{ "feed_name": "SystemHelpDesk Master YARA Threat Hunting Feed", "canonical_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/manifest.json", "master_feed_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules.yar", "author": "Ricky Jordan, Lead Threat Intelligence Analyst, SystemHelpDesk MSP", "license": "Apache-2.0", "updated_at": "2026-10-16", "total_families": 2982, "total_rules": 5964, "rules": [ { "family": "000c", "category": "ransomware", "sample_count": 4, "rule_names": [ "MALWARE_WIN_000C_T1_ARTIFACT", "MALWARE_WIN_000C_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/000c.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/000c", "updated_at": "2026-10-16" }, { "family": "0y0auaszpblb", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_0Y0AUASZPBLB_T1_ARTIFACT", "MALWARE_WIN_0Y0AUASZPBLB_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/0y0auaszpblb.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/0y0auaszpblb", "updated_at": "2026-10-16" }, { "family": "0y1a48lx2yib", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_0Y1A48LX2YIB_T1_ARTIFACT", "MALWARE_WIN_0Y1A48LX2YIB_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/0y1a48lx2yib.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/0y1a48lx2yib", "updated_at": "2026-10-16" }, { "family": "1clickdownload", "category": "adware", "sample_count": 26, "rule_names": [ "MALWARE_WIN_1CLICKDOWNLOAD_T1_ARTIFACT", "MALWARE_WIN_1CLICKDOWNLOAD_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/1clickdownload.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/1clickdownload", "updated_at": "2026-10-16" }, { "family": "1fb728f", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_1FB728F_T1_ARTIFACT", "MALWARE_WIN_1FB728F_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/1fb728f.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/1fb728f", "updated_at": "2026-10-16" }, { "family": "2345cn", "category": "trojan", "sample_count": 1, "rule_names": [ "MALWARE_WIN_2345CN_T1_ARTIFACT", "MALWARE_WIN_2345CN_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/2345cn.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/2345cn", "updated_at": "2026-10-16" }, { "family": "2345explorer", "category": "trojan", "sample_count": 1, "rule_names": [ "MALWARE_WIN_2345EXPLORER_T1_ARTIFACT", "MALWARE_WIN_2345EXPLORER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/2345explorer.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/2345explorer", "updated_at": "2026-10-16" }, { "family": "27d3e5bc", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_27D3E5BC_T1_ARTIFACT", "MALWARE_WIN_27D3E5BC_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/27d3e5bc.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/27d3e5bc", "updated_at": "2026-10-16" }, { "family": "3proxy", "category": "trojan", "sample_count": 12, "rule_names": [ "MALWARE_WIN_3PROXY_T1_ARTIFACT", "MALWARE_WIN_3PROXY_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/3proxy.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/3proxy", "updated_at": "2026-10-16" }, { "family": "4shared", "category": "pua", "sample_count": 60, "rule_names": [ "MALWARE_WIN_4SHARED_T1_ARTIFACT", "MALWARE_WIN_4SHARED_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/4shared.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/4shared", "updated_at": "2026-10-16" }, { "family": "5hex", "category": "ransomware", "sample_count": 2, "rule_names": [ "MALWARE_WIN_5HEX_T1_ARTIFACT", "MALWARE_WIN_5HEX_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/5hex.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/5hex", "updated_at": "2026-10-16" }, { "family": "5z0ba4mkpih", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_5Z0BA4MKPIH_T1_ARTIFACT", "MALWARE_WIN_5Z0BA4MKPIH_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/5z0ba4mkpih.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/5z0ba4mkpih", "updated_at": "2026-10-16" }, { "family": "6b47672c", "category": "trojan", "sample_count": 1, "rule_names": [ "MALWARE_WIN_6B47672C_T1_ARTIFACT", "MALWARE_WIN_6B47672C_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/6b47672c.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/6b47672c", "updated_at": "2026-10-16" }, { "family": "a8p9eklc", "category": "trojan", "sample_count": 1, "rule_names": [ "MALWARE_WIN_A8P9EKLC_T1_ARTIFACT", "MALWARE_WIN_A8P9EKLC_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/a8p9eklc.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/a8p9eklc", "updated_at": "2026-10-16" }, { "family": "a_311_death", "category": "banking_trojan", "sample_count": 0, "rule_names": [ "MALWARE_WIN_A_311_DEATH_T1_ARTIFACT", "MALWARE_WIN_A_311_DEATH_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/a_311_death.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/a_311_death", "updated_at": "2026-10-16" }, { "family": "aauto", "category": "trojan", "sample_count": 13, "rule_names": [ "MALWARE_WIN_AAUTO_T1_ARTIFACT", "MALWARE_WIN_AAUTO_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/aauto.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/aauto", "updated_at": "2026-10-16" }, { "family": "accelerator", "category": "backdoor", "sample_count": 3, "rule_names": [ "MALWARE_WIN_ACCELERATOR_T1_ARTIFACT", "MALWARE_WIN_ACCELERATOR_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/accelerator.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/accelerator", "updated_at": "2026-10-16" }, { "family": "acid_drop", "category": "trojan", "sample_count": 0, "rule_names": [ "MALWARE_WIN_ACID_DROP_T1_ARTIFACT", "MALWARE_WIN_ACID_DROP_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/acid_drop.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/acid_drop", "updated_at": "2026-10-16" }, { "family": "activator", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_ACTIVATOR_T1_ARTIFACT", "MALWARE_WIN_ACTIVATOR_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/activator.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/activator", "updated_at": "2026-10-16" }, { "family": "activitymonitor", "category": "trojan", "sample_count": 3, "rule_names": [ "MALWARE_WIN_ACTIVITYMONITOR_T1_ARTIFACT", "MALWARE_WIN_ACTIVITYMONITOR_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/activitymonitor.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/activitymonitor", "updated_at": "2026-10-16" }, { "family": "adaebook", "category": "adware", "sample_count": 98, "rule_names": [ "MALWARE_WIN_ADAEBOOK_T1_ARTIFACT", "MALWARE_WIN_ADAEBOOK_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/adaebook.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/adaebook", "updated_at": "2026-10-16" }, { "family": "adagent", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_ADAGENT_T1_ARTIFACT", "MALWARE_WIN_ADAGENT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/adagent.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/adagent", "updated_at": "2026-10-16" }, { "family": "adanti", "category": "trojan", "sample_count": 1, "rule_names": [ "MALWARE_WIN_ADANTI_T1_ARTIFACT", "MALWARE_WIN_ADANTI_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/adanti.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/adanti", "updated_at": "2026-10-16" }, { "family": "adbreak", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_ADBREAK_T1_ARTIFACT", "MALWARE_WIN_ADBREAK_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/adbreak.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/adbreak", "updated_at": "2026-10-16" }, { "family": "adcrypterlib", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_ADCRYPTERLIB_T1_ARTIFACT", "MALWARE_WIN_ADCRYPTERLIB_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/adcrypterlib.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/adcrypterlib", "updated_at": "2026-10-16" }, { "family": "addlyrics", "category": "trojan", "sample_count": 12, "rule_names": [ "MALWARE_WIN_ADDLYRICS_T1_ARTIFACT", "MALWARE_WIN_ADDLYRICS_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/addlyrics.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/addlyrics", "updated_at": "2026-10-16" }, { "family": "addmepoint", "category": "trojan", "sample_count": 1, "rule_names": [ "MALWARE_WIN_ADDMEPOINT_T1_ARTIFACT", "MALWARE_WIN_ADDMEPOINT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/addmepoint.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/addmepoint", "updated_at": "2026-10-16" }, { "family": "addrop", "category": "adware", "sample_count": 103, "rule_names": [ "MALWARE_WIN_ADDROP_T1_ARTIFACT", "MALWARE_WIN_ADDROP_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/addrop.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/addrop", "updated_at": "2026-10-16" }, { "family": "adduser", "category": "backdoor", "sample_count": 4, "rule_names": [ "MALWARE_WIN_ADDUSER_T1_ARTIFACT", "MALWARE_WIN_ADDUSER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/adduser.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/adduser", "updated_at": "2026-10-16" }, { "family": "adgazelle", "category": "trojan", "sample_count": 10, "rule_names": [ "MALWARE_WIN_ADGAZELLE_T1_ARTIFACT", "MALWARE_WIN_ADGAZELLE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/adgazelle.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/adgazelle", "updated_at": "2026-10-16" }, { "family": "adinstaller", "category": "trojan", "sample_count": 7, "rule_names": [ "MALWARE_WIN_ADINSTALLER_T1_ARTIFACT", "MALWARE_WIN_ADINSTALLER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/adinstaller.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/adinstaller", "updated_at": "2026-10-16" }, { "family": "adject", "category": "ransomware", "sample_count": 15, "rule_names": [ "MALWARE_WIN_ADJECT_T1_ARTIFACT", "MALWARE_WIN_ADJECT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/adject.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/adject", "updated_at": "2026-10-16" }, { "family": "adkdllwrapper", "category": "trojan", "sample_count": 7, "rule_names": [ "MALWARE_WIN_ADKDLLWRAPPER_T1_ARTIFACT", "MALWARE_WIN_ADKDLLWRAPPER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/adkdllwrapper.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/adkdllwrapper", "updated_at": "2026-10-16" }, { "family": "adkor", "category": "trojan", "sample_count": 7, "rule_names": [ "MALWARE_WIN_ADKOR_T1_ARTIFACT", "MALWARE_WIN_ADKOR_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/adkor.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/adkor", "updated_at": "2026-10-16" }, { "family": "adkubru", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_ADKUBRU_T1_ARTIFACT", "MALWARE_WIN_ADKUBRU_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/adkubru.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/adkubru", "updated_at": "2026-10-16" }, { "family": "admedia", "category": "trojan", "sample_count": 1, "rule_names": [ "MALWARE_WIN_ADMEDIA_T1_ARTIFACT", "MALWARE_WIN_ADMEDIA_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/admedia.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/admedia", "updated_at": "2026-10-16" }, { "family": "admoke", "category": "ransomware", "sample_count": 3, "rule_names": [ "MALWARE_WIN_ADMOKE_T1_ARTIFACT", "MALWARE_WIN_ADMOKE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/admoke.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/admoke", "updated_at": "2026-10-16" }, { "family": "adodb", "category": "backdoor", "sample_count": 2, "rule_names": [ "MALWARE_WIN_ADODB_T1_ARTIFACT", "MALWARE_WIN_ADODB_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/adodb.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/adodb", "updated_at": "2026-10-16" }, { "family": "adpernok", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_ADPERNOK_T1_ARTIFACT", "MALWARE_WIN_ADPERNOK_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/adpernok.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/adpernok", "updated_at": "2026-10-16" }, { "family": "adposhel", "category": "adware", "sample_count": 8951, "rule_names": [ "MALWARE_WIN_ADPOSHEL_T1_ARTIFACT", "MALWARE_WIN_ADPOSHEL_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/adposhel.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/adposhel", "updated_at": "2026-10-16" }, { "family": "adpower", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_ADPOWER_T1_ARTIFACT", "MALWARE_WIN_ADPOWER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/adpower.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/adpower", "updated_at": "2026-10-16" }, { "family": "adspy", "category": "infostealer", "sample_count": 8, "rule_names": [ "MALWARE_WIN_ADSPY_T1_ARTIFACT", "MALWARE_WIN_ADSPY_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/adspy.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/adspy", "updated_at": "2026-10-16" }, { "family": "advancedpccare", "category": "adware", "sample_count": 2, "rule_names": [ "MALWARE_WIN_ADVANCEDPCCARE_T1_ARTIFACT", "MALWARE_WIN_ADVANCEDPCCARE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/advancedpccare.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/advancedpccare", "updated_at": "2026-10-16" }, { "family": "advload", "category": "trojan", "sample_count": 2, "rule_names": [ "MALWARE_WIN_ADVLOAD_T1_ARTIFACT", "MALWARE_WIN_ADVLOAD_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/advload.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/advload", "updated_at": "2026-10-16" }, { "family": "advpassman", "category": "infostealer", "sample_count": 1, "rule_names": [ "MALWARE_WIN_ADVPASSMAN_T1_ARTIFACT", "MALWARE_WIN_ADVPASSMAN_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/advpassman.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/advpassman", "updated_at": "2026-10-16" }, { "family": "adwapper", "category": "trojan", "sample_count": 3, "rule_names": [ "MALWARE_WIN_ADWAPPER_T1_ARTIFACT", "MALWARE_WIN_ADWAPPER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/adwapper.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/adwapper", "updated_at": "2026-10-16" }, { "family": "adwaresig", "category": "adware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_ADWARESIG_T1_ARTIFACT", "MALWARE_WIN_ADWARESIG_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/adwaresig.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/adwaresig", "updated_at": "2026-10-16" }, { "family": "adwind", "category": "trojan", "sample_count": 6, "rule_names": [ "MALWARE_WIN_ADWIND_T1_ARTIFACT", "MALWARE_WIN_ADWIND_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/adwind.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/adwind", "updated_at": "2026-10-16" }, { "family": "adylkuzz", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_ADYLKUZZ_T1_ARTIFACT", "MALWARE_WIN_ADYLKUZZ_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/adylkuzz.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/adylkuzz", "updated_at": "2026-10-16" }, { "family": "aenjaris", "category": "trojan", "sample_count": 22, "rule_names": [ "MALWARE_WIN_AENJARIS_T1_ARTIFACT", "MALWARE_WIN_AENJARIS_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/aenjaris.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/aenjaris", "updated_at": "2026-10-16" }, { "family": "aero", "category": "adware", "sample_count": 0, "rule_names": [ "MALWARE_WIN_AERO_T1_ARTIFACT", "MALWARE_WIN_AERO_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/aero.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/aero", "updated_at": "2026-10-16" }, { "family": "agen", "category": "trojan", "sample_count": 1335, "rule_names": [ "MALWARE_WIN_AGEN_T1_ARTIFACT", "MALWARE_WIN_AGEN_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/agen.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/agen", "updated_at": "2026-10-16" }, { "family": "agentb", "category": "trojan", "sample_count": 449, "rule_names": [ "MALWARE_WIN_AGENTB_T1_ARTIFACT", "MALWARE_WIN_AGENTB_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/agentb.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/agentb", "updated_at": "2026-10-16" }, { "family": "agenttesla", "category": "infostealer", "sample_count": 43, "rule_names": [ "MALWARE_WIN_AGENTTESLA_T1_ARTIFACT", "MALWARE_WIN_AGENTTESLA_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/agenttesla.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/agenttesla", "updated_at": "2026-10-16" }, { "family": "agentus", "category": "ransomware", "sample_count": 2, "rule_names": [ "MALWARE_WIN_AGENTUS_T1_ARTIFACT", "MALWARE_WIN_AGENTUS_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/agentus.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/agentus", "updated_at": "2026-10-16" }, { "family": "agentwdcr", "category": "ransomware", "sample_count": 5, "rule_names": [ "MALWARE_WIN_AGENTWDCR_T1_ARTIFACT", "MALWARE_WIN_AGENTWDCR_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/agentwdcr.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/agentwdcr", "updated_at": "2026-10-16" }, { "family": "agiala", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_AGIALA_T1_ARTIFACT", "MALWARE_WIN_AGIALA_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/agiala.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/agiala", "updated_at": "2026-10-16" }, { "family": "agile", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_AGILE_T1_ARTIFACT", "MALWARE_WIN_AGILE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/agile.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/agile", "updated_at": "2026-10-16" }, { "family": "agobot", "category": "backdoor", "sample_count": 7, "rule_names": [ "MALWARE_WIN_AGOBOT_T1_ARTIFACT", "MALWARE_WIN_AGOBOT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/agobot.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/agobot", "updated_at": "2026-10-16" }, { "family": "aim_downloader", "category": "downloader", "sample_count": 0, "rule_names": [ "MALWARE_WIN_AIM_DOWNLOADER_T1_ARTIFACT", "MALWARE_WIN_AIM_DOWNLOADER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/aim_downloader.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/aim_downloader", "updated_at": "2026-10-16" }, { "family": "ainslot", "category": "trojan", "sample_count": 635, "rule_names": [ "MALWARE_WIN_AINSLOT_T1_ARTIFACT", "MALWARE_WIN_AINSLOT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/ainslot.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/ainslot", "updated_at": "2026-10-16" }, { "family": "airinstaller", "category": "adware", "sample_count": 26, "rule_names": [ "MALWARE_WIN_AIRINSTALLER_T1_ARTIFACT", "MALWARE_WIN_AIRINSTALLER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/airinstaller.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/airinstaller", "updated_at": "2026-10-16" }, { "family": "akcom", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_AKCOM_T1_ARTIFACT", "MALWARE_WIN_AKCOM_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/akcom.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/akcom", "updated_at": "2026-10-16" }, { "family": "akely", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_AKELY_T1_ARTIFACT", "MALWARE_WIN_AKELY_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/akely.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/akely", "updated_at": "2026-10-16" }, { "family": "aksula", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_AKSULA_T1_ARTIFACT", "MALWARE_WIN_AKSULA_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/aksula.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/aksula", "updated_at": "2026-10-16" }, { "family": "alien", "category": "banking_trojan", "sample_count": 19, "rule_names": [ "MALWARE_WIN_ALIEN_T1_ARTIFACT", "MALWARE_WIN_ALIEN_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/alien.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/alien", "updated_at": "2026-10-16" }, { "family": "alinaos", "category": "trojan", "sample_count": 2, "rule_names": [ "MALWARE_WIN_ALINAOS_T1_ARTIFACT", "MALWARE_WIN_ALINAOS_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/alinaos.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/alinaos", "updated_at": "2026-10-16" }, { "family": "aliser", "category": "file_infector", "sample_count": 52, "rule_names": [ "MALWARE_WIN_ALISER_T1_ARTIFACT", "MALWARE_WIN_ALISER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/aliser.