrxbw", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "genericrxby", "family_name": "Genericrxby", "category": "trojan", "rule_id": "efcabe4c-8b9c-5050-83b6-9adb8f3b40fd", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/genericrxby.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/genericrxby.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/genericrxby", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 1 }, { "family": "genericrxbz", "family_name": "Genericrxbz", "category": "ransomware", "rule_id": "f81aae13-dd81-5f8a-b369-657052155e78", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/genericrxbz.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/genericrxbz.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/genericrxbz", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "genericrxcd", "family_name": "Genericrxcd", "category": "ransomware", "rule_id": "4b108e90-21ef-5bf4-a7a3-d0b19cfba8f3", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/genericrxcd.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/genericrxcd.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/genericrxcd", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "genericrxcf", "family_name": "Genericrxcf", "category": "ransomware", "rule_id": "3db3c171-bf1e-5fa0-8101-ef7f4edd0c78", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/genericrxcf.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/genericrxcf.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/genericrxcf", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "genericrxcg", "family_name": "Genericrxcg", "category": "trojan", "rule_id": "452a18db-bbca-545e-8bef-0b7bbe049035", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/genericrxcg.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/genericrxcg.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/genericrxcg", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 1 }, { "family": "genericrxch", "family_name": "Genericrxch", "category": "ransomware", "rule_id": "72359fe8-99c7-577c-b0d1-6c13cb0645a8", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/genericrxch.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/genericrxch.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/genericrxch", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "genericrxci", "family_name": "Genericrxci", "category": "ransomware", "rule_id": "ff870b92-e5af-5f8b-a210-80902d25ee7c", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/genericrxci.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/genericrxci.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/genericrxci", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "genericrxck", "family_name": "Genericrxck", "category": "ransomware", "rule_id": "14322867-c4e1-516c-a7a8-192f5ec1add4", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/genericrxck.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/genericrxck.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/genericrxck", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "genericrxcp", "family_name": "Genericrxcp", "category": "ransomware", "rule_id": "a6878da5-0b78-591b-b8c6-4f5c27e0231f", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/genericrxcp.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/genericrxcp.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/genericrxcp", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "genericrxcr", "family_name": "Genericrxcr", "category": "ransomware", "rule_id": "a47d260d-ef0f-56b7-8226-9b3d13ddb994", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/genericrxcr.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/genericrxcr.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/genericrxcr", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "genericrxcs", "family_name": "Genericrxcs", "category": "ransomware", "rule_id": "3e72e3a3-816f-50f1-82bf-1ef952e8109c", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/genericrxcs.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/genericrxcs.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/genericrxcs", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "genericrxcu", "family_name": "Genericrxcu", "category": "ransomware", "rule_id": "7126fd16-e265-5531-98b9-772a7d494e94", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/genericrxcu.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/genericrxcu.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/genericrxcu", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "genericrxcv", "family_name": "Genericrxcv", "category": "ransomware", "rule_id": "1d0099a2-5afd-5bb9-8099-d3d1ba1fecd1", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/genericrxcv.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/genericrxcv.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/genericrxcv", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "genericrxcw", "family_name": "Genericrxcw", "category": "ransomware", "rule_id": "47713426-aa23-5c8e-8876-3efc7f7fca1e", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/genericrxcw.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/genericrxcw.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/genericrxcw", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "genericrxcy", "family_name": "Genericrxcy", "category": "ransomware", "rule_id": "1cf61766-0667-5dd9-ad87-2cbab0f33df3", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/genericrxcy.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/genericrxcy.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/genericrxcy", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "genericrxde", "family_name": "Genericrxde", "category": "ransomware", "rule_id": "fef3f4b1-0f17-582a-a5eb-0d07680a334f", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/genericrxde.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/genericrxde.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/genericrxde", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "genericrxdf", "family_name": "Genericrxdf", "category": "ransomware", "rule_id": "d4d8c44d-1bca-565f-8f29-12e5f43fc99f", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/genericrxdf.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/genericrxdf.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/genericrxdf", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "genericrxdi", "family_name": "Genericrxdi", "category": "ransomware", "rule_id": "b14c9ef8-416d-58bc-8d5c-eefd69a3acc9", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/genericrxdi.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/genericrxdi.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/genericrxdi", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "genericrxdx", "family_name": "Genericrxdx", "category": "ransomware", "rule_id": "2bebbf37-f2e7-536d-b4eb-79781a58adc6", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/genericrxdx.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/genericrxdx.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/genericrxdx", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "genericrxeb", "family_name": "Genericrxeb", "category": "ransomware", "rule_id": "7cc3dbd1-632d-5e78-853b-ce82dcb5e15d", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/genericrxeb.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/genericrxeb.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/genericrxeb", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "genericrxed", "family_name": "Genericrxed", "category": "ransomware", "rule_id": "65b694ef-a829-5136-8518-2709eaf2c1e6", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/genericrxed.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/genericrxed.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/genericrxed", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "genericrxef", "family_name": "Genericrxef", "category": "ransomware", "rule_id": "a00de18d-33fc-5305-b441-4118a16abede", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/genericrxef.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/genericrxef.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/genericrxef", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "genericrxeh", "family_name": "Genericrxeh", "category": "ransomware", "rule_id": "4f0c234a-cb45-5cb3-be97-12fee8ec4010", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/genericrxeh.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/genericrxeh.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/genericrxeh", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "genericrxel", "family_name": "Genericrxel", "category": "ransomware", "rule_id": "bde79e46-3090-556b-b354-7ac1a5000caa", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/genericrxel.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/genericrxel.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/genericrxel", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "genericrxet", "family_name": "Genericrxet", "category": "ransomware", "rule_id": "44197916-b55f-5c5a-a185-6739fac73c82", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/genericrxet.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/genericrxet.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/genericrxet", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "genericrxex", "family_name": "Genericrxex", "category": "ransomware", "rule_id": "798e06e3-cd50-5ced-8729-682dcd7a808b", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/genericrxex.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/genericrxex.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/genericrxex", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "genericrxfe", "family_name": "Genericrxfe", "category": "ransomware", "rule_id": "cda17619-8ab6-59c4-84af-7c7801665f2c", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/genericrxfe.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/genericrxfe.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/genericrxfe", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "genericrxfh", "family_name": "Genericrxfh", "category": "ransomware", "rule_id": "6368ad28-1769-501e-af32-f38b26d3b7f3", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/genericrxfh.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/genericrxfh.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/genericrxfh", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "genericrxfj", "family_name": "Genericrxfj", "category": "trojan", "rule_id": "7a4ace54-4be0-5b40-a067-588a08166dff", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/genericrxfj.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/genericrxfj.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/genericrxfj", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 1 }, { "family": "genericrxfo", "family_name": "Genericrxfo", "category": "ransomware", "rule_id": "eceae60a-7f63-59ae-90b9-2545f895817f", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/genericrxfo.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/genericrxfo.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/genericrxfo", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "genericrxfp", "family_name": "Genericrxfp", "category": "ransomware", "rule_id": "e127edf5-cd3f-575a-abef-32176c1dcab7", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/genericrxfp.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/genericrxfp.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/genericrxfp", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "genericrxfs", "family_name": "Genericrxfs", "category": "ransomware", "rule_id": "c7b56bd8-264a-583d-9853-0218b975dff4", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/genericrxfs.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/genericrxfs.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/genericrxfs", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "genericrxfu", "family_name": "Genericrxfu", "category": "ransomware", "rule_id": "3b3dceb7-82fd-572f-b51f-57e96faad1b2", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/genericrxfu.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/genericrxfu.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/genericrxfu", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "genericrxfy", "family_name": "Genericrxfy", "category": "trojan", "rule_id": "839ac660-b104-5936-863f-b655fc500ee3", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/genericrxfy.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/genericrxfy.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/genericrxfy", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 1 }, { "family": "genericrxge", "family_name": "Genericrxge", "category": "trojan", "rule_id": "06a71c56-e894-5393-b96f-706e37e57c47", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/genericrxge.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/genericrxge.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/genericrxge", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 1 }, { "family": "genericrxgh", "family_name": "Genericrxgh", "category": "trojan", "rule_id": "78bbd288-e5b7-5ef9-8742-54f0001e9926", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/genericrxgh.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/genericrxgh.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/genericrxgh", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 1 }, { "family": "genericrxgk", "family_name": "Genericrxgk", "category": "ransomware", "rule_id": "ac3264b2-a4c8-5e42-9ffe-6d2aa052eeca", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/genericrxgk.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/genericrxgk.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/genericrxgk", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "genericrxgq", "family_name": "Genericrxgq", "category": "ransomware", "rule_id": "f23fb69c-12ec-58a1-8575-3558b53ed919", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/genericrxgq.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/genericrxgq.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/genericrxgq", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "genericrxgr", "family_name": "Genericrxgr", "category": "ransomware", "rule_id": "5e102e55-6724-544f-9232-b91c99fced18", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/genericrxgr.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/genericrxgr.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/genericrxgr", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "geni", "family_name": "Geni", "category": "ransomware", "rule_id": "0264be26-0f81-54cc-b0d5-fadcb3cc14a1", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/geni.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/geni.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/geni", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "genkmsp", "family_name": "Genkmsp", "category": "ransomware", "rule_id": "999cd7ea-9a03-536a-8d68-8a436de02f62", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/genkmsp.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/genkmsp.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/genkmsp", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "genmaldow", "family_name": "Genmaldow", "category": "ransomware", "rule_id": "745b10b7-c810-5c2f-abef-80eb7a9e257c", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/genmaldow.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/genmaldow.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/genmaldow", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "gentromal", "family_name": "Gentromal", "category": "ransomware", "rule_id": "debf1d68-0c9c-54e4-902f-cc42409de0bf", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/gentromal.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/gentromal.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/gentromal", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "getnow", "family_name": "Getnow", "category": "ransomware", "rule_id": "e1b9e01c-b219-599c-a2da-bfa17e5a6bab", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/getnow.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/getnow.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/getnow", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "ggdoor", "family_name": "Ggdoor", "category": "trojan", "rule_id": "4b80d780-c99d-5970-a313-438857322314", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/ggdoor.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/ggdoor.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/ggdoor", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 1 }, { "family": "ghost", "family_name": "Ghost", "category": "rat", "rule_id": "fe8b72b6-06cd-5cad-ae77-55c7ac3503b1", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/ghost.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/ghost.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/ghost", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 1 }, { "family": "gibe", "family_name": "Gibe", "category": "advanced_threat", "rule_id": "76da9159-b340-5f6a-bc25-ec1d38a53942", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/gibe.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/gibe.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/gibe", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 1 }, { "family": "giri", "family_name": "Giri", "category": "ransomware", "rule_id": "32b05520-6da7-535d-9ca1-3a9ed50c0bc4", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/giri.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/giri.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/giri", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "globalacces", "family_name": "Globalacces", "category": "advanced_threat", "rule_id": "58e3504e-9d28-502a-ad95-505e3e1fca29", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/globalacces.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/globalacces.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/globalacces", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 1 }, { "family": "globim", "family_name": "Globim", "category": "ransomware", "rule_id": "2884d0f9-cfa2-5094-b860-e168691896a2", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/globim.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/globim.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/globim", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "glukelira", "family_name": "Glukelira", "category": "ransomware", "rule_id": "5515eebc-530d-541d-a27c-1df62462d747", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/glukelira.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/glukelira.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/glukelira", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "goldun", "family_name": "Goldun", "category": "trojan", "rule_id": "e5387f4a-7e25-5ad1-950a-ca7fbacaa278", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/goldun.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/goldun.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/goldun", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 1 }, { "family": "golem", "family_name": "Golem", "category": "ransomware", "rule_id": "118efedf-5f2c-510a-8f76-6a09839fb4c2", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/golem.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/golem.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/golem", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "goobzo", "family_name": "Goobzo", "category": "trojan", "rule_id": "554e9be5-b2b6-5b34-ae6c-747fd12b6c78", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/goobzo.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/goobzo.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/goobzo", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 1 }, { "family": "goodpic", "family_name": "Goodpic", "category": "ransomware", "rule_id": "6e6753d8-90c9-5ea8-ae9a-9edeba9187f0", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/goodpic.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/goodpic.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/goodpic", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "google", "family_name": "Google", "category": "advanced_threat", "rule_id": "6b95b07f-9e7d-5e54-b208-dc6432054a11", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/google.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/google.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/google", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 1 }, { "family": "gosys", "family_name": "Gosys", "category": "ransomware", "rule_id": "561b1649-389c-5f27-9559-5f206c1381db", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/gosys.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/gosys.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/gosys", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "gplyra", "family_name": "Gplyra", "category": "ransomware", "rule_id": "60a528ae-d03a-5a4a-9716-f6edac759ac0", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/gplyra.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/gplyra.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/gplyra", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "gpukj", "family_name": "Gpukj", "category": "ransomware", "rule_id": "bc252dd5-4f31-5212-a487-65bfe0f9fa7a", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/gpukj.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/gpukj.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/gpukj", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "gracewire", "family_name": "Gracewire", "category": "ransomware", "rule_id": "761593df-fbf3-5875-81a9-85c74c4ff0d0", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/gracewire.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/gracewire.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/gracewire", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "grandcrap", "family_name": "Grandcrap", "category": "ransomware", "rule_id": "15a47453-bc79-54f6-8947-e428af672415", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/grandcrap.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/grandcrap.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/grandcrap", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "graybird", "family_name": "Graybird", "category": "ransomware", "rule_id": "85b7dfb8-ce32-515d-9c41-2f858b96263f", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/graybird.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/graybird.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/graybird", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "graz", "family_name": "Graz", "category": "ransomware", "rule_id": "f1722a06-6f79-5f5b-aba1-851249641be5", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/graz.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/graz.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/graz", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "gruel", "family_name": "Gruel", "category": "advanced_threat", "rule_id": "289057ce-f30e-5456-8705-cf304a41c0a4", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/gruel.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/gruel.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/gruel", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 1 }, { "family": "gtbot", "family_name": "Gtbot", "category": "trojan", "rule_id": "f53a13ac-0e54-5de8-b745-d1a9b0b7952c", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/gtbot.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/gtbot.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/gtbot", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 1 }, { "family": "gupd", "family_name": "Gupd", "category": "ransomware", "rule_id": "e1240297-3bae-5d67-a5cc-ae3d34af6b57", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/gupd.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/gupd.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/gupd", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "hacdef", "family_name": "Hacdef", "category": "backdoor", "rule_id": "8011bd92-b23a-5883-b80f-78df101f2a61", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/hacdef.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/hacdef.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/hacdef", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 1 }, { "family": "haed", "family_name": "Haed", "category": "ransomware", "rule_id": "161cba6d-888f-5039-b43d-1b214aff1190", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/haed.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/haed.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/haed", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "haknata", "family_name": "Haknata", "category": "ransomware", "rule_id": "fbe02742-4bef-5349-bc06-3d6a25d29fb9", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/haknata.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/haknata.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/haknata", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "hakopsbot", "family_name": "Hakopsbot", "category": "advanced_threat", "rule_id": "19431f76-3625-5249-add1-5a294ff9371d", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/hakopsbot.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/hakopsbot.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/hakopsbot", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 1 }, { "family": "hamaetot", "family_name": "Hamaetot", "category": "ransomware", "rule_id": "fcbaa2ef-de90-5241-9f79-bf488b2595f3", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/hamaetot.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/hamaetot.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/hamaetot", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "hamer", "family_name": "Hamer", "category": "ransomware", "rule_id": "0993b517-1679-551b-aee9-952f6b70905d", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/hamer.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/hamer.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/hamer", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "hamweq", "family_name": "Hamweq", "category": "ransomware", "rule_id": "ba1f0392-da75-57a4-b036-41f12420e47c", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/hamweq.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/hamweq.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/hamweq", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "hangup", "family_name": "Hangup", "category": "ransomware", "rule_id": "31dde72e-5f9d-5834-b147-022b0ecbd660", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/hangup.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/hangup.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/hangup", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "happy", "family_name": "Happy", "category": "ransomware", "rule_id": "99bff614-2185-5c25-ad56-3c9ba35ae406", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/happy.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/happy.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/happy", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "harvester", "family_name": "Harvester", "category": "trojan", "rule_id": "b513638f-c108-509f-b70a-f32a927061b5", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/harvester.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/harvester.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/harvester", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 1 }, { "family": "hc4cakjs5bhi", "family_name": "Hc4cakjs5bhi", "category": "ransomware", "rule_id": "67deca0b-01b5-5f69-a74a-786843d23f01", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/hc4cakjs5bhi.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/hc4cakjs5bhi.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/hc4cakjs5bhi", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "headache", "family_name": "Headache", "category": "ransomware", "rule_id": "03233291-6161-5b99-aa3e-1c2a2bd1adc6", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/headache.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/headache.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/headache", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "helper", "family_name": "Helper", "category": "advanced_threat", "rule_id": "5921daef-adf7-595e-91e1-1432fb4aa1c5", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/helper.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/helper.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/helper", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 1 }, { "family": "heriplor", "family_name": "Heriplor", "category": "ransomware", "rule_id": "c7680705-e288-56b8-bcf1-1422f0773b60", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/heriplor.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/heriplor.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/heriplor", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "hexloader", "family_name": "Hexloader", "category": "ransomware", "rule_id": "761630c5-a0ee-51d0-b68a-b2bc68124b2f", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/hexloader.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/hexloader.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/hexloader", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "hexzone", "family_name": "Hexzone", "category": "ransomware", "rule_id": "5734cf5f-8435-5d7b-9e32-8ab04f5b6a31", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/hexzone.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/hexzone.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/hexzone", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "hezhi", "family_name": "Hezhi", "category": "ransomware", "rule_id": "adf0a426-9139-5bef-a496-70416dc8c84b", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/hezhi.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/hezhi.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/hezhi", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "hg8absxocmcj", "family_name": "Hg8absxocmcj", "category": "ransomware", "rule_id": "d93146a3-d60d-5643-8bec-bff4c2aa6607", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/hg8absxocmcj.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/hg8absxocmcj.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/hg8absxocmcj", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "hidcon", "family_name": "Hidcon", "category": "ransomware", "rule_id": "557fddf1-e444-517c-83d1-eb659b05bf26", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/hidcon.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/hidcon.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/hidcon", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "himera", "family_name": "Himera", "category": "backdoor", "rule_id": "3c198df4-0ed3-5eda-ac77-8a2c38246c7f", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/himera.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/himera.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/himera", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 1 }, { "family": "hioles", "family_name": "Hioles", "category": "ransomware", "rule_id": "79c4e20e-4d45-5390-9066-73db3994e53a", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/hioles.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/hioles.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/hioles", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "hkautoit", "family_name": "Hkautoit", "category": "trojan", "rule_id": "725db313-1640-5885-8a91-3cacc2715e5d", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/hkautoit.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/hkautoit.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/hkautoit", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 1 }, { "family": "hkmain", "family_name": "Hkmain", "category": "ransomware", "rule_id": "a3edfd52-eeb8-55c9-952e-275f9ad37f20", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/hkmain.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/hkmain.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/hkmain", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "hmgfa45id4o", "family_name": "Hmgfa45id4o", "category": "trojan", "rule_id": "866bd180-dce5-5dd6-9d20-26dda3241a89", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/hmgfa45id4o.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/hmgfa45id4o.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/hmgfa45id4o", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 1 }, { "family": "hokobot", "family_name": "Hokobot", "category": "ransomware", "rule_id": "9c0da0b2-b4c2-52eb-854d-201a951defae", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/hokobot.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/hokobot.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/hokobot", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "honk", "family_name": "Honk", "category": "ransomware", "rule_id": "63713fd8-e1dd-54df-9f58-59a5f37ee978", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/honk.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/honk.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/honk", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "hooker", "family_name": "Hooker", "category": "trojan", "rule_id": "90f5dab2-1add-5ac8-b1b6-79672b7dd386", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/hooker.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/hooker.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/hooker", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 1 }, { "family": "hookmoot", "family_name": "Hookmoot", "category": "ransomware", "rule_id": "add5c5c5-0225-563a-937b-e49a4cf7a5ec", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/hookmoot.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/hookmoot.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/hookmoot", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "hostseditor", "family_name": "Hostseditor", "category": "trojan", "rule_id": "a7b566f5-9aee-5f2e-a203-ce68f4e656eb", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/hostseditor.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/hostseditor.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/hostseditor", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 1 }, { "family": "hpfareit", "family_name": "Hpfareit", "category": "ransomware", "rule_id": "60b649a7-81ae-509f-87c9-e5ba12d91c09", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/hpfareit.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/hpfareit.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/hpfareit", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "hptrickbot", "family_name": "Hptrickbot", "category": "ransomware", "rule_id": "c7f4f0cb-6c50-553b-ac11-9fca33e0b949", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/hptrickbot.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/hptrickbot.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/hptrickbot", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "hpursnif", "family_name": "Hpursnif", "category": "trojan", "rule_id": "7b24d4ae-69e2-517a-8b26-d34e6173680a", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/hpursnif.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/hpursnif.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/hpursnif", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 1 }, { "family": "hqsi", "family_name": "Hqsi", "category": "ransomware", "rule_id": "70e2d9a5-5cdd-5bb1-8e57-2d42056ba0fb", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/hqsi.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/hqsi.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/hqsi", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "httpbot", "family_name": "Httpbot", "category": "ransomware", "rule_id": "baba183b-b214-50f9-a3c5-2364043bd3dd", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/httpbot.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/httpbot.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/httpbot", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "hyperbro", "family_name": "Hyperbro", "category": "trojan", "rule_id": "152dd4dd-678f-5bba-9265-c58e91f09ba9", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/hyperbro.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/hyperbro.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/hyperbro", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 1 }, { "family": "iczu", "family_name": "Iczu", "category": "ransomware", "rule_id": "e96d0138-c216-50b1-b956-b337ed88dd31", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/iczu.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/iczu.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/iczu", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "ident", "family_name": "Ident", "category": "ransomware", "rule_id": "bd0e4d2f-ff73-572d-9f61-350985e90cc9", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/ident.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/ident.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/ident", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "idlecrawler", "family_name": "Idlecrawler", "category": "advanced_threat", "rule_id": "0ba90a7b-8145-5e8c-9021-d2295093aa01", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/idlecrawler.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/idlecrawler.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/idlecrawler", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 1 }, { "family": "iespy", "family_name": "Iespy", "category": "advanced_threat", "rule_id": "be780185-f962-5a45-ac33-dc582fd74c22", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/iespy.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/iespy.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/iespy", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 1 }, { "family": "iezones", "family_name": "Iezones", "category": "trojan", "rule_id": "a6b7ad4b-8c6a-5efe-8b80-201a2af41859", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/iezones.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/iezones.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/iezones", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 1 }, { "family": "imaut", "family_name": "Imaut", "category": "ransomware", "rule_id": "107f4b29-86fc-5f25-9373-1dd7d529dcf4", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/imaut.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/imaut.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/imaut", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "imps", "family_name": "Imps", "category": "ransomware", "rule_id": "eab10c5b-d124-50b4-ad36-baa106f1969c", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/imps.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/imps.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/imps", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "imqaaem1agai", "family_name": "Imqaaem1agai", "category": "trojan", "rule_id": "f0eb2237-8f2c-53de-bd44-67ee535ca9da", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/imqaaem1agai.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/imqaaem1agai.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/imqaaem1agai", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 1 }, { "family": "indigorose", "family_name": "Indigorose", "category": "trojan", "rule_id": "eafbe69e-e3ac-53c8-b9a0-3b16b9e047c3", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/indigorose.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/indigorose.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/indigorose", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 1 }, { "family": "inexsmar", "family_name": "Inexsmar", "category": "trojan", "rule_id": "c9e2b5fd-cc2e-56b1-b66c-75502d0de008", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/inexsmar.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/inexsmar.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/inexsmar", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 1 }, { "family": "infinitetear", "family_name": "Infinitetear", "category": "trojan", "rule_id": "666e63eb-6d32-5cd7-9610-80ceea98cf66", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/infinitetear.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/infinitetear.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/infinitetear", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 1 }, { "family": "injeber", "family_name": "Injeber", "category": "trojan", "rule_id": "87aae616-bede-5012-8f8c-75f2e5b551a0", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/injeber.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/injeber.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/injeber", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 1 }, { "family": "innomod", "family_name": "Innomod", "category": "ransomware", "rule_id": "4af74092-ca8c-5b53-881c-04b3c267ae3d", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/innomod.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/innomod.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/innomod", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "inor", "family_name": "Inor", "category": "ransomware", "rule_id": "9c79383b-bfba-50cb-88a7-376d72443c94", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/inor.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/inor.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/inor", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "inrogatio", "family_name": "Inrogatio", "category": "ransomware", "rule_id": "b9ab7a43-614d-57d9-9fb1-66c27d4a16ab", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/inrogatio.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/inrogatio.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/inrogatio", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "insebro", "family_name": "Insebro", "category": "ransomware", "rule_id": "0df0287e-7557-524f-bbf3-953be7461221", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/insebro.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/insebro.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/insebro", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "installbar", "family_name": "Installbar", "category": "ransomware", "rule_id": "c2203b6e-7ed8-5a7a-9b2d-aec5e1bf0c35", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/installbar.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/installbar.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/installbar", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "istartsurfinstaller", "family_name": "Istartsurfinstaller", "category": "advanced_threat", "rule_id": "7b63557e-ccb9-5f75-a50a-e2661c6edd10", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/istartsurfinstaller.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/istartsurfinstaller.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/istartsurfinstaller", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 1 }, { "family": "istbar", "family_name": "Istbar", "category": "advanced_threat", "rule_id": "6df80cb1-2796-5f23-8325-23edc3944171", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/istbar.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/istbar.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/istbar", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 1 }, { "family": "iwin", "family_name": "Iwin", "category": "advanced_threat", "rule_id": "446a0ee6-40e6-59dc-895a-ea1ee7b036e0", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/iwin.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/iwin.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/iwin", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 1 }, { "family": "jakuz", "family_name": "Jakuz", "category": "ransomware", "rule_id": "ea334714-2b72-5e61-9813-e06eeadb6a08", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/jakuz.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/jakuz.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/jakuz", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "jakyllhyde", "family_name": "Jakyllhyde", "category": "ransomware", "rule_id": "cf7d0cd2-e0d8-5fee-8f80-c7bba9b263e4", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/jakyllhyde.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/jakyllhyde.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/jakyllhyde", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "jatif", "family_name": "Jatif", "category": "ransomware", "rule_id": "6d5abd41-e03a-5dcc-b1ac-3a3736779631", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/jatif.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/jatif.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/jatif", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "jevafus", "family_name": "Jevafus", "category": "ransomware", "rule_id": "b2e186ae-d431-589d-bd07-dc054a3e5fbf", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/jevafus.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/jevafus.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/jevafus", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "jhee", "family_name": "Jhee", "category": "ransomware", "rule_id": "286a4794-8be1-518a-a635-5d979ea45c80", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/jhee.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/jhee.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/jhee", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "jinda", "family_name": "Jinda", "category": "ransomware", "rule_id": "0e297fa6-1c0d-5212-b030-efa5d38ec79f", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/jinda.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/jinda.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/jinda", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "jnkfasgyvyo", "family_name": "Jnkfasgyvyo", "category": "ransomware", "rule_id": "caae3848-de28-5b18-884e-e47f402e67eb", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/jnkfasgyvyo.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/jnkfasgyvyo.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/jnkfasgyvyo", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "jo0br8hglsii", "family_name": "Jo0br8hglsii", "category": "ransomware", "rule_id": "625c47ec-8b7d-5f69-8d73-7333852543be", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/jo0br8hglsii.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/jo0br8hglsii.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/jo0br8hglsii", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "jobcrypter", "family_name": "Jobcrypter", "category": "ransomware", "rule_id": "5e2e27dd-0fcb-5344-a47d-9317a601d4d3", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/jobcrypter.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/jobcrypter.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/jobcrypter", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "jscriptwrap", "family_name": "Jscriptwrap", "category": "ransomware", "rule_id": "727dc719-74c5-5f17-85e8-38c0ee01f254", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/jscriptwrap.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/jscriptwrap.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/jscriptwrap", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "juicypotato", "family_name": "Juicypotato", "category": "trojan", "rule_id": "65b5b917-91f3-5717-b6c3-47b17c31b3e4", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/juicypotato.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/juicypotato.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/juicypotato", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 1 }, { "family": "juntador", "family_name": "Juntador", "category": "trojan", "rule_id": "00b3d64a-0d03-5ed7-8046-8183bd739737", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/juntador.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/juntador.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/juntador", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 1 }, { "family": "jusabli", "family_name": "Jusabli", "category": "ransomware", "rule_id": "cb21f470-e5f7-535b-8b6a-90eaf7ac422a", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/jusabli.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/jusabli.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/jusabli", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "kabymj", "family_name": "Kabymj", "category": "ransomware", "rule_id": "ca799f69-ded3-5e4c-8335-6684a757d91f", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/kabymj.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/kabymj.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/kabymj", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "karagany", "family_name": "Karagany", "category": "trojan", "rule_id": "6d8621fd-63b0-5f9c-b7e2-4ef776eca632", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/karagany.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/karagany.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/karagany", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 1 }, { "family": "karamanak", "family_name": "Karamanak", "category": "trojan", "rule_id": "91fc6bcb-0b75-579c-bf1c-4469824b0587", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/karamanak.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/karamanak.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/karamanak", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 1 }, { "family": "karius", "family_name": "Karius", "category": "ransomware", "rule_id": "d95f6def-c9dd-53a1-974d-021e05cc8de9", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/karius.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/karius.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/karius", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "kastenl", "family_name": "Kastenl", "category": "ransomware", "rule_id": "c520f085-dd1a-551e-9220-078b1d6b6e4a", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/kastenl.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/kastenl.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/kastenl", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "kavos", "family_name": "Kavos", "category": "ransomware", "rule_id": "6afea969-043b-5e37-84e2-a2f8e78e5cc6", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/kavos.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/kavos.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/kavos", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "kazus", "family_name": "Kazus", "category": "ransomware", "rule_id": "74469244-e2e4-5041-a372-fe52649c1ab1", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/kazus.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/kazus.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/kazus", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "keenm", "family_name": "Keenm", "category": "ransomware", "rule_id": "c43ab714-c837-54c5-a16d-528a34a818fb", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/keenm.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/keenm.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/keenm", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "kelvir", "family_name": "Kelvir", "category": "trojan", "rule_id": "cefa3c5a-724a-5706-8290-f76a5415c2c3", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/kelvir.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/kelvir.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/kelvir", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 1 }, { "family": "keyboarddisable", "family_name": "Keyboarddisable", "category": "ransomware", "rule_id": "8040e349-e91b-5653-84eb-4df0f1ffaea9", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/keyboarddisable.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/keyboarddisable.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/keyboarddisable", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "keydoor", "family_name": "Keydoor", "category": "backdoor", "rule_id": "8ea0056d-a998-595a-ae5c-5bc50170ed31", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/keydoor.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/keydoor.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/keydoor", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 1 }, { "family": "keydownload", "family_name": "Keydownload", "category": "ransomware", "rule_id": "e5eabebd-5bb5-5b0b-8696-d15c17733b23", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/keydownload.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/keydownload.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/keydownload", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "keyer", "family_name": "Keyer", "category": "advanced_threat", "rule_id": "18da94bf-e5aa-5008-a1a4-81b0b375d68e", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/keyer.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/keyer.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/keyer", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 1 }, { "family": "keylogr", "family_name": "Keylogr", "category": "trojan", "rule_id": "069cdb76-caf7-53e1-8606-69cbec962692", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/keylogr.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/keylogr.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/keylogr", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 1 }, { "family": "kgbspy", "family_name": "Kgbspy", "category": "advanced_threat", "rule_id": "093dd1b3-0270-560f-87b8-1254328ae935", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/kgbspy.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/kgbspy.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/kgbspy", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 1 }, { "family": "kgen", "family_name": "Kgen", "category": "ransomware", "rule_id": "caa4bd9d-6719-5355-82f5-ddc9903baff9", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/kgen.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/kgen.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/kgen", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "kheagol", "family_name": "Kheagol", "category": "ransomware", "rule_id": "8489a079-ed71-57cc-ab14-03db7f2313f2", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/kheagol.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/kheagol.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/kheagol", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "killall", "family_name": "Killall", "category": "ransomware", "rule_id": "4e6d9b99-8f13-5325-8713-89551575bc01", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/killall.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/killall.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/killall", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "killapp", "family_name": "Killapp", "category": "ransomware", "rule_id": "3a866414-1d5b-59b2-8fb8-624832bcf9db", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/killapp.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/killapp.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/killapp", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "killdisk", "family_name": "Killdisk", "category": "wiper", "rule_id": "43c03822-da40-5d87-a408-79a8c5b47db9", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/killdisk.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/killdisk.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/killdisk", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/wiper-destructive-protection", "sample_count": 1 }, { "family": "killmbr", "family_name": "Killmbr", "category": "ransomware", "rule_id": "8b65b609-3c8c-5243-a14e-c191141130bf", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/killmbr.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/killmbr.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/killmbr", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "killnotes", "family_name": "Killnotes", "category": "ransomware", "rule_id": "ff08b79d-5e17-55dc-b688-6d3188077264", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/killnotes.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/killnotes.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/killnotes", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "killwin", "family_name": "Killwin", "category": "ransomware", "rule_id": "c8f2478e-2e19-53c9-b8ac-a3efe7ba7477", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/killwin.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/killwin.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/killwin", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "kiser", "family_name": "Kiser", "category": "ransomware", "rule_id": "65e21081-91cc-5229-b4d8-bce72ef0646c", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/kiser.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/kiser.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/kiser", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "kjwar5ju8ibgb", "family_name": "Kjwar5ju8ibgb", "category": "trojan", "rule_id": "e3387bb1-73e0-52e5-8885-8e83efd5ec42", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/kjwar5ju8ibgb.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/kjwar5ju8ibgb.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/kjwar5ju8ibgb", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 1 }, { "family": "klozet", "family_name": "Klozet", "category": "ransomware", "rule_id": "203ddd8f-62c6-584d-9cf6-531cf4356f17", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/klozet.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/klozet.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/klozet", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "kmsactivator", "family_name": "Kmsactivator", "category": "ransomware", "rule_id": "acdd16d3-ae01-50f1-b8d1-9cb5c10ae201", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/kmsactivator.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/kmsactivator.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/kmsactivator", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "kmuaaovs", "family_name": "Kmuaaovs", "category": "ransomware", "rule_id": "0a08ad22-2359-55ad-b290-9fd7c3505492", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/kmuaaovs.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/kmuaaovs.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/kmuaaovs", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "komilet", "family_name": "Komilet", "category": "ransomware", "rule_id": "d852b8e0-a3e2-5526-8e7f-8b3d26784eba", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/komilet.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/komilet.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/komilet", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "konni", "family_name": "Konni", "category": "trojan", "rule_id": "cae796f9-d036-5302-b7d2-ced2f426fd9f", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/konni.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/konni.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/konni", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 1 }, { "family": "korad", "family_name": "Korad", "category": "ransomware", "rule_id": "d773f5b1-bcdc-54be-8521-b69bac4c61b2", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/korad.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/korad.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/korad", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "krachulka", "family_name": "Krachulka", "category": "ransomware", "rule_id": "10af2222-b1c8-5f94-93b8-caa5005a8dc6", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/krachulka.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/krachulka.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/krachulka", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "kradword", "family_name": "Kradword", "category": "ransomware", "rule_id": "1bec4afc-c315-523e-863a-f3ede5be96d8", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/kradword.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/kradword.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/kradword", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "kraken", "family_name": "Kraken", "category": "ransomware", "rule_id": "b278b3d2-5687-53f6-8cca-8cfb8dcbaf99", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/kraken.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/kraken.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/kraken", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "krakencryptor", "family_name": "Krakencryptor", "category": "ransomware", "rule_id": "bd0cc277-6501-5787-8a1c-62432f696751", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/krakencryptor.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/krakencryptor.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/krakencryptor", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "krament", "family_name": "Krament", "category": "ransomware", "rule_id": "52a3d9c2-90b2-59a8-839d-cfa6475b2b58", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/krament.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/krament.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/krament", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "kranet", "family_name": "Kranet", "category": "trojan", "rule_id": "23588654-1097-5b46-90f5-cbdc2c5522cb", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/kranet.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/kranet.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/kranet", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 1 }, { "family": "krdr", "family_name": "Krdr", "category": "ransomware", "rule_id": "9e37ad08-64fb-5902-b422-766575aac9d5", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/krdr.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/krdr.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/krdr", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "krilog", "family_name": "Krilog", "category": "trojan", "rule_id": "360bc215-c5ac-5942-add3-3dfa34d5ae8f", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/krilog.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/krilog.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/krilog", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 1 }, { "family": "kryptpck", "family_name": "Kryptpck", "category": "ransomware", "rule_id": "e44ea3dc-1bd2-53bb-a219-9933e64cf060", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/kryptpck.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/kryptpck.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/kryptpck", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "kryptstarter", "family_name": "Kryptstarter", "category": "ransomware", "rule_id": "11abb90e-d92a-55c4-b25d-77f9b2b56bf4", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/kryptstarter.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/kryptstarter.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/kryptstarter", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "kryptyk", "family_name": "Kryptyk", "category": "ransomware", "rule_id": "f361c0ef-e031-5c66-8d90-4d5e1d0ea908", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/kryptyk.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/kryptyk.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/kryptyk", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "kura", "family_name": "Kura", "category": "trojan", "rule_id": "c1bc1b70-a1f8-5846-b945-5a33492a351f", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/kura.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/kura.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/kura", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 1 }, { "family": "kykymber", "family_name": "Kykymber", "category": "ransomware", "rule_id": "4229dd53-dd05-5f45-9a4c-c920acc81dca", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/kykymber.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/kykymber.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/kykymber", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "kz4aamkfbloj", "family_name": "Kz4aamkfbloj", "category": "ransomware", "rule_id": "86fc2f12-2d0a-5574-b4c8-3f410c37d612", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/kz4aamkfbloj.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/kz4aamkfbloj.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/kz4aamkfbloj", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "lanxue", "family_name": "Lanxue", "category": "ransomware", "rule_id": "d41cec2d-ac3a-5003-8222-1bdd5b6875b7", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/lanxue.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/lanxue.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/lanxue", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "ledruppi", "family_name": "Ledruppi", "category": "ransomware", "rule_id": "ee380bad-a141-5ab6-9e64-3a4762a90022", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/ledruppi.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/ledruppi.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/ledruppi", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "lemoore", "family_name": "Lemoore", "category": "ransomware", "rule_id": "8b9538d3-180a-58f4-b85d-07f6c70688cd", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/lemoore.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/lemoore.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/lemoore", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "leopard", "family_name": "Leopard", "category": "ransomware", "rule_id": "9dc836f3-cc7d-5926-804d-a8232f82deea", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/leopard.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/leopard.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/leopard", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "libie", "family_name": "Libie", "category": "ransomware", "rule_id": "65ebc0f2-5f0e-58b6-94b4-b2f16ed47722", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/libie.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/libie.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/libie", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "libsam", "family_name": "Libsam", "category": "advanced_threat", "rule_id": "2bbfa51b-33fc-502d-a210-530816d37893", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/libsam.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/libsam.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/libsam", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 1 }, { "family": "lightmoon", "family_name": "Lightmoon", "category": "ransomware", "rule_id": "7f3a3b22-8f15-5d7a-9e14-1202bca7b67e", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/lightmoon.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/lightmoon.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/lightmoon", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "liimpact", "family_name": "Liimpact", "category": "ransomware", "rule_id": "7eb1f949-6bcd-5056-9b00-65ff00695d48", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/liimpact.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/liimpact.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/liimpact", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "linkhortry", "family_name": "Linkhortry", "category": "ransomware", "rule_id": "08214639-2f48-5e4b-a637-c39c3eec7e71", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/linkhortry.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/linkhortry.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/linkhortry", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "litmus", "family_name": "Litmus", "category": "ransomware", "rule_id": "0b46c209-c594-51e4-8cd4-bc86a87c126e", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/litmus.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/litmus.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/litmus", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "liudoor", "family_name": "Liudoor", "category": "ransomware", "rule_id": "90421dfc-6671-586f-bc48-051f74729afc", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/liudoor.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/liudoor.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/liudoor", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "liusky", "family_name": "Liusky", "category": "ransomware", "rule_id": "516103ff-ef65-5fd8-86cb-785fdb3ad530", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/liusky.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/liusky.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/liusky", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "lixeaqbyzsj", "family_name": "Lixeaqbyzsj", "category": "ransomware", "rule_id": "eba8e469-229b-5325-806e-e4bd73da8942", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/lixeaqbyzsj.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/lixeaqbyzsj.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/lixeaqbyzsj", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "lmkfrhivlcfba", "family_name": "Lmkfrhivlcfba", "category": "trojan", "rule_id": "ec24253b-86bd-5232-9761-9f1942c32f9e", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/lmkfrhivlcfba.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/lmkfrhivlcfba.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/lmkfrhivlcfba", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 1 }, { "family": "lockpos", "family_name": "Lockpos", "category": "trojan", "rule_id": "1a6c804e-0619-5ffb-a837-ad847593092d", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/lockpos.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/lockpos.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/lockpos", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 1 }, { "family": "lockyc", "family_name": "Lockyc", "category": "ransomware", "rule_id": "1dec913e-5bc6-5f5d-b790-70f19e14120e", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/lockyc.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/lockyc.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/lockyc", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "logicielsespions", "family_name": "Logicielsespions", "category": "advanced_threat", "rule_id": "773bc26e-d1ed-5a1e-8a7f-48178fbeff6f", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/logicielsespions.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/logicielsespions.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/logicielsespions", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 1 }, { "family": "look2me", "family_name": "Look2me", "category": "trojan", "rule_id": "3474a763-9cd7-599f-8a7b-31c5f9e3a150", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/look2me.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/look2me.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/look2me", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 1 }, { "family": "loops", "family_name": "Loops", "category": "ransomware", "rule_id": "f081a1d8-7b45-5d10-a588-95c62cec33cf", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/loops.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/loops.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/loops", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "loring", "family_name": "Loring", "category": "ransomware", "rule_id": "687c4aa2-ec38-5e1a-a024-21d07cb8432c", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/loring.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/loring.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/loring", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "losabel", "family_name": "Losabel", "category": "ransomware", "rule_id": "8aca8a3c-0172-5720-ad09-1b4ce42387b9", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/losabel.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/losabel.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/losabel", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "loveletter", "family_name": "Loveletter", "category": "ransomware", "rule_id": "a7ed52be-b7a9-5cb5-8125-4efd9fb297f4", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/loveletter.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/loveletter.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/loveletter", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "lowzones", "family_name": "Lowzones", "category": "ransomware", "rule_id": "811eb029-5f7b-56dc-a5be-79677d029cf3", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/lowzones.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/lowzones.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/lowzones", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "loyeetro", "family_name": "Loyeetro", "category": "ransomware", "rule_id": "45bbdfa4-7560-5afd-b403-262af7bad938", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/loyeetro.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/loyeetro.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/loyeetro", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "lozer", "family_name": "Lozer", "category": "ransomware", "rule_id": "f48f897e-a72e-586e-bf32-ae34c0ed4ada", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/lozer.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/lozer.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/lozer", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "lpt8mkfbyfsjgnkb", "family_name": "Lpt8mkfbyfsjgnkb", "category": "ransomware", "rule_id": "326926ff-1f14-57b4-a509-2547a33ad128", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/lpt8mkfbyfsjgnkb.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/lpt8mkfbyfsjgnkb.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/lpt8mkfbyfsjgnkb", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "lucky", "family_name": "Lucky", "category": "ransomware", "rule_id": "1f777e50-c270-53cf-aeec-99d9f9274ea5", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/lucky.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/lucky.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/lucky", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "luhn", "family_name": "Luhn", "category": "trojan", "rule_id": "0f93d85f-8e82-590e-82dc-143bf9bc5e28", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/luhn.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/luhn.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/luhn", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 1 }, { "family": "luminorat", "family_name": "Luminorat", "category": "trojan", "rule_id": "ec5f75d0-6c84-5c96-b04d-2c1dd1e53f4f", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/luminorat.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/luminorat.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/luminorat", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 1 }, { "family": "luna", "family_name": "Luna", "category": "ransomware", "rule_id": "f79dbf57-72f4-51a4-9c09-f13bab86f14a", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/luna.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/luna.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/luna", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "lurk", "family_name": "Lurk", "category": "ransomware", "rule_id": "5c649453-9673-522c-91ab-09bf460dc7d1", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/lurk.