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/aliser", "updated_at": "2026-10-16" }, { "family": "allaple", "category": "worm", "sample_count": 140, "rule_names": [ "MALWARE_WIN_ALLAPLE_T1_ARTIFACT", "MALWARE_WIN_ALLAPLE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/allaple.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/allaple", "updated_at": "2026-10-16" }, { "family": "allinonekeylogger", "category": "infostealer", "sample_count": 3, "rule_names": [ "MALWARE_WIN_ALLINONEKEYLOGGER_T1_ARTIFACT", "MALWARE_WIN_ALLINONEKEYLOGGER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/allinonekeylogger.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/allinonekeylogger", "updated_at": "2026-10-16" }, { "family": "allstars", "category": "trojan", "sample_count": 1, "rule_names": [ "MALWARE_WIN_ALLSTARS_T1_ARTIFACT", "MALWARE_WIN_ALLSTARS_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/allstars.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/allstars", "updated_at": "2026-10-16" }, { "family": "alman", "category": "file_infector", "sample_count": 43, "rule_names": [ "MALWARE_WIN_ALMAN_T1_ARTIFACT", "MALWARE_WIN_ALMAN_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/alman.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/alman", "updated_at": "2026-10-16" }, { "family": "alnaddy", "category": "trojan", "sample_count": 1, "rule_names": [ "MALWARE_WIN_ALNADDY_T1_ARTIFACT", "MALWARE_WIN_ALNADDY_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/alnaddy.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/alnaddy", "updated_at": "2026-10-16" }, { "family": "alot", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_ALOT_T1_ARTIFACT", "MALWARE_WIN_ALOT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/alot.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/alot", "updated_at": "2026-10-16" }, { "family": "alphaeon", "category": "ransomware", "sample_count": 2, "rule_names": [ "MALWARE_WIN_ALPHAEON_T1_ARTIFACT", "MALWARE_WIN_ALPHAEON_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/alphaeon.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/alphaeon", "updated_at": "2026-10-16" }, { "family": "alreay", "category": "ransomware", "sample_count": 2, "rule_names": [ "MALWARE_WIN_ALREAY_T1_ARTIFACT", "MALWARE_WIN_ALREAY_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/alreay.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/alreay", "updated_at": "2026-10-16" }, { "family": "alvabrig", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_ALVABRIG_T1_ARTIFACT", "MALWARE_WIN_ALVABRIG_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/alvabrig.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/alvabrig", "updated_at": "2026-10-16" }, { "family": "alyak", "category": "trojan", "sample_count": 1, "rule_names": [ "MALWARE_WIN_ALYAK_T1_ARTIFACT", "MALWARE_WIN_ALYAK_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/alyak.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/alyak", "updated_at": "2026-10-16" }, { "family": "amavaldo", "category": "trojan", "sample_count": 5, "rule_names": [ "MALWARE_WIN_AMAVALDO_T1_ARTIFACT", "MALWARE_WIN_AMAVALDO_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/amavaldo.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/amavaldo", "updated_at": "2026-10-16" }, { "family": "amber", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_AMBER_T1_ARTIFACT", "MALWARE_WIN_AMBER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/amber.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/amber", "updated_at": "2026-10-16" }, { "family": "amdocssims", "category": "trojan", "sample_count": 1, "rule_names": [ "MALWARE_WIN_AMDOCSSIMS_T1_ARTIFACT", "MALWARE_WIN_AMDOCSSIMS_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/amdocssims.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/amdocssims", "updated_at": "2026-10-16" }, { "family": "amgfaohk2uf", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_AMGFAOHK2UF_T1_ARTIFACT", "MALWARE_WIN_AMGFAOHK2UF_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/amgfaohk2uf.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/amgfaohk2uf", "updated_at": "2026-10-16" }, { "family": "amgfvjgvdoaan", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_AMGFVJGVDOAAN_T1_ARTIFACT", "MALWARE_WIN_AMGFVJGVDOAAN_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/amgfvjgvdoaan.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/amgfvjgvdoaan", "updated_at": "2026-10-16" }, { "family": "amiboide", "category": "backdoor", "sample_count": 0, "rule_names": [ "MALWARE_WIN_AMIBOIDE_T1_ARTIFACT", "MALWARE_WIN_AMIBOIDE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/amiboide.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/amiboide", "updated_at": "2026-10-16" }, { "family": "ammyy", "category": "ransomware", "sample_count": 2, "rule_names": [ "MALWARE_WIN_AMMYY_T1_ARTIFACT", "MALWARE_WIN_AMMYY_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/ammyy.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/ammyy", "updated_at": "2026-10-16" }, { "family": "amnesia", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_AMNESIA_T1_ARTIFACT", "MALWARE_WIN_AMNESIA_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/amnesia.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/amnesia", "updated_at": "2026-10-16" }, { "family": "amonetize", "category": "downloader", "sample_count": 242, "rule_names": [ "MALWARE_WIN_AMONETIZE_T1_ARTIFACT", "MALWARE_WIN_AMONETIZE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/amonetize.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/amonetize", "updated_at": "2026-10-16" }, { "family": "amtgimon", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_AMTGIMON_T1_ARTIFACT", "MALWARE_WIN_AMTGIMON_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/amtgimon.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/amtgimon", "updated_at": "2026-10-16" }, { "family": "animus", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_ANIMUS_T1_ARTIFACT", "MALWARE_WIN_ANIMUS_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/animus.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/animus", "updated_at": "2026-10-16" }, { "family": "anprot", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_ANPROT_T1_ARTIFACT", "MALWARE_WIN_ANPROT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/anprot.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/anprot", "updated_at": "2026-10-16" }, { "family": "anserin", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_ANSERIN_T1_ARTIFACT", "MALWARE_WIN_ANSERIN_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/anserin.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/anserin", "updated_at": "2026-10-16" }, { "family": "antavmu", "category": "ransomware", "sample_count": 9, "rule_names": [ "MALWARE_WIN_ANTAVMU_T1_ARTIFACT", "MALWARE_WIN_ANTAVMU_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/antavmu.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/antavmu", "updated_at": "2026-10-16" }, { "family": "antidenial", "category": "trojan", "sample_count": 1, "rule_names": [ "MALWARE_WIN_ANTIDENIAL_T1_ARTIFACT", "MALWARE_WIN_ANTIDENIAL_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/antidenial.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/antidenial", "updated_at": "2026-10-16" }, { "family": "antisandbox", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_ANTISANDBOX_T1_ARTIFACT", "MALWARE_WIN_ANTISANDBOX_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/antisandbox.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/antisandbox", "updated_at": "2026-10-16" }, { "family": "antivirus", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_ANTIVIRUS_T1_ARTIFACT", "MALWARE_WIN_ANTIVIRUS_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/antivirus.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/antivirus", "updated_at": "2026-10-16" }, { "family": "anyprotect", "category": "trojan", "sample_count": 1, "rule_names": [ "MALWARE_WIN_ANYPROTECT_T1_ARTIFACT", "MALWARE_WIN_ANYPROTECT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/anyprotect.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/anyprotect", "updated_at": "2026-10-16" }, { "family": "aotoit", "category": "ransomware", "sample_count": 3, "rule_names": [ "MALWARE_WIN_AOTOIT_T1_ARTIFACT", "MALWARE_WIN_AOTOIT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/aotoit.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/aotoit", "updated_at": "2026-10-16" }, { "family": "apocalypse", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_APOCALYPSE_T1_ARTIFACT", "MALWARE_WIN_APOCALYPSE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/apocalypse.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/apocalypse", "updated_at": "2026-10-16" }, { "family": "apocalypse_rat", "category": "rat", "sample_count": 0, "rule_names": [ "MALWARE_WIN_APOCALYPSE_RAT_T1_ARTIFACT", "MALWARE_WIN_APOCALYPSE_RAT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/apocalypse_rat.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/apocalypse_rat", "updated_at": "2026-10-16" }, { "family": "apost", "category": "trojan", "sample_count": 109, "rule_names": [ "MALWARE_WIN_APOST_T1_ARTIFACT", "MALWARE_WIN_APOST_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/apost.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/apost", "updated_at": "2026-10-16" }, { "family": "appscience", "category": "adware", "sample_count": 13, "rule_names": [ "MALWARE_WIN_APPSCIENCE_T1_ARTIFACT", "MALWARE_WIN_APPSCIENCE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/appscience.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/appscience", "updated_at": "2026-10-16" }, { "family": "appset", "category": "pua", "sample_count": 69, "rule_names": [ "MALWARE_WIN_APPSET_T1_ARTIFACT", "MALWARE_WIN_APPSET_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/appset.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/appset", "updated_at": "2026-10-16" }, { "family": "appster", "category": "adware", "sample_count": 637, "rule_names": [ "MALWARE_WIN_APPSTER_T1_ARTIFACT", "MALWARE_WIN_APPSTER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/appster.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/appster", "updated_at": "2026-10-16" }, { "family": "apropos", "category": "trojan", "sample_count": 1, "rule_names": [ "MALWARE_WIN_APROPOS_T1_ARTIFACT", "MALWARE_WIN_APROPOS_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/apropos.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/apropos", "updated_at": "2026-10-16" }, { "family": "aque", "category": "ransomware", "sample_count": 2, "rule_names": [ "MALWARE_WIN_AQUE_T1_ARTIFACT", "MALWARE_WIN_AQUE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/aque.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/aque", "updated_at": "2026-10-16" }, { "family": "arcdoor", "category": "backdoor", "sample_count": 4, "rule_names": [ "MALWARE_WIN_ARCDOOR_T1_ARTIFACT", "MALWARE_WIN_ARCDOOR_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/arcdoor.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/arcdoor", "updated_at": "2026-10-16" }, { "family": "archsms", "category": "ransomware", "sample_count": 127, "rule_names": [ "MALWARE_WIN_ARCHSMS_T1_ARTIFACT", "MALWARE_WIN_ARCHSMS_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/archsms.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/archsms", "updated_at": "2026-10-16" }, { "family": "ardamax", "category": "infostealer", "sample_count": 114, "rule_names": [ "MALWARE_WIN_ARDAMAX_T1_ARTIFACT", "MALWARE_WIN_ARDAMAX_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/ardamax.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/ardamax", "updated_at": "2026-10-16" }, { "family": "ardurk", "category": "ransomware", "sample_count": 18, "rule_names": [ "MALWARE_WIN_ARDURK_T1_ARTIFACT", "MALWARE_WIN_ARDURK_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/ardurk.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/ardurk", "updated_at": "2026-10-16" }, { "family": "arhost", "category": "ransomware", "sample_count": 2, "rule_names": [ "MALWARE_WIN_ARHOST_T1_ARTIFACT", "MALWARE_WIN_ARHOST_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/arhost.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/arhost", "updated_at": "2026-10-16" }, { "family": "arkeistealer", "category": "infostealer", "sample_count": 1, "rule_names": [ "MALWARE_WIN_ARKEISTEALER_T1_ARTIFACT", "MALWARE_WIN_ARKEISTEALER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/arkeistealer.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/arkeistealer", "updated_at": "2026-10-16" }, { "family": "arload", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_ARLOAD_T1_ARTIFACT", "MALWARE_WIN_ARLOAD_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/arload.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/arload", "updated_at": "2026-10-16" }, { "family": "armadillo", "category": "ransomware", "sample_count": 4, "rule_names": [ "MALWARE_WIN_ARMADILLO_T1_ARTIFACT", "MALWARE_WIN_ARMADILLO_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/armadillo.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/armadillo", "updated_at": "2026-10-16" }, { "family": "artel", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_ARTEL_T1_ARTIFACT", "MALWARE_WIN_ARTEL_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/artel.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/artel", "updated_at": "2026-10-16" }, { "family": "aseye", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_ASEYE_T1_ARTIFACT", "MALWARE_WIN_ASEYE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/aseye.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/aseye", "updated_at": "2026-10-16" }, { "family": "asianraw", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_ASIANRAW_T1_ARTIFACT", "MALWARE_WIN_ASIANRAW_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/asianraw.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/asianraw", "updated_at": "2026-10-16" }, { "family": "asktoolbar", "category": "adware", "sample_count": 21, "rule_names": [ "MALWARE_WIN_ASKTOOLBAR_T1_ARTIFACT", "MALWARE_WIN_ASKTOOLBAR_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/asktoolbar.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/asktoolbar", "updated_at": "2026-10-16" }, { "family": "asparnet", "category": "trojan", "sample_count": 58, "rule_names": [ "MALWARE_WIN_ASPARNET_T1_ARTIFACT", "MALWARE_WIN_ASPARNET_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/asparnet.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/asparnet", "updated_at": "2026-10-16" }, { "family": "aspm", "category": "ransomware", "sample_count": 18, "rule_names": [ "MALWARE_WIN_ASPM_T1_ARTIFACT", "MALWARE_WIN_ASPM_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/aspm.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/aspm", "updated_at": "2026-10-16" }, { "family": "aspxor", "category": "trojan", "sample_count": 9, "rule_names": [ "MALWARE_WIN_ASPXOR_T1_ARTIFACT", "MALWARE_WIN_ASPXOR_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/aspxor.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/aspxor", "updated_at": "2026-10-16" }, { "family": "asym", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_ASYM_T1_ARTIFACT", "MALWARE_WIN_ASYM_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/asym.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/asym", "updated_at": "2026-10-16" }, { "family": "atmrod", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_ATMROD_T1_ARTIFACT", "MALWARE_WIN_ATMROD_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/atmrod.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/atmrod", "updated_at": "2026-10-16" }, { "family": "atmulator", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_ATMULATOR_T1_ARTIFACT", "MALWARE_WIN_ATMULATOR_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/atmulator.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/atmulator", "updated_at": "2026-10-16" }, { "family": "atom", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_ATOM_T1_ARTIFACT", "MALWARE_WIN_ATOM_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/atom.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/atom", "updated_at": "2026-10-16" }, { "family": "atomicrat", "category": "backdoor", "sample_count": 1, "rule_names": [ "MALWARE_WIN_ATOMICRAT_T1_ARTIFACT", "MALWARE_WIN_ATOMICRAT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/atomicrat.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/atomicrat", "updated_at": "2026-10-16" }, { "family": "atomix", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_ATOMIX_T1_ARTIFACT", "MALWARE_WIN_ATOMIX_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/atomix.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/atomix", "updated_at": "2026-10-16" }, { "family": "atraps", "category": "infostealer", "sample_count": 164, "rule_names": [ "MALWARE_WIN_ATRAPS_T1_ARTIFACT", "MALWARE_WIN_ATRAPS_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/atraps.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/atraps", "updated_at": "2026-10-16" }, { "family": "attack", "category": "hacktool", "sample_count": 14, "rule_names": [ "MALWARE_WIN_ATTACK_T1_ARTIFACT", "MALWARE_WIN_ATTACK_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/attack.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/attack", "updated_at": "2026-10-16" }, { "family": "ausiv", "category": "trojan", "sample_count": 422, "rule_names": [ "MALWARE_WIN_AUSIV_T1_ARTIFACT", "MALWARE_WIN_AUSIV_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/ausiv.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/ausiv", "updated_at": "2026-10-16" }, { "family": "auslogics", "category": "rogueware", "sample_count": 133, "rule_names": [ "MALWARE_WIN_AUSLOGICS_T1_ARTIFACT", "MALWARE_WIN_AUSLOGICS_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/auslogics.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/auslogics", "updated_at": "2026-10-16" }, { "family": "autit", "category": "trojan", "sample_count": 11, "rule_names": [ "MALWARE_WIN_AUTIT_T1_ARTIFACT", "MALWARE_WIN_AUTIT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/autit.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/autit", "updated_at": "2026-10-16" }, { "family": "autocleanpro", "category": "trojan", "sample_count": 2, "rule_names": [ "MALWARE_WIN_AUTOCLEANPRO_T1_ARTIFACT", "MALWARE_WIN_AUTOCLEANPRO_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/autocleanpro.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/autocleanpro", "updated_at": "2026-10-16" }, { "family": "autofixerpro", "category": "adware", "sample_count": 3, "rule_names": [ "MALWARE_WIN_AUTOFIXERPRO_T1_ARTIFACT", "MALWARE_WIN_AUTOFIXERPRO_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/autofixerpro.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/autofixerpro", "updated_at": "2026-10-16" }, { "family": "autohit", "category": "trojan", "sample_count": 3, "rule_names": [ "MALWARE_WIN_AUTOHIT_T1_ARTIFACT", "MALWARE_WIN_AUTOHIT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/autohit.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/autohit", "updated_at": "2026-10-16" }, { "family": "autohk", "category": "trojan", "sample_count": 120, "rule_names": [ "MALWARE_WIN_AUTOHK_T1_ARTIFACT", "MALWARE_WIN_AUTOHK_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/autohk.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/autohk", "updated_at": "2026-10-16" }, { "family": "autoit", "category": "packer", "sample_count": 1895, "rule_names": [ "MALWARE_WIN_AUTOIT_T1_ARTIFACT", "MALWARE_WIN_AUTOIT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/autoit.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/autoit", "updated_at": "2026-10-16" }, { "family": "autoitscript", "category": "trojan", "sample_count": 5, "rule_names": [ "MALWARE_WIN_AUTOITSCRIPT_T1_ARTIFACT", "MALWARE_WIN_AUTOITSCRIPT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/autoitscript.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/autoitscript", "updated_at": "2026-10-16" }, { "family": "autophyte", "category": "trojan", "sample_count": 1, "rule_names": [ "MALWARE_WIN_AUTOPHYTE_T1_ARTIFACT", "MALWARE_WIN_AUTOPHYTE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/autophyte.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/autophyte", "updated_at": "2026-10-16" }, { "family": "autorunerent", "category": "trojan", "sample_count": 2, "rule_names": [ "MALWARE_WIN_AUTORUNERENT_T1_ARTIFACT", "MALWARE_WIN_AUTORUNERENT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/autorunerent.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/autorunerent", "updated_at": "2026-10-16" }, { "family": "autoruns", "category": "hacktool", "sample_count": 21, "rule_names": [ "MALWARE_WIN_AUTORUNS_T1_ARTIFACT", "MALWARE_WIN_AUTORUNS_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/autoruns.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/autoruns", "updated_at": "2026-10-16" }, { "family": "avira", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_AVIRA_T1_ARTIFACT", "MALWARE_WIN_AVIRA_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/avira.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/avira", "updated_at": "2026-10-16" }, { "family": "avkiller", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_AVKILLER_T1_ARTIFACT", "MALWARE_WIN_AVKILLER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/avkiller.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/avkiller", "updated_at": "2026-10-16" }, { "family": "awangba", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_AWANGBA_T1_ARTIFACT", "MALWARE_WIN_AWANGBA_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/awangba.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/awangba", "updated_at": "2026-10-16" }, { "family": "axbn", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_AXBN_T1_ARTIFACT", "MALWARE_WIN_AXBN_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/axbn.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/axbn", "updated_at": "2026-10-16" }, { "family": "axespec", "category": "trojan", "sample_count": 7, "rule_names": [ "MALWARE_WIN_AXESPEC_T1_ARTIFACT", "MALWARE_WIN_AXESPEC_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/axespec.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/axespec", "updated_at": "2026-10-16" }, { "family": "ayolog", "category": "trojan", "sample_count": 1, "rule_names": [ "MALWARE_WIN_AYOLOG_T1_ARTIFACT", "MALWARE_WIN_AYOLOG_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/ayolog.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/ayolog", "updated_at": "2026-10-16" }, { "family": "azden", "category": "ransomware", "sample_count": 17, "rule_names": [ "MALWARE_WIN_AZDEN_T1_ARTIFACT", "MALWARE_WIN_AZDEN_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/azden.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/azden", "updated_at": "2026-10-16" }, { "family": "azero", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_AZERO_T1_ARTIFACT", "MALWARE_WIN_AZERO_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/azero.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/azero", "updated_at": "2026-10-16" }, { "family": "azorult", "category": "infostealer", "sample_count": 1513, "rule_names": [ "MALWARE_WIN_AZORULT_T1_ARTIFACT", "MALWARE_WIN_AZORULT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/azorult.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/azorult", "updated_at": "2026-10-16" }, { "family": "babar", "category": "advanced_threat", "sample_count": 14, "rule_names": [ "MALWARE_WIN_BABAR_T1_ARTIFACT", "MALWARE_WIN_BABAR_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/babar.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/babar", "updated_at": "2026-10-16" }, { "family": "babel", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_BABEL_T1_ARTIFACT", "MALWARE_WIN_BABEL_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/babel.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/babel", "updated_at": "2026-10-16" }, { "family": "babonock", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_BABONOCK_T1_ARTIFACT", "MALWARE_WIN_BABONOCK_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/babonock.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/babonock", "updated_at": "2026-10-16" }, { "family": "babylon", "category": "adware", "sample_count": 25, "rule_names": [ "MALWARE_WIN_BABYLON_T1_ARTIFACT", "MALWARE_WIN_BABYLON_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/babylon.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/babylon", "updated_at": "2026-10-16" }, { "family": "bacalid", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_BACALID_T1_ARTIFACT", "MALWARE_WIN_BACALID_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/bacalid.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/bacalid", "updated_at": "2026-10-16" }, { "family": "back_orifice", "category": "backdoor", "sample_count": 0, "rule_names": [ "MALWARE_WIN_BACK_ORIFICE_T1_ARTIFACT", "MALWARE_WIN_BACK_ORIFICE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/back_orifice.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/back_orifice", "updated_at": "2026-10-16" }, { "family": "backboot", "category": "trojan", "sample_count": 22, "rule_names": [ "MALWARE_WIN_BACKBOOT_T1_ARTIFACT", "MALWARE_WIN_BACKBOOT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/backboot.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/backboot", "updated_at": "2026-10-16" }, { "family": "backswap", "category": "trojan", "sample_count": 2, "rule_names": [ "MALWARE_WIN_BACKSWAP_T1_ARTIFACT", "MALWARE_WIN_BACKSWAP_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/backswap.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/backswap", "updated_at": "2026-10-16" }, { "family": "badjoke", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_BADJOKE_T1_ARTIFACT", "MALWARE_WIN_BADJOKE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/badjoke.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/badjoke", "updated_at": "2026-10-16" }, { "family": "badur", "category": "trojan", "sample_count": 38, "rule_names": [ "MALWARE_WIN_BADUR_T1_ARTIFACT", "MALWARE_WIN_BADUR_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/badur.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/badur", "updated_at": "2026-10-16" }, { "family": "bagif", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_BAGIF_T1_ARTIFACT", "MALWARE_WIN_BAGIF_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/bagif.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/bagif", "updated_at": "2026-10-16" }, { "family": "bagle", "category": "backdoor", "sample_count": 8, "rule_names": [ "MALWARE_WIN_BAGLE_T1_ARTIFACT", "MALWARE_WIN_BAGLE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/bagle.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/bagle", "updated_at": "2026-10-16" }, { "family": "bagsu", "category": "ransomware", "sample_count": 2, "rule_names": [ "MALWARE_WIN_BAGSU_T1_ARTIFACT", "MALWARE_WIN_BAGSU_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/bagsu.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/bagsu", "updated_at": "2026-10-16" }, { "family": "baidu", "category": "ransomware", "sample_count": 2, "rule_names": [ "MALWARE_WIN_BAIDU_T1_ARTIFACT", "MALWARE_WIN_BAIDU_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/baidu.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/baidu", "updated_at": "2026-10-16" }, { "family": "baidusearch", "category": "trojan", "sample_count": 2, "rule_names": [ "MALWARE_WIN_BAIDUSEARCH_T1_ARTIFACT", "MALWARE_WIN_BAIDUSEARCH_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/baidusearch.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/baidusearch", "updated_at": "2026-10-16" }, { "family": "baiduwrapper", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_BAIDUWRAPPER_T1_ARTIFACT", "MALWARE_WIN_BAIDUWRAPPER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/baiduwrapper.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/baiduwrapper", "updated_at": "2026-10-16" }, { "family": "bamital", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_BAMITAL_T1_ARTIFACT", "MALWARE_WIN_BAMITAL_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/bamital.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/bamital", "updated_at": "2026-10-16" }, { "family": "bamsupr", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_BAMSUPR_T1_ARTIFACT", "MALWARE_WIN_BAMSUPR_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/bamsupr.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/bamsupr", "updated_at": "2026-10-16" }, { "family": "banbra", "category": "banking_trojan", "sample_count": 53, "rule_names": [ "MALWARE_WIN_BANBRA_T1_ARTIFACT", "MALWARE_WIN_BANBRA_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/banbra.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/banbra", "updated_at": "2026-10-16" }, { "family": "bancobras", "category": "trojan", "sample_count": 1, "rule_names": [ "MALWARE_WIN_BANCOBRAS_T1_ARTIFACT", "MALWARE_WIN_BANCOBRAS_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/bancobras.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/bancobras", "updated_at": "2026-10-16" }, { "family": "bancos", "category": "banking_trojan", "sample_count": 55, "rule_names": [ "MALWARE_WIN_BANCOS_T1_ARTIFACT", "MALWARE_WIN_BANCOS_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/bancos.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/bancos", "updated_at": "2026-10-16" }, { "family": "bancteian", "category": "downloader", "sample_count": 91, "rule_names": [ "MALWARE_WIN_BANCTEIAN_T1_ARTIFACT", "MALWARE_WIN_BANCTEIAN_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/bancteian.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/bancteian", "updated_at": "2026-10-16" }, { "family": "bandios", "category": "ransomware", "sample_count": 3, "rule_names": [ "MALWARE_WIN_BANDIOS_T1_ARTIFACT", "MALWARE_WIN_BANDIOS_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/bandios.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/bandios", "updated_at": "2026-10-16" }, { "family": "bandit", "category": "ransomware", "sample_count": 10, "rule_names": [ "MALWARE_WIN_BANDIT_T1_ARTIFACT", "MALWARE_WIN_BANDIT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/bandit.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/bandit", "updated_at": "2026-10-16" }, { "family": "bandok", "category": "trojan", "sample_count": 1, "rule_names": [ "MALWARE_WIN_BANDOK_T1_ARTIFACT", "MALWARE_WIN_BANDOK_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/bandok.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/bandok", "updated_at": "2026-10-16" }, { "family": "bandoo", "category": "trojan", "sample_count": 11, "rule_names": [ "MALWARE_WIN_BANDOO_T1_ARTIFACT", "MALWARE_WIN_BANDOO_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/bandoo.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/bandoo", "updated_at": "2026-10-16" }, { "family": "bandook", "category": "rat", "sample_count": 0, "rule_names": [ "MALWARE_WIN_BANDOOK_T1_ARTIFACT", "MALWARE_WIN_BANDOOK_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/bandook.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/bandook", "updated_at": "2026-10-16" }, { "family": "bang5mai", "category": "backdoor", "sample_count": 36, "rule_names": [ "MALWARE_WIN_BANG5MAI_T1_ARTIFACT", "MALWARE_WIN_BANG5MAI_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/bang5mai.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/bang5mai", "updated_at": "2026-10-16" }, { "family": "bank", "category": "ransomware", "sample_count": 2, "rule_names": [ "MALWARE_WIN_BANK_T1_ARTIFACT", "MALWARE_WIN_BANK_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/bank.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/bank", "updated_at": "2026-10-16" }, { "family": "bankfraud", "category": "trojan", "sample_count": 1, "rule_names": [ "MALWARE_WIN_BANKFRAUD_T1_ARTIFACT", "MALWARE_WIN_BANKFRAUD_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/bankfraud.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/bankfraud", "updated_at": "2026-10-16" }, { "family": "bankoren", "category": "trojan", "sample_count": 1, "rule_names": [ "MALWARE_WIN_BANKOREN_T1_ARTIFACT", "MALWARE_WIN_BANKOREN_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/bankoren.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/bankoren", "updated_at": "2026-10-16" }, { "family": "banks", "category": "trojan", "sample_count": 1, "rule_names": [ "MALWARE_WIN_BANKS_T1_ARTIFACT", "MALWARE_WIN_BANKS_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/banks.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/banks", "updated_at": "2026-10-16" }, { "family": "banload", "category": "downloader", "sample_count": 288, "rule_names": [ "MALWARE_WIN_BANLOAD_T1_ARTIFACT", "MALWARE_WIN_BANLOAD_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/banload.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/banload", "updated_at": "2026-10-16" }, { "family": "banpak", "category": "trojan", "sample_count": 12, "rule_names": [ "MALWARE_WIN_BANPAK_T1_ARTIFACT", "MALWARE_WIN_BANPAK_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/banpak.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/banpak", "updated_at": "2026-10-16" }, { "family": "bansomqare", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_BANSOMQARE_T1_ARTIFACT", "MALWARE_WIN_BANSOMQARE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/bansomqare.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/bansomqare", "updated_at": "2026-10-16" }, { "family": "banspy", "category": "infostealer", "sample_count": 2, "rule_names": [ "MALWARE_WIN_BANSPY_T1_ARTIFACT", "MALWARE_WIN_BANSPY_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/banspy.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/banspy", "updated_at": "2026-10-16" }, { "family": "banz", "category": "ransomware", "sample_count": 3, "rule_names": [ "MALWARE_WIN_BANZ_T1_ARTIFACT", "MALWARE_WIN_BANZ_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/banz.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/banz", "updated_at": "2026-10-16" }, { "family": "barys", "category": "infostealer", "sample_count": 200, "rule_names": [ "MALWARE_WIN_BARYS_T1_ARTIFACT", "MALWARE_WIN_BARYS_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/barys.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/barys", "updated_at": "2026-10-16" }, { "family": "baryumka", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_BARYUMKA_T1_ARTIFACT", "MALWARE_WIN_BARYUMKA_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/baryumka.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/baryumka", "updated_at": "2026-10-16" }, { "family": "baserch", "category": "ransomware", "sample_count": 5, "rule_names": [ "MALWARE_WIN_BASERCH_T1_ARTIFACT", "MALWARE_WIN_BASERCH_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/baserch.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/baserch", "updated_at": "2026-10-16" }, { "family": "basine", "category": "ransomware", "sample_count": 3, "rule_names": [ "MALWARE_WIN_BASINE_T1_ARTIFACT", "MALWARE_WIN_BASINE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/basine.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/basine", "updated_at": "2026-10-16" }, { "family": "batlauncher", "category": "ransomware", "sample_count": 3, "rule_names": [ "MALWARE_WIN_BATLAUNCHER_T1_ARTIFACT", "MALWARE_WIN_BATLAUNCHER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/batlauncher.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/batlauncher", "updated_at": "2026-10-16" }, { "family": "batton", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_BATTON_T1_ARTIFACT", "MALWARE_WIN_BATTON_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/batton.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/batton", "updated_at": "2026-10-16" }, { "family": "bayrob", "category": "trojan", "sample_count": 74, "rule_names": [ "MALWARE_WIN_BAYROB_T1_ARTIFACT", "MALWARE_WIN_BAYROB_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/bayrob.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/bayrob", "updated_at": "2026-10-16" }, { "family": "bccrypt", "category": "ransomware", "sample_count": 2, "rule_names": [ "MALWARE_WIN_BCCRYPT_T1_ARTIFACT", "MALWARE_WIN_BCCRYPT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/bccrypt.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/bccrypt", "updated_at": "2026-10-16" }, { "family": "be3auestydmi", "category": "trojan", "sample_count": 1, "rule_names": [ "MALWARE_WIN_BE3AUESTYDMI_T1_ARTIFACT", "MALWARE_WIN_BE3AUESTYDMI_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/be3auestydmi.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/be3auestydmi", "updated_at": "2026-10-16" }, { "family": "beast", "category": "rat", "sample_count": 0, "rule_names": [ "MALWARE_WIN_BEAST_T1_ARTIFACT", "MALWARE_WIN_BEAST_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/beast.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/beast", "updated_at": "2026-10-16" }, { "family": "beastdoor", "category": "backdoor", "sample_count": 1, "rule_names": [ "MALWARE_WIN_BEASTDOOR_T1_ARTIFACT", "MALWARE_WIN_BEASTDOOR_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/beastdoor.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/beastdoor", "updated_at": "2026-10-16" }, { "family": "beaugrit", "category": "ransomware", "sample_count": 3, "rule_names": [ "MALWARE_WIN_BEAUGRIT_T1_ARTIFACT", "MALWARE_WIN_BEAUGRIT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/beaugrit.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/beaugrit", "updated_at": "2026-10-16" }, { "family": "bebloh", "category": "trojan", "sample_count": 3, "rule_names": [ "MALWARE_WIN_BEBLOH_T1_ARTIFACT", "MALWARE_WIN_BEBLOH_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/bebloh.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/bebloh", "updated_at": "2026-10-16" }, { "family": "bedefco", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_BEDEFCO_T1_ARTIFACT", "MALWARE_WIN_BEDEFCO_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/bedefco.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/bedefco", "updated_at": "2026-10-16" }, { "family": "bedep", "category": "ransomware", "sample_count": 3, "rule_names": [ "MALWARE_WIN_BEDEP_T1_ARTIFACT", "MALWARE_WIN_BEDEP_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/bedep.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/bedep", "updated_at": "2026-10-16" }, { "family": "beebone", "category": "worm", "sample_count": 151, "rule_names": [ "MALWARE_WIN_BEEBONE_T1_ARTIFACT", "MALWARE_WIN_BEEBONE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/beebone.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/beebone", "updated_at": "2026-10-16" }, { "family": "begseabug", "category": "ransomware", "sample_count": 2, "rule_names": [ "MALWARE_WIN_BEGSEABUG_T1_ARTIFACT", "MALWARE_WIN_BEGSEABUG_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/begseabug.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/begseabug", "updated_at": "2026-10-16" }, { "family": "behav", "category": "ransomware", "sample_count": 2, "rule_names": [ "MALWARE_WIN_BEHAV_T1_ARTIFACT", "MALWARE_WIN_BEHAV_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/behav.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/behav", "updated_at": "2026-10-16" }, { "family": "belonard", "category": "ransomware", "sample_count": 3, "rule_names": [ "MALWARE_WIN_BELONARD_T1_ARTIFACT", "MALWARE_WIN_BELONARD_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/belonard.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/belonard", "updated_at": "2026-10-16" }, { "family": "benban", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_BENBAN_T1_ARTIFACT", "MALWARE_WIN_BENBAN_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/benban.