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/lurk.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/lurk", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "lyckriks", "family_name": "Lyckriks", "category": "ransomware", "rule_id": "d3e482af-7783-55d0-b18c-7632c06712d6", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/lyckriks.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/lyckriks.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/lyckriks", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "lyrics", "family_name": "Lyrics", "category": "ransomware", "rule_id": "0fe695c7-768d-51f4-8f42-81253a513d9a", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/lyrics.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/lyrics.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/lyrics", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "machaer", "family_name": "Machaer", "category": "ransomware", "rule_id": "768337fc-dcdf-5f6a-bea5-3964757de034", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/machaer.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/machaer.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/machaer", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "magic", "family_name": "Magic", "category": "ransomware", "rule_id": "b97ec8ad-5ac2-59ac-84e4-1d87ceab647d", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/magic.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/magic.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/magic", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "magistrcorr", "family_name": "Magistrcorr", "category": "advanced_threat", "rule_id": "d94e2f16-0136-5ea7-bbe9-13a921510e46", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/magistrcorr.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/magistrcorr.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/magistrcorr", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 1 }, { "family": "magnat", "family_name": "Magnat", "category": "ransomware", "rule_id": "971df7f0-c0c0-5b40-978b-6670a624c604", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/magnat.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/magnat.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/magnat", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "magni", "family_name": "Magni", "category": "ransomware", "rule_id": "40d0307a-c114-58a6-b95f-9f8fd15b29b9", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/magni.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/magni.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/magni", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "mailbot", "family_name": "Mailbot", "category": "ransomware", "rule_id": "60b869e5-2404-576f-a078-012365e0304f", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/mailbot.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/mailbot.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/mailbot", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "mailcheck", "family_name": "Mailcheck", "category": "trojan", "rule_id": "6749e6f2-2546-5eb9-82cb-4057ccc68535", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/mailcheck.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/mailcheck.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/mailcheck", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 1 }, { "family": "mailpassview", "family_name": "Mailpassview", "category": "ransomware", "rule_id": "09fc569f-2d20-5868-8c41-bff7eaeb3414", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/mailpassview.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/mailpassview.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/mailpassview", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "mailspy", "family_name": "Mailspy", "category": "trojan", "rule_id": "fc6d5cfe-a5c7-5d3c-b51c-34587cf7b75e", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/mailspy.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/mailspy.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/mailspy", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 1 }, { "family": "malkryp", "family_name": "Malkryp", "category": "ransomware", "rule_id": "836f121f-4cf0-5dc4-b684-9247177e3f4d", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/malkryp.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/malkryp.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/malkryp", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "malmaker", "family_name": "Malmaker", "category": "ransomware", "rule_id": "13fd9893-3b1e-5ddb-8859-146536ebdeb9", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/malmaker.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/malmaker.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/malmaker", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "malwar", "family_name": "Malwar", "category": "ransomware", "rule_id": "78632f30-8c94-5a49-b546-1a0068ff8df7", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/malwar.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/malwar.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/malwar", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "malxmr", "family_name": "Malxmr", "category": "advanced_threat", "rule_id": "564e9474-d54b-5d00-b63e-972c29d27b3f", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/malxmr.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/malxmr.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/malxmr", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 1 }, { "family": "mamianune", "family_name": "Mamianune", "category": "ransomware", "rule_id": "bd74279b-36c3-51f0-b98a-6218cafad9af", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/mamianune.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/mamianune.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/mamianune", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "maplestory", "family_name": "Maplestory", "category": "trojan", "rule_id": "94b35fb1-e641-5bb5-97a1-c653be6ac50e", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/maplestory.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/maplestory.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/maplestory", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 1 }, { "family": "mapstosteal", "family_name": "Mapstosteal", "category": "trojan", "rule_id": "154dd803-61f2-54f0-8ec0-4a34ad2cfbf1", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/mapstosteal.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/mapstosteal.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/mapstosteal", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 1 }, { "family": "maxsecure", "family_name": "Maxsecure", "category": "ransomware", "rule_id": "a62a3d60-842a-5bf4-9946-07c5ad249749", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/maxsecure.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/maxsecure.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/maxsecure", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "medialabs", "family_name": "Medialabs", "category": "ransomware", "rule_id": "1f41d633-ee1e-5e79-9d8a-a82025b2fc38", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/medialabs.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/medialabs.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/medialabs", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "mediamine", "family_name": "Mediamine", "category": "ransomware", "rule_id": "6b34cfc6-ff9f-5557-a546-f96979ad53fb", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/mediamine.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/mediamine.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/mediamine", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "mediana", "family_name": "Mediana", "category": "advanced_threat", "rule_id": "25301ad2-4ae5-5183-bffc-9e47aedee501", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/mediana.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/mediana.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/mediana", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 1 }, { "family": "meikehuayi", "family_name": "Meikehuayi", "category": "ransomware", "rule_id": "8781d3fd-39d5-5b53-8300-20f9df9c6236", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/meikehuayi.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/meikehuayi.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/meikehuayi", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "meinhudong", "family_name": "Meinhudong", "category": "ransomware", "rule_id": "988571bc-ba6e-5a74-b589-4f9810bbd79d", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/meinhudong.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/meinhudong.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/meinhudong", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "meinv", "family_name": "Meinv", "category": "ransomware", "rule_id": "60c9b71d-e752-5e0c-b5d9-2eab12e03114", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/meinv.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/meinv.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/meinv", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "meno", "family_name": "Meno", "category": "ransomware", "rule_id": "4cf1148d-9ca0-5918-9978-0b82412cbd78", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/meno.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/meno.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/meno", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "messengerpass", "family_name": "Messengerpass", "category": "trojan", "rule_id": "a0f6f0ae-0687-5459-9066-e081a4fbc6b8", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/messengerpass.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/messengerpass.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/messengerpass", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 1 }, { "family": "mezzo", "family_name": "Mezzo", "category": "ransomware", "rule_id": "7a5f4206-56c4-59b3-b930-c917e8f69d90", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/mezzo.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/mezzo.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/mezzo", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "mi0ax8mhb4ji", "family_name": "Mi0ax8mhb4ji", "category": "ransomware", "rule_id": "ecb1d807-f1ba-5ddb-8b78-14f8168fc92f", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/mi0ax8mhb4ji.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/mi0ax8mhb4ji.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/mi0ax8mhb4ji", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "micronames", "family_name": "Micronames", "category": "trojan", "rule_id": "f130e064-b156-5189-b1cd-f511401b4ef7", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/micronames.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/micronames.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/micronames", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 1 }, { "family": "milicry", "family_name": "Milicry", "category": "ransomware", "rule_id": "01df30cc-b31b-51da-8491-b87930e0759b", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/milicry.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/milicry.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/milicry", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "minimal", "family_name": "Minimal", "category": "ransomware", "rule_id": "fc9a91d2-7c82-59e9-a279-6ce5935e9b50", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/minimal.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/minimal.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/minimal", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "miragefox", "family_name": "Miragefox", "category": "trojan", "rule_id": "2ba0591d-7f67-5983-b7d9-db19d2ae62bd", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/miragefox.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/miragefox.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/miragefox", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 1 }, { "family": "mirai", "family_name": "Mirai", "category": "botnet", "rule_id": "9979fa57-9fa9-5c4f-9171-942a6dc4eccf", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/mirai.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/mirai.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/mirai", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/botnet-protection", "sample_count": 1 }, { "family": "mirkov", "family_name": "Mirkov", "category": "ransomware", "rule_id": "a75d005f-1d7d-5aff-8c34-4c32ffc1291b", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/mirkov.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/mirkov.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/mirkov", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "mmnfbgfpueki", "family_name": "Mmnfbgfpueki", "category": "trojan", "rule_id": "d63c6074-6679-5fbb-b6e7-b7b5829b7c37", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/mmnfbgfpueki.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/mmnfbgfpueki.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/mmnfbgfpueki", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 1 }, { "family": "mmorpg", "family_name": "Mmorpg", "category": "trojan", "rule_id": "199326d0-cc42-5cde-915a-33ece09eaa9a", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/mmorpg.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/mmorpg.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/mmorpg", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 1 }, { "family": "mmsfrmqm16ci", "family_name": "Mmsfrmqm16ci", "category": "ransomware", "rule_id": "a90ab5e0-b339-5206-9ca1-3f9e47996c30", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/mmsfrmqm16ci.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/mmsfrmqm16ci.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/mmsfrmqm16ci", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "mmxmr", "family_name": "Mmxmr", "category": "trojan", "rule_id": "66085c2f-c79f-53e4-9433-e3ed7f045e05", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/mmxmr.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/mmxmr.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/mmxmr", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 1 }, { "family": "mofin", "family_name": "Mofin", "category": "ransomware", "rule_id": "84544c86-13c6-5372-a2c6-a827e6322a03", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/mofin.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/mofin.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/mofin", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "molebox", "family_name": "Molebox", "category": "advanced_threat", "rule_id": "d8a88bbb-e366-5bfd-8e85-ea73634135a3", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/molebox.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/molebox.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/molebox", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 1 }, { "family": "moleboxultra", "family_name": "Moleboxultra", "category": "ransomware", "rule_id": "c6217770-7616-5e88-82a7-5f2108490a5d", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/moleboxultra.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/moleboxultra.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/moleboxultra", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "monitoringtool", "family_name": "Monitoringtool", "category": "trojan", "rule_id": "4558b9cf-c5cf-5d77-8232-4fcda2a883e2", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/monitoringtool.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/monitoringtool.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/monitoringtool", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 1 }, { "family": "montague", "family_name": "Montague", "category": "trojan", "rule_id": "356d89eb-2758-5811-ae85-d4316cc78f81", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/montague.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/montague.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/montague", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 1 }, { "family": "moonpie", "family_name": "Moonpie", "category": "trojan", "rule_id": "f4fd7c84-d176-5f27-aa11-14bb585efa6f", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/moonpie.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/moonpie.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/moonpie", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 1 }, { "family": "mostofate", "family_name": "Mostofate", "category": "ransomware", "rule_id": "2980cdf7-4b95-5088-bf27-56c47041d5ca", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/mostofate.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/mostofate.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/mostofate", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "mosu", "family_name": "Mosu", "category": "ransomware", "rule_id": "927be0a1-41c2-58d9-bc18-60fb72dbb2bc", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/mosu.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/mosu.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/mosu", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "mozla", "family_name": "Mozla", "category": "trojan", "rule_id": "80cd2a53-477a-569d-a3b1-4fc98d8d99f7", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/mozla.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/mozla.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/mozla", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 1 }, { "family": "mrdec", "family_name": "Mrdec", "category": "ransomware", "rule_id": "5402a114-edf1-506b-98f5-1bf8c746cb61", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/mrdec.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/mrdec.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/mrdec", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "msilbot", "family_name": "Msilbot", "category": "ransomware", "rule_id": "9d2668b4-9feb-5d23-85e1-de027cb2fdd3", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/msilbot.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/msilbot.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/msilbot", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "msilpack", "family_name": "Msilpack", "category": "advanced_threat", "rule_id": "472aa07c-a5ba-56f8-a069-dd78aea09074", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/msilpack.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/msilpack.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/msilpack", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 1 }, { "family": "multibanker", "family_name": "Multibanker", "category": "trojan", "rule_id": "84dafa7c-afd8-57cd-802e-e340a5642f95", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/multibanker.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/multibanker.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/multibanker", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 1 }, { "family": "multiinjector", "family_name": "Multiinjector", "category": "trojan", "rule_id": "11fd64a5-2253-57d1-b9bc-00ece5e61758", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/multiinjector.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/multiinjector.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/multiinjector", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 1 }, { "family": "multijoiner", "family_name": "Multijoiner", "category": "trojan", "rule_id": "db5eff92-42e3-55a7-a96a-9f5cd23f84aa", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/multijoiner.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/multijoiner.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/multijoiner", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 1 }, { "family": "multim", "family_name": "Multim", "category": "ransomware", "rule_id": "5fb87b59-a9e2-5d5c-a4b6-9c5aa8f5f1ef", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/multim.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/multim.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/multim", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "muma", "family_name": "Muma", "category": "ransomware", "rule_id": "375f5eb5-72f7-550a-b2ed-3e9f97d65aaa", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/muma.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/muma.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/muma", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "mumawow", "family_name": "Mumawow", "category": "advanced_threat", "rule_id": "38cf8449-35c8-5dd4-a151-d3431afc55d5", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/mumawow.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/mumawow.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/mumawow", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 1 }, { "family": "mupx", "family_name": "Mupx", "category": "trojan", "rule_id": "51493006-bebb-5ee5-9b42-84f11ede1245", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/mupx.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/mupx.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/mupx", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 1 }, { "family": "murka", "family_name": "Murka", "category": "ransomware", "rule_id": "d65b35a4-25d6-5e6f-a680-d5c075e1424a", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/murka.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/murka.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/murka", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "musclecar", "family_name": "Musclecar", "category": "ransomware", "rule_id": "03599ebe-639b-58af-ae0e-8ec6a0c428a2", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/musclecar.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/musclecar.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/musclecar", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "mutabaha", "family_name": "Mutabaha", "category": "advanced_threat", "rule_id": "93fd6331-3bbc-5710-9e15-9ac64d946f5c", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/mutabaha.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/mutabaha.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/mutabaha", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 1 }, { "family": "mutuodo", "family_name": "Mutuodo", "category": "ransomware", "rule_id": "152f1cb3-94e1-502f-a47f-e2d68fcd230b", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/mutuodo.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/mutuodo.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/mutuodo", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "mycleanpc", "family_name": "Mycleanpc", "category": "advanced_threat", "rule_id": "6eebe9c9-5846-526a-9b84-9d07d27ef124", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/mycleanpc.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/mycleanpc.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/mycleanpc", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 1 }, { "family": "mydisksu", "family_name": "Mydisksu", "category": "ransomware", "rule_id": "16529406-82b0-559d-8652-80ae66814afc", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/mydisksu.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/mydisksu.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/mydisksu", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "mytob", "family_name": "Mytob", "category": "backdoor", "rule_id": "08430198-c721-55d8-91b5-ded6613ad86e", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/mytob.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/mytob.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/mytob", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 1 }, { "family": "mytonel", "family_name": "Mytonel", "category": "ransomware", "rule_id": "38be5ea7-1eab-5473-92d3-f087ecea9fc6", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/mytonel.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/mytonel.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/mytonel", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "mz0a4gxuisb", "family_name": "Mz0a4gxuisb", "category": "trojan", "rule_id": "7f026265-4d0e-57f8-806b-bb0cff7e93f1", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/mz0a4gxuisb.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/mz0a4gxuisb.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/mz0a4gxuisb", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 1 }, { "family": "nabasa", "family_name": "Nabasa", "category": "ransomware", "rule_id": "e5275440-bee3-59bf-9c1c-ae72ae23e87e", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/nabasa.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/nabasa.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/nabasa", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "naco", "family_name": "Naco", "category": "ransomware", "rule_id": "827f14d1-0c1e-5eb4-8e45-1c1833f08745", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/naco.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/naco.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/naco", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "nadrac", "family_name": "Nadrac", "category": "ransomware", "rule_id": "ea3c4db9-824a-5c95-bfca-d778ed3608f3", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/nadrac.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/nadrac.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/nadrac", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "naffy", "family_name": "Naffy", "category": "ransomware", "rule_id": "e372b8fe-27f2-5a51-b3fb-ed64eb13f7ee", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/naffy.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/naffy.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/naffy", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "nagram", "family_name": "Nagram", "category": "ransomware", "rule_id": "9ba71ee5-ac18-5a7e-8d39-1c65cb89aba4", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/nagram.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/nagram.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/nagram", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "nbcont", "family_name": "Nbcont", "category": "ransomware", "rule_id": "d99065f7-a0d8-5b37-9837-77ce8ef37465", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/nbcont.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/nbcont.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/nbcont", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "negasteal", "family_name": "Negasteal", "category": "trojan", "rule_id": "86b5440f-e52e-50dc-9edf-3f070b6b8731", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/negasteal.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/negasteal.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/negasteal", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 1 }, { "family": "nemucod", "family_name": "Nemucod", "category": "ransomware", "rule_id": "a9396799-fa2d-53ed-b2c6-56f03d701486", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/nemucod.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/nemucod.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/nemucod", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "netdevil", "family_name": "Netdevil", "category": "trojan", "rule_id": "b054cce2-8ec0-5d47-8934-4154befe740f", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/netdevil.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/netdevil.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/netdevil", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 1 }, { "family": "netinject", "family_name": "Netinject", "category": "ransomware", "rule_id": "88856144-5391-5967-b1a7-7b8a8990bb95", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/netinject.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/netinject.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/netinject", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "netshadow", "family_name": "Netshadow", "category": "trojan", "rule_id": "48afa99b-e83c-52fd-a815-bed8f9ee0926", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/netshadow.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/netshadow.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/netshadow", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 1 }, { "family": "netthief", "family_name": "Netthief", "category": "ransomware", "rule_id": "fb4f8e0d-da42-594f-aa9b-0011a9cce51b", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/netthief.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/netthief.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/netthief", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "newheur", "family_name": "Newheur", "category": "ransomware", "rule_id": "19488c99-a50f-5dc4-aca6-c2c14e4a283b", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/newheur.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/newheur.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/newheur", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "ngvck", "family_name": "Ngvck", "category": "ransomware", "rule_id": "fe7c9eba-372b-5253-a2a1-684e88dd8de9", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/ngvck.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/ngvck.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/ngvck", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "nhopro", "family_name": "Nhopro", "category": "advanced_threat", "rule_id": "f01afaa3-ec30-52eb-80f8-10820d6798e0", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/nhopro.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/nhopro.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/nhopro", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 1 }, { "family": "nicehashminer", "family_name": "Nicehashminer", "category": "advanced_threat", "rule_id": "d6c14d59-7e3a-5941-9553-c75ad0e80be5", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/nicehashminer.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/nicehashminer.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/nicehashminer", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 1 }, { "family": "nilaspo", "family_name": "Nilaspo", "category": "ransomware", "rule_id": "04d18ae1-77c6-5bd5-aa9b-f1b5b814e0e3", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/nilaspo.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/nilaspo.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/nilaspo", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "nion", "family_name": "Nion", "category": "ransomware", "rule_id": "388d9677-2fc3-53e4-a326-162b0bf42420", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/nion.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/nion.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/nion", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "nircmd", "family_name": "Nircmd", "category": "ransomware", "rule_id": "335ba58d-2f08-5c85-89ab-74112a6d9010", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/nircmd.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/nircmd.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/nircmd", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "nistio", "family_name": "Nistio", "category": "ransomware", "rule_id": "6d75f6e3-90fc-52f7-a5fe-30699d4e4c52", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/nistio.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/nistio.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/nistio", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "nitter", "family_name": "Nitter", "category": "ransomware", "rule_id": "02aa015f-bffa-504b-a77d-e4447ae71cb1", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/nitter.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/nitter.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/nitter", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "niwaa8lfbrj", "family_name": "Niwaa8lfbrj", "category": "ransomware", "rule_id": "f1258aa3-7345-51bd-9940-99d283651633", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/niwaa8lfbrj.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/niwaa8lfbrj.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/niwaa8lfbrj", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "nlbrute", "family_name": "Nlbrute", "category": "ransomware", "rule_id": "f8c2be40-5001-5744-b29a-74f62ac6fb58", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/nlbrute.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/nlbrute.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/nlbrute", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "nmkfacwya3cg", "family_name": "Nmkfacwya3cg", "category": "ransomware", "rule_id": "f58c6e40-8202-54bc-b632-c0aa527307ee", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/nmkfacwya3cg.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/nmkfacwya3cg.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/nmkfacwya3cg", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "nmkfxmdtnmoi", "family_name": "Nmkfxmdtnmoi", "category": "trojan", "rule_id": "1cb8846c-c573-59da-aa97-e5f4ecc7df7d", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/nmkfxmdtnmoi.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/nmkfxmdtnmoi.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/nmkfxmdtnmoi", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 1 }, { "family": "nottotrack", "family_name": "Nottotrack", "category": "advanced_threat", "rule_id": "d92df4a6-2bf9-5163-b1b7-646d8fdfe77e", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/nottotrack.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/nottotrack.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/nottotrack", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 1 }, { "family": "noupack", "family_name": "Noupack", "category": "ransomware", "rule_id": "0a0f566b-229e-5ca9-8c2f-a5195ffd46b2", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/noupack.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/noupack.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/noupack", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "npgi", "family_name": "Npgi", "category": "ransomware", "rule_id": "f30ad9e9-6208-56f3-947f-38eaf17d1af6", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/npgi.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/npgi.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/npgi", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "nussamoc", "family_name": "Nussamoc", "category": "ransomware", "rule_id": "a9d0f07b-5d50-580c-bc66-938258335780", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/nussamoc.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/nussamoc.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/nussamoc", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "nyxem", "family_name": "Nyxem", "category": "advanced_threat", "rule_id": "689da5a9-9208-5511-8679-4c23ce508a3e", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/nyxem.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/nyxem.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/nyxem", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 1 }, { "family": "oasisminus", "family_name": "Oasisminus", "category": "ransomware", "rule_id": "24b99805-8fbf-5d03-b916-228615f66ce7", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/oasisminus.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/oasisminus.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/oasisminus", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "obfusransom", "family_name": "Obfusransom", "category": "ransomware", "rule_id": "9805d28a-02bc-5d62-831d-8a47e6a0dcd1", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/obfusransom.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/obfusransom.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/obfusransom", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "obrypser", "family_name": "Obrypser", "category": "ransomware", "rule_id": "e2c4788e-129f-567a-9530-8433fb849cbf", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/obrypser.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/obrypser.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/obrypser", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "oceanlotus", "family_name": "Oceanlotus", "category": "backdoor", "rule_id": "2aa86e5d-cb4d-595f-afc7-78de9a669eb1", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/oceanlotus.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/oceanlotus.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/oceanlotus", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 1 }, { "family": "ocna", "family_name": "Ocna", "category": "ransomware", "rule_id": "6d9425cc-153b-5765-a812-caec87a3c211", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/ocna.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/ocna.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/ocna", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "oepass", "family_name": "Oepass", "category": "trojan", "rule_id": "43893bb4-3f23-5541-81a9-06c2bbb72bb8", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/oepass.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/oepass.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/oepass", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 1 }, { "family": "offerbox", "family_name": "Offerbox", "category": "ransomware", "rule_id": "a1fab01f-4e17-571b-b894-bfeaee993eb3", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/offerbox.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/offerbox.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/offerbox", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "offtoup", "family_name": "Offtoup", "category": "ransomware", "rule_id": "1ed272d6-022b-5442-ba81-4b127394913e", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/offtoup.