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/benban", "updated_at": "2026-10-16" }, { "family": "benjamin", "category": "worm", "sample_count": 153, "rule_names": [ "MALWARE_WIN_BENJAMIN_T1_ARTIFACT", "MALWARE_WIN_BENJAMIN_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/benjamin.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/benjamin", "updated_at": "2026-10-16" }, { "family": "berbew", "category": "infostealer", "sample_count": 407, "rule_names": [ "MALWARE_WIN_BERBEW_T1_ARTIFACT", "MALWARE_WIN_BERBEW_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/berbew.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/berbew", "updated_at": "2026-10-16" }, { "family": "bero", "category": "ransomware", "sample_count": 5, "rule_names": [ "MALWARE_WIN_BERO_T1_ARTIFACT", "MALWARE_WIN_BERO_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/bero.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/bero", "updated_at": "2026-10-16" }, { "family": "bersek", "category": "backdoor", "sample_count": 0, "rule_names": [ "MALWARE_WIN_BERSEK_T1_ARTIFACT", "MALWARE_WIN_BERSEK_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/bersek.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/bersek", "updated_at": "2026-10-16" }, { "family": "bertle", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_BERTLE_T1_ARTIFACT", "MALWARE_WIN_BERTLE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/bertle.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/bertle", "updated_at": "2026-10-16" }, { "family": "bestafera", "category": "banking_trojan", "sample_count": 48, "rule_names": [ "MALWARE_WIN_BESTAFERA_T1_ARTIFACT", "MALWARE_WIN_BESTAFERA_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/bestafera.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/bestafera", "updated_at": "2026-10-16" }, { "family": "betabot", "category": "trojan", "sample_count": 3, "rule_names": [ "MALWARE_WIN_BETABOT_T1_ARTIFACT", "MALWARE_WIN_BETABOT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/betabot.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/betabot", "updated_at": "2026-10-16" }, { "family": "betkrypt", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_BETKRYPT_T1_ARTIFACT", "MALWARE_WIN_BETKRYPT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/betkrypt.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/betkrypt", "updated_at": "2026-10-16" }, { "family": "betload", "category": "ransomware", "sample_count": 15, "rule_names": [ "MALWARE_WIN_BETLOAD_T1_ARTIFACT", "MALWARE_WIN_BETLOAD_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/betload.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/betload", "updated_at": "2026-10-16" }, { "family": "bettersurf", "category": "adware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_BETTERSURF_T1_ARTIFACT", "MALWARE_WIN_BETTERSURF_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/bettersurf.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/bettersurf", "updated_at": "2026-10-16" }, { "family": "beyondkeylogger", "category": "infostealer", "sample_count": 8, "rule_names": [ "MALWARE_WIN_BEYONDKEYLOGGER_T1_ARTIFACT", "MALWARE_WIN_BEYONDKEYLOGGER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/beyondkeylogger.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/beyondkeylogger", "updated_at": "2026-10-16" }, { "family": "bhoint", "category": "trojan", "sample_count": 1, "rule_names": [ "MALWARE_WIN_BHOINT_T1_ARTIFACT", "MALWARE_WIN_BHOINT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/bhoint.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/bhoint", "updated_at": "2026-10-16" }, { "family": "bhosta", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_BHOSTA_T1_ARTIFACT", "MALWARE_WIN_BHOSTA_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/bhosta.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/bhosta", "updated_at": "2026-10-16" }, { "family": "bhxu", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_BHXU_T1_ARTIFACT", "MALWARE_WIN_BHXU_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/bhxu.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/bhxu", "updated_at": "2026-10-16" }, { "family": "bicololo", "category": "ransomware", "sample_count": 6, "rule_names": [ "MALWARE_WIN_BICOLOLO_T1_ARTIFACT", "MALWARE_WIN_BICOLOLO_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/bicololo.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/bicololo", "updated_at": "2026-10-16" }, { "family": "bifrose", "category": "backdoor", "sample_count": 59, "rule_names": [ "MALWARE_WIN_BIFROSE_T1_ARTIFACT", "MALWARE_WIN_BIFROSE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/bifrose.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/bifrose", "updated_at": "2026-10-16" }, { "family": "bifrost", "category": "rat", "sample_count": 95, "rule_names": [ "MALWARE_WIN_BIFROST_T1_ARTIFACT", "MALWARE_WIN_BIFROST_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/bifrost.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/bifrost", "updated_at": "2026-10-16" }, { "family": "binder", "category": "hacktool", "sample_count": 87, "rule_names": [ "MALWARE_WIN_BINDER_T1_ARTIFACT", "MALWARE_WIN_BINDER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/binder.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/binder", "updated_at": "2026-10-16" }, { "family": "binderon", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_BINDERON_T1_ARTIFACT", "MALWARE_WIN_BINDERON_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/binderon.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/binderon", "updated_at": "2026-10-16" }, { "family": "bindex", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_BINDEX_T1_ARTIFACT", "MALWARE_WIN_BINDEX_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/bindex.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/bindex", "updated_at": "2026-10-16" }, { "family": "bindjpg", "category": "trojan", "sample_count": 1, "rule_names": [ "MALWARE_WIN_BINDJPG_T1_ARTIFACT", "MALWARE_WIN_BINDJPG_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/bindjpg.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/bindjpg", "updated_at": "2026-10-16" }, { "family": "birele", "category": "ransomware", "sample_count": 16, "rule_names": [ "MALWARE_WIN_BIRELE_T1_ARTIFACT", "MALWARE_WIN_BIRELE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/birele.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/birele", "updated_at": "2026-10-16" }, { "family": "bisonal", "category": "trojan", "sample_count": 2, "rule_names": [ "MALWARE_WIN_BISONAL_T1_ARTIFACT", "MALWARE_WIN_BISONAL_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/bisonal.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/bisonal", "updated_at": "2026-10-16" }, { "family": "bitcovar", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_BITCOVAR_T1_ARTIFACT", "MALWARE_WIN_BITCOVAR_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/bitcovar.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/bitcovar", "updated_at": "2026-10-16" }, { "family": "bitman", "category": "ransomware", "sample_count": 8, "rule_names": [ "MALWARE_WIN_BITMAN_T1_ARTIFACT", "MALWARE_WIN_BITMAN_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/bitman.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/bitman", "updated_at": "2026-10-16" }, { "family": "bitmin", "category": "coinminer", "sample_count": 112, "rule_names": [ "MALWARE_WIN_BITMIN_T1_ARTIFACT", "MALWARE_WIN_BITMIN_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/bitmin.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/bitmin", "updated_at": "2026-10-16" }, { "family": "bitrep", "category": "trojan", "sample_count": 76, "rule_names": [ "MALWARE_WIN_BITREP_T1_ARTIFACT", "MALWARE_WIN_BITREP_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/bitrep.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/bitrep", "updated_at": "2026-10-16" }, { "family": "bitrepeyp", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_BITREPEYP_T1_ARTIFACT", "MALWARE_WIN_BITREPEYP_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/bitrepeyp.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/bitrepeyp", "updated_at": "2026-10-16" }, { "family": "bits", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_BITS_T1_ARTIFACT", "MALWARE_WIN_BITS_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/bits.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/bits", "updated_at": "2026-10-16" }, { "family": "bitter", "category": "trojan", "sample_count": 1, "rule_names": [ "MALWARE_WIN_BITTER_T1_ARTIFACT", "MALWARE_WIN_BITTER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/bitter.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/bitter", "updated_at": "2026-10-16" }, { "family": "bitwallet", "category": "trojan", "sample_count": 1, "rule_names": [ "MALWARE_WIN_BITWALLET_T1_ARTIFACT", "MALWARE_WIN_BITWALLET_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/bitwallet.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/bitwallet", "updated_at": "2026-10-16" }, { "family": "bkff", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_BKFF_T1_ARTIFACT", "MALWARE_WIN_BKFF_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/bkff.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/bkff", "updated_at": "2026-10-16" }, { "family": "black", "category": "ransomware", "sample_count": 329, "rule_names": [ "MALWARE_WIN_BLACK_T1_ARTIFACT", "MALWARE_WIN_BLACK_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/black.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/black", "updated_at": "2026-10-16" }, { "family": "blacked", "category": "ransomware", "sample_count": 3, "rule_names": [ "MALWARE_WIN_BLACKED_T1_ARTIFACT", "MALWARE_WIN_BLACKED_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/blacked.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/blacked", "updated_at": "2026-10-16" }, { "family": "blackenergy", "category": "advanced_threat", "sample_count": 1, "rule_names": [ "MALWARE_WIN_BLACKENERGY_T1_ARTIFACT", "MALWARE_WIN_BLACKENERGY_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/blackenergy.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/blackenergy", "updated_at": "2026-10-16" }, { "family": "blackhole", "category": "exploit_kit", "sample_count": 14, "rule_names": [ "MALWARE_WIN_BLACKHOLE_T1_ARTIFACT", "MALWARE_WIN_BLACKHOLE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/blackhole.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/blackhole", "updated_at": "2026-10-16" }, { "family": "blackmoon", "category": "banking_trojan", "sample_count": 228, "rule_names": [ "MALWARE_WIN_BLACKMOON_T1_ARTIFACT", "MALWARE_WIN_BLACKMOON_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/blackmoon.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/blackmoon", "updated_at": "2026-10-16" }, { "family": "blackstealer", "category": "infostealer", "sample_count": 1, "rule_names": [ "MALWARE_WIN_BLACKSTEALER_T1_ARTIFACT", "MALWARE_WIN_BLACKSTEALER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/blackstealer.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/blackstealer", "updated_at": "2026-10-16" }, { "family": "blackv", "category": "ransomware", "sample_count": 15, "rule_names": [ "MALWARE_WIN_BLACKV_T1_ARTIFACT", "MALWARE_WIN_BLACKV_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/blackv.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/blackv", "updated_at": "2026-10-16" }, { "family": "blacoleref", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_BLACOLEREF_T1_ARTIFACT", "MALWARE_WIN_BLACOLEREF_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/blacoleref.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/blacoleref", "updated_at": "2026-10-16" }, { "family": "bladabindi", "category": "rat", "sample_count": 3930, "rule_names": [ "MALWARE_WIN_BLADABINDI_T1_ARTIFACT", "MALWARE_WIN_BLADABINDI_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/bladabindi.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/bladabindi", "updated_at": "2026-10-16" }, { "family": "blakamba", "category": "ransomware", "sample_count": 4, "rule_names": [ "MALWARE_WIN_BLAKAMBA_T1_ARTIFACT", "MALWARE_WIN_BLAKAMBA_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/blakamba.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/blakamba", "updated_at": "2026-10-16" }, { "family": "blamon", "category": "ransomware", "sample_count": 22, "rule_names": [ "MALWARE_WIN_BLAMON_T1_ARTIFACT", "MALWARE_WIN_BLAMON_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/blamon.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/blamon", "updated_at": "2026-10-16" }, { "family": "blasterx", "category": "worm", "sample_count": 0, "rule_names": [ "MALWARE_WIN_BLASTERX_T1_ARTIFACT", "MALWARE_WIN_BLASTERX_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/blasterx.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/blasterx", "updated_at": "2026-10-16" }, { "family": "blihan", "category": "ransomware", "sample_count": 20, "rule_names": [ "MALWARE_WIN_BLIHAN_T1_ARTIFACT", "MALWARE_WIN_BLIHAN_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/blihan.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/blihan", "updated_at": "2026-10-16" }, { "family": "blind", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_BLIND_T1_ARTIFACT", "MALWARE_WIN_BLIND_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/blind.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/blind", "updated_at": "2026-10-16" }, { "family": "blokrypt", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_BLOKRYPT_T1_ARTIFACT", "MALWARE_WIN_BLOKRYPT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/blokrypt.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/blokrypt", "updated_at": "2026-10-16" }, { "family": "bloored", "category": "trojan", "sample_count": 74, "rule_names": [ "MALWARE_WIN_BLOORED_T1_ARTIFACT", "MALWARE_WIN_BLOORED_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/bloored.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/bloored", "updated_at": "2026-10-16" }, { "family": "blouiroet", "category": "ransomware", "sample_count": 26, "rule_names": [ "MALWARE_WIN_BLOUIROET_T1_ARTIFACT", "MALWARE_WIN_BLOUIROET_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/blouiroet.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/blouiroet", "updated_at": "2026-10-16" }, { "family": "blubot", "category": "ransomware", "sample_count": 3, "rule_names": [ "MALWARE_WIN_BLUBOT_T1_ARTIFACT", "MALWARE_WIN_BLUBOT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/blubot.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/blubot", "updated_at": "2026-10-16" }, { "family": "blueeagle", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_BLUEEAGLE_T1_ARTIFACT", "MALWARE_WIN_BLUEEAGLE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/blueeagle.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/blueeagle", "updated_at": "2026-10-16" }, { "family": "blueh", "category": "ransomware", "sample_count": 8, "rule_names": [ "MALWARE_WIN_BLUEH_T1_ARTIFACT", "MALWARE_WIN_BLUEH_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/blueh.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/blueh", "updated_at": "2026-10-16" }, { "family": "bluewushu", "category": "ransomware", "sample_count": 2, "rule_names": [ "MALWARE_WIN_BLUEWUSHU_T1_ARTIFACT", "MALWARE_WIN_BLUEWUSHU_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/bluewushu.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/bluewushu", "updated_at": "2026-10-16" }, { "family": "bluteal", "category": "ransomware", "sample_count": 11, "rule_names": [ "MALWARE_WIN_BLUTEAL_T1_ARTIFACT", "MALWARE_WIN_BLUTEAL_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/bluteal.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/bluteal", "updated_at": "2026-10-16" }, { "family": "bmgfrznl2gfaa", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_BMGFRZNL2GFAA_T1_ARTIFACT", "MALWARE_WIN_BMGFRZNL2GFAA_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/bmgfrznl2gfaa.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/bmgfrznl2gfaa", "updated_at": "2026-10-16" }, { "family": "bmkfxasqf6ki", "category": "trojan", "sample_count": 1, "rule_names": [ "MALWARE_WIN_BMKFXASQF6KI_T1_ARTIFACT", "MALWARE_WIN_BMKFXASQF6KI_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/bmkfxasqf6ki.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/bmkfxasqf6ki", "updated_at": "2026-10-16" }, { "family": "bmmedia", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_BMMEDIA_T1_ARTIFACT", "MALWARE_WIN_BMMEDIA_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/bmmedia.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/bmmedia", "updated_at": "2026-10-16" }, { "family": "bmsdus4ufhei", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_BMSDUS4UFHEI_T1_ARTIFACT", "MALWARE_WIN_BMSDUS4UFHEI_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/bmsdus4ufhei.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/bmsdus4ufhei", "updated_at": "2026-10-16" }, { "family": "bnksa", "category": "trojan", "sample_count": 1, "rule_names": [ "MALWARE_WIN_BNKSA_T1_ARTIFACT", "MALWARE_WIN_BNKSA_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/bnksa.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/bnksa", "updated_at": "2026-10-16" }, { "family": "bnqp", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_BNQP_T1_ARTIFACT", "MALWARE_WIN_BNQP_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/bnqp.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/bnqp", "updated_at": "2026-10-16" }, { "family": "bnuaaewgb2fb", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_BNUAAEWGB2FB_T1_ARTIFACT", "MALWARE_WIN_BNUAAEWGB2FB_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/bnuaaewgb2fb.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/bnuaaewgb2fb", "updated_at": "2026-10-16" }, { "family": "boaxxe", "category": "ransomware", "sample_count": 3, "rule_names": [ "MALWARE_WIN_BOAXXE_T1_ARTIFACT", "MALWARE_WIN_BOAXXE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/boaxxe.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/boaxxe", "updated_at": "2026-10-16" }, { "family": "bobax", "category": "trojan", "sample_count": 5, "rule_names": [ "MALWARE_WIN_BOBAX_T1_ARTIFACT", "MALWARE_WIN_BOBAX_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/bobax.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/bobax", "updated_at": "2026-10-16" }, { "family": "bodegun", "category": "ransomware", "sample_count": 17, "rule_names": [ "MALWARE_WIN_BODEGUN_T1_ARTIFACT", "MALWARE_WIN_BODEGUN_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/bodegun.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/bodegun", "updated_at": "2026-10-16" }, { "family": "boht", "category": "ransomware", "sample_count": 4, "rule_names": [ "MALWARE_WIN_BOHT_T1_ARTIFACT", "MALWARE_WIN_BOHT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/boht.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/boht", "updated_at": "2026-10-16" }, { "family": "boilod", "category": "adware", "sample_count": 55, "rule_names": [ "MALWARE_WIN_BOILOD_T1_ARTIFACT", "MALWARE_WIN_BOILOD_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/boilod.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/boilod", "updated_at": "2026-10-16" }, { "family": "bolik", "category": "trojan", "sample_count": 1, "rule_names": [ "MALWARE_WIN_BOLIK_T1_ARTIFACT", "MALWARE_WIN_BOLIK_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/bolik.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/bolik", "updated_at": "2026-10-16" }, { "family": "bomka", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_BOMKA_T1_ARTIFACT", "MALWARE_WIN_BOMKA_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/bomka.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/bomka", "updated_at": "2026-10-16" }, { "family": "bonkyhp", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_BONKYHP_T1_ARTIFACT", "MALWARE_WIN_BONKYHP_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/bonkyhp.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/bonkyhp", "updated_at": "2026-10-16" }, { "family": "boopcel", "category": "ransomware", "sample_count": 2, "rule_names": [ "MALWARE_WIN_BOOPCEL_T1_ARTIFACT", "MALWARE_WIN_BOOPCEL_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/boopcel.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/boopcel", "updated_at": "2026-10-16" }, { "family": "bototer", "category": "trojan", "sample_count": 1, "rule_names": [ "MALWARE_WIN_BOTOTER_T1_ARTIFACT", "MALWARE_WIN_BOTOTER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/bototer.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/bototer", "updated_at": "2026-10-16" }, { "family": "boxter", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_BOXTER_T1_ARTIFACT", "MALWARE_WIN_BOXTER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/boxter.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/boxter", "updated_at": "2026-10-16" }, { "family": "boychi", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_BOYCHI_T1_ARTIFACT", "MALWARE_WIN_BOYCHI_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/boychi.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/boychi", "updated_at": "2026-10-16" }, { "family": "bozok", "category": "trojan", "sample_count": 0, "rule_names": [ "MALWARE_WIN_BOZOK_T1_ARTIFACT", "MALWARE_WIN_BOZOK_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/bozok.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/bozok", "updated_at": "2026-10-16" }, { "family": "bplug", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_BPLUG_T1_ARTIFACT", "MALWARE_WIN_BPLUG_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/bplug.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/bplug", "updated_at": "2026-10-16" }, { "family": "brambul", "category": "worm", "sample_count": 2, "rule_names": [ "MALWARE_WIN_BRAMBUL_T1_ARTIFACT", "MALWARE_WIN_BRAMBUL_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/brambul.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/brambul", "updated_at": "2026-10-16" }, { "family": "bredavi", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_BREDAVI_T1_ARTIFACT", "MALWARE_WIN_BREDAVI_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/bredavi.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/bredavi", "updated_at": "2026-10-16" }, { "family": "bredo", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_BREDO_T1_ARTIFACT", "MALWARE_WIN_BREDO_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/bredo.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/bredo", "updated_at": "2026-10-16" }, { "family": "bredolab", "category": "trojan", "sample_count": 1, "rule_names": [ "MALWARE_WIN_BREDOLAB_T1_ARTIFACT", "MALWARE_WIN_BREDOLAB_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/bredolab.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/bredolab", "updated_at": "2026-10-16" }, { "family": "bridex", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_BRIDEX_T1_ARTIFACT", "MALWARE_WIN_BRIDEX_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/bridex.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/bridex", "updated_at": "2026-10-16" }, { "family": "brobaneup", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_BROBANEUP_T1_ARTIFACT", "MALWARE_WIN_BROBANEUP_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/brobaneup.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/brobaneup", "updated_at": "2026-10-16" }, { "family": "broduplo", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_BRODUPLO_T1_ARTIFACT", "MALWARE_WIN_BRODUPLO_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/broduplo.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/broduplo", "updated_at": "2026-10-16" }, { "family": "brontok", "category": "worm", "sample_count": 57, "rule_names": [ "MALWARE_WIN_BRONTOK_T1_ARTIFACT", "MALWARE_WIN_BRONTOK_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/brontok.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/brontok", "updated_at": "2026-10-16" }, { "family": "brosafe", "category": "trojan", "sample_count": 1, "rule_names": [ "MALWARE_WIN_BROSAFE_T1_ARTIFACT", "MALWARE_WIN_BROSAFE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/brosafe.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/brosafe", "updated_at": "2026-10-16" }, { "family": "broskod", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_BROSKOD_T1_ARTIFACT", "MALWARE_WIN_BROSKOD_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/broskod.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/broskod", "updated_at": "2026-10-16" }, { "family": "browseban", "category": "trojan", "sample_count": 3, "rule_names": [ "MALWARE_WIN_BROWSEBAN_T1_ARTIFACT", "MALWARE_WIN_BROWSEBAN_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/browseban.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/browseban", "updated_at": "2026-10-16" }, { "family": "browsecx", "category": "trojan", "sample_count": 1, "rule_names": [ "MALWARE_WIN_BROWSECX_T1_ARTIFACT", "MALWARE_WIN_BROWSECX_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/browsecx.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/browsecx", "updated_at": "2026-10-16" }, { "family": "browsefox", "category": "adware", "sample_count": 73, "rule_names": [ "MALWARE_WIN_BROWSEFOX_T1_ARTIFACT", "MALWARE_WIN_BROWSEFOX_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/browsefox.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/browsefox", "updated_at": "2026-10-16" }, { "family": "browserio", "category": "adware", "sample_count": 243, "rule_names": [ "MALWARE_WIN_BROWSERIO_T1_ARTIFACT", "MALWARE_WIN_BROWSERIO_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/browserio.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/browserio", "updated_at": "2026-10-16" }, { "family": "browserpassview", "category": "infostealer", "sample_count": 2, "rule_names": [ "MALWARE_WIN_BROWSERPASSVIEW_T1_ARTIFACT", "MALWARE_WIN_BROWSERPASSVIEW_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/browserpassview.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/browserpassview", "updated_at": "2026-10-16" }, { "family": "browserpwdstealer", "category": "infostealer", "sample_count": 2, "rule_names": [ "MALWARE_WIN_BROWSERPWDSTEALER_T1_ARTIFACT", "MALWARE_WIN_BROWSERPWDSTEALER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/browserpwdstealer.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/browserpwdstealer", "updated_at": "2026-10-16" }, { "family": "browshot", "category": "trojan", "sample_count": 1, "rule_names": [ "MALWARE_WIN_BROWSHOT_T1_ARTIFACT", "MALWARE_WIN_BROWSHOT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/browshot.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/browshot", "updated_at": "2026-10-16" }, { "family": "brresmon", "category": "ransomware", "sample_count": 8, "rule_names": [ "MALWARE_WIN_BRRESMON_T1_ARTIFACT", "MALWARE_WIN_BRRESMON_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/brresmon.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/brresmon", "updated_at": "2026-10-16" }, { "family": "bruhorn", "category": "ransomware", "sample_count": 2, "rule_names": [ "MALWARE_WIN_BRUHORN_T1_ARTIFACT", "MALWARE_WIN_BRUHORN_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/bruhorn.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/bruhorn", "updated_at": "2026-10-16" }, { "family": "bruteforce", "category": "hacktool", "sample_count": 13, "rule_names": [ "MALWARE_WIN_BRUTEFORCE_T1_ARTIFACT", "MALWARE_WIN_BRUTEFORCE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/bruteforce.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/bruteforce", "updated_at": "2026-10-16" }, { "family": "brutus", "category": "tool", "sample_count": 0, "rule_names": [ "MALWARE_WIN_BRUTUS_T1_ARTIFACT", "MALWARE_WIN_BRUTUS_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/brutus.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/brutus", "updated_at": "2026-10-16" }, { "family": "bsdownloader", "category": "trojan_downloader", "sample_count": 1, "rule_names": [ "MALWARE_WIN_BSDOWNLOADER_T1_ARTIFACT", "MALWARE_WIN_BSDOWNLOADER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/bsdownloader.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/bsdownloader", "updated_at": "2026-10-16" }, { "family": "bsvsebni", "category": "trojan", "sample_count": 1, "rule_names": [ "MALWARE_WIN_BSVSEBNI_T1_ARTIFACT", "MALWARE_WIN_BSVSEBNI_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/bsvsebni.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/bsvsebni", "updated_at": "2026-10-16" }, { "family": "bsymem", "category": "ransomware", "sample_count": 144, "rule_names": [ "MALWARE_WIN_BSYMEM_T1_ARTIFACT", "MALWARE_WIN_BSYMEM_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/bsymem.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/bsymem", "updated_at": "2026-10-16" }, { "family": "btcon", "category": "trojan", "sample_count": 1, "rule_names": [ "MALWARE_WIN_BTCON_T1_ARTIFACT", "MALWARE_WIN_BTCON_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/btcon.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/btcon", "updated_at": "2026-10-16" }, { "family": "btcware", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_BTCWARE_T1_ARTIFACT", "MALWARE_WIN_BTCWARE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/btcware.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/btcware", "updated_at": "2026-10-16" }, { "family": "bubbledock", "category": "trojan", "sample_count": 1, "rule_names": [ "MALWARE_WIN_BUBBLEDOCK_T1_ARTIFACT", "MALWARE_WIN_BUBBLEDOCK_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/bubbledock.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/bubbledock", "updated_at": "2026-10-16" }, { "family": "bublik", "category": "trojan_downloader", "sample_count": 36, "rule_names": [ "MALWARE_WIN_BUBLIK_T1_ARTIFACT", "MALWARE_WIN_BUBLIK_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/bublik.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/bublik", "updated_at": "2026-10-16" }, { "family": "buhtrap", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_BUHTRAP_T1_ARTIFACT", "MALWARE_WIN_BUHTRAP_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/buhtrap.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/buhtrap", "updated_at": "2026-10-16" }, { "family": "bulta", "category": "ransomware", "sample_count": 6, "rule_names": [ "MALWARE_WIN_BULTA_T1_ARTIFACT", "MALWARE_WIN_BULTA_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/bulta.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/bulta", "updated_at": "2026-10-16" }, { "family": "bumat", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_BUMAT_T1_ARTIFACT", "MALWARE_WIN_BUMAT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/bumat.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/bumat", "updated_at": "2026-10-16" }, { "family": "bump_rat", "category": "trojan", "sample_count": 0, "rule_names": [ "MALWARE_WIN_BUMP_RAT_T1_ARTIFACT", "MALWARE_WIN_BUMP_RAT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/bump_rat.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/bump_rat", "updated_at": "2026-10-16" }, { "family": "bundleloader", "category": "trojan_downloader", "sample_count": 2, "rule_names": [ "MALWARE_WIN_BUNDLELOADER_T1_ARTIFACT", "MALWARE_WIN_BUNDLELOADER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/bundleloader.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/bundleloader", "updated_at": "2026-10-16" }, { "family": "bundlore", "category": "adware", "sample_count": 16, "rule_names": [ "MALWARE_WIN_BUNDLORE_T1_ARTIFACT", "MALWARE_WIN_BUNDLORE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/bundlore.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/bundlore", "updated_at": "2026-10-16" }, { "family": "bunitu", "category": "trojan", "sample_count": 49, "rule_names": [ "MALWARE_WIN_BUNITU_T1_ARTIFACT", "MALWARE_WIN_BUNITU_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/bunitu.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/bunitu", "updated_at": "2026-10-16" }, { "family": "bunndle", "category": "trojan", "sample_count": 5, "rule_names": [ "MALWARE_WIN_BUNNDLE_T1_ARTIFACT", "MALWARE_WIN_BUNNDLE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/bunndle.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/bunndle", "updated_at": "2026-10-16" }, { "family": "burden", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_BURDEN_T1_ARTIFACT", "MALWARE_WIN_BURDEN_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/burden.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/burden", "updated_at": "2026-10-16" }, { "family": "burnwoo", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_BURNWOO_T1_ARTIFACT", "MALWARE_WIN_BURNWOO_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/burnwoo.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/burnwoo", "updated_at": "2026-10-16" }, { "family": "busky", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_BUSKY_T1_ARTIFACT", "MALWARE_WIN_BUSKY_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/busky.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/busky", "updated_at": "2026-10-16" }, { "family": "bustem", "category": "ransomware", "sample_count": 2, "rule_names": [ "MALWARE_WIN_BUSTEM_T1_ARTIFACT", "MALWARE_WIN_BUSTEM_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/bustem.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/bustem", "updated_at": "2026-10-16" }, { "family": "buterat", "category": "backdoor", "sample_count": 77, "rule_names": [ "MALWARE_WIN_BUTERAT_T1_ARTIFACT", "MALWARE_WIN_BUTERAT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/buterat.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/buterat", "updated_at": "2026-10-16" }, { "family": "buzus", "category": "trojan", "sample_count": 69, "rule_names": [ "MALWARE_WIN_BUZUS_T1_ARTIFACT", "MALWARE_WIN_BUZUS_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/buzus.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/buzus", "updated_at": "2026-10-16" }, { "family": "buzy", "category": "ransomware", "sample_count": 9, "rule_names": [ "MALWARE_WIN_BUZY_T1_ARTIFACT", "MALWARE_WIN_BUZY_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/buzy.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/buzy", "updated_at": "2026-10-16" }, { "family": "bwod", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_BWOD_T1_ARTIFACT", "MALWARE_WIN_BWOD_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/bwod.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/bwod", "updated_at": "2026-10-16" }, { "family": "bybz", "category": "ransomware", "sample_count": 2, "rule_names": [ "MALWARE_WIN_BYBZ_T1_ARTIFACT", "MALWARE_WIN_BYBZ_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/bybz.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/bybz", "updated_at": "2026-10-16" }, { "family": "byfh", "category": "trojan", "sample_count": 593, "rule_names": [ "MALWARE_WIN_BYFH_T1_ARTIFACT", "MALWARE_WIN_BYFH_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/byfh.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/byfh", "updated_at": "2026-10-16" }, { "family": "bypass", "category": "infostealer", "sample_count": 1, "rule_names": [ "MALWARE_WIN_BYPASS_T1_ARTIFACT", "MALWARE_WIN_BYPASS_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/bypass.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/bypass", "updated_at": "2026-10-16" }, { "family": "bypassuac", "category": "hacktool", "sample_count": 145, "rule_names": [ "MALWARE_WIN_BYPASSUAC_T1_ARTIFACT", "MALWARE_WIN_BYPASSUAC_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/bypassuac.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/bypassuac", "updated_at": "2026-10-16" }, { "family": "bytefence", "category": "trojan", "sample_count": 11, "rule_names": [ "MALWARE_WIN_BYTEFENCE_T1_ARTIFACT", "MALWARE_WIN_BYTEFENCE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/bytefence.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/bytefence", "updated_at": "2026-10-16" }, { "family": "bzub", "category": "trojan", "sample_count": 4, "rule_names": [ "MALWARE_WIN_BZUB_T1_ARTIFACT", "MALWARE_WIN_BZUB_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/bzub.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/bzub", "updated_at": "2026-10-16" }, { "family": "caae34dd", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_CAAE34DD_T1_ARTIFACT", "MALWARE_WIN_CAAE34DD_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/caae34dd.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/caae34dd", "updated_at": "2026-10-16" }, { "family": "cachedis", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_CACHEDIS_T1_ARTIFACT", "MALWARE_WIN_CACHEDIS_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/cachedis.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/cachedis", "updated_at": "2026-10-16" }, { "family": "cafecup", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_CAFECUP_T1_ARTIFACT", "MALWARE_WIN_CAFECUP_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/cafecup.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/cafecup", "updated_at": "2026-10-16" }, { "family": "cakl", "category": "ransomware", "sample_count": 2, "rule_names": [ "MALWARE_WIN_CAKL_T1_ARTIFACT", "MALWARE_WIN_CAKL_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/cakl.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/cakl", "updated_at": "2026-10-16" }, { "family": "cambot", "category": "worm", "sample_count": 89, "rule_names": [ "MALWARE_WIN_CAMBOT_T1_ARTIFACT", "MALWARE_WIN_CAMBOT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/cambot.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/cambot", "updated_at": "2026-10-16" }, { "family": "canbis", "category": "ransomware", "sample_count": 4, "rule_names": [ "MALWARE_WIN_CANBIS_T1_ARTIFACT", "MALWARE_WIN_CANBIS_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/canbis.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/canbis", "updated_at": "2026-10-16" }, { "family": "candybox", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_CANDYBOX_T1_ARTIFACT", "MALWARE_WIN_CANDYBOX_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/candybox.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/candybox", "updated_at": "2026-10-16" }, { "family": "candyopen", "category": "trojan", "sample_count": 5, "rule_names": [ "MALWARE_WIN_CANDYOPEN_T1_ARTIFACT", "MALWARE_WIN_CANDYOPEN_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/candyopen.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/candyopen", "updated_at": "2026-10-16" }, { "family": "capredeam", "category": "ransomware", "sample_count": 2, "rule_names": [ "MALWARE_WIN_CAPREDEAM_T1_ARTIFACT", "MALWARE_WIN_CAPREDEAM_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/capredeam.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/capredeam", "updated_at": "2026-10-16" }, { "family": "capsfin", "category": "ransomware", "sample_count": 18, "rule_names": [ "MALWARE_WIN_CAPSFIN_T1_ARTIFACT", "MALWARE_WIN_CAPSFIN_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/capsfin.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/capsfin", "updated_at": "2026-10-16" }, { "family": "carambisdu", "category": "trojan", "sample_count": 2, "rule_names": [ "MALWARE_WIN_CARAMBISDU_T1_ARTIFACT", "MALWARE_WIN_CARAMBISDU_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/carambisdu.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/carambisdu", "updated_at": "2026-10-16" }, { "family": "carbanak", "category": "banking_trojan", "sample_count": 2, "rule_names": [ "MALWARE_WIN_CARBANAK_T1_ARTIFACT", "MALWARE_WIN_CARBANAK_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/carbanak.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/carbanak", "updated_at": "2026-10-16" }, { "family": "carberp", "category": "banking_trojan", "sample_count": 61, "rule_names": [ "MALWARE_WIN_CARBERP_T1_ARTIFACT", "MALWARE_WIN_CARBERP_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/carberp.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/carberp", "updated_at": "2026-10-16" }, { "family": "cardinal", "category": "ransomware", "sample_count": 5, "rule_names": [ "MALWARE_WIN_CARDINAL_T1_ARTIFACT", "MALWARE_WIN_CARDINAL_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/cardinal.