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/offtoup.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/offtoup", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "oflwr", "family_name": "Oflwr", "category": "ransomware", "rule_id": "d2943f46-5fcc-5227-a2e6-d8d80c01f9d8", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/oflwr.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/oflwr.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/oflwr", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "olext", "family_name": "Olext", "category": "advanced_threat", "rule_id": "3aa12ab7-57df-51c8-b0b6-b8e4b04eea93", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/olext.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/olext.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/olext", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 1 }, { "family": "omgfamcremci", "family_name": "Omgfamcremci", "category": "ransomware", "rule_id": "3c386893-8516-513a-ad4a-188dfe14ec8c", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/omgfamcremci.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/omgfamcremci.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/omgfamcremci", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "omyaamfbexii", "family_name": "Omyaamfbexii", "category": "ransomware", "rule_id": "2a15bf75-69f0-58ff-9961-91fce72ae161", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/omyaamfbexii.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/omyaamfbexii.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/omyaamfbexii", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "onkfa0sahzhg", "family_name": "Onkfa0sahzhg", "category": "ransomware", "rule_id": "1591a3c6-b59b-528d-b71b-841989654df4", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/onkfa0sahzhg.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/onkfa0sahzhg.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/onkfa0sahzhg", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "onlineg", "family_name": "Onlineg", "category": "advanced_threat", "rule_id": "20c16443-a823-5f03-8848-e63f8a90e531", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/onlineg.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/onlineg.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/onlineg", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 1 }, { "family": "opriupdater", "family_name": "Opriupdater", "category": "advanced_threat", "rule_id": "2038520b-c8d2-54f2-9035-0566d4bcb8e0", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/opriupdater.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/opriupdater.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/opriupdater", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 1 }, { "family": "optispeed", "family_name": "Optispeed", "category": "ransomware", "rule_id": "a5051bc7-4bf4-5cde-9e8f-936f5c453c38", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/optispeed.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/optispeed.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/optispeed", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "optix", "family_name": "Optix", "category": "trojan", "rule_id": "6e68dde5-c555-5e5f-a77d-8bf14ca6c29e", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/optix.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/optix.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/optix", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 1 }, { "family": "orangedefender", "family_name": "Orangedefender", "category": "ransomware", "rule_id": "d4e6f9b9-8159-52be-bc6c-4ea556eec3d0", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/orangedefender.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/orangedefender.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/orangedefender", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "orcusrat", "family_name": "Orcusrat", "category": "ransomware", "rule_id": "06bb2dfd-44ce-5cee-8754-318f4dde6cee", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/orcusrat.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/orcusrat.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/orcusrat", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "orcusrot", "family_name": "Orcusrot", "category": "backdoor", "rule_id": "0100d6f2-dcb7-5b73-860d-dfc16fe999fb", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/orcusrot.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/orcusrot.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/orcusrot", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 1 }, { "family": "oremu", "family_name": "Oremu", "category": "ransomware", "rule_id": "87fa0d24-6c1e-5747-8d68-4f496225ebc6", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/oremu.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/oremu.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/oremu", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "otezinu", "family_name": "Otezinu", "category": "ransomware", "rule_id": "29a523a3-1230-5016-90e2-9f1b8efd20f0", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/otezinu.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/otezinu.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/otezinu", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "otorunq", "family_name": "Otorunq", "category": "trojan", "rule_id": "679b670d-9d31-50d7-8f46-bc768e63e47f", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/otorunq.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/otorunq.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/otorunq", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 1 }, { "family": "ou0bsubcbkhb", "family_name": "Ou0bsubcbkhb", "category": "trojan", "rule_id": "29beb48b-90a6-5b1b-86a9-bc57aac3f626", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/ou0bsubcbkhb.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/ou0bsubcbkhb.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/ou0bsubcbkhb", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 1 }, { "family": "oxynoxy", "family_name": "Oxynoxy", "category": "ransomware", "rule_id": "cda35602-a9c2-568b-91e0-199eb611f061", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/oxynoxy.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/oxynoxy.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/oxynoxy", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "oyom", "family_name": "Oyom", "category": "ransomware", "rule_id": "83ba1191-ffb9-5006-94ba-ff581fd57d90", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/oyom.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/oyom.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/oyom", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "oztar", "family_name": "Oztar", "category": "ransomware", "rule_id": "b92a6c36-f194-5804-8799-daa8152e6349", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/oztar.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/oztar.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/oztar", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "pabin", "family_name": "Pabin", "category": "ransomware", "rule_id": "e30eab4c-3dd3-55e4-aaf8-60c55cea558f", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/pabin.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/pabin.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/pabin", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "padmer", "family_name": "Padmer", "category": "ransomware", "rule_id": "1619cc7f-ccbf-5f81-9a25-1c511055e31f", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/padmer.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/padmer.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/padmer", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "pandview", "family_name": "Pandview", "category": "ransomware", "rule_id": "45387385-d093-5e4f-be5a-9bb3fc437b2b", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/pandview.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/pandview.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/pandview", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "pantera", "family_name": "Pantera", "category": "ransomware", "rule_id": "bb7e7b42-cc8d-541f-bcfb-9047e270f73f", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/pantera.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/pantera.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/pantera", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "paper", "family_name": "Paper", "category": "ransomware", "rule_id": "2f7ccea7-833a-56f0-a2c6-e75843f6fccc", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/paper.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/paper.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/paper", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "passcv", "family_name": "Passcv", "category": "trojan", "rule_id": "15b22cb4-064a-50fd-8f06-55dbfea31cd0", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/passcv.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/passcv.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/passcv", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 1 }, { "family": "passwordfox", "family_name": "Passwordfox", "category": "ransomware", "rule_id": "fdfd5bc1-dd05-5c53-b9ab-6ca2ce5817b8", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/passwordfox.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/passwordfox.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/passwordfox", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "pastraw", "family_name": "Pastraw", "category": "ransomware", "rule_id": "af168c22-3785-5e9d-8669-cd0fa576908d", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/pastraw.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/pastraw.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/pastraw", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "pasur", "family_name": "Pasur", "category": "ransomware", "rule_id": "4c4809dd-aa76-52d8-8cc9-c020ffcce7b6", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/pasur.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/pasur.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/pasur", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "patchload", "family_name": "Patchload", "category": "ransomware", "rule_id": "530df052-d9a7-5fda-a9df-5dea91f9c911", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/patchload.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/patchload.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/patchload", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "payer", "family_name": "Payer", "category": "ransomware", "rule_id": "edd03bce-4958-563e-a0b2-0bb23adec545", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/payer.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/payer.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/payer", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "pcbooster", "family_name": "Pcbooster", "category": "ransomware", "rule_id": "ed01b086-e07f-5214-b571-c3191cbdb2c6", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/pcbooster.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/pcbooster.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/pcbooster", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "pccleaners", "family_name": "Pccleaners", "category": "ransomware", "rule_id": "3286be68-3695-5fa5-9b1d-4afc4e2de052", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/pccleaners.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/pccleaners.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/pccleaners", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "pccleaningutility", "family_name": "Pccleaningutility", "category": "ransomware", "rule_id": "1bcb4ef7-32a8-5f7e-9587-7a1701f11333", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/pccleaningutility.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/pccleaningutility.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/pccleaningutility", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "pccleanplus", "family_name": "Pccleanplus", "category": "ransomware", "rule_id": "aee9b082-d301-538d-a186-a520d56bdee4", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/pccleanplus.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/pccleanplus.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/pccleanplus", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "pchealthboost", "family_name": "Pchealthboost", "category": "ransomware", "rule_id": "074ef22c-e145-5d63-905f-c2dbb93dcdca", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/pchealthboost.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/pchealthboost.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/pchealthboost", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "pckdflystudio", "family_name": "Pckdflystudio", "category": "ransomware", "rule_id": "d1d09162-e244-5fdd-892c-1714a249fcbc", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/pckdflystudio.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/pckdflystudio.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/pckdflystudio", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "pclnt", "family_name": "Pclnt", "category": "trojan", "rule_id": "c3b550f4-bfc0-5119-851c-5f4492ffd998", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/pclnt.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/pclnt.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/pclnt", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 1 }, { "family": "pcrepair", "family_name": "Pcrepair", "category": "ransomware", "rule_id": "c62033a6-22c4-5886-b81c-cf6f51e7a8b8", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/pcrepair.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/pcrepair.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/pcrepair", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "pcvark", "family_name": "Pcvark", "category": "ransomware", "rule_id": "0e1751b5-c364-55a4-92a8-2be99e3d19e9", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/pcvark.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/pcvark.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/pcvark", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "pdxbbkgat9ci", "family_name": "Pdxbbkgat9ci", "category": "ransomware", "rule_id": "7c7eadd6-220f-5a79-ba02-d974fa16b19e", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/pdxbbkgat9ci.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/pdxbbkgat9ci.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/pdxbbkgat9ci", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "peed", "family_name": "Peed", "category": "advanced_threat", "rule_id": "4370fc4f-8086-5671-a3ed-5d8a24970255", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/peed.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/peed.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/peed", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 1 }, { "family": "peepviewer", "family_name": "Peepviewer", "category": "trojan", "rule_id": "27c8a24c-228a-5580-b148-93710f72a9e9", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/peepviewer.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/peepviewer.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/peepviewer", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 1 }, { "family": "pef13c", "family_name": "Pef13c", "category": "ransomware", "rule_id": "468a1b44-af27-5981-8def-027e64c6ab46", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/pef13c.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/pef13c.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/pef13c", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "peflog", "family_name": "Peflog", "category": "trojan", "rule_id": "941732a7-6c68-5929-85b4-a0c1217b076a", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/peflog.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/peflog.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/peflog", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 1 }, { "family": "penzievs", "family_name": "Penzievs", "category": "ransomware", "rule_id": "abd17002-f4bf-5925-adfd-72875d18ead8", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/penzievs.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/penzievs.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/penzievs", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "pepex", "family_name": "Pepex", "category": "ransomware", "rule_id": "dfa6d27e-34ac-52b4-8118-3d2ff0e28dbb", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/pepex.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/pepex.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/pepex", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "perez", "family_name": "Perez", "category": "ransomware", "rule_id": "5fc8747b-f0a9-5048-bcaf-aca486ed01b0", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/perez.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/perez.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/perez", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "petal", "family_name": "Petal", "category": "ransomware", "rule_id": "3375355f-7a49-5404-89de-ff127e6de8a8", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/petal.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/petal.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/petal", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "pgpsnippet", "family_name": "Pgpsnippet", "category": "ransomware", "rule_id": "1d95cc8a-9c67-5ff2-a319-6af929ea8f90", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/pgpsnippet.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/pgpsnippet.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/pgpsnippet", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "phires", "family_name": "Phires", "category": "ransomware", "rule_id": "baa1b220-cb29-5735-83b1-4b527f86362a", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/phires.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/phires.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/phires", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "phnu", "family_name": "Phnu", "category": "ransomware", "rule_id": "a952f3f8-073c-5479-b86e-6e889593b8f9", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/phnu.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/phnu.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/phnu", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "phonerooter", "family_name": "Phonerooter", "category": "trojan", "rule_id": "9f0aa162-3cb3-5fbf-8d75-dd81586f469e", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/phonerooter.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/phonerooter.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/phonerooter", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 1 }, { "family": "phpain", "family_name": "Phpain", "category": "ransomware", "rule_id": "005c8821-29db-5074-93fc-e99826eaf2f8", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/phpain.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/phpain.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/phpain", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "phtg", "family_name": "Phtg", "category": "ransomware", "rule_id": "8aa3208e-250d-5a33-acef-382a200f1a51", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/phtg.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/phtg.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/phtg", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "pidmecc", "family_name": "Pidmecc", "category": "ransomware", "rule_id": "d3c1b8b1-bb9a-5503-8157-4d402c54733d", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/pidmecc.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/pidmecc.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/pidmecc", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "pikachu", "family_name": "Pikachu", "category": "advanced_threat", "rule_id": "346609b0-43da-5499-a88f-d4aab19b0848", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/pikachu.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/pikachu.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/pikachu", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 1 }, { "family": "pipo", "family_name": "Pipo", "category": "ransomware", "rule_id": "8834414b-d80b-5111-a5f2-9a392fffa27f", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/pipo.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/pipo.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/pipo", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "pitin", "family_name": "Pitin", "category": "ransomware", "rule_id": "5f740720-3e3e-545a-b4cc-0cce4e1f4b6c", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/pitin.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/pitin.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/pitin", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "pizchao", "family_name": "Pizchao", "category": "ransomware", "rule_id": "40f3ddf6-4891-561e-a2ee-f10b93502a89", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/pizchao.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/pizchao.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/pizchao", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "pjzab0jsupjb", "family_name": "Pjzab0jsupjb", "category": "trojan", "rule_id": "86bd542c-0888-50f4-988b-577071aef848", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/pjzab0jsupjb.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/pjzab0jsupjb.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/pjzab0jsupjb", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 1 }, { "family": "plasma", "family_name": "Plasma", "category": "ransomware", "rule_id": "c6917352-4d18-5f41-b699-8aa5caa39a32", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/plasma.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/plasma.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/plasma", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "platan", "family_name": "Platan", "category": "ransomware", "rule_id": "726b4c8a-eace-50b6-bb3f-516d80c3abb5", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/platan.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/platan.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/platan", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "playgames", "family_name": "Playgames", "category": "advanced_threat", "rule_id": "af499fa8-8e48-55e3-986a-34c27795f547", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/playgames.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/playgames.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/playgames", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 1 }, { "family": "plicker", "family_name": "Plicker", "category": "advanced_threat", "rule_id": "377d3950-7d20-5b3a-aa2a-a8bf4a91d4c7", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/plicker.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/plicker.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/plicker", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 1 }, { "family": "plinch", "family_name": "Plinch", "category": "trojan", "rule_id": "32c89339-c450-597d-a4e4-3338835b9808", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/plinch.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/plinch.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/plinch", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 1 }, { "family": "ploprolo", "family_name": "Ploprolo", "category": "ransomware", "rule_id": "767816b5-9a73-52bb-88ee-90428be5dba5", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/ploprolo.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/ploprolo.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/ploprolo", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "plugs", "family_name": "Plugs", "category": "ransomware", "rule_id": "48579673-00da-5572-b43f-84063dd0f91f", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/plugs.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/plugs.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/plugs", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "podnuha", "family_name": "Podnuha", "category": "advanced_threat", "rule_id": "5ca530ea-4a88-58ee-b4c6-205c097e084c", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/podnuha.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/podnuha.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/podnuha", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 1 }, { "family": "pondfull", "family_name": "Pondfull", "category": "ransomware", "rule_id": "fd7de48a-2914-5596-ab0e-a1396e22de15", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/pondfull.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/pondfull.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/pondfull", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "pontoeb", "family_name": "Pontoeb", "category": "advanced_threat", "rule_id": "83e89d33-9c17-5987-8a15-d6251e1fdca4", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/pontoeb.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/pontoeb.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/pontoeb", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 1 }, { "family": "popad", "family_name": "Popad", "category": "trojan", "rule_id": "fe8b246d-db0b-548a-a3ed-956428442a16", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/popad.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/popad.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/popad", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 1 }, { "family": "porex", "family_name": "Porex", "category": "ransomware", "rule_id": "cd985d0d-74d3-57fc-bbf9-a0799a64d16b", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/porex.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/porex.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/porex", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "pornblackmailer", "family_name": "Pornblackmailer", "category": "ransomware", "rule_id": "0acf3e02-bb9d-5986-a47f-21c462162efc", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/pornblackmailer.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/pornblackmailer.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/pornblackmailer", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "possiblemalware", "family_name": "Possiblemalware", "category": "trojan", "rule_id": "ebbc82d7-58fb-5138-9f39-57501eea6974", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/possiblemalware.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/possiblemalware.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/possiblemalware", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 1 }, { "family": "potao", "family_name": "Potao", "category": "trojan", "rule_id": "76ac1a35-4076-5d82-ad29-ac19c99a2333", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/potao.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/potao.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/potao", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 1 }, { "family": "potukorp", "family_name": "Potukorp", "category": "ransomware", "rule_id": "77195803-3a30-5711-a701-384e17469534", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/potukorp.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/potukorp.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/potukorp", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "powerspritz", "family_name": "Powerspritz", "category": "ransomware", "rule_id": "06098fb0-40f6-56f3-b51a-0fa8f95eeb7c", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/powerspritz.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/powerspritz.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/powerspritz", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "powerun", "family_name": "Powerun", "category": "ransomware", "rule_id": "eeaf75b1-632f-53be-a1ab-fb98bb917fbd", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/powerun.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/powerun.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/powerun", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "powstage", "family_name": "Powstage", "category": "ransomware", "rule_id": "826cad74-cc33-5afa-b033-64f77bea3f75", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/powstage.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/powstage.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/powstage", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "poxters", "family_name": "Poxters", "category": "ransomware", "rule_id": "89f1b548-6b11-5e45-a279-c667cff83830", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/poxters.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/poxters.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/poxters", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "prast", "family_name": "Prast", "category": "advanced_threat", "rule_id": "91ed388b-301e-5c63-a06e-fe8e1436545c", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/prast.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/prast.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/prast", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 1 }, { "family": "predatorthief", "family_name": "Predatorthief", "category": "backdoor", "rule_id": "57303edf-9ede-5bc1-90ab-b020093379b5", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/predatorthief.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/predatorthief.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/predatorthief", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 1 }, { "family": "prex", "family_name": "Prex", "category": "ransomware", "rule_id": "06f2ae08-2235-5946-862b-05de560cf778", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/prex.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/prex.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/prex", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "primawega", "family_name": "Primawega", "category": "ransomware", "rule_id": "1acae169-55b7-584c-baf3-493c22ce0f2a", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/primawega.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/primawega.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/primawega", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "procgmar", "family_name": "Procgmar", "category": "ransomware", "rule_id": "8665c474-7750-54c9-bfce-8569509455e2", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/procgmar.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/procgmar.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/procgmar", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "protector", "family_name": "Protector", "category": "ransomware", "rule_id": "383618c2-0691-5ca5-b609-5358b05a5696", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/protector.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/protector.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/protector", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "proteus", "family_name": "Proteus", "category": "ransomware", "rule_id": "f9324505-9ef7-5fa5-a68f-745e4d0536f5", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/proteus.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/proteus.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/proteus", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "proxyagent", "family_name": "Proxyagent", "category": "trojan", "rule_id": "ec2c698f-6f3a-5b25-a9ef-61659d223e34", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/proxyagent.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/proxyagent.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/proxyagent", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 1 }, { "family": "proxygate", "family_name": "Proxygate", "category": "advanced_threat", "rule_id": "499ae2d3-adb8-57de-8509-ff186178f432", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/proxygate.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/proxygate.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/proxygate", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 1 }, { "family": "psexec", "family_name": "Psexec", "category": "ransomware", "rule_id": "f00365aa-a81f-5b5d-9a0e-8d522496ac99", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/psexec.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/psexec.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/psexec", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "psshell", "family_name": "Psshell", "category": "ransomware", "rule_id": "d2a00928-3586-55ac-9b43-360d9028b6be", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/psshell.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/psshell.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/psshell", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "pswdump", "family_name": "Pswdump", "category": "advanced_threat", "rule_id": "d3f7279d-7efb-54a8-ada8-c240ff059ee5", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/pswdump.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/pswdump.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/pswdump", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 1 }, { "family": "psyme", "family_name": "Psyme", "category": "ransomware", "rule_id": "7aef445b-213c-548b-bb80-e582d8a9d87a", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/psyme.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/psyme.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/psyme", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "puamson", "family_name": "Puamson", "category": "ransomware", "rule_id": "ccfd4b06-e24f-51e4-8366-dfd46792c42c", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/puamson.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/puamson.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/puamson", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "pulobe", "family_name": "Pulobe", "category": "ransomware", "rule_id": "34f4503d-7335-5c66-b719-378286b91668", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/pulobe.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/pulobe.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/pulobe", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "puontib", "family_name": "Puontib", "category": "ransomware", "rule_id": "28b0ed07-8f87-5f72-80dd-c98d34a542f6", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/puontib.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/puontib.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/puontib", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "purgory", "family_name": "Purgory", "category": "ransomware", "rule_id": "fb0e40f4-e2e9-5127-9e0c-f1048e8b4f13", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/purgory.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/purgory.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/purgory", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "pushel", "family_name": "Pushel", "category": "ransomware", "rule_id": "b2a156b3-30a4-579e-bd55-ad131462cd61", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/pushel.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/pushel.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/pushel", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "putabmow", "family_name": "Putabmow", "category": "ransomware", "rule_id": "63e5b3a3-0a2f-51e1-a4ad-ffa3c47a1adc", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/putabmow.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/putabmow.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/putabmow", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "pwdump", "family_name": "Pwdump", "category": "advanced_threat", "rule_id": "534b4fd7-08f3-5f34-9d34-bbffb1f25ad8", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/pwdump.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/pwdump.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/pwdump", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 1 }, { "family": "pwkiller", "family_name": "Pwkiller", "category": "trojan", "rule_id": "d34f76e6-c852-5390-87ff-857b10a45517", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/pwkiller.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/pwkiller.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/pwkiller", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 1 }, { "family": "pycrypter", "family_name": "Pycrypter", "category": "ransomware", "rule_id": "f83d2d68-5a4e-5e03-a2d0-0a6879e312c3", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/pycrypter.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/pycrypter.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/pycrypter", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "pyinstaller", "family_name": "Pyinstaller", "category": "ransomware", "rule_id": "c09a7eec-e1c8-568f-977d-11cee23ecad9", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/pyinstaller.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/pyinstaller.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/pyinstaller", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "pyme", "family_name": "Pyme", "category": "ransomware", "rule_id": "4aa84550-254a-572b-a56b-1b800849f6d4", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/pyme.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/pyme.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/pyme", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "pyspy", "family_name": "Pyspy", "category": "trojan", "rule_id": "5dad3a65-b124-5aa8-b4ed-70111c5324b5", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/pyspy.