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/cardinal", "updated_at": "2026-10-16" }, { "family": "cardspy", "category": "infostealer", "sample_count": 44, "rule_names": [ "MALWARE_WIN_CARDSPY_T1_ARTIFACT", "MALWARE_WIN_CARDSPY_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/cardspy.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/cardspy", "updated_at": "2026-10-16" }, { "family": "cardtool", "category": "trojan", "sample_count": 1, "rule_names": [ "MALWARE_WIN_CARDTOOL_T1_ARTIFACT", "MALWARE_WIN_CARDTOOL_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/cardtool.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/cardtool", "updated_at": "2026-10-16" }, { "family": "carrobat", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_CARROBAT_T1_ARTIFACT", "MALWARE_WIN_CARROBAT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/carrobat.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/carrobat", "updated_at": "2026-10-16" }, { "family": "casbaneiro", "category": "trojan", "sample_count": 10, "rule_names": [ "MALWARE_WIN_CASBANEIRO_T1_ARTIFACT", "MALWARE_WIN_CASBANEIRO_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/casbaneiro.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/casbaneiro", "updated_at": "2026-10-16" }, { "family": "cashfiesta", "category": "trojan", "sample_count": 1, "rule_names": [ "MALWARE_WIN_CASHFIESTA_T1_ARTIFACT", "MALWARE_WIN_CASHFIESTA_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/cashfiesta.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/cashfiesta", "updated_at": "2026-10-16" }, { "family": "casinoonline", "category": "trojan", "sample_count": 12, "rule_names": [ "MALWARE_WIN_CASINOONLINE_T1_ARTIFACT", "MALWARE_WIN_CASINOONLINE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/casinoonline.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/casinoonline", "updated_at": "2026-10-16" }, { "family": "casper", "category": "trojan", "sample_count": 8, "rule_names": [ "MALWARE_WIN_CASPER_T1_ARTIFACT", "MALWARE_WIN_CASPER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/casper.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/casper", "updated_at": "2026-10-16" }, { "family": "cassiopeia", "category": "backdoor", "sample_count": 137, "rule_names": [ "MALWARE_WIN_CASSIOPEIA_T1_ARTIFACT", "MALWARE_WIN_CASSIOPEIA_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/cassiopeia.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/cassiopeia", "updated_at": "2026-10-16" }, { "family": "catalina", "category": "trojan", "sample_count": 3, "rule_names": [ "MALWARE_WIN_CATALINA_T1_ARTIFACT", "MALWARE_WIN_CATALINA_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/catalina.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/catalina", "updated_at": "2026-10-16" }, { "family": "caxnet", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_CAXNET_T1_ARTIFACT", "MALWARE_WIN_CAXNET_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/caxnet.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/caxnet", "updated_at": "2026-10-16" }, { "family": "cbot", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_CBOT_T1_ARTIFACT", "MALWARE_WIN_CBOT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/cbot.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/cbot", "updated_at": "2026-10-16" }, { "family": "cdnhelper", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_CDNHELPER_T1_ARTIFACT", "MALWARE_WIN_CDNHELPER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/cdnhelper.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/cdnhelper", "updated_at": "2026-10-16" }, { "family": "cdvq", "category": "ransomware", "sample_count": 2, "rule_names": [ "MALWARE_WIN_CDVQ_T1_ARTIFACT", "MALWARE_WIN_CDVQ_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/cdvq.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/cdvq", "updated_at": "2026-10-16" }, { "family": "cebot", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_CEBOT_T1_ARTIFACT", "MALWARE_WIN_CEBOT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/cebot.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/cebot", "updated_at": "2026-10-16" }, { "family": "ceckno", "category": "ransomware", "sample_count": 2, "rule_names": [ "MALWARE_WIN_CECKNO_T1_ARTIFACT", "MALWARE_WIN_CECKNO_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/ceckno.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/ceckno", "updated_at": "2026-10-16" }, { "family": "ceeinject", "category": "trojan", "sample_count": 42, "rule_names": [ "MALWARE_WIN_CEEINJECT_T1_ARTIFACT", "MALWARE_WIN_CEEINJECT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/ceeinject.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/ceeinject", "updated_at": "2026-10-16" }, { "family": "cekar", "category": "ransomware", "sample_count": 6, "rule_names": [ "MALWARE_WIN_CEKAR_T1_ARTIFACT", "MALWARE_WIN_CEKAR_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/cekar.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/cekar", "updated_at": "2026-10-16" }, { "family": "celesty", "category": "trojan", "sample_count": 34, "rule_names": [ "MALWARE_WIN_CELESTY_T1_ARTIFACT", "MALWARE_WIN_CELESTY_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/celesty.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/celesty", "updated_at": "2026-10-16" }, { "family": "centrumdownloader", "category": "trojan_downloader", "sample_count": 38, "rule_names": [ "MALWARE_WIN_CENTRUMDOWNLOADER_T1_ARTIFACT", "MALWARE_WIN_CENTRUMDOWNLOADER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/centrumdownloader.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/centrumdownloader", "updated_at": "2026-10-16" }, { "family": "centrumloader", "category": "trojan_downloader", "sample_count": 12, "rule_names": [ "MALWARE_WIN_CENTRUMLOADER_T1_ARTIFACT", "MALWARE_WIN_CENTRUMLOADER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/centrumloader.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/centrumloader", "updated_at": "2026-10-16" }, { "family": "ceram", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_CERAM_T1_ARTIFACT", "MALWARE_WIN_CERAM_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/ceram.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/ceram", "updated_at": "2026-10-16" }, { "family": "cerber", "category": "ransomware", "sample_count": 1792, "rule_names": [ "MALWARE_WIN_CERBER_T1_ARTIFACT", "MALWARE_WIN_CERBER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/cerber.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/cerber", "updated_at": "2026-10-16" }, { "family": "cerberus", "category": "trojan", "sample_count": 1500, "rule_names": [ "MALWARE_WIN_CERBERUS_T1_ARTIFACT", "MALWARE_WIN_CERBERUS_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/cerberus.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/cerberus", "updated_at": "2026-10-16" }, { "family": "cerbu", "category": "backdoor", "sample_count": 84, "rule_names": [ "MALWARE_WIN_CERBU_T1_ARTIFACT", "MALWARE_WIN_CERBU_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/cerbu.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/cerbu", "updated_at": "2026-10-16" }, { "family": "cfms", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_CFMS_T1_ARTIFACT", "MALWARE_WIN_CFMS_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/cfms.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/cfms", "updated_at": "2026-10-16" }, { "family": "cgmu", "category": "ransomware", "sample_count": 3, "rule_names": [ "MALWARE_WIN_CGMU_T1_ARTIFACT", "MALWARE_WIN_CGMU_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/cgmu.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/cgmu", "updated_at": "2026-10-16" }, { "family": "chanitor", "category": "ransomware", "sample_count": 2, "rule_names": [ "MALWARE_WIN_CHANITOR_T1_ARTIFACT", "MALWARE_WIN_CHANITOR_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/chanitor.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/chanitor", "updated_at": "2026-10-16" }, { "family": "chapak", "category": "downloader", "sample_count": 2254, "rule_names": [ "MALWARE_WIN_CHAPAK_T1_ARTIFACT", "MALWARE_WIN_CHAPAK_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/chapak.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/chapak", "updated_at": "2026-10-16" }, { "family": "chatzum", "category": "advanced_threat", "sample_count": 7, "rule_names": [ "MALWARE_WIN_CHATZUM_T1_ARTIFACT", "MALWARE_WIN_CHATZUM_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/chatzum.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/chatzum", "updated_at": "2026-10-16" }, { "family": "cheatengine", "category": "pua_tool", "sample_count": 175, "rule_names": [ "MALWARE_WIN_CHEATENGINE_T1_ARTIFACT", "MALWARE_WIN_CHEATENGINE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/cheatengine.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/cheatengine", "updated_at": "2026-10-16" }, { "family": "chekafev", "category": "ransomware", "sample_count": 2, "rule_names": [ "MALWARE_WIN_CHEKAFEV_T1_ARTIFACT", "MALWARE_WIN_CHEKAFEV_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/chekafev.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/chekafev", "updated_at": "2026-10-16" }, { "family": "chepdu", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_CHEPDU_T1_ARTIFACT", "MALWARE_WIN_CHEPDU_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/chepdu.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/chepdu", "updated_at": "2026-10-16" }, { "family": "chepro", "category": "ransomware", "sample_count": 6, "rule_names": [ "MALWARE_WIN_CHEPRO_T1_ARTIFACT", "MALWARE_WIN_CHEPRO_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/chepro.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/chepro", "updated_at": "2026-10-16" }, { "family": "chextad", "category": "ransomware", "sample_count": 2, "rule_names": [ "MALWARE_WIN_CHEXTAD_T1_ARTIFACT", "MALWARE_WIN_CHEXTAD_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/chextad.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/chextad", "updated_at": "2026-10-16" }, { "family": "chifrax", "category": "ransomware", "sample_count": 5, "rule_names": [ "MALWARE_WIN_CHIFRAX_T1_ARTIFACT", "MALWARE_WIN_CHIFRAX_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/chifrax.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/chifrax", "updated_at": "2026-10-16" }, { "family": "chimera", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_CHIMERA_T1_ARTIFACT", "MALWARE_WIN_CHIMERA_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/chimera.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/chimera", "updated_at": "2026-10-16" }, { "family": "chinad", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_CHINAD_T1_ARTIFACT", "MALWARE_WIN_CHINAD_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/chinad.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/chinad", "updated_at": "2026-10-16" }, { "family": "chinbo", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_CHINBO_T1_ARTIFACT", "MALWARE_WIN_CHINBO_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/chinbo.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/chinbo", "updated_at": "2026-10-16" }, { "family": "chindo", "category": "worm", "sample_count": 85, "rule_names": [ "MALWARE_WIN_CHINDO_T1_ARTIFACT", "MALWARE_WIN_CHINDO_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/chindo.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/chindo", "updated_at": "2026-10-16" }, { "family": "chir", "category": "worm", "sample_count": 99, "rule_names": [ "MALWARE_WIN_CHIR_T1_ARTIFACT", "MALWARE_WIN_CHIR_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/chir.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/chir", "updated_at": "2026-10-16" }, { "family": "chisburg", "category": "infostealer", "sample_count": 38, "rule_names": [ "MALWARE_WIN_CHISBURG_T1_ARTIFACT", "MALWARE_WIN_CHISBURG_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/chisburg.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/chisburg", "updated_at": "2026-10-16" }, { "family": "chistudi", "category": "ransomware", "sample_count": 2, "rule_names": [ "MALWARE_WIN_CHISTUDI_T1_ARTIFACT", "MALWARE_WIN_CHISTUDI_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/chistudi.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/chistudi", "updated_at": "2026-10-16" }, { "family": "chopper", "category": "backdoor", "sample_count": 14, "rule_names": [ "MALWARE_WIN_CHOPPER_T1_ARTIFACT", "MALWARE_WIN_CHOPPER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/chopper.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/chopper", "updated_at": "2026-10-16" }, { "family": "chromepass", "category": "advanced_threat", "sample_count": 2, "rule_names": [ "MALWARE_WIN_CHROMEPASS_T1_ARTIFACT", "MALWARE_WIN_CHROMEPASS_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/chromepass.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/chromepass", "updated_at": "2026-10-16" }, { "family": "chthonic", "category": "banking_trojan", "sample_count": 14, "rule_names": [ "MALWARE_WIN_CHTHONIC_T1_ARTIFACT", "MALWARE_WIN_CHTHONIC_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/chthonic.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/chthonic", "updated_at": "2026-10-16" }, { "family": "chupik", "category": "ransomware", "sample_count": 2, "rule_names": [ "MALWARE_WIN_CHUPIK_T1_ARTIFACT", "MALWARE_WIN_CHUPIK_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/chupik.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/chupik", "updated_at": "2026-10-16" }, { "family": "cia", "category": "file_infector", "sample_count": 12, "rule_names": [ "MALWARE_WIN_CIA_T1_ARTIFACT", "MALWARE_WIN_CIA_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/cia.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/cia", "updated_at": "2026-10-16" }, { "family": "ciadoor", "category": "trojan", "sample_count": 1, "rule_names": [ "MALWARE_WIN_CIADOOR_T1_ARTIFACT", "MALWARE_WIN_CIADOOR_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/ciadoor.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/ciadoor", "updated_at": "2026-10-16" }, { "family": "cidox", "category": "trojan", "sample_count": 1, "rule_names": [ "MALWARE_WIN_CIDOX_T1_ARTIFACT", "MALWARE_WIN_CIDOX_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/cidox.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/cidox", "updated_at": "2026-10-16" }, { "family": "cinmus", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_CINMUS_T1_ARTIFACT", "MALWARE_WIN_CINMUS_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/cinmus.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/cinmus", "updated_at": "2026-10-16" }, { "family": "citeary", "category": "ransomware", "sample_count": 8, "rule_names": [ "MALWARE_WIN_CITEARY_T1_ARTIFACT", "MALWARE_WIN_CITEARY_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/citeary.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/citeary", "updated_at": "2026-10-16" }, { "family": "ciyaamgnrsg", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_CIYAAMGNRSG_T1_ARTIFACT", "MALWARE_WIN_CIYAAMGNRSG_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/ciyaamgnrsg.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/ciyaamgnrsg", "updated_at": "2026-10-16" }, { "family": "cjishu", "category": "ransomware", "sample_count": 6, "rule_names": [ "MALWARE_WIN_CJISHU_T1_ARTIFACT", "MALWARE_WIN_CJISHU_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/cjishu.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/cjishu", "updated_at": "2026-10-16" }, { "family": "cleaman", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_CLEAMAN_T1_ARTIFACT", "MALWARE_WIN_CLEAMAN_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/cleaman.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/cleaman", "updated_at": "2026-10-16" }, { "family": "cleanlog", "category": "trojan", "sample_count": 1, "rule_names": [ "MALWARE_WIN_CLEANLOG_T1_ARTIFACT", "MALWARE_WIN_CLEANLOG_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/cleanlog.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/cleanlog", "updated_at": "2026-10-16" }, { "family": "cleanpcpro", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_CLEANPCPRO_T1_ARTIFACT", "MALWARE_WIN_CLEANPCPRO_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/cleanpcpro.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/cleanpcpro", "updated_at": "2026-10-16" }, { "family": "clearlog", "category": "advanced_threat", "sample_count": 2, "rule_names": [ "MALWARE_WIN_CLEARLOG_T1_ARTIFACT", "MALWARE_WIN_CLEARLOG_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/clearlog.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/clearlog", "updated_at": "2026-10-16" }, { "family": "clearsearch", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_CLEARSEARCH_T1_ARTIFACT", "MALWARE_WIN_CLEARSEARCH_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/clearsearch.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/clearsearch", "updated_at": "2026-10-16" }, { "family": "clhf", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_CLHF_T1_ARTIFACT", "MALWARE_WIN_CLHF_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/clhf.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/clhf", "updated_at": "2026-10-16" }, { "family": "clickmein", "category": "advanced_threat", "sample_count": 4, "rule_names": [ "MALWARE_WIN_CLICKMEIN_T1_ARTIFACT", "MALWARE_WIN_CLICKMEIN_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/clickmein.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/clickmein", "updated_at": "2026-10-16" }, { "family": "clickshell", "category": "advanced_threat", "sample_count": 3, "rule_names": [ "MALWARE_WIN_CLICKSHELL_T1_ARTIFACT", "MALWARE_WIN_CLICKSHELL_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/clickshell.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/clickshell", "updated_at": "2026-10-16" }, { "family": "client", "category": "trojan", "sample_count": 1, "rule_names": [ "MALWARE_WIN_CLIENT_T1_ARTIFACT", "MALWARE_WIN_CLIENT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/client.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/client", "updated_at": "2026-10-16" }, { "family": "clipbanker", "category": "banking_trojan", "sample_count": 35, "rule_names": [ "MALWARE_WIN_CLIPBANKER_T1_ARTIFACT", "MALWARE_WIN_CLIPBANKER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/clipbanker.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/clipbanker", "updated_at": "2026-10-16" }, { "family": "clipspy", "category": "advanced_threat", "sample_count": 1, "rule_names": [ "MALWARE_WIN_CLIPSPY_T1_ARTIFACT", "MALWARE_WIN_CLIPSPY_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/clipspy.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/clipspy", "updated_at": "2026-10-16" }, { "family": "cliptoshuffler", "category": "trojan", "sample_count": 1, "rule_names": [ "MALWARE_WIN_CLIPTOSHUFFLER_T1_ARTIFACT", "MALWARE_WIN_CLIPTOSHUFFLER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/cliptoshuffler.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/cliptoshuffler", "updated_at": "2026-10-16" }, { "family": "cloudguard", "category": "pua", "sample_count": 14, "rule_names": [ "MALWARE_WIN_CLOUDGUARD_T1_ARTIFACT", "MALWARE_WIN_CLOUDGUARD_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/cloudguard.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/cloudguard", "updated_at": "2026-10-16" }, { "family": "cloudscout", "category": "advanced_threat", "sample_count": 67, "rule_names": [ "MALWARE_WIN_CLOUDSCOUT_T1_ARTIFACT", "MALWARE_WIN_CLOUDSCOUT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/cloudscout.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/cloudscout", "updated_at": "2026-10-16" }, { "family": "cloudwrapper", "category": "pua", "sample_count": 33, "rule_names": [ "MALWARE_WIN_CLOUDWRAPPER_T1_ARTIFACT", "MALWARE_WIN_CLOUDWRAPPER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/cloudwrapper.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/cloudwrapper", "updated_at": "2026-10-16" }, { "family": "cloverplus", "category": "ransomware", "sample_count": 2, "rule_names": [ "MALWARE_WIN_CLOVERPLUS_T1_ARTIFACT", "MALWARE_WIN_CLOVERPLUS_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/cloverplus.