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/pyspy.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/pyspy", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 1 }, { "family": "qdownb", "family_name": "Qdownb", "category": "ransomware", "rule_id": "fdd6f7fc-2c05-527f-ac32-fbbbe91ce132", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/qdownb.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/qdownb.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/qdownb", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "qmlfrt0j91kid", "family_name": "Qmlfrt0j91kid", "category": "ransomware", "rule_id": "8107fbe7-641d-5eed-8f1d-33237626a3e7", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/qmlfrt0j91kid.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/qmlfrt0j91kid.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/qmlfrt0j91kid", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "qmuabwpoobbg", "family_name": "Qmuabwpoobbg", "category": "ransomware", "rule_id": "fb9d16b6-4357-59e3-8884-a480176f1345", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/qmuabwpoobbg.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/qmuabwpoobbg.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/qmuabwpoobbg", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "qqfarmassist", "family_name": "Qqfarmassist", "category": "advanced_threat", "rule_id": "4c0128bf-0ead-5a5c-8955-d8aaed6605d8", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/qqfarmassist.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/qqfarmassist.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/qqfarmassist", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 1 }, { "family": "qqmima", "family_name": "Qqmima", "category": "ransomware", "rule_id": "cb4bd1e1-5777-5228-908b-da598bd24931", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/qqmima.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/qqmima.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/qqmima", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "qqspy", "family_name": "Qqspy", "category": "advanced_threat", "rule_id": "0ef773ed-a66f-54e4-a542-6b09ed4b25a6", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/qqspy.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/qqspy.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/qqspy", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 1 }, { "family": "quervar", "family_name": "Quervar", "category": "ransomware", "rule_id": "5e027627-c96c-51e0-ac77-b12dbf3e40fa", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/quervar.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/quervar.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/quervar", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "quireap", "family_name": "Quireap", "category": "ransomware", "rule_id": "ab41f7d4-5bd5-58c7-8951-f88a5f65588e", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/quireap.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/quireap.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/quireap", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "ragua", "family_name": "Ragua", "category": "ransomware", "rule_id": "1dfbcf1d-c73b-54c2-bc52-5d25ac94886f", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/ragua.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/ragua.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/ragua", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "rakhni", "family_name": "Rakhni", "category": "ransomware", "rule_id": "37a38d58-c504-56bc-83e8-6a7b40e2fc5e", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/rakhni.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/rakhni.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/rakhni", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "ramnif", "family_name": "Ramnif", "category": "trojan", "rule_id": "25c07dd3-f31c-5116-87ba-3a8d647f6f71", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/ramnif.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/ramnif.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/ramnif", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 1 }, { "family": "ranion", "family_name": "Ranion", "category": "ransomware", "rule_id": "84820874-05cb-5461-b3c5-e91ff4f1e5a9", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/ranion.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/ranion.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/ranion", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "ranna", "family_name": "Ranna", "category": "ransomware", "rule_id": "49ecc4c7-6a90-5683-9a3c-bfa0fefe6e4e", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/ranna.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/ranna.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/ranna", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "ransim", "family_name": "Ransim", "category": "ransomware", "rule_id": "02b765c0-ac47-575b-808f-82869a20e472", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/ransim.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/ransim.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/ransim", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "ransomheur", "family_name": "Ransomheur", "category": "ransomware", "rule_id": "b55f4101-ebe1-5e9f-a39b-e0b0809c7938", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/ransomheur.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/ransomheur.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/ransomheur", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "rapidpass", "family_name": "Rapidpass", "category": "ransomware", "rule_id": "14b1097f-3ed7-5ae9-8b2d-44fc1eb8994c", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/rapidpass.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/rapidpass.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/rapidpass", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "rarmal", "family_name": "Rarmal", "category": "ransomware", "rule_id": "afc00a5d-f8e5-57d4-bbfa-af5b54b0afcf", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/rarmal.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/rarmal.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/rarmal", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "rasch", "family_name": "Rasch", "category": "ransomware", "rule_id": "56a437f5-49b3-5eac-a653-ff4a4d88315d", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/rasch.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/rasch.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/rasch", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "rasoon", "family_name": "Rasoon", "category": "trojan", "rule_id": "4f102f86-0ee7-5e70-8e80-0ed2173edd2b", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/rasoon.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/rasoon.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/rasoon", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 1 }, { "family": "rastabaf", "family_name": "Rastabaf", "category": "ransomware", "rule_id": "d6d946d8-a410-5751-b3a1-3523c02d29f0", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/rastabaf.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/rastabaf.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/rastabaf", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "ravs", "family_name": "Ravs", "category": "ransomware", "rule_id": "0d2b350a-addb-5be5-8158-fecf86178db2", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/ravs.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/ravs.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/ravs", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "realspy", "family_name": "Realspy", "category": "advanced_threat", "rule_id": "594bee01-5bbc-5d1c-9ddb-c0b35a25ff7c", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/realspy.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/realspy.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/realspy", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 1 }, { "family": "recory", "family_name": "Recory", "category": "ransomware", "rule_id": "45f8340c-f860-5ab7-854d-f09e7190cfa5", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/recory.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/recory.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/recory", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "redaman", "family_name": "Redaman", "category": "trojan", "rule_id": "dbe13929-a43d-5395-b791-71a1c2fd6d5a", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/redaman.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/redaman.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/redaman", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 1 }, { "family": "redator", "family_name": "Redator", "category": "trojan", "rule_id": "c37cf247-d9c5-5ab7-a499-aa29ac05db04", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/redator.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/redator.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/redator", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 1 }, { "family": "redgirl", "family_name": "Redgirl", "category": "ransomware", "rule_id": "b7fe7c4b-bc6f-5e17-86cd-3a3dd45eec36", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/redgirl.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/redgirl.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/redgirl", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "redneck", "family_name": "Redneck", "category": "ransomware", "rule_id": "9112e591-c4df-583b-a564-e4cbd5c93a52", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/redneck.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/redneck.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/redneck", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "redsip", "family_name": "Redsip", "category": "trojan", "rule_id": "a57f002a-6f5a-591e-8674-7cfbfa6206de", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/redsip.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/redsip.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/redsip", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 1 }, { "family": "regcurepro", "family_name": "Regcurepro", "category": "advanced_threat", "rule_id": "67fc1125-3d95-5778-bb9f-e8f628f8b5d5", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/regcurepro.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/regcurepro.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/regcurepro", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 1 }, { "family": "regub", "family_name": "Regub", "category": "ransomware", "rule_id": "8dc723c4-1467-5ebf-9e99-eeda85cb140f", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/regub.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/regub.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/regub", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "remexi", "family_name": "Remexi", "category": "trojan", "rule_id": "6143e610-0082-5944-a1c4-aac1dc908231", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/remexi.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/remexi.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/remexi", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 1 }, { "family": "remote", "family_name": "Remote", "category": "trojan", "rule_id": "b590667a-39c5-537a-b62d-90b86d932a88", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/remote.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/remote.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/remote", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 1 }, { "family": "remotehack", "family_name": "Remotehack", "category": "trojan", "rule_id": "66a4fede-c54a-5fca-809c-dfee78e9ca84", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/remotehack.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/remotehack.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/remotehack", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 1 }, { "family": "removewga", "family_name": "Removewga", "category": "backdoor", "rule_id": "24f2b445-7034-592b-ba2c-f86d2b7ac655", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/removewga.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/removewga.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/removewga", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 1 }, { "family": "remoxec", "family_name": "Remoxec", "category": "trojan", "rule_id": "c24b7357-89d8-50ed-af2d-9a45ff4a09fd", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/remoxec.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/remoxec.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/remoxec", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 1 }, { "family": "reposfxg", "family_name": "Reposfxg", "category": "ransomware", "rule_id": "2adef6f4-31e9-5ff5-aa3c-1dd941c0d835", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/reposfxg.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/reposfxg.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/reposfxg", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "retribution", "family_name": "Retribution", "category": "ransomware", "rule_id": "71fde599-7437-53cd-a8e1-02fba3ba7867", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/retribution.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/retribution.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/retribution", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "revealerkeylogger", "family_name": "Revealerkeylogger", "category": "advanced_threat", "rule_id": "9e4b2dbf-fc20-52c9-b682-aa2f6d0172b5", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/revealerkeylogger.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/revealerkeylogger.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/revealerkeylogger", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 1 }, { "family": "revengerat", "family_name": "Revengerat", "category": "ransomware", "rule_id": "27f15e64-5007-53b2-9a49-54fa27e04b41", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/revengerat.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/revengerat.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/revengerat", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "reymbz", "family_name": "Reymbz", "category": "ransomware", "rule_id": "08623353-71fa-56f0-9187-1a6e17e4eeae", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/reymbz.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/reymbz.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/reymbz", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "reyptson", "family_name": "Reyptson", "category": "ransomware", "rule_id": "49c65adf-98eb-58c8-ad7a-40022b4465ed", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/reyptson.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/reyptson.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/reyptson", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "rialega", "family_name": "Rialega", "category": "trojan", "rule_id": "4746f21e-80e0-5dec-a03f-31419ed187ae", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/rialega.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/rialega.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/rialega", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 1 }, { "family": "ridapi", "family_name": "Ridapi", "category": "ransomware", "rule_id": "3d9dcf0e-aa27-5e32-b9db-d5d512af3015", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/ridapi.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/ridapi.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/ridapi", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "ridnu", "family_name": "Ridnu", "category": "ransomware", "rule_id": "d5643993-a7c6-5302-9f9b-dabc12896e62", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/ridnu.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/ridnu.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/ridnu", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "rietspoof", "family_name": "Rietspoof", "category": "ransomware", "rule_id": "0d1f8123-17c5-5ab8-8bf1-68c4fed2d088", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/rietspoof.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/rietspoof.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/rietspoof", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "rimic", "family_name": "Rimic", "category": "ransomware", "rule_id": "040c3270-8f4a-54b9-8add-9c680c6f3536", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/rimic.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/rimic.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/rimic", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "riodrv", "family_name": "Riodrv", "category": "trojan", "rule_id": "284fb174-e363-55a0-a818-169648071274", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/riodrv.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/riodrv.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/riodrv", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 1 }, { "family": "rmkef9zs0zhi", "family_name": "Rmkef9zs0zhi", "category": "ransomware", "rule_id": "0c4541e2-21cc-5da2-852c-de42d11f5587", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/rmkef9zs0zhi.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/rmkef9zs0zhi.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/rmkef9zs0zhi", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "rmkefbclnjpi", "family_name": "Rmkefbclnjpi", "category": "ransomware", "rule_id": "a2601b5b-67de-5120-9d9c-2e1beccc4922", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/rmkefbclnjpi.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/rmkefbclnjpi.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/rmkefbclnjpi", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "rmkefdlslaoi", "family_name": "Rmkefdlslaoi", "category": "ransomware", "rule_id": "d2a53519-e596-5949-9844-e9d84c5a53c8", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/rmkefdlslaoi.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/rmkefdlslaoi.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/rmkefdlslaoi", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "roboinstall", "family_name": "Roboinstall", "category": "advanced_threat", "rule_id": "6e807966-1460-5afd-aac9-91925f844d0b", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/roboinstall.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/roboinstall.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/roboinstall", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 1 }, { "family": "rockrat", "family_name": "Rockrat", "category": "trojan", "rule_id": "5e1227f1-794d-59a9-9cb0-4842aa6192f9", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/rockrat.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/rockrat.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/rockrat", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 1 }, { "family": "rogan", "family_name": "Rogan", "category": "ransomware", "rule_id": "23d053f2-1e28-547e-9d3a-642765050479", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/rogan.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/rogan.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/rogan", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "rostpay", "family_name": "Rostpay", "category": "ransomware", "rule_id": "69828d98-bd2a-5804-95d3-7f226f8f55ac", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/rostpay.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/rostpay.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/rostpay", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "rozenaa", "family_name": "Rozenaa", "category": "ransomware", "rule_id": "6182ba61-6867-5051-a721-193f7a25b157", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/rozenaa.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/rozenaa.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/rozenaa", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "rpdpatch", "family_name": "Rpdpatch", "category": "backdoor", "rule_id": "d02aa791-bb86-5b15-906e-265a364c2043", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/rpdpatch.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/rpdpatch.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/rpdpatch", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 1 }, { "family": "ruanmei", "family_name": "Ruanmei", "category": "advanced_threat", "rule_id": "57f60151-4a79-50bc-a7b8-94497611daef", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/ruanmei.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/ruanmei.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/ruanmei", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 1 }, { "family": "rubat", "family_name": "Rubat", "category": "ransomware", "rule_id": "27cdd1e6-3fb1-54e6-9078-d8f62da4866d", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/rubat.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/rubat.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/rubat", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "ruho", "family_name": "Ruho", "category": "ransomware", "rule_id": "f9321932-ed72-5077-8105-7cb5560d8679", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/ruho.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/ruho.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/ruho", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "rupttass", "family_name": "Rupttass", "category": "ransomware", "rule_id": "1f8be988-bfc6-5dc5-a35d-1dbba39f5d3b", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/rupttass.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/rupttass.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/rupttass", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "rvrat", "family_name": "Rvrat", "category": "trojan", "rule_id": "907d6514-d8c7-57b8-95d5-7a03ccdc1990", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/rvrat.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/rvrat.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/rvrat", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 1 }, { "family": "rz0a4oaeuqdi", "family_name": "Rz0a4oaeuqdi", "category": "ransomware", "rule_id": "7e838d9f-e871-5e5a-a55b-ba0a8e4df351", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/rz0a4oaeuqdi.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/rz0a4oaeuqdi.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/rz0a4oaeuqdi", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "rz0auircb0di", "family_name": "Rz0auircb0di", "category": "trojan", "rule_id": "05d2cccb-d4fb-570f-a96b-c3ff4e285a13", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/rz0auircb0di.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/rz0auircb0di.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/rz0auircb0di", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 1 }, { "family": "rzwaagpbkfii", "family_name": "Rzwaagpbkfii", "category": "ransomware", "rule_id": "1c083c63-efb5-50bb-ab88-0a3097f56c7b", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/rzwaagpbkfii.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/rzwaagpbkfii.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/rzwaagpbkfii", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "sadenav", "family_name": "Sadenav", "category": "ransomware", "rule_id": "e50643e3-4c9c-5249-836d-3ca34f7be8f3", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/sadenav.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/sadenav.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/sadenav", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "sadredi", "family_name": "Sadredi", "category": "ransomware", "rule_id": "1fde57f4-0f3b-531a-acef-87c2f2c8622d", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/sadredi.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/sadredi.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/sadredi", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "saencrypt", "family_name": "Saencrypt", "category": "ransomware", "rule_id": "160b3cf7-d621-5772-bcd8-7201ab0ef81d", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/saencrypt.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/saencrypt.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/saencrypt", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "safebreas", "family_name": "Safebreas", "category": "ransomware", "rule_id": "c05228c6-8c26-5479-aabc-88da44afe9e2", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/safebreas.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/safebreas.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/safebreas", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "sagonaire", "family_name": "Sagonaire", "category": "ransomware", "rule_id": "051bf389-7b8e-50ef-8f48-1bc16e7489e9", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/sagonaire.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/sagonaire.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/sagonaire", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "sakto", "family_name": "Sakto", "category": "ransomware", "rule_id": "dea42c07-6941-5c86-9549-d6a63565ea3e", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/sakto.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/sakto.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/sakto", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "sanctionedmedia", "family_name": "Sanctionedmedia", "category": "ransomware", "rule_id": "c08afb37-68b6-5b7b-9348-3feca5eeb49a", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/sanctionedmedia.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/sanctionedmedia.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/sanctionedmedia", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "sankei", "family_name": "Sankei", "category": "ransomware", "rule_id": "79dbfbb1-f6e2-52ab-8796-127cd85f1619", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/sankei.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/sankei.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/sankei", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "satana", "family_name": "Satana", "category": "ransomware", "rule_id": "6f36943a-03a5-57e0-b522-4d5fc23b2688", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/satana.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/satana.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/satana", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "satancrypt", "family_name": "Satancrypt", "category": "ransomware", "rule_id": "429bf928-3c09-5ad9-8aab-134994573d9c", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/satancrypt.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/satancrypt.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/satancrypt", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "sathurbot", "family_name": "Sathurbot", "category": "trojan", "rule_id": "649ca7aa-8782-5ab6-8df2-230ebecfb624", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/sathurbot.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/sathurbot.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/sathurbot", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 1 }, { "family": "sbdld", "family_name": "Sbdld", "category": "trojan", "rule_id": "3de15eaf-31d6-5438-9d69-25c87de12c84", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/sbdld.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/sbdld.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/sbdld", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 1 }, { "family": "sbyinying", "family_name": "Sbyinying", "category": "ransomware", "rule_id": "4f3264e4-daee-5a7d-a972-e69ec82d9d43", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/sbyinying.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/sbyinying.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/sbyinying", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "scarcruft", "family_name": "Scarcruft", "category": "trojan", "rule_id": "bb312571-668c-56c2-b77d-93cea8b77a3e", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/scarcruft.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/scarcruft.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/scarcruft", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 1 }, { "family": "scomma", "family_name": "Scomma", "category": "ransomware", "rule_id": "11a2caee-f6c8-553f-af53-1d6931f8de01", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/scomma.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/scomma.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/scomma", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "scoopy", "family_name": "Scoopy", "category": "ransomware", "rule_id": "929c9c36-dd53-5e43-bc89-29a19a8eb705", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/scoopy.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/scoopy.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/scoopy", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "scrami", "family_name": "Scrami", "category": "ransomware", "rule_id": "c1db0dd6-42e9-5cce-b316-3494ff864326", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/scrami.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/scrami.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/scrami", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "scramupx", "family_name": "Scramupx", "category": "advanced_threat", "rule_id": "4f514215-3e8c-502f-99ed-17bc4bb372c9", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/scramupx.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/scramupx.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/scramupx", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 1 }, { "family": "screen", "family_name": "Screen", "category": "ransomware", "rule_id": "bac11d44-b23f-5efd-bd17-e61b4ce3c2c0", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/screen.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/screen.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/screen", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "sdrop", "family_name": "Sdrop", "category": "ransomware", "rule_id": "c4531de7-83f0-5a11-9f16-3259aeb78c31", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/sdrop.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/sdrop.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/sdrop", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "searchbar", "family_name": "Searchbar", "category": "advanced_threat", "rule_id": "a764c2a4-db51-58f6-a0d5-177998b8e9b5", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/searchbar.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/searchbar.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/searchbar", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 1 }, { "family": "searchprovide", "family_name": "Searchprovide", "category": "ransomware", "rule_id": "269e1655-8d70-5876-b446-b43d41e04b33", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/searchprovide.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/searchprovide.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/searchprovide", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "searchsetter", "family_name": "Searchsetter", "category": "advanced_threat", "rule_id": "0644ba99-af38-5bfe-926a-8b4e4771995c", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/searchsetter.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/searchsetter.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/searchsetter", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 1 }, { "family": "secucharge", "family_name": "Secucharge", "category": "ransomware", "rule_id": "d4d47a0e-1f7d-591b-b9ac-f9f86b7257c6", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/secucharge.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/secucharge.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/secucharge", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "security", "family_name": "Security", "category": "advanced_threat", "rule_id": "eec7c84d-3443-5ed5-a1ad-da4b364c38a6", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/security.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/security.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/security", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 1 }, { "family": "securityshield", "family_name": "Securityshield", "category": "trojan", "rule_id": "078c0847-1d91-59a0-86a2-e3259b2d0aab", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/securityshield.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/securityshield.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/securityshield", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 1 }, { "family": "seeav", "family_name": "Seeav", "category": "ransomware", "rule_id": "7e25a936-3798-5910-a7e4-ba32cccdb319", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/seeav.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/seeav.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/seeav", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "selcry", "family_name": "Selcry", "category": "ransomware", "rule_id": "768d0ff6-d4b3-5f67-9a05-7ede1428c563", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/selcry.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/selcry.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/selcry", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "sennaonemaker", "family_name": "Sennaonemaker", "category": "ransomware", "rule_id": "72d25dcf-baab-59ad-9311-ad3903f4b50c", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/sennaonemaker.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/sennaonemaker.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/sennaonemaker", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "sennoma", "family_name": "Sennoma", "category": "ransomware", "rule_id": "c6b2e79d-fdda-5a2a-9257-0d05ffd23b52", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/sennoma.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/sennoma.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/sennoma", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "senta", "family_name": "Senta", "category": "ransomware", "rule_id": "82d0c252-b87a-5e38-b889-092ab9a3355a", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/senta.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/senta.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/senta", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "sentinel", "family_name": "Sentinel", "category": "ransomware", "rule_id": "df130d68-d65e-5150-8476-fee3055d3ada", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/sentinel.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/sentinel.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/sentinel", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "serveradmin", "family_name": "Serveradmin", "category": "ransomware", "rule_id": "544a2f56-92c7-5ed2-9f88-44f81146a54e", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/serveradmin.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/serveradmin.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/serveradmin", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "seznam", "family_name": "Seznam", "category": "trojan", "rule_id": "c6d6a96b-17f7-52bc-875d-8cd0ce53a628", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/seznam.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/seznam.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/seznam", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 1 }, { "family": "sfdld", "family_name": "Sfdld", "category": "ransomware", "rule_id": "fcb7a076-e690-5fba-879e-69e103ea12e9", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/sfdld.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/sfdld.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/sfdld", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "sfuzuan", "family_name": "Sfuzuan", "category": "ransomware", "rule_id": "56e16ecd-4b62-581f-8205-f99151e22f0d", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/sfuzuan.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/sfuzuan.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/sfuzuan", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "shadowhammer", "family_name": "Shadowhammer", "category": "backdoor", "rule_id": "0871aff7-78ec-5dd7-b090-f260eb628303", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/shadowhammer.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/shadowhammer.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/shadowhammer", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 1 }, { "family": "sharer", "family_name": "Sharer", "category": "trojan", "rule_id": "654ebacc-2abc-5190-a1b1-3a00bbd443e7", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/sharer.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/sharer.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/sharer", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 1 }, { "family": "shark", "family_name": "Shark", "category": "ransomware", "rule_id": "f3a1c9f7-251b-5ef7-98d5-d0d69a73781b", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/shark.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/shark.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/shark", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "shaskooth", "family_name": "Shaskooth", "category": "ransomware", "rule_id": "251ad860-cb48-5dd5-b1a1-8058f7ac0ed1", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/shaskooth.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/shaskooth.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/shaskooth", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "shell", "family_name": "Shell", "category": "backdoor", "rule_id": "137d5907-fd26-5c55-abf7-914ef0424096", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/shell.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/shell.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/shell", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 1 }, { "family": "shellcodef", "family_name": "Shellcodef", "category": "ransomware", "rule_id": "48a5f4ad-8a18-5f30-af66-7b1528f4fa97", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/shellcodef.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/shellcodef.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/shellcodef", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "shellme", "family_name": "Shellme", "category": "ransomware", "rule_id": "4d7b84ae-48fb-535a-8a40-c18610f1f6aa", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/shellme.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/shellme.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/shellme", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "shezkrypt", "family_name": "Shezkrypt", "category": "ransomware", "rule_id": "7a8e2be9-5c3c-5351-a208-11c5cc73186b", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/shezkrypt.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/shezkrypt.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/shezkrypt", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "shinolock", "family_name": "Shinolock", "category": "ransomware", "rule_id": "d7fc73fd-5330-53b1-ab7a-823a97db36bd", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/shinolock.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/shinolock.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/shinolock", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "shopperpro", "family_name": "Shopperpro", "category": "ransomware", "rule_id": "4657878d-b4ff-5f6b-9b49-959c7c0b18d7", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/shopperpro.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/shopperpro.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/shopperpro", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "shopperz", "family_name": "Shopperz", "category": "advanced_threat", "rule_id": "58cab1f3-8632-5a17-9369-ff475b6085aa", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/shopperz.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/shopperz.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/shopperz", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 1 }, { "family": "shutdown", "family_name": "Shutdown", "category": "ransomware", "rule_id": "54ea9f21-8804-597a-bee7-5c2c86010644", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/shutdown.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/shutdown.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/shutdown", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "shutdowner", "family_name": "Shutdowner", "category": "backdoor", "rule_id": "a89f21f3-61e7-553e-aa13-22306d0e235d", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/shutdowner.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/shutdowner.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/shutdowner", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 1 }, { "family": "sign0fmisery", "family_name": "Sign0fmisery", "category": "trojan", "rule_id": "828a3235-b8cf-543d-b06b-dbd55310b7e6", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/sign0fmisery.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/sign0fmisery.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/sign0fmisery", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 1 }, { "family": "siho", "family_name": "Siho", "category": "ransomware", "rule_id": "5ff4c64e-0cd3-5fec-8a37-c16aafd8a83b", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/siho.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/siho.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/siho", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "silentinstall", "family_name": "Silentinstall", "category": "advanced_threat", "rule_id": "52adbaa0-5fbd-50a8-b1d1-9dbfc71487a7", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/silentinstall.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/silentinstall.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/silentinstall", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 1 }, { "family": "silly", "family_name": "Silly", "category": "ransomware", "rule_id": "39b35182-c58e-5893-b05f-e8046f7186b3", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/silly.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/silly.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/silly", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "sillyp2p", "family_name": "Sillyp2p", "category": "ransomware", "rule_id": "10d08aa9-1285-570d-8240-8a1fa0d888ba", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/sillyp2p.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/sillyp2p.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/sillyp2p", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "simple", "family_name": "Simple", "category": "ransomware", "rule_id": "8da8bbc2-49fa-5413-a355-ee8ab9360647", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/simple.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/simple.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/simple", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "simplyinstaller", "family_name": "Simplyinstaller", "category": "advanced_threat", "rule_id": "c56f2955-c3b6-5e62-959b-507ddb6aea54", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/simplyinstaller.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/simplyinstaller.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/simplyinstaller", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 1 }, { "family": "singleclickreg", "family_name": "Singleclickreg", "category": "advanced_threat", "rule_id": "a7074a42-3cd6-578f-9da5-6d42134e8145", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/singleclickreg.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/singleclickreg.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/singleclickreg", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 1 }, { "family": "sipia", "family_name": "Sipia", "category": "ransomware", "rule_id": "bf2c1394-6587-5d29-8975-7f68b396cfc7", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/sipia.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/sipia.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/sipia", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "sisron", "family_name": "Sisron", "category": "ransomware", "rule_id": "c4b229df-b11d-5a22-93a3-9865d0ad4f49", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/sisron.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/sisron.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/sisron", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "sixmuch", "family_name": "Sixmuch", "category": "ransomware", "rule_id": "3e4429e8-b07a-5417-9aed-a5164c6fa837", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/sixmuch.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/sixmuch.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/sixmuch", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "slingshot", "family_name": "Slingshot", "category": "advanced_threat", "rule_id": "775b6339-cfa8-5d74-8a98-c97f4e4c937b", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/slingshot.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/slingshot.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/slingshot", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 1 }, { "family": "sloddat", "family_name": "Sloddat", "category": "ransomware", "rule_id": "e8967349-8465-5060-abff-c01650bf3646", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/sloddat.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/sloddat.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/sloddat", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "smallhttp", "family_name": "Smallhttp", "category": "advanced_threat", "rule_id": "d040aa36-f233-5c01-bfed-b2a68bc25036", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/smallhttp.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/smallhttp.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/smallhttp", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 1 }, { "family": "smartapplicationcontroller", "family_name": "Smartapplicationcontroller", "category": "ransomware", "rule_id": "035c12c9-7d99-586a-a747-1fe5b76eef8c", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/smartapplicationcontroller.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/smartapplicationcontroller.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/smartapplicationcontroller", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "smartfortress", "family_name": "Smartfortress", "category": "trojan", "rule_id": "d5d74658-a509-5351-b05f-e28c34ec5ab8", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/smartfortress.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/smartfortress.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/smartfortress", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 1 }, { "family": "smartpctweaker", "family_name": "Smartpctweaker", "category": "advanced_threat", "rule_id": "94147c24-f951-568b-8cb3-96dbd3699ff0", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/smartpctweaker.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/smartpctweaker.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/smartpctweaker", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 1 }, { "family": "smheist", "family_name": "Smheist", "category": "backdoor", "rule_id": "b69252c6-d734-515f-b375-7d4c774898af", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/smheist.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/smheist.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/smheist", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 1 }, { "family": "sminager", "family_name": "Sminager", "category": "ransomware", "rule_id": "fadb1425-22c1-5391-9dd0-afe8d67bdcb8", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/sminager.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/sminager.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/sminager", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "smominru", "family_name": "Smominru", "category": "advanced_threat", "rule_id": "38da8817-eb87-5c01-9c10-753792b91f90", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/smominru.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/smominru.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/smominru", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 1 }, { "family": "smsspy", "family_name": "Smsspy", "category": "trojan", "rule_id": "eacc475d-b9c7-58fd-8bcc-aaeff1052e6b", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/smsspy.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/smsspy.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/smsspy", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 1 }, { "family": "smuatemisagi", "family_name": "Smuatemisagi", "category": "ransomware", "rule_id": "4b844e84-3a96-54aa-bd22-2017f1253d68", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/smuatemisagi.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/smuatemisagi.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/smuatemisagi", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "sneepy", "family_name": "Sneepy", "category": "trojan", "rule_id": "406d4dcf-d1b4-53fc-9f2e-2801528caa7a", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/sneepy.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/sneepy.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/sneepy", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 1 }, { "family": "snifie", "family_name": "Snifie", "category": "advanced_threat", "rule_id": "0892ed0f-702d-58f4-9e80-f2facebc23cf", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/snifie.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/snifie.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/snifie", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 1 }, { "family": "snifula", "family_name": "Snifula", "category": "banking_trojan", "rule_id": "17d01b58-444d-56ca-9cb7-ba55a21df3bc", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/snifula.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/snifula.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/snifula", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/banking-trojan-protection", "sample_count": 1 }, { "family": "snocry", "family_name": "Snocry", "category": "ransomware", "rule_id": "4b90b05e-8387-56ed-bf11-2e4209e9e560", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/snocry.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/snocry.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/snocry", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "snorm", "family_name": "Snorm", "category": "ransomware", "rule_id": "64549e27-ba3d-5855-8c98-5fa0309be9e3", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/snorm.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/snorm.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/snorm", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "snow", "family_name": "Snow", "category": "ransomware", "rule_id": "8758fcd0-1890-5ae8-bada-2e0a331b41a6", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/snow.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/snow.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/snow", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "softcdn", "family_name": "Softcdn", "category": "ransomware", "rule_id": "b5d6d4f2-cfd0-5288-96fb-f1e48e106448", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/softcdn.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/softcdn.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/softcdn", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "sokuxuan", "family_name": "Sokuxuan", "category": "ransomware", "rule_id": "2e2c36ff-f6fa-5859-baed-017a117e317c", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/sokuxuan.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/sokuxuan.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/sokuxuan", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "soldier", "family_name": "Soldier", "category": "ransomware", "rule_id": "e4e1eed8-a243-5fd3-8fdc-59cbc7def5f7", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/soldier.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/soldier.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/soldier", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "sonbokli", "family_name": "Sonbokli", "category": "ransomware", "rule_id": "caa35835-f519-5837-9528-da49567b43be", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/sonbokli.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/sonbokli.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/sonbokli", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "soulclose", "family_name": "Soulclose", "category": "ransomware", "rule_id": "cd5ba36a-3f17-54da-bb27-7998f0bd70c4", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/soulclose.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/soulclose.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/soulclose", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "spamer", "family_name": "Spamer", "category": "trojan", "rule_id": "9645fe93-3075-5c7a-b8a2-4d79991095c4", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/spamer.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/spamer.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/spamer", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 1 }, { "family": "spamha", "family_name": "Spamha", "category": "trojan", "rule_id": "f37dba0e-1b9f-55e5-adfd-f21d9c7f77b2", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/spamha.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/spamha.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/spamha", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 1 }, { "family": "specialsearchoffer", "family_name": "Specialsearchoffer", "category": "ransomware", "rule_id": "65bc7e5d-a140-531b-b4af-30bfef34d0ec", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/specialsearchoffer.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/specialsearchoffer.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/specialsearchoffer", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "spector", "family_name": "Spector", "category": "advanced_threat", "rule_id": "771d6b77-673f-5f20-a0e1-3562d134acb9", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/spector.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/spector.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/spector", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 1 }, { "family": "spectorpro", "family_name": "Spectorpro", "category": "advanced_threat", "rule_id": "d0ab89d2-784b-5015-a712-c2b5bdfda669", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/spectorpro.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/spectorpro.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/spectorpro", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 1 }, { "family": "specx", "family_name": "Specx", "category": "ransomware", "rule_id": "7b8516d9-d84b-587a-aeee-8e7f91687bab", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/specx.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/specx.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/specx", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "spoofer", "family_name": "Spoofer", "category": "advanced_threat", "rule_id": "66568f49-8dd2-570b-bd26-3a33fd21b58e", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/spoofer.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/spoofer.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/spoofer", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 1 }, { "family": "spook", "family_name": "Spook", "category": "ransomware", "rule_id": "d8215743-69f2-5c3d-b77c-703c2e8aa4cd", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/spook.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/spook.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/spook", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "springtech", "family_name": "Springtech", "category": "advanced_threat", "rule_id": "767084f6-e60b-59d3-8842-9208cb05bde8", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/springtech.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/springtech.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/springtech", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 1 }, { "family": "spyboter", "family_name": "Spyboter", "category": "advanced_threat", "rule_id": "47ff6732-f61a-5dde-8023-3f45143b4ebe", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/spyboter.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/spyboter.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/spyboter", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 1 }, { "family": "spynet", "family_name": "Spynet", "category": "ransomware", "rule_id": "07e81e88-e3a6-53b0-a881-a189a7b714db", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/spynet.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/spynet.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/spynet", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "spypro", "family_name": "Spypro", "category": "trojan", "rule_id": "8c79c4a2-fee3-542a-b250-4579c94dad34", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/spypro.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/spypro.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/spypro", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 1 }, { "family": "spyrix", "family_name": "Spyrix", "category": "advanced_threat", "rule_id": "3b48aa25-c80a-5043-aa91-993ef8dac131", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/spyrix.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/spyrix.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/spyrix", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 1 }, { "family": "spytech", "family_name": "Spytech", "category": "advanced_threat", "rule_id": "106fa553-8628-5ab3-a1ee-06a8b2f3d19f", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/spytech.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/spytech.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/spytech", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 1 }, { "family": "spywork", "family_name": "Spywork", "category": "advanced_threat", "rule_id": "2551e93f-41f0-5c23-a4c5-6a7f2035bdd6", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/spywork.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/spywork.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/spywork", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 1 }, { "family": "ssprotect", "family_name": "Ssprotect", "category": "advanced_threat", "rule_id": "514df185-4388-5610-910e-dc0738b20e0a", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/ssprotect.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/ssprotect.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/ssprotect", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 1 }, { "family": "staem", "family_name": "Staem", "category": "trojan", "rule_id": "a7c6e4dc-0ad2-5c56-9f54-10b9dc687c49", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/staem.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/staem.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/staem", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 1 }, { "family": "staget", "family_name": "Staget", "category": "ransomware", "rule_id": "90e3e728-b3ee-5780-8f29-b6f8c1b618c3", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/staget.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/staget.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/staget", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "stampado", "family_name": "Stampado", "category": "ransomware", "rule_id": "38f709aa-6917-527c-9975-f2ef0cb08075", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/stampado.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/stampado.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/stampado", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "startp", "family_name": "Startp", "category": "trojan", "rule_id": "e1becb0d-c31d-5187-9fd7-ea61636462f9", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/startp.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/startp.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/startp", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 1 }, { "family": "stegvob", "family_name": "Stegvob", "category": "ransomware", "rule_id": "8034450a-8e3c-59f3-af9e-4cd7f0df0519", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/stegvob.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/stegvob.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/stegvob", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "stercogs", "family_name": "Stercogs", "category": "ransomware", "rule_id": "00195545-fb36-5a60-9cf4-7e2f207456b4", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/stercogs.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/stercogs.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/stercogs", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "storm", "family_name": "Storm", "category": "botnet", "rule_id": "81d2793a-dae0-5916-ad41-7f414b484f51", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/storm.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/storm.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/storm", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/botnet-protection", "sample_count": 1 }, { "family": "strat", "family_name": "Strat", "category": "ransomware", "rule_id": "844358b7-7cc1-5f64-845a-12af7609313e", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/strat.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/strat.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/strat", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "streamer", "family_name": "Streamer", "category": "ransomware", "rule_id": "0944bf20-e432-59ac-b87f-44cfbfef9d3e", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/streamer.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/streamer.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/streamer", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "streespyer", "family_name": "Streespyer", "category": "trojan", "rule_id": "85c5f197-e8b1-5bf7-b554-3a0feeec24e9", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/streespyer.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/streespyer.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/streespyer", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 1 }, { "family": "strictorcrtd", "family_name": "Strictorcrtd", "category": "ransomware", "rule_id": "ae36aa1c-c6d8-53b6-8588-1cfc0f05e938", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/strictorcrtd.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/strictorcrtd.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/strictorcrtd", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "subroate", "family_name": "Subroate", "category": "ransomware", "rule_id": "13e97b61-8316-5064-955e-30b9190701e1", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/subroate.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/subroate.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/subroate", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "suite", "family_name": "Suite", "category": "ransomware", "rule_id": "e3c5f087-5b36-5568-9470-a0497b829ac3", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/suite.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/suite.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/suite", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "suixin", "family_name": "Suixin", "category": "trojan", "rule_id": "9f0dcd5b-3739-5729-9de1-d22a23c2b4a3", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/suixin.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/suixin.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/suixin", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 1 }, { "family": "superspy", "family_name": "Superspy", "category": "advanced_threat", "rule_id": "beecf064-1208-5009-ab85-1d8f22afd85f", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/superspy.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/superspy.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/superspy", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 1 }, { "family": "suviapen", "family_name": "Suviapen", "category": "ransomware", "rule_id": "6d3e69c4-a169-511b-9e57-ff9e79b95990", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/suviapen.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/suviapen.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/suviapen", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "swog", "family_name": "Swog", "category": "ransomware", "rule_id": "8ca58041-2aa1-540e-b628-07970658506b", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/swog.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/swog.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/swog", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "syncopate", "family_name": "Syncopate", "category": "advanced_threat", "rule_id": "52c562a1-04df-56d7-9e13-9c29069d0295", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/syncopate.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/syncopate.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/syncopate", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 1 }, { "family": "syscon", "family_name": "Syscon", "category": "ransomware", "rule_id": "1c78704c-f70e-5e20-8412-ae2b03f3103f", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/syscon.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/syscon.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/syscon", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "systemhijack", "family_name": "Systemhijack", "category": "ransomware", "rule_id": "8f41ac4f-c6b8-5ffd-bbc5-b1fd84805158", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/systemhijack.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/systemhijack.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/systemhijack", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "systimizer", "family_name": "Systimizer", "category": "advanced_threat", "rule_id": "ddaa3d9c-48dd-5f96-ba80-e703680d8521", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/systimizer.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/systimizer.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/systimizer", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 1 }, { "family": "systweaker", "family_name": "Systweaker", "category": "ransomware", "rule_id": "c6baad9c-e74b-58cf-99c8-92168ec78388", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/systweaker.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/systweaker.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/systweaker", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "sz4aaw", "family_name": "Sz4aaw", "category": "trojan", "rule_id": "f2359c46-624a-5810-a899-084eaf438cd2", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/sz4aaw.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/sz4aaw.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/sz4aaw", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 1 }, { "family": "talalpek", "family_name": "Talalpek", "category": "ransomware", "rule_id": "003c95b5-af99-5b63-aab1-75e4fc7a8674", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/talalpek.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/talalpek.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/talalpek", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "talmad", "family_name": "Talmad", "category": "ransomware", "rule_id": "c1dda0c2-d420-55bc-b547-f7166cf7df0d", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/talmad.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/talmad.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/talmad", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "tanspy", "family_name": "Tanspy", "category": "ransomware", "rule_id": "9447314e-ceed-5d17-8a5b-f287015bc1ca", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/tanspy.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/tanspy.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/tanspy", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "taobao", "family_name": "Taobao", "category": "advanced_threat", "rule_id": "015bcee8-b1bb-50a1-9856-6805a662513a", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/taobao.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/taobao.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/taobao", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 1 }, { "family": "taojinstar", "family_name": "Taojinstar", "category": "advanced_threat", "rule_id": "090de40a-4897-584d-aa16-b1d0b90bf08b", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/taojinstar.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/taojinstar.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/taojinstar", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 1 }, { "family": "taptrap", "family_name": "Taptrap", "category": "trojan", "rule_id": "21d1fb3a-373d-53bf-901f-f151d1f5228a", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/taptrap.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/taptrap.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/taptrap", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 1 }, { "family": "tartober", "family_name": "Tartober", "category": "ransomware", "rule_id": "79e1e1bd-000c-56dd-9c8c-e3782fa3f392", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/tartober.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/tartober.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/tartober", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "taskkill", "family_name": "Taskkill", "category": "ransomware", "rule_id": "e4223e0e-45ae-5748-9b95-9a6fbf0876ff", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/taskkill.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/taskkill.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/taskkill", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "taworm", "family_name": "Taworm", "category": "ransomware", "rule_id": "915bd31a-c6ff-5b27-8f05-85595fed097a", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/taworm.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/taworm.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/taworm", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "tcdrop", "family_name": "Tcdrop", "category": "ransomware", "rule_id": "02142d09-1e75-5667-9224-8003fc352012", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/tcdrop.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/tcdrop.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/tcdrop", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "teambot", "family_name": "Teambot", "category": "ransomware", "rule_id": "758d4010-f69c-54ed-8e69-f4a2a51a6a42", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/teambot.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/teambot.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/teambot", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "teamviewer", "family_name": "Teamviewer", "category": "backdoor", "rule_id": "3aac0615-e908-56e7-8775-d511d45f2c9c", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/teamviewer.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/teamviewer.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/teamviewer", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 1 }, { "family": "tear", "family_name": "Tear", "category": "trojan", "rule_id": "030707c3-1b11-50f1-a000-0f4583018500", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/tear.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/tear.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/tear", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 1 }, { "family": "tedroo", "family_name": "Tedroo", "category": "ransomware", "rule_id": "15ef091a-36a6-5ccd-af9e-65ebb0cb7e00", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/tedroo.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/tedroo.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/tedroo", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "temcac", "family_name": "Temcac", "category": "ransomware", "rule_id": "71e684d5-8167-57f6-8477-fc25e708c769", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/temcac.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/temcac.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/temcac", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "teramind", "family_name": "Teramind", "category": "advanced_threat", "rule_id": "b1cc66fe-c983-554e-83ba-bb63b9e90463", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/teramind.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/teramind.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/teramind", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 1 }, { "family": "terkcop", "family_name": "Terkcop", "category": "ransomware", "rule_id": "362c7578-38d1-53e7-a078-8488be38437b", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/terkcop.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/terkcop.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/terkcop", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "termite", "family_name": "Termite", "category": "trojan", "rule_id": "2f17ecbf-c69c-551f-9de0-3c7729b31f7e", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/termite.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/termite.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/termite", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 1 }, { "family": "tgrandongc", "family_name": "Tgrandongc", "category": "ransomware", "rule_id": "4bd895a9-b2e5-570a-b145-40f5854d8562", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/tgrandongc.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/tgrandongc.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/tgrandongc", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "thoper", "family_name": "Thoper", "category": "ransomware", "rule_id": "688c37b3-e3c5-5917-8076-ab65a3844ed2", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/thoper.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/thoper.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/thoper", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "tibsystems", "family_name": "Tibsystems", "category": "ransomware", "rule_id": "bb2d8d8e-bfd5-5ac6-82c8-3e87f47a2220", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/tibsystems.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/tibsystems.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/tibsystems", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "tick", "family_name": "Tick", "category": "backdoor", "rule_id": "df1427c3-2587-507d-b140-d9486fafd649", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/tick.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/tick.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/tick", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 1 }, { "family": "tierry", "family_name": "Tierry", "category": "ransomware", "rule_id": "2a01ce02-5269-5e1e-9a54-bc282a7c66df", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/tierry.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/tierry.