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/cloverplus", "updated_at": "2026-10-16" }, { "family": "cloxer", "category": "ransomware", "sample_count": 11, "rule_names": [ "MALWARE_WIN_CLOXER_T1_ARTIFACT", "MALWARE_WIN_CLOXER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/cloxer.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/cloxer", "updated_at": "2026-10-16" }, { "family": "cmgfaeflb9e", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_CMGFAEFLB9E_T1_ARTIFACT", "MALWARE_WIN_CMGFAEFLB9E_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/cmgfaeflb9e.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/cmgfaeflb9e", "updated_at": "2026-10-16" }, { "family": "cmhfbw9r", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_CMHFBW9R_T1_ARTIFACT", "MALWARE_WIN_CMHFBW9R_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/cmhfbw9r.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/cmhfbw9r", "updated_at": "2026-10-16" }, { "family": "cmy3u", "category": "ransomware", "sample_count": 16, "rule_names": [ "MALWARE_WIN_CMY3U_T1_ARTIFACT", "MALWARE_WIN_CMY3U_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/cmy3u.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/cmy3u", "updated_at": "2026-10-16" }, { "family": "cnbtech", "category": "advanced_threat", "sample_count": 4, "rule_names": [ "MALWARE_WIN_CNBTECH_T1_ARTIFACT", "MALWARE_WIN_CNBTECH_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/cnbtech.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/cnbtech", "updated_at": "2026-10-16" }, { "family": "cnnic", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_CNNIC_T1_ARTIFACT", "MALWARE_WIN_CNNIC_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/cnnic.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/cnnic", "updated_at": "2026-10-16" }, { "family": "cnopa", "category": "ransomware", "sample_count": 8, "rule_names": [ "MALWARE_WIN_CNOPA_T1_ARTIFACT", "MALWARE_WIN_CNOPA_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/cnopa.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/cnopa", "updated_at": "2026-10-16" }, { "family": "cnsmin", "category": "advanced_threat", "sample_count": 1, "rule_names": [ "MALWARE_WIN_CNSMIN_T1_ARTIFACT", "MALWARE_WIN_CNSMIN_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/cnsmin.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/cnsmin", "updated_at": "2026-10-16" }, { "family": "cntads", "category": "advanced_threat", "sample_count": 1, "rule_names": [ "MALWARE_WIN_CNTADS_T1_ARTIFACT", "MALWARE_WIN_CNTADS_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/cntads.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/cntads", "updated_at": "2026-10-16" }, { "family": "coantor", "category": "ransomware", "sample_count": 2, "rule_names": [ "MALWARE_WIN_COANTOR_T1_ARTIFACT", "MALWARE_WIN_COANTOR_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/coantor.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/coantor", "updated_at": "2026-10-16" }, { "family": "cobalt", "category": "ransomware", "sample_count": 9, "rule_names": [ "MALWARE_WIN_COBALT_T1_ARTIFACT", "MALWARE_WIN_COBALT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/cobalt.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/cobalt", "updated_at": "2026-10-16" }, { "family": "cobaltstrike", "category": "hacktool", "sample_count": 3500, "rule_names": [ "MALWARE_WIN_COBALTSTRIKE_T1_ARTIFACT", "MALWARE_WIN_COBALTSTRIKE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/cobaltstrike.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/cobaltstrike", "updated_at": "2026-10-16" }, { "family": "cobra", "category": "ransomware", "sample_count": 2, "rule_names": [ "MALWARE_WIN_COBRA_T1_ARTIFACT", "MALWARE_WIN_COBRA_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/cobra.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/cobra", "updated_at": "2026-10-16" }, { "family": "coced", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_COCED_T1_ARTIFACT", "MALWARE_WIN_COCED_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/coced.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/coced", "updated_at": "2026-10-16" }, { "family": "code", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_CODE_T1_ARTIFACT", "MALWARE_WIN_CODE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/code.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/code", "updated_at": "2026-10-16" }, { "family": "codecpa", "category": "trojan", "sample_count": 2, "rule_names": [ "MALWARE_WIN_CODECPA_T1_ARTIFACT", "MALWARE_WIN_CODECPA_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/codecpa.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/codecpa", "updated_at": "2026-10-16" }, { "family": "codewall", "category": "ransomware", "sample_count": 2, "rule_names": [ "MALWARE_WIN_CODEWALL_T1_ARTIFACT", "MALWARE_WIN_CODEWALL_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/codewall.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/codewall", "updated_at": "2026-10-16" }, { "family": "codiby", "category": "ransomware", "sample_count": 10, "rule_names": [ "MALWARE_WIN_CODIBY_T1_ARTIFACT", "MALWARE_WIN_CODIBY_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/codiby.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/codiby", "updated_at": "2026-10-16" }, { "family": "cognosads", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_COGNOSADS_T1_ARTIFACT", "MALWARE_WIN_COGNOSADS_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/cognosads.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/cognosads", "updated_at": "2026-10-16" }, { "family": "coinloader", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_COINLOADER_T1_ARTIFACT", "MALWARE_WIN_COINLOADER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/coinloader.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/coinloader", "updated_at": "2026-10-16" }, { "family": "coins", "category": "cryptominer", "sample_count": 359, "rule_names": [ "MALWARE_WIN_COINS_T1_ARTIFACT", "MALWARE_WIN_COINS_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/coins.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/coins", "updated_at": "2026-10-16" }, { "family": "coinstealer", "category": "infostealer", "sample_count": 52, "rule_names": [ "MALWARE_WIN_COINSTEALER_T1_ARTIFACT", "MALWARE_WIN_COINSTEALER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/coinstealer.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/coinstealer", "updated_at": "2026-10-16" }, { "family": "collector", "category": "trojan", "sample_count": 8, "rule_names": [ "MALWARE_WIN_COLLECTOR_T1_ARTIFACT", "MALWARE_WIN_COLLECTOR_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/collector.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/collector", "updated_at": "2026-10-16" }, { "family": "coma", "category": "file_infector", "sample_count": 3, "rule_names": [ "MALWARE_WIN_COMA_T1_ARTIFACT", "MALWARE_WIN_COMA_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/coma.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/coma", "updated_at": "2026-10-16" }, { "family": "comei", "category": "ransomware", "sample_count": 3, "rule_names": [ "MALWARE_WIN_COMEI_T1_ARTIFACT", "MALWARE_WIN_COMEI_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/comei.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/comei", "updated_at": "2026-10-16" }, { "family": "cometer", "category": "rat", "sample_count": 37, "rule_names": [ "MALWARE_WIN_COMETER_T1_ARTIFACT", "MALWARE_WIN_COMETER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/cometer.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/cometer", "updated_at": "2026-10-16" }, { "family": "comine", "category": "trojan", "sample_count": 1, "rule_names": [ "MALWARE_WIN_COMINE_T1_ARTIFACT", "MALWARE_WIN_COMINE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/comine.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/comine", "updated_at": "2026-10-16" }, { "family": "comisproc", "category": "ransomware", "sample_count": 2, "rule_names": [ "MALWARE_WIN_COMISPROC_T1_ARTIFACT", "MALWARE_WIN_COMISPROC_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/comisproc.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/comisproc", "updated_at": "2026-10-16" }, { "family": "commandcam", "category": "trojan", "sample_count": 1, "rule_names": [ "MALWARE_WIN_COMMANDCAM_T1_ARTIFACT", "MALWARE_WIN_COMMANDCAM_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/commandcam.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/commandcam", "updated_at": "2026-10-16" }, { "family": "comproc", "category": "trojan", "sample_count": 1, "rule_names": [ "MALWARE_WIN_COMPROC_T1_ARTIFACT", "MALWARE_WIN_COMPROC_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/comproc.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/comproc", "updated_at": "2026-10-16" }, { "family": "computty", "category": "trojan", "sample_count": 1, "rule_names": [ "MALWARE_WIN_COMPUTTY_T1_ARTIFACT", "MALWARE_WIN_COMPUTTY_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/computty.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/computty", "updated_at": "2026-10-16" }, { "family": "comrerop", "category": "ransomware", "sample_count": 7, "rule_names": [ "MALWARE_WIN_COMREROP_T1_ARTIFACT", "MALWARE_WIN_COMREROP_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/comrerop.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/comrerop", "updated_at": "2026-10-16" }, { "family": "conduit", "category": "adware", "sample_count": 3, "rule_names": [ "MALWARE_WIN_CONDUIT_T1_ARTIFACT", "MALWARE_WIN_CONDUIT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/conduit.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/conduit", "updated_at": "2026-10-16" }, { "family": "conficker", "category": "worm", "sample_count": 11, "rule_names": [ "MALWARE_WIN_CONFICKER_T1_ARTIFACT", "MALWARE_WIN_CONFICKER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/conficker.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/conficker", "updated_at": "2026-10-16" }, { "family": "confucius", "category": "trojan", "sample_count": 2, "rule_names": [ "MALWARE_WIN_CONFUCIUS_T1_ARTIFACT", "MALWARE_WIN_CONFUCIUS_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/confucius.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/confucius", "updated_at": "2026-10-16" }, { "family": "confuser", "category": "packer", "sample_count": 120, "rule_names": [ "MALWARE_WIN_CONFUSER_T1_ARTIFACT", "MALWARE_WIN_CONFUSER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/confuser.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/confuser", "updated_at": "2026-10-16" }, { "family": "conjar", "category": "ransomware", "sample_count": 5, "rule_names": [ "MALWARE_WIN_CONJAR_T1_ARTIFACT", "MALWARE_WIN_CONJAR_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/conjar.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/conjar", "updated_at": "2026-10-16" }, { "family": "conju", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_CONJU_T1_ARTIFACT", "MALWARE_WIN_CONJU_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/conju.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/conju", "updated_at": "2026-10-16" }, { "family": "convertad", "category": "adware", "sample_count": 96, "rule_names": [ "MALWARE_WIN_CONVERTAD_T1_ARTIFACT", "MALWARE_WIN_CONVERTAD_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/convertad.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/convertad", "updated_at": "2026-10-16" }, { "family": "cookiesstealer", "category": "trojan", "sample_count": 1, "rule_names": [ "MALWARE_WIN_COOKIESSTEALER_T1_ARTIFACT", "MALWARE_WIN_COOKIESSTEALER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/cookiesstealer.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/cookiesstealer", "updated_at": "2026-10-16" }, { "family": "cool_remote_control", "category": "trojan", "sample_count": 23, "rule_names": [ "MALWARE_WIN_COOL_REMOTE_CONTROL_T1_ARTIFACT", "MALWARE_WIN_COOL_REMOTE_CONTROL_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/cool_remote_control.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/cool_remote_control", "updated_at": "2026-10-16" }, { "family": "coolmirage", "category": "ransomware", "sample_count": 3, "rule_names": [ "MALWARE_WIN_COOLMIRAGE_T1_ARTIFACT", "MALWARE_WIN_COOLMIRAGE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/coolmirage.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/coolmirage", "updated_at": "2026-10-16" }, { "family": "coolvibes", "category": "trojan", "sample_count": 16, "rule_names": [ "MALWARE_WIN_COOLVIBES_T1_ARTIFACT", "MALWARE_WIN_COOLVIBES_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/coolvibes.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/coolvibes", "updated_at": "2026-10-16" }, { "family": "copperturtle", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_COPPERTURTLE_T1_ARTIFACT", "MALWARE_WIN_COPPERTURTLE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/copperturtle.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/copperturtle", "updated_at": "2026-10-16" }, { "family": "cordis", "category": "ransomware", "sample_count": 2, "rule_names": [ "MALWARE_WIN_CORDIS_T1_ARTIFACT", "MALWARE_WIN_CORDIS_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/cordis.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/cordis", "updated_at": "2026-10-16" }, { "family": "corebot", "category": "trojan", "sample_count": 7, "rule_names": [ "MALWARE_WIN_COREBOT_T1_ARTIFACT", "MALWARE_WIN_COREBOT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/corebot.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/corebot", "updated_at": "2026-10-16" }, { "family": "corpse", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_CORPSE_T1_ARTIFACT", "MALWARE_WIN_CORPSE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/corpse.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/corpse", "updated_at": "2026-10-16" }, { "family": "corrempa", "category": "ransomware", "sample_count": 7, "rule_names": [ "MALWARE_WIN_CORREMPA_T1_ARTIFACT", "MALWARE_WIN_CORREMPA_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/corrempa.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/corrempa", "updated_at": "2026-10-16" }, { "family": "cosmicduke", "category": "infostealer", "sample_count": 408, "rule_names": [ "MALWARE_WIN_COSMICDUKE_T1_ARTIFACT", "MALWARE_WIN_COSMICDUKE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/cosmicduke.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/cosmicduke", "updated_at": "2026-10-16" }, { "family": "cosmu", "category": "rat", "sample_count": 218, "rule_names": [ "MALWARE_WIN_COSMU_T1_ARTIFACT", "MALWARE_WIN_COSMU_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/cosmu.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/cosmu", "updated_at": "2026-10-16" }, { "family": "cosratu", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_COSRATU_T1_ARTIFACT", "MALWARE_WIN_COSRATU_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/cosratu.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/cosratu", "updated_at": "2026-10-16" }, { "family": "cossta", "category": "ransomware", "sample_count": 9, "rule_names": [ "MALWARE_WIN_COSSTA_T1_ARTIFACT", "MALWARE_WIN_COSSTA_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/cossta.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/cossta", "updated_at": "2026-10-16" }, { "family": "couponmarvel", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_COUPONMARVEL_T1_ARTIFACT", "MALWARE_WIN_COUPONMARVEL_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/couponmarvel.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/couponmarvel", "updated_at": "2026-10-16" }, { "family": "coupons", "category": "advanced_threat", "sample_count": 5, "rule_names": [ "MALWARE_WIN_COUPONS_T1_ARTIFACT", "MALWARE_WIN_COUPONS_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/coupons.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/coupons", "updated_at": "2026-10-16" }, { "family": "covus", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_COVUS_T1_ARTIFACT", "MALWARE_WIN_COVUS_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/covus.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/covus", "updated_at": "2026-10-16" }, { "family": "cpuminer", "category": "ransomware", "sample_count": 4, "rule_names": [ "MALWARE_WIN_CPUMINER_T1_ARTIFACT", "MALWARE_WIN_CPUMINER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/cpuminer.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/cpuminer", "updated_at": "2026-10-16" }, { "family": "cqst", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_CQST_T1_ARTIFACT", "MALWARE_WIN_CQST_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/cqst.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/cqst", "updated_at": "2026-10-16" }, { "family": "crastic", "category": "ransomware", "sample_count": 3, "rule_names": [ "MALWARE_WIN_CRASTIC_T1_ARTIFACT", "MALWARE_WIN_CRASTIC_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/crastic.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/crastic", "updated_at": "2026-10-16" }, { "family": "crawler", "category": "advanced_threat", "sample_count": 10, "rule_names": [ "MALWARE_WIN_CRAWLER_T1_ARTIFACT", "MALWARE_WIN_CRAWLER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/crawler.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/crawler", "updated_at": "2026-10-16" }, { "family": "crcf", "category": "ransomware", "sample_count": 3, "rule_names": [ "MALWARE_WIN_CRCF_T1_ARTIFACT", "MALWARE_WIN_CRCF_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/crcf.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/crcf", "updated_at": "2026-10-16" }, { "family": "creprote", "category": "ransomware", "sample_count": 6, "rule_names": [ "MALWARE_WIN_CREPROTE_T1_ARTIFACT", "MALWARE_WIN_CREPROTE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/creprote.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/creprote", "updated_at": "2026-10-16" }, { "family": "cridex", "category": "trojan", "sample_count": 1, "rule_names": [ "MALWARE_WIN_CRIDEX_T1_ARTIFACT", "MALWARE_WIN_CRIDEX_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/cridex.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/cridex", "updated_at": "2026-10-16" }, { "family": "crifi", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_CRIFI_T1_ARTIFACT", "MALWARE_WIN_CRIFI_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/crifi.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/crifi", "updated_at": "2026-10-16" }, { "family": "crime", "category": "ransomware", "sample_count": 2, "rule_names": [ "MALWARE_WIN_CRIME_T1_ARTIFACT", "MALWARE_WIN_CRIME_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/crime.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/crime", "updated_at": "2026-10-16" }, { "family": "crisisht", "category": "ransomware", "sample_count": 2, "rule_names": [ "MALWARE_WIN_CRISISHT_T1_ARTIFACT", "MALWARE_WIN_CRISISHT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/crisisht.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/crisisht", "updated_at": "2026-10-16" }, { "family": "crispit", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_CRISPIT_T1_ARTIFACT", "MALWARE_WIN_CRISPIT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/crispit.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/crispit", "updated_at": "2026-10-16" }, { "family": "cromptui", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_CROMPTUI_T1_ARTIFACT", "MALWARE_WIN_CROMPTUI_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/cromptui.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/cromptui", "updated_at": "2026-10-16" }, { "family": "crossrider", "category": "adware", "sample_count": 39, "rule_names": [ "MALWARE_WIN_CROSSRIDER_T1_ARTIFACT", "MALWARE_WIN_CROSSRIDER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/crossrider.