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/tierry", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "tiklog", "family_name": "Tiklog", "category": "advanced_threat", "rule_id": "aa9becc5-eec6-5399-86f2-1ae8e5fa4ec6", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/tiklog.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/tiklog.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/tiklog", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 1 }, { "family": "tikoog", "family_name": "Tikoog", "category": "ransomware", "rule_id": "1c63a4a8-d203-5fc2-920d-45dd99491d49", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/tikoog.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/tikoog.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/tikoog", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "tinclex", "family_name": "Tinclex", "category": "ransomware", "rule_id": "702a510d-ecb5-54d4-9807-851a78582c8f", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/tinclex.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/tinclex.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/tinclex", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "tinydl", "family_name": "Tinydl", "category": "ransomware", "rule_id": "581d2fd5-431a-54ae-961f-e01562b666c1", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/tinydl.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/tinydl.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/tinydl", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "tipp", "family_name": "Tipp", "category": "ransomware", "rule_id": "c2660a21-3fdc-5448-8b74-9d6b8c0ac88d", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/tipp.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/tipp.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/tipp", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "tivmonk", "family_name": "Tivmonk", "category": "ransomware", "rule_id": "c96d7c35-40e4-5461-bbc6-3ca28ce09305", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/tivmonk.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/tivmonk.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/tivmonk", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "tmgfayxalbaj", "family_name": "Tmgfayxalbaj", "category": "ransomware", "rule_id": "2ab29f10-9877-5a56-9657-475590ea240a", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/tmgfayxalbaj.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/tmgfayxalbaj.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/tmgfayxalbaj", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "tobor", "family_name": "Tobor", "category": "trojan", "rule_id": "baf3fb26-3a88-5766-bc0d-fa356d98950c", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/tobor.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/tobor.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/tobor", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 1 }, { "family": "tomegun", "family_name": "Tomegun", "category": "ransomware", "rule_id": "b52c9938-7a4a-5e19-a441-925ad2fd3576", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/tomegun.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/tomegun.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/tomegun", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "tongji", "family_name": "Tongji", "category": "ransomware", "rule_id": "f1c84407-2ff8-58f8-9764-0e9a03b4e892", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/tongji.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/tongji.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/tongji", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "tosthin", "family_name": "Tosthin", "category": "ransomware", "rule_id": "3a820846-d0f4-5251-8414-41414afbb102", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/tosthin.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/tosthin.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/tosthin", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "totbrick", "family_name": "Totbrick", "category": "ransomware", "rule_id": "b2a403a0-519a-5c3c-b31c-d7cbb7ffe06e", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/totbrick.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/totbrick.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/totbrick", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "tougle", "family_name": "Tougle", "category": "ransomware", "rule_id": "3ed88018-d3ef-5119-b80c-0ab13b5bc985", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/tougle.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/tougle.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/tougle", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "tracur", "family_name": "Tracur", "category": "ransomware", "rule_id": "bd2e4bad-104e-5de2-8f37-82e6278bbaab", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/tracur.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/tracur.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/tracur", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "trainer", "family_name": "Trainer", "category": "ransomware", "rule_id": "e50f5f92-c287-5821-80c4-a788f46cccd2", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/trainer.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/trainer.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/trainer", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "transmit", "family_name": "Transmit", "category": "trojan", "rule_id": "772e8e7b-23cf-5f98-a483-0bb87ac6eeb2", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/transmit.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/transmit.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/transmit", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 1 }, { "family": "travnet", "family_name": "Travnet", "category": "trojan", "rule_id": "2729d084-c0b4-5304-b38b-460b92d68d3b", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/travnet.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/travnet.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/travnet", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 1 }, { "family": "trialkiller", "family_name": "Trialkiller", "category": "ransomware", "rule_id": "9bb9d900-d676-5e92-8fff-4821aaf002e0", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/trialkiller.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/trialkiller.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/trialkiller", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "trilon", "family_name": "Trilon", "category": "ransomware", "rule_id": "37997a41-5148-5a84-af82-03da0d8d4633", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/trilon.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/trilon.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/trilon", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "trioris", "family_name": "Trioris", "category": "ransomware", "rule_id": "25191db9-c66e-525d-95ed-5337c8725ed4", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/trioris.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/trioris.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/trioris", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "tron", "family_name": "Tron", "category": "ransomware", "rule_id": "d7d3f602-137d-5a58-9ecb-87f46cc0931d", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/tron.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/tron.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/tron", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "troxa", "family_name": "Troxa", "category": "ransomware", "rule_id": "f65c9d0a-e067-5019-aa52-81a660442d7b", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/troxa.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/troxa.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/troxa", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "trpctrooper", "family_name": "Trpctrooper", "category": "ransomware", "rule_id": "6608f8f2-03f3-51b6-bf48-1585a55c013c", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/trpctrooper.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/trpctrooper.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/trpctrooper", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "tukrina", "family_name": "Tukrina", "category": "ransomware", "rule_id": "f2d3a179-92cc-5115-be10-26c9833a0985", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/tukrina.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/tukrina.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/tukrina", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "tyuimoi", "family_name": "Tyuimoi", "category": "ransomware", "rule_id": "f0288bef-f89a-5d7c-aa03-0d7ca9b3c1aa", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/tyuimoi.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/tyuimoi.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/tyuimoi", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "udslee", "family_name": "Udslee", "category": "ransomware", "rule_id": "aa399148-3df5-5a79-b24f-69350d6d9d70", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/udslee.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/udslee.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/udslee", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "uiwao0sam", "family_name": "Uiwao0sam", "category": "trojan", "rule_id": "d6dcc85d-7de4-59f5-9e25-d6e8390e1a3b", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/uiwao0sam.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/uiwao0sam.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/uiwao0sam", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 1 }, { "family": "uiwaowr6xsaje", "family_name": "Uiwaowr6xsaje", "category": "ransomware", "rule_id": "f084b058-a771-55b1-8ec6-0698276b6e4f", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/uiwaowr6xsaje.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/uiwaowr6xsaje.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/uiwaowr6xsaje", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "umgfxgkazyg", "family_name": "Umgfxgkazyg", "category": "ransomware", "rule_id": "f497c416-daf2-5514-b3a9-0ff7927d548c", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/umgfxgkazyg.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/umgfxgkazyg.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/umgfxgkazyg", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "umqabaxnjogc", "family_name": "Umqabaxnjogc", "category": "ransomware", "rule_id": "cc10b6a8-0e43-50b3-be09-9606d301acb1", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/umqabaxnjogc.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/umqabaxnjogc.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/umqabaxnjogc", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "unigo", "family_name": "Unigo", "category": "advanced_threat", "rule_id": "fa5a158c-8a21-5036-b3ee-8aa602d4ea2b", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/unigo.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/unigo.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/unigo", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 1 }, { "family": "upackdam", "family_name": "Upackdam", "category": "ransomware", "rule_id": "2489e52c-539f-59d4-80bd-b5b07f0884dc", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/upackdam.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/upackdam.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/upackdam", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "uploader", "family_name": "Uploader", "category": "trojan", "rule_id": "17b9a5fd-c5bf-56ea-a670-a32cb4bbddf0", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/uploader.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/uploader.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/uploader", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 1 }, { "family": "urausy", "family_name": "Urausy", "category": "ransomware", "rule_id": "dd3dfedf-6d7f-5516-9b9d-0b098281c578", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/urausy.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/urausy.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/urausy", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "urcs", "family_name": "Urcs", "category": "ransomware", "rule_id": "08d02dfd-c4f4-5903-a651-f6fff8a2a6ad", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/urcs.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/urcs.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/urcs", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "ursnifdropper", "family_name": "Ursnifdropper", "category": "trojan", "rule_id": "35d25bc3-d61d-51bd-ad19-09846eb041f7", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/ursnifdropper.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/ursnifdropper.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/ursnifdropper", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 1 }, { "family": "uruasy", "family_name": "Uruasy", "category": "ransomware", "rule_id": "a7c7488c-eaef-5d8a-aa64-be0a59dc2977", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/uruasy.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/uruasy.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/uruasy", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "vakcune", "family_name": "Vakcune", "category": "ransomware", "rule_id": "97c317fe-8921-506c-953e-e4781718de95", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/vakcune.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/vakcune.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/vakcune", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "valcaryx", "family_name": "Valcaryx", "category": "ransomware", "rule_id": "dcb0d3f7-af4a-50a5-86b0-9ee970f79cde", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/valcaryx.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/valcaryx.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/valcaryx", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "vbcode", "family_name": "Vbcode", "category": "ransomware", "rule_id": "c37f19f8-44b6-5fd6-a0a6-f6d479d7200d", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/vbcode.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/vbcode.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/vbcode", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "vbdrop", "family_name": "Vbdrop", "category": "ransomware", "rule_id": "14536f5d-d54d-529f-97ca-55992efc8bca", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/vbdrop.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/vbdrop.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/vbdrop", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "vbkeylog", "family_name": "Vbkeylog", "category": "advanced_threat", "rule_id": "14bbebea-d542-5c63-8860-2e286dc14aeb", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/vbkeylog.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/vbkeylog.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/vbkeylog", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 1 }, { "family": "vbmod", "family_name": "Vbmod", "category": "ransomware", "rule_id": "b314d8c8-8a47-5b9b-9306-c475cef2056c", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/vbmod.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/vbmod.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/vbmod", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "verecno", "family_name": "Verecno", "category": "ransomware", "rule_id": "66ae6cd9-7fc9-529a-a85d-b00648b7a68d", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/verecno.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/verecno.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/verecno", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "vesenlosow", "family_name": "Vesenlosow", "category": "trojan", "rule_id": "4bb78bd7-6fb2-5689-9b1b-7fb5e74f1af0", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/vesenlosow.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/vesenlosow.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/vesenlosow", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 1 }, { "family": "vidar", "family_name": "Vidar", "category": "infostealer", "rule_id": "8e0fcc68-515b-5054-a97c-47c2fa0d2ee7", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/vidar.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/vidar.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/vidar", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/infostealer-protection", "sample_count": 1 }, { "family": "vidarstealer", "family_name": "Vidarstealer", "category": "advanced_threat", "rule_id": "2990f093-d55b-50c1-b834-a887a0b6cbee", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/vidarstealer.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/vidarstealer.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/vidarstealer", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 1 }, { "family": "viddyhd", "family_name": "Viddyhd", "category": "ransomware", "rule_id": "4a5b95c0-5bc5-5705-99d4-6828f233c40e", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/viddyhd.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/viddyhd.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/viddyhd", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "virgilio", "family_name": "Virgilio", "category": "ransomware", "rule_id": "c4cf211b-4082-503c-a321-8dc73f32ddb5", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/virgilio.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/virgilio.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/virgilio", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "vitruvian", "family_name": "Vitruvian", "category": "ransomware", "rule_id": "2be98152-9176-5edc-9a20-a418ed56a5cf", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/vitruvian.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/vitruvian.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/vitruvian", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "vixenpanda", "family_name": "Vixenpanda", "category": "backdoor", "rule_id": "06a2fe31-4651-5c44-850a-7ff3a64cfc93", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/vixenpanda.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/vixenpanda.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/vixenpanda", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 1 }, { "family": "vixup", "family_name": "Vixup", "category": "ransomware", "rule_id": "b6662d1d-02fb-5200-862a-2d548fffeb31", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/vixup.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/vixup.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/vixup", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "vkbase", "family_name": "Vkbase", "category": "ransomware", "rule_id": "b5bd3e06-5478-5f62-b410-800c01e1112d", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/vkbase.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/vkbase.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/vkbase", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "vmjfbex4hpjj", "family_name": "Vmjfbex4hpjj", "category": "ransomware", "rule_id": "553a93ee-8353-5130-9b10-262d890addab", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/vmjfbex4hpjj.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/vmjfbex4hpjj.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/vmjfbex4hpjj", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "vopackage", "family_name": "Vopackage", "category": "ransomware", "rule_id": "62e18ded-c2d3-5a4f-91f9-bf68bfeafbc7", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/vopackage.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/vopackage.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/vopackage", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "vortex", "family_name": "Vortex", "category": "ransomware", "rule_id": "6f1fbf5a-63ba-5fea-982c-5434a1005c07", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/vortex.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/vortex.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/vortex", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "votchsys", "family_name": "Votchsys", "category": "ransomware", "rule_id": "f9a5d64c-c9f5-564c-9868-e2df80e38cb1", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/votchsys.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/votchsys.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/votchsys", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "vstoolbar", "family_name": "Vstoolbar", "category": "trojan", "rule_id": "abb97e8e-a5be-5f63-b318-bee4da7cfc49", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/vstoolbar.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/vstoolbar.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/vstoolbar", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 1 }, { "family": "vtub", "family_name": "Vtub", "category": "advanced_threat", "rule_id": "41f06090-e847-5134-a023-5f3e81ab13fe", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/vtub.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/vtub.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/vtub", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 1 }, { "family": "vxidl", "family_name": "Vxidl", "category": "advanced_threat", "rule_id": "595ff33d-7538-50a6-8e36-57230067cce8", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/vxidl.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/vxidl.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/vxidl", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 1 }, { "family": "vz2au4dpceii", "family_name": "Vz2au4dpceii", "category": "ransomware", "rule_id": "46133d95-7c58-5eea-be8c-f1c690f54af9", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/vz2au4dpceii.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/vz2au4dpceii.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/vz2au4dpceii", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "w10tweak", "family_name": "W10tweak", "category": "ransomware", "rule_id": "889ba716-b463-5c61-a635-8283472dc53e", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/w10tweak.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/w10tweak.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/w10tweak", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "wadhrama", "family_name": "Wadhrama", "category": "ransomware", "rule_id": "ec394e7b-7ed2-5804-874e-2b8b32a3ed3e", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/wadhrama.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/wadhrama.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/wadhrama", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "walerlop", "family_name": "Walerlop", "category": "ransomware", "rule_id": "087514b6-b740-56b0-b32d-98513ec26430", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/walerlop.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/walerlop.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/walerlop", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "wansrog", "family_name": "Wansrog", "category": "ransomware", "rule_id": "9c1d5801-9fa7-5fcc-b068-6ae18717f093", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/wansrog.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/wansrog.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/wansrog", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "wavipeg", "family_name": "Wavipeg", "category": "ransomware", "rule_id": "a00e1cc7-ca4b-5af6-9d21-eac973f100b7", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/wavipeg.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/wavipeg.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/wavipeg", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "webaltatoolbar", "family_name": "Webaltatoolbar", "category": "advanced_threat", "rule_id": "f1e205a9-da9c-55e0-8c30-15203cc2127b", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/webaltatoolbar.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/webaltatoolbar.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/webaltatoolbar", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 1 }, { "family": "webbrowserpassview", "family_name": "Webbrowserpassview", "category": "trojan", "rule_id": "9a7bf27b-3a5b-5cdc-a4be-9903e25ad142", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/webbrowserpassview.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/webbrowserpassview.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/webbrowserpassview", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 1 }, { "family": "webdial", "family_name": "Webdial", "category": "advanced_threat", "rule_id": "2cee7486-0cbb-5555-8075-83332fbb8cf4", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/webdial.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/webdial.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/webdial", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 1 }, { "family": "webisida", "family_name": "Webisida", "category": "advanced_threat", "rule_id": "b081b1f4-c6dd-5c6f-acb9-6b18097fe844", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/webisida.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/webisida.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/webisida", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 1 }, { "family": "weenloc", "family_name": "Weenloc", "category": "ransomware", "rule_id": "6677555d-bd2e-55c3-b2b2-6f760b0820d0", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/weenloc.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/weenloc.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/weenloc", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "wellmess", "family_name": "Wellmess", "category": "ransomware", "rule_id": "4c8b234c-e8f9-5700-bd98-98f707556229", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/wellmess.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/wellmess.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/wellmess", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "werpoapt", "family_name": "Werpoapt", "category": "backdoor", "rule_id": "e4377fca-1391-5ae6-9990-1f69365c7f1d", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/werpoapt.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/werpoapt.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/werpoapt", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 1 }, { "family": "wfpdisabler", "family_name": "Wfpdisabler", "category": "trojan", "rule_id": "9b0c936d-43c5-58c8-9797-0c05e6fd66a0", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/wfpdisabler.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/wfpdisabler.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/wfpdisabler", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 1 }, { "family": "wgapatch", "family_name": "Wgapatch", "category": "ransomware", "rule_id": "ed5a2219-e3bb-5400-b1af-fd6b82c51659", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/wgapatch.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/wgapatch.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/wgapatch", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "whenu", "family_name": "Whenu", "category": "advanced_threat", "rule_id": "4d790d67-8566-5de6-8b4c-e3b418c61f99", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/whenu.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/whenu.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/whenu", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 1 }, { "family": "whimoo", "family_name": "Whimoo", "category": "ransomware", "rule_id": "36aafbcf-5443-53b1-be47-aba74fe616ce", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/whimoo.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/whimoo.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/whimoo", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "whiteclick", "family_name": "Whiteclick", "category": "ransomware", "rule_id": "c6e32628-01bd-5b5e-8f39-fca5bea5b829", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/whiteclick.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/whiteclick.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/whiteclick", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "whiteice", "family_name": "Whiteice", "category": "ransomware", "rule_id": "84079f3c-7b56-5857-88ac-cb8ba44b7379", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/whiteice.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/whiteice.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/whiteice", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "wi0abyrjybki", "family_name": "Wi0abyrjybki", "category": "trojan", "rule_id": "d05be3bd-c40b-53cf-aa97-3b33ad49a3ac", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/wi0abyrjybki.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/wi0abyrjybki.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/wi0abyrjybki", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 1 }, { "family": "windang", "family_name": "Windang", "category": "trojan", "rule_id": "aead065e-c41b-5cac-bf42-87992781649e", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/windang.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/windang.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/windang", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 1 }, { "family": "winemm", "family_name": "Winemm", "category": "ransomware", "rule_id": "590d1a25-343d-5013-ac0b-c7301121fc5c", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/winemm.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/winemm.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/winemm", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "winiga", "family_name": "Winiga", "category": "ransomware", "rule_id": "209cf13b-64ca-5e17-9967-49fce0ae9b6f", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/winiga.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/winiga.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/winiga", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "winner", "family_name": "Winner", "category": "ransomware", "rule_id": "db4ad56d-143b-535b-93f7-b3cfd784c55e", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/winner.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/winner.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/winner", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "winshell", "family_name": "Winshell", "category": "trojan", "rule_id": "afe834f0-768d-5d8e-8a8f-2284710a7005", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/winshell.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/winshell.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/winshell", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 1 }, { "family": "winshow", "family_name": "Winshow", "category": "ransomware", "rule_id": "8249bcaf-66fd-521d-98cd-b092d52c4660", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/winshow.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/winshow.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/winshow", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "winspeedup", "family_name": "Winspeedup", "category": "ransomware", "rule_id": "8465ca63-a829-578e-82db-723ccc3bcecf", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/winspeedup.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/winspeedup.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/winspeedup", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "wintaskad", "family_name": "Wintaskad", "category": "advanced_threat", "rule_id": "4902ad02-75a1-5c51-995c-e9884c558117", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/wintaskad.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/wintaskad.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/wintaskad", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 1 }, { "family": "wirelessnetview", "family_name": "Wirelessnetview", "category": "trojan", "rule_id": "bf7cf1d2-65b4-50b1-8f76-c983154bc5bf", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/wirelessnetview.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/wirelessnetview.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/wirelessnetview", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 1 }, { "family": "wisbipuf", "family_name": "Wisbipuf", "category": "trojan", "rule_id": "56e5ca8e-c1e0-549b-9e88-1f2662d9c45f", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/wisbipuf.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/wisbipuf.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/wisbipuf", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 1 }, { "family": "wisesystemmechanic", "family_name": "Wisesystemmechanic", "category": "advanced_threat", "rule_id": "297fe1b1-25a0-5fe3-9481-58d075b06b4a", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/wisesystemmechanic.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/wisesystemmechanic.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/wisesystemmechanic", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 1 }, { "family": "wlock", "family_name": "Wlock", "category": "ransomware", "rule_id": "796593b4-2e93-5073-8617-92c1e275a46a", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/wlock.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/wlock.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/wlock", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "wmfap", "family_name": "Wmfap", "category": "advanced_threat", "rule_id": "7129ff98-a3cc-5dd0-8ade-dd2a4d90d527", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/wmfap.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/wmfap.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/wmfap", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 1 }, { "family": "wmqarhe5p8fbt", "family_name": "Wmqarhe5p8fbt", "category": "ransomware", "rule_id": "2be6366e-b419-556e-bfc8-4eb417250fed", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/wmqarhe5p8fbt.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/wmqarhe5p8fbt.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/wmqarhe5p8fbt", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "wombat", "family_name": "Wombat", "category": "ransomware", "rule_id": "3788af2f-dcb1-5cb1-a607-2ed60be65281", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/wombat.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/wombat.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/wombat", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "woripecs", "family_name": "Woripecs", "category": "ransomware", "rule_id": "cad8d714-cede-5812-844c-0d1c22e59846", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/woripecs.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/woripecs.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/woripecs", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "wrar", "family_name": "Wrar", "category": "trojan", "rule_id": "7090534b-a07b-528f-b721-0fb0d0012539", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/wrar.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/wrar.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/wrar", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 1 }, { "family": "wraut", "family_name": "Wraut", "category": "ransomware", "rule_id": "4e1fb477-0710-518f-a4ba-c91f9fb00a03", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/wraut.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/wraut.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/wraut", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "wswhacker", "family_name": "Wswhacker", "category": "trojan", "rule_id": "c63391b9-6be7-5082-be0e-68e78e66808f", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/wswhacker.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/wswhacker.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/wswhacker", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 1 }, { "family": "wuca", "family_name": "Wuca", "category": "ransomware", "rule_id": "886d65cb-0205-5bfe-b0dc-34fb43438a2a", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/wuca.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/wuca.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/wuca", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "wuji", "family_name": "Wuji", "category": "ransomware", "rule_id": "09b2c5f8-2bad-5245-82ec-47c33693dd5a", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/wuji.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/wuji.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/wuji", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "xcomp", "family_name": "Xcomp", "category": "ransomware", "rule_id": "7c43bc9e-ca12-522f-8df8-d4d117bb3304", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/xcomp.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/xcomp.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/xcomp", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "xiaobaminer", "family_name": "Xiaobaminer", "category": "trojan", "rule_id": "83d4cfec-4dbe-51b3-81ef-19f75cca96d0", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/xiaobaminer.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/xiaobaminer.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/xiaobaminer", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 1 }, { "family": "xihet", "family_name": "Xihet", "category": "ransomware", "rule_id": "8d65edda-4b31-53b2-bf47-5268065f5da6", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/xihet.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/xihet.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/xihet", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "xizfawwyz0ab", "family_name": "Xizfawwyz0ab", "category": "ransomware", "rule_id": "f7815be0-a457-5459-bd77-d6186437726c", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/xizfawwyz0ab.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/xizfawwyz0ab.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/xizfawwyz0ab", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "xmgfa0ysjgki", "family_name": "Xmgfa0ysjgki", "category": "ransomware", "rule_id": "869c963b-156a-5d22-8eb2-964c1b35d645", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/xmgfa0ysjgki.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/xmgfa0ysjgki.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/xmgfa0ysjgki", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "xmgfbs8lpqoib", "family_name": "Xmgfbs8lpqoib", "category": "ransomware", "rule_id": "b858ba33-a514-5baf-a678-b7e9037a44c8", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/xmgfbs8lpqoib.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/xmgfbs8lpqoib.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/xmgfbs8lpqoib", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "xmrminer", "family_name": "Xmrminer", "category": "trojan", "rule_id": "13a66897-a935-53f0-bd27-1598cb727917", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/xmrminer.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/xmrminer.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/xmrminer", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 1 }, { "family": "xnhmeb", "family_name": "Xnhmeb", "category": "ransomware", "rule_id": "4eef2e64-0aab-52b2-a87b-ab8a685bf94e", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/xnhmeb.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/xnhmeb.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/xnhmeb", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "xorpix", "family_name": "Xorpix", "category": "ransomware", "rule_id": "5c66352b-59e2-5586-8da7-d1f1c344f2a9", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/xorpix.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/xorpix.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/xorpix", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "xscan", "family_name": "Xscan", "category": "advanced_threat", "rule_id": "7c835914-03a2-5fe2-ab02-f4576d227e09", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/xscan.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/xscan.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/xscan", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 1 }, { "family": "xundlldl", "family_name": "Xundlldl", "category": "ransomware", "rule_id": "6decbc61-5425-5048-a653-c60546afc718", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/xundlldl.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/xundlldl.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/xundlldl", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "xxybsq", "family_name": "Xxybsq", "category": "ransomware", "rule_id": "fed8095f-e259-5244-a766-4d45f7e9f1cc", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/xxybsq.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/xxybsq.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/xxybsq", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "xxybss", "family_name": "Xxybss", "category": "trojan", "rule_id": "13a8b6e3-7fba-512f-beba-46255ead5a04", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/xxybss.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/xxybss.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/xxybss", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 1 }, { "family": "xxybtw", "family_name": "Xxybtw", "category": "ransomware", "rule_id": "9c1aa981-e31f-51df-93c1-9678acca6479", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/xxybtw.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/xxybtw.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/xxybtw", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "xxybuj", "family_name": "Xxybuj", "category": "trojan", "rule_id": "9fee60c1-8282-5c7b-b92d-503b18548bb5", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/xxybuj.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/xxybuj.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/xxybuj", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 1 }, { "family": "xxybvi", "family_name": "Xxybvi", "category": "trojan", "rule_id": "977dbc52-6679-5090-8168-7920fc79bc7a", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/xxybvi.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/xxybvi.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/xxybvi", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 1 }, { "family": "xxybwe", "family_name": "Xxybwe", "category": "trojan", "rule_id": "3ce69397-5bb7-5271-98d9-7b059ef19998", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/xxybwe.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/xxybwe.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/xxybwe", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 1 }, { "family": "xxybyu", "family_name": "Xxybyu", "category": "trojan", "rule_id": "2e5bb1df-883a-5584-9d01-687738ccca94", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/xxybyu.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/xxybyu.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/xxybyu", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 1 }, { "family": "xxybzx", "family_name": "Xxybzx", "category": "trojan", "rule_id": "7872f9ee-dc54-505b-9f29-5dc03773c1c2", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/xxybzx.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/xxybzx.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/xxybzx", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 1 }, { "family": "xxycbl", "family_name": "Xxycbl", "category": "ransomware", "rule_id": "4c36a00e-b4cd-5179-a637-4f3c5468f938", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/xxycbl.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/xxycbl.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/xxycbl", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "xxycdl", "family_name": "Xxycdl", "category": "ransomware", "rule_id": "624e9f0b-c5d8-5360-b51b-806891acfb60", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/xxycdl.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/xxycdl.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/xxycdl", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "xxycec", "family_name": "Xxycec", "category": "ransomware", "rule_id": "fac0e693-601a-5bd4-8ea2-2a5ab7c49a03", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/xxycec.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/xxycec.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/xxycec", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "xxycff", "family_name": "Xxycff", "category": "ransomware", "rule_id": "b0cf5db0-1b16-5f52-9f2c-f2a40fac846e", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/xxycff.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/xxycff.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/xxycff", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "xxychs", "family_name": "Xxychs", "category": "ransomware", "rule_id": "8e95957a-725e-5c5f-873b-66d54d1613e8", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/xxychs.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/xxychs.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/xxychs", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "xxyeut", "family_name": "Xxyeut", "category": "ransomware", "rule_id": "25619298-94bf-5c94-ab30-a24bc240b778", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/xxyeut.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/xxyeut.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/xxyeut", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "xxyfhz", "family_name": "Xxyfhz", "category": "ransomware", "rule_id": "7f9c6fa3-4253-5903-b77a-a9491e7bcfa8", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/xxyfhz.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/xxyfhz.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/xxyfhz", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "xyntservice", "family_name": "Xyntservice", "category": "advanced_threat", "rule_id": "b4a87a48-7c52-5a2a-b794-509072c8f5b6", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/xyntservice.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/xyntservice.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/xyntservice", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 1 }, { "family": "yiwanzhushou", "family_name": "Yiwanzhushou", "category": "ransomware", "rule_id": "2ce034a4-3c20-5dfb-a63f-1241f3ca8874", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/yiwanzhushou.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yiwanzhushou.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/yiwanzhushou", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "ymkfawdgfnmi", "family_name": "Ymkfawdgfnmi", "category": "trojan", "rule_id": "4ce00ffd-eb43-50b2-be5b-0d95a51b14bd", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/ymkfawdgfnmi.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/ymkfawdgfnmi.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/ymkfawdgfnmi", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 1 }, { "family": "yolov", "family_name": "Yolov", "category": "ransomware", "rule_id": "cbe34ad2-ab31-56b6-89dd-b65e0489ae2e", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/yolov.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yolov.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/yolov", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "younglotus", "family_name": "Younglotus", "category": "backdoor", "rule_id": "2a532f2e-9fae-56cf-9c7f-9fc9206be0ab", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/younglotus.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/younglotus.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/younglotus", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 1 }, { "family": "youtubedownloaderguru", "family_name": "Youtubedownloaderguru", "category": "trojan", "rule_id": "2af978db-6ebc-5ff3-9e11-e5c1c1641756", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/youtubedownloaderguru.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/youtubedownloaderguru.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/youtubedownloaderguru", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 1 }, { "family": "yuri", "family_name": "Yuri", "category": "trojan", "rule_id": "59518bf9-557a-506b-b3ce-a4c25ba87e80", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/yuri.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yuri.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/yuri", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 1 }, { "family": "yy0aueeqipni", "family_name": "Yy0aueeqipni", "category": "ransomware", "rule_id": "5a919255-6994-5236-9913-202dd6c55a95", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/yy0aueeqipni.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yy0aueeqipni.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/yy0aueeqipni", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "yywaa08jovdg", "family_name": "Yywaa08jovdg", "category": "ransomware", "rule_id": "2179e675-20ad-54a5-8e37-3aee6d579b6b", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/yywaa08jovdg.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yywaa08jovdg.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/yywaa08jovdg", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "za0au42rofm", "family_name": "Za0au42rofm", "category": "ransomware", "rule_id": "2d55ca70-b1f1-5770-ac3e-85b141276422", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/za0au42rofm.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/za0au42rofm.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/za0au42rofm", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "zacinlo", "family_name": "Zacinlo", "category": "advanced_threat", "rule_id": "b738a5f6-e876-583f-8bab-cecc7f909d83", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/zacinlo.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/zacinlo.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/zacinlo", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 1 }, { "family": "zacom", "family_name": "Zacom", "category": "ransomware", "rule_id": "02c394e3-440e-5570-b758-c2dd7f9765bd", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/zacom.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/zacom.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/zacom", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "zanoza", "family_name": "Zanoza", "category": "trojan", "rule_id": "4ed1fdea-ceca-5c6d-8b55-5b8796af6bd7", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/zanoza.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/zanoza.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/zanoza", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 1 }, { "family": "zaxar", "family_name": "Zaxar", "category": "ransomware", "rule_id": "58230bfb-f34e-5cdc-87ae-1dd6f5c9598d", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/zaxar.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/zaxar.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/zaxar", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "zbiw", "family_name": "Zbiw", "category": "ransomware", "rule_id": "bb494799-cf4f-5ccc-afe6-a4761ae09b42", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/zbiw.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/zbiw.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/zbiw", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "zdowbot", "family_name": "Zdowbot", "category": "trojan", "rule_id": "018eb0e9-215c-5b31-a361-75ab1e23925b", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/zdowbot.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/zdowbot.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/zdowbot", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 1 }, { "family": "zenfly", "family_name": "Zenfly", "category": "ransomware", "rule_id": "7983e11b-d6c6-54ba-8bd5-a862e8ef9f21", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/zenfly.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/zenfly.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/zenfly", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "zenosearch", "family_name": "Zenosearch", "category": "advanced_threat", "rule_id": "0d916fc6-310e-5e22-a1bc-ea337f5aa7ba", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/zenosearch.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/zenosearch.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/zenosearch", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 1 }, { "family": "zepto", "family_name": "Zepto", "category": "ransomware", "rule_id": "4e88e7db-875a-551e-9f6d-6270eb8e16bb", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/zepto.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/zepto.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/zepto", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "zero", "family_name": "Zero", "category": "ransomware", "rule_id": "584773cc-3791-5c85-a576-df38803f1660", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/zero.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/zero.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/zero", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "zeusvm", "family_name": "Zeusvm", "category": "banking_trojan", "rule_id": "8b0840b1-81a2-55c4-824d-921be312c8ce", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/zeusvm.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/zeusvm.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/zeusvm", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/banking-trojan-protection", "sample_count": 1 }, { "family": "zilix", "family_name": "Zilix", "category": "ransomware", "rule_id": "b477a954-177c-50bd-af83-a24e926a8a61", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/zilix.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/zilix.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/zilix", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "zjek", "family_name": "Zjek", "category": "ransomware", "rule_id": "72f005a2-e55c-50cc-842b-a90f1fff4185", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/zjek.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/zjek.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/zjek", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "zloyfly", "family_name": "Zloyfly", "category": "ransomware", "rule_id": "a6ec4dd0-e053-52db-985d-636928c936b9", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/zloyfly.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/zloyfly.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/zloyfly", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "zoldon", "family_name": "Zoldon", "category": "ransomware", "rule_id": "47ebf03f-7c97-587f-8a54-c279f023eb35", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/zoldon.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/zoldon.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/zoldon", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "zombam", "family_name": "Zombam", "category": "ransomware", "rule_id": "f544050b-00ff-5114-b180-ea5e0dd4a40f", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/zombam.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/zombam.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/zombam", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "zonebac", "family_name": "Zonebac", "category": "ransomware", "rule_id": "d6c59e96-3d87-5173-9b00-012de417a479", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/zonebac.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/zonebac.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/zonebac", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "zonobindi", "family_name": "Zonobindi", "category": "ransomware", "rule_id": "c25858c7-557c-5807-9de1-4e49a1544cfc", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/zonobindi.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/zonobindi.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/zonobindi", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "zorex", "family_name": "Zorex", "category": "ransomware", "rule_id": "1fba8add-0567-5375-9773-e75b81272aef", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/zorex.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/zorex.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/zorex", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "zs0bbeypkrh", "family_name": "Zs0bbeypkrh", "category": "ransomware", "rule_id": "30cd2cc3-87aa-5785-80aa-66a7c06512c8", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/zs0bbeypkrh.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/zs0bbeypkrh.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/zs0bbeypkrh", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "zudochka", "family_name": "Zudochka", "category": "ransomware", "rule_id": "b0cd5b41-bfa0-53a4-a5bf-535f31e0ba5b", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/zudochka.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/zudochka.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/zudochka", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "zvrek", "family_name": "Zvrek", "category": "ransomware", "rule_id": "6b5c91ac-fea6-5305-b614-73c929a1cb3f", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/zvrek.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/zvrek.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/zvrek", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "zwangi", "family_name": "Zwangi", "category": "ransomware", "rule_id": "0d0a7355-b90d-5b02-8548-6da184dc6173", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/zwangi.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/zwangi.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/zwangi", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "zxor", "family_name": "Zxor", "category": "ransomware", "rule_id": "9c44f60c-92ad-580c-b1b6-c1b6af7aee82", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/zxor.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/zxor.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/zxor", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "zxrloader", "family_name": "Zxrloader", "category": "ransomware", "rule_id": "21094018-5cb7-59ec-b013-8a5f0c144160", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/zxrloader.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/zxrloader.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/zxrloader", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "zy0baazvyqni", "family_name": "Zy0baazvyqni", "category": "ransomware", "rule_id": "39b7d9f5-6eee-5b9d-9ea4-adcadf17347b", "level": "critical", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/zy0baazvyqni.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/zy0baazvyqni.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/zy0baazvyqni", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 1 }, { "family": "a_311_death", "family_name": "A_311_death", "category": "banking_trojan", "rule_id": "8cffd518-0c8e-5ca3-bbca-b5796f3d04a4", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/a_311_death.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/a_311_death.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/a_311_death", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/banking-trojan-protection", "sample_count": 0 }, { "family": "acid_drop", "family_name": "Acid_drop", "category": "trojan", "rule_id": "502c9260-8e06-5bdc-8a84-dfc5884a213f", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/acid_drop.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/acid_drop.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/acid_drop", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 0 }, { "family": "aero", "family_name": "Aero", "category": "adware", "rule_id": "f129bf0f-92a9-572f-ba8b-b034ff1a6d30", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/aero.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/aero.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/aero", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 0 }, { "family": "aim_downloader", "family_name": "Aim_downloader", "category": "downloader", "rule_id": "7bedded3-43fb-50d2-bdc9-5e3254aab4df", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/aim_downloader.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/aim_downloader.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/aim_downloader", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 0 }, { "family": "amiboide", "family_name": "Amiboide", "category": "backdoor", "rule_id": "82352f92-1e6f-534e-b5d2-e62115179a60", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/amiboide.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/amiboide.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/amiboide", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 0 }, { "family": "apocalypse_rat", "family_name": "Apocalypse_rat", "category": "rat", "rule_id": "151f4532-7337-567c-8811-7d883812d647", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/apocalypse_rat.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/apocalypse_rat.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/apocalypse_rat", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 0 }, { "family": "back_orifice", "family_name": "Back_orifice", "category": "backdoor", "rule_id": "381ee117-e5ee-5209-89b7-00c3e4a8eb66", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/back_orifice.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/back_orifice.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/back_orifice", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 0 }, { "family": "bandook", "family_name": "Bandook", "category": "rat", "rule_id": "6de8da98-f261-5028-981b-8c5d7ee54db8", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/bandook.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/bandook.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/bandook", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 0 }, { "family": "beast", "family_name": "Beast", "category": "rat", "rule_id": "0fc01043-53ec-538b-9e16-16ae4fb5af41", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/beast.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/beast.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/beast", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 0 }, { "family": "bersek", "family_name": "Bersek", "category": "backdoor", "rule_id": "de90e7a6-ccb1-5137-a4e3-80d109311a24", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/bersek.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/bersek.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/bersek", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 0 }, { "family": "blasterx", "family_name": "Blasterx", "category": "worm", "rule_id": "f7891557-ae07-5680-aa02-6d8c2486a908", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/blasterx.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/blasterx.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/blasterx", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 0 }, { "family": "bozok", "family_name": "Bozok", "category": "trojan", "rule_id": "da38c439-ca67-579a-8fc8-d36b15896840", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/bozok.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/bozok.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/bozok", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 0 }, { "family": "brutus", "family_name": "Brutus", "category": "tool", "rule_id": "ad5301c7-b60f-529d-a6b3-f77b7cd75b29", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/brutus.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/brutus.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/brutus", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 0 }, { "family": "bump_rat", "family_name": "Bump_rat", "category": "trojan", "rule_id": "47544f4c-d323-57eb-b661-b048a4aa664c", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/bump_rat.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/bump_rat.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/bump_rat", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 0 }, { "family": "institution_2004", "family_name": "Institution_2004", "category": "trojan", "rule_id": "e4e786c8-96d9-5bda-a221-ff85983aa68d", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/institution_2004.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/institution_2004.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/institution_2004", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 0 }, { "family": "jbonblanc", "family_name": "Jbonblanc", "category": "trojan", "rule_id": "2a5a17af-502b-53c0-a518-5024c1a7a320", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/jbonblanc.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/jbonblanc.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/jbonblanc", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 0 }, { "family": "joker", "family_name": "Joker", "category": "trojan", "rule_id": "9410e921-dd7f-5412-9f52-b4e2ce59e931", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/joker.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/joker.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/joker", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 0 }, { "family": "jps", "family_name": "Jps", "category": "trojan", "rule_id": "db8144b1-b780-5dea-be28-c1e1212f21f8", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/jps.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/jps.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/jps", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 0 }, { "family": "jps_virus_maker", "family_name": "Jps_virus_maker", "category": "tool", "rule_id": "af6ea954-677a-5f1a-940d-5c26ed33bdfa", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/jps_virus_maker.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/jps_virus_maker.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/jps_virus_maker", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 0 }, { "family": "lanfiltrator", "family_name": "Lanfiltrator", "category": "trojan", "rule_id": "0d7fdf0a-0a0e-51fc-8daf-5d432958f685", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/lanfiltrator.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/lanfiltrator.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/lanfiltrator", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 0 }, { "family": "lost_door", "family_name": "Lost_door", "category": "rat", "rule_id": "4780a5f4-5fbb-58f3-9985-031cfc4ddfc5", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/lost_door.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/lost_door.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/lost_door", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 0 }, { "family": "messiah", "family_name": "Messiah", "category": "trojan", "rule_id": "53779f11-2c59-57dc-a9ff-083c3f17d1af", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/messiah.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/messiah.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/messiah", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 0 }, { "family": "netbus", "family_name": "Netbus", "category": "rat", "rule_id": "b98b28f6-3021-5e05-b314-c5b24cfa0b35", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/netbus.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/netbus.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/netbus", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 0 }, { "family": "netsphere", "family_name": "Netsphere", "category": "trojan", "rule_id": "daed0224-328b-57ca-8e20-62eb841aba8d", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/netsphere.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/netsphere.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/netsphere", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 0 }, { "family": "nuclear_rat", "family_name": "Nuclear_rat", "category": "rat", "rule_id": "41d679f0-2cd2-5fec-9fb0-dc0c1d6b579e", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/nuclear_rat.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/nuclear_rat.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/nuclear_rat", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 0 }, { "family": "prjraptor", "family_name": "Prjraptor", "category": "trojan", "rule_id": "44e4679c-b2cd-5fa5-95ec-4643aa3616ee", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/prjraptor.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/prjraptor.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/prjraptor", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 0 }, { "family": "schoolbus", "family_name": "Schoolbus", "category": "trojan", "rule_id": "96d138ab-f99b-58fb-8289-e57d9e87932d", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/schoolbus.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/schoolbus.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/schoolbus", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 0 }, { "family": "seed", "family_name": "Seed", "category": "trojan", "rule_id": "cc00cfca-5c94-5477-a6dc-37cc166a6694", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/seed.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/seed.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/seed", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 0 }, { "family": "serenity_rat", "family_name": "Serenity_rat", "category": "rat", "rule_id": "810e05c7-44e3-5c5a-b912-e5a6dada05ba", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/serenity_rat.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/serenity_rat.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/serenity_rat", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/backdoor-rat-protection", "sample_count": 0 }, { "family": "sinique", "family_name": "Sinique", "category": "trojan", "rule_id": "06709108-af7f-5775-87df-6986b4050834", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/sinique.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/sinique.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/sinique", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 0 }, { "family": "spytector", "family_name": "Spytector", "category": "infostealer", "rule_id": "7cc830f8-aae9-5b07-a782-319c372b3518", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/spytector.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/spytector.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/spytector", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/infostealer-protection", "sample_count": 0 }, { "family": "stream_rat", "family_name": "Stream_rat", "category": "trojan", "rule_id": "8aba8a3a-9728-5cfe-a7a8-dde9d1edf304", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/stream_rat.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/stream_rat.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/stream_rat", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 0 }, { "family": "subseven", "family_name": "Subseven", "category": "trojan", "rule_id": "764c742f-329b-5bc1-be91-d0dd0007d7eb", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/subseven.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/subseven.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/subseven", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 0 }, { "family": "synrat", "family_name": "Synrat", "category": "trojan", "rule_id": "d54007f8-f956-5ba6-952a-307d1f76b6c5", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/synrat.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/synrat.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/synrat", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 0 }, { "family": "terabit_virus_maker", "family_name": "Terabit_virus_maker", "category": "trojan", "rule_id": "993a274a-edd9-5be2-8256-2f397e3cebe1", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/terabit_virus_maker.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/terabit_virus_maker.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/terabit_virus_maker", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 0 }, { "family": "trojna", "family_name": "Trojna", "category": "trojan", "rule_id": "40f7b786-d827-5c9c-88de-aca668151e7d", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/trojna.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/trojna.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/trojna", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 0 }, { "family": "uk_splitter", "family_name": "Uk_splitter", "category": "trojan", "rule_id": "b192a872-2054-57c5-8ff1-e106c248fba3", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/uk_splitter.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/uk_splitter.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/uk_splitter", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 0 }, { "family": "ulysses", "family_name": "Ulysses", "category": "trojan", "rule_id": "6f8ff1cb-f66a-56f2-96e1-4ca876a82116", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/ulysses.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/ulysses.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/ulysses", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 0 }, { "family": "universal1337", "family_name": "Universal1337", "category": "infostealer", "rule_id": "e26d2a3d-4531-53b4-b7f2-9b50629c3b4c", "level": "high", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/universal1337.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/universal1337.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/universal1337", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/infostealer-protection", "sample_count": 0 }, { "family": "vampire", "family_name": "Vampire", "category": "trojan", "rule_id": "e74e4175-13f9-5cd5-9870-d71e4711adb1", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/vampire.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/vampire.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/vampire", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 0 }, { "family": "vbs_worm_generator", "family_name": "Vbs_worm_generator", "category": "worm", "rule_id": "d715cd17-e499-5a41-bf85-50bccbbf1234", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/vbs_worm_generator.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/vbs_worm_generator.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/vbs_worm_generator", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/ransomware-protection", "sample_count": 0 }, { "family": "y3k_rat", "family_name": "Y3k_rat", "category": "trojan", "rule_id": "0cde6a44-2fd6-5339-8acc-747ee459a68b", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/y3k_rat.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/y3k_rat.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/y3k_rat", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 0 }, { "family": "z_dem0n", "family_name": "Z_dem0n", "category": "trojan", "rule_id": "80d35fca-338e-5746-9fe1-efa131f5ba4b", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/z_dem0n.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/z_dem0n.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/z_dem0n", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 0 }, { "family": "zombierat", "family_name": "Zombierat", "category": "trojan", "rule_id": "d3732968-9a8e-59cf-8446-2040c369849c", "level": "medium", "yaml_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/yaml/zombierat.yml", "json_url": "https://malware-families-catalog.systemhelpdesk.com/api/sigma/zombierat.json", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/families/zombierat", "defensive_guide_url": "https://malware-families-catalog.systemhelpdesk.com/defensive/downloader-dropper-protection", "sample_count": 0 } ] }