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/crossrider", "updated_at": "2026-10-16" }, { "family": "crowti", "category": "ransomware", "sample_count": 3, "rule_names": [ "MALWARE_WIN_CROWTI_T1_ARTIFACT", "MALWARE_WIN_CROWTI_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/crowti.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/crowti", "updated_at": "2026-10-16" }, { "family": "crusis", "category": "ransomware", "sample_count": 19, "rule_names": [ "MALWARE_WIN_CRUSIS_T1_ARTIFACT", "MALWARE_WIN_CRUSIS_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/crusis.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/crusis", "updated_at": "2026-10-16" }, { "family": "cryakl", "category": "ransomware", "sample_count": 8, "rule_names": [ "MALWARE_WIN_CRYAKL_T1_ARTIFACT", "MALWARE_WIN_CRYAKL_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/cryakl.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/cryakl", "updated_at": "2026-10-16" }, { "family": "cryfile", "category": "ransomware", "sample_count": 4, "rule_names": [ "MALWARE_WIN_CRYFILE_T1_ARTIFACT", "MALWARE_WIN_CRYFILE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/cryfile.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/cryfile", "updated_at": "2026-10-16" }, { "family": "crypmod", "category": "ransomware", "sample_count": 23, "rule_names": [ "MALWARE_WIN_CRYPMOD_T1_ARTIFACT", "MALWARE_WIN_CRYPMOD_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/crypmod.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/crypmod", "updated_at": "2026-10-16" }, { "family": "crypmodadv", "category": "ransomware", "sample_count": 6, "rule_names": [ "MALWARE_WIN_CRYPMODADV_T1_ARTIFACT", "MALWARE_WIN_CRYPMODADV_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/crypmodadv.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/crypmodadv", "updated_at": "2026-10-16" }, { "family": "crypren", "category": "ransomware", "sample_count": 12, "rule_names": [ "MALWARE_WIN_CRYPREN_T1_ARTIFACT", "MALWARE_WIN_CRYPREN_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/crypren.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/crypren", "updated_at": "2026-10-16" }, { "family": "crypt0l0cker", "category": "ransomware", "sample_count": 2, "rule_names": [ "MALWARE_WIN_CRYPT0L0CKER_T1_ARTIFACT", "MALWARE_WIN_CRYPT0L0CKER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/crypt0l0cker.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/crypt0l0cker", "updated_at": "2026-10-16" }, { "family": "cryptconsole", "category": "ransomware", "sample_count": 4, "rule_names": [ "MALWARE_WIN_CRYPTCONSOLE_T1_ARTIFACT", "MALWARE_WIN_CRYPTCONSOLE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/cryptconsole.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/cryptconsole", "updated_at": "2026-10-16" }, { "family": "cryptear", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_CRYPTEAR_T1_ARTIFACT", "MALWARE_WIN_CRYPTEAR_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/cryptear.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/cryptear", "updated_at": "2026-10-16" }, { "family": "cryptexe", "category": "ransomware", "sample_count": 2, "rule_names": [ "MALWARE_WIN_CRYPTEXE_T1_ARTIFACT", "MALWARE_WIN_CRYPTEXE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/cryptexe.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/cryptexe", "updated_at": "2026-10-16" }, { "family": "cryptinject", "category": "ransomware", "sample_count": 15, "rule_names": [ "MALWARE_WIN_CRYPTINJECT_T1_ARTIFACT", "MALWARE_WIN_CRYPTINJECT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/cryptinject.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/cryptinject", "updated_at": "2026-10-16" }, { "family": "cryptojoker", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_CRYPTOJOKER_T1_ARTIFACT", "MALWARE_WIN_CRYPTOJOKER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/cryptojoker.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/cryptojoker", "updated_at": "2026-10-16" }, { "family": "cryptoload", "category": "ransomware", "sample_count": 2, "rule_names": [ "MALWARE_WIN_CRYPTOLOAD_T1_ARTIFACT", "MALWARE_WIN_CRYPTOLOAD_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/cryptoload.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/cryptoload", "updated_at": "2026-10-16" }, { "family": "cryptolocker", "category": "ransomware", "sample_count": 10, "rule_names": [ "MALWARE_WIN_CRYPTOLOCKER_T1_ARTIFACT", "MALWARE_WIN_CRYPTOLOCKER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/cryptolocker.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/cryptolocker", "updated_at": "2026-10-16" }, { "family": "cryptominer", "category": "trojan", "sample_count": 1, "rule_names": [ "MALWARE_WIN_CRYPTOMINER_T1_ARTIFACT", "MALWARE_WIN_CRYPTOMINER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/cryptominer.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/cryptominer", "updated_at": "2026-10-16" }, { "family": "cryptomix", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_CRYPTOMIX_T1_ARTIFACT", "MALWARE_WIN_CRYPTOMIX_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/cryptomix.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/cryptomix", "updated_at": "2026-10-16" }, { "family": "crypton", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_CRYPTON_T1_ARTIFACT", "MALWARE_WIN_CRYPTON_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/crypton.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/crypton", "updated_at": "2026-10-16" }, { "family": "cryptos", "category": "ransomware", "sample_count": 10, "rule_names": [ "MALWARE_WIN_CRYPTOS_T1_ARTIFACT", "MALWARE_WIN_CRYPTOS_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/cryptos.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/cryptos", "updated_at": "2026-10-16" }, { "family": "cryptowall", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_CRYPTOWALL_T1_ARTIFACT", "MALWARE_WIN_CRYPTOWALL_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/cryptowall.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/cryptowall", "updated_at": "2026-10-16" }, { "family": "cryptowire", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_CRYPTOWIRE_T1_ARTIFACT", "MALWARE_WIN_CRYPTOWIRE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/cryptowire.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/cryptowire", "updated_at": "2026-10-16" }, { "family": "cryptpack", "category": "ransomware", "sample_count": 2, "rule_names": [ "MALWARE_WIN_CRYPTPACK_T1_ARTIFACT", "MALWARE_WIN_CRYPTPACK_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/cryptpack.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/cryptpack", "updated_at": "2026-10-16" }, { "family": "cryptredol", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_CRYPTREDOL_T1_ARTIFACT", "MALWARE_WIN_CRYPTREDOL_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/cryptredol.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/cryptredol", "updated_at": "2026-10-16" }, { "family": "cryptxxx", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_CRYPTXXX_T1_ARTIFACT", "MALWARE_WIN_CRYPTXXX_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/cryptxxx.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/cryptxxx", "updated_at": "2026-10-16" }, { "family": "cryrar", "category": "ransomware", "sample_count": 5, "rule_names": [ "MALWARE_WIN_CRYRAR_T1_ARTIFACT", "MALWARE_WIN_CRYRAR_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/cryrar.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/cryrar", "updated_at": "2026-10-16" }, { "family": "crysis", "category": "ransomware", "sample_count": 24, "rule_names": [ "MALWARE_WIN_CRYSIS_T1_ARTIFACT", "MALWARE_WIN_CRYSIS_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/crysis.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/crysis", "updated_at": "2026-10-16" }, { "family": "crytex", "category": "ransomware", "sample_count": 52, "rule_names": [ "MALWARE_WIN_CRYTEX_T1_ARTIFACT", "MALWARE_WIN_CRYTEX_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/crytex.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/crytex", "updated_at": "2026-10-16" }, { "family": "csdimonetize", "category": "adware", "sample_count": 118, "rule_names": [ "MALWARE_WIN_CSDIMONETIZE_T1_ARTIFACT", "MALWARE_WIN_CSDIMONETIZE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/csdimonetize.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/csdimonetize", "updated_at": "2026-10-16" }, { "family": "cshv", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_CSHV_T1_ARTIFACT", "MALWARE_WIN_CSHV_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/cshv.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/cshv", "updated_at": "2026-10-16" }, { "family": "cslz", "category": "ransomware", "sample_count": 5, "rule_names": [ "MALWARE_WIN_CSLZ_T1_ARTIFACT", "MALWARE_WIN_CSLZ_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/cslz.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/cslz", "updated_at": "2026-10-16" }, { "family": "csom", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_CSOM_T1_ARTIFACT", "MALWARE_WIN_CSOM_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/csom.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/csom", "updated_at": "2026-10-16" }, { "family": "csrb", "category": "ransomware", "sample_count": 12, "rule_names": [ "MALWARE_WIN_CSRB_T1_ARTIFACT", "MALWARE_WIN_CSRB_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/csrb.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/csrb", "updated_at": "2026-10-16" }, { "family": "ctqc", "category": "ransomware", "sample_count": 3, "rule_names": [ "MALWARE_WIN_CTQC_T1_ARTIFACT", "MALWARE_WIN_CTQC_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/ctqc.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/ctqc", "updated_at": "2026-10-16" }, { "family": "cuegoe", "category": "advanced_threat", "sample_count": 64, "rule_names": [ "MALWARE_WIN_CUEGOE_T1_ARTIFACT", "MALWARE_WIN_CUEGOE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/cuegoe.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/cuegoe", "updated_at": "2026-10-16" }, { "family": "cussteel", "category": "advanced_threat", "sample_count": 1, "rule_names": [ "MALWARE_WIN_CUSSTEEL_T1_ARTIFACT", "MALWARE_WIN_CUSSTEEL_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/cussteel.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/cussteel", "updated_at": "2026-10-16" }, { "family": "cutwail", "category": "botnet", "sample_count": 92, "rule_names": [ "MALWARE_WIN_CUTWAIL_T1_ARTIFACT", "MALWARE_WIN_CUTWAIL_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/cutwail.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/cutwail", "updated_at": "2026-10-16" }, { "family": "cvky", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_CVKY_T1_ARTIFACT", "MALWARE_WIN_CVKY_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/cvky.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/cvky", "updated_at": "2026-10-16" }, { "family": "cwqw", "category": "ransomware", "sample_count": 16, "rule_names": [ "MALWARE_WIN_CWQW_T1_ARTIFACT", "MALWARE_WIN_CWQW_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/cwqw.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/cwqw", "updated_at": "2026-10-16" }, { "family": "cxkh", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_CXKH_T1_ARTIFACT", "MALWARE_WIN_CXKH_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/cxkh.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/cxkh", "updated_at": "2026-10-16" }, { "family": "cxkj", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_CXKJ_T1_ARTIFACT", "MALWARE_WIN_CXKJ_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/cxkj.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/cxkj", "updated_at": "2026-10-16" }, { "family": "cybergate", "category": "rat", "sample_count": 7, "rule_names": [ "MALWARE_WIN_CYBERGATE_T1_ARTIFACT", "MALWARE_WIN_CYBERGATE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/cybergate.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/cybergate", "updated_at": "2026-10-16" }, { "family": "cybernetic", "category": "botnet", "sample_count": 11, "rule_names": [ "MALWARE_WIN_CYBERNETIC_T1_ARTIFACT", "MALWARE_WIN_CYBERNETIC_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/cybernetic.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/cybernetic", "updated_at": "2026-10-16" }, { "family": "cycbot", "category": "ransomware", "sample_count": 8, "rule_names": [ "MALWARE_WIN_CYCBOT_T1_ARTIFACT", "MALWARE_WIN_CYCBOT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/cycbot.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/cycbot", "updated_at": "2026-10-16" }, { "family": "cyfin", "category": "ransomware", "sample_count": 5, "rule_names": [ "MALWARE_WIN_CYFIN_T1_ARTIFACT", "MALWARE_WIN_CYFIN_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/cyfin.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/cyfin", "updated_at": "2026-10-16" }, { "family": "cyn", "category": "file_infector", "sample_count": 5, "rule_names": [ "MALWARE_WIN_CYN_T1_ARTIFACT", "MALWARE_WIN_CYN_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/cyn.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/cyn", "updated_at": "2026-10-16" }, { "family": "cypress", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_CYPRESS_T1_ARTIFACT", "MALWARE_WIN_CYPRESS_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/cypress.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/cypress", "updated_at": "2026-10-16" }, { "family": "czyk", "category": "trojan", "sample_count": 32, "rule_names": [ "MALWARE_WIN_CZYK_T1_ARTIFACT", "MALWARE_WIN_CZYK_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/czyk.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/czyk", "updated_at": "2026-10-16" }, { "family": "d0f3570c", "category": "ransomware", "sample_count": 2, "rule_names": [ "MALWARE_WIN_D0F3570C_T1_ARTIFACT", "MALWARE_WIN_D0F3570C_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/d0f3570c.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/d0f3570c", "updated_at": "2026-10-16" }, { "family": "dacic", "category": "ransomware", "sample_count": 2, "rule_names": [ "MALWARE_WIN_DACIC_T1_ARTIFACT", "MALWARE_WIN_DACIC_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/dacic.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/dacic", "updated_at": "2026-10-16" }, { "family": "dadobra", "category": "ransomware", "sample_count": 5, "rule_names": [ "MALWARE_WIN_DADOBRA_T1_ARTIFACT", "MALWARE_WIN_DADOBRA_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/dadobra.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/dadobra", "updated_at": "2026-10-16" }, { "family": "dalatar", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_DALATAR_T1_ARTIFACT", "MALWARE_WIN_DALATAR_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/dalatar.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/dalatar", "updated_at": "2026-10-16" }, { "family": "dalbot", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_DALBOT_T1_ARTIFACT", "MALWARE_WIN_DALBOT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/dalbot.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/dalbot", "updated_at": "2026-10-16" }, { "family": "dalexis", "category": "ransomware", "sample_count": 8, "rule_names": [ "MALWARE_WIN_DALEXIS_T1_ARTIFACT", "MALWARE_WIN_DALEXIS_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/dalexis.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/dalexis", "updated_at": "2026-10-16" }, { "family": "dalt", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_DALT_T1_ARTIFACT", "MALWARE_WIN_DALT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/dalt.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/dalt", "updated_at": "2026-10-16" }, { "family": "danabot", "category": "banking_trojan", "sample_count": 32, "rule_names": [ "MALWARE_WIN_DANABOT_T1_ARTIFACT", "MALWARE_WIN_DANABOT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/danabot.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/danabot", "updated_at": "2026-10-16" }, { "family": "dapato", "category": "trojan", "sample_count": 197, "rule_names": [ "MALWARE_WIN_DAPATO_T1_ARTIFACT", "MALWARE_WIN_DAPATO_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/dapato.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/dapato", "updated_at": "2026-10-16" }, { "family": "darkcyrene", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_DARKCYRENE_T1_ARTIFACT", "MALWARE_WIN_DARKCYRENE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/darkcyrene.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/darkcyrene", "updated_at": "2026-10-16" }, { "family": "darkgate", "category": "loader", "sample_count": 1205, "rule_names": [ "MALWARE_WIN_DARKGATE_T1_ARTIFACT", "MALWARE_WIN_DARKGATE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/darkgate.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/darkgate", "updated_at": "2026-10-16" }, { "family": "darkhotel", "category": "backdoor", "sample_count": 1, "rule_names": [ "MALWARE_WIN_DARKHOTEL_T1_ARTIFACT", "MALWARE_WIN_DARKHOTEL_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/darkhotel.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/darkhotel", "updated_at": "2026-10-16" }, { "family": "darkkomet", "category": "rat", "sample_count": 801, "rule_names": [ "MALWARE_WIN_DARKKOMET_T1_ARTIFACT", "MALWARE_WIN_DARKKOMET_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/darkkomet.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/darkkomet", "updated_at": "2026-10-16" }, { "family": "darkmoon", "category": "ransomware", "sample_count": 2, "rule_names": [ "MALWARE_WIN_DARKMOON_T1_ARTIFACT", "MALWARE_WIN_DARKMOON_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/darkmoon.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/darkmoon", "updated_at": "2026-10-16" }, { "family": "darkneuron", "category": "ransomware", "sample_count": 2, "rule_names": [ "MALWARE_WIN_DARKNEURON_T1_ARTIFACT", "MALWARE_WIN_DARKNEURON_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/darkneuron.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/darkneuron", "updated_at": "2026-10-16" }, { "family": "darkvnc", "category": "ransomware", "sample_count": 3, "rule_names": [ "MALWARE_WIN_DARKVNC_T1_ARTIFACT", "MALWARE_WIN_DARKVNC_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/darkvnc.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/darkvnc", "updated_at": "2026-10-16" }, { "family": "darsing", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_DARSING_T1_ARTIFACT", "MALWARE_WIN_DARSING_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/darsing.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/darsing", "updated_at": "2026-10-16" }, { "family": "datakeeper", "category": "ransomware", "sample_count": 7, "rule_names": [ "MALWARE_WIN_DATAKEEPER_T1_ARTIFACT", "MALWARE_WIN_DATAKEEPER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/datakeeper.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/datakeeper", "updated_at": "2026-10-16" }, { "family": "datper", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_DATPER_T1_ARTIFACT", "MALWARE_WIN_DATPER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/datper.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/datper", "updated_at": "2026-10-16" }, { "family": "datpol", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_DATPOL_T1_ARTIFACT", "MALWARE_WIN_DATPOL_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/datpol.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/datpol", "updated_at": "2026-10-16" }, { "family": "daum", "category": "advanced_threat", "sample_count": 2, "rule_names": [ "MALWARE_WIN_DAUM_T1_ARTIFACT", "MALWARE_WIN_DAUM_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/daum.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/daum", "updated_at": "2026-10-16" }, { "family": "davobevix", "category": "ransomware", "sample_count": 2, "rule_names": [ "MALWARE_WIN_DAVOBEVIX_T1_ARTIFACT", "MALWARE_WIN_DAVOBEVIX_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/davobevix.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/davobevix", "updated_at": "2026-10-16" }, { "family": "davy", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_DAVY_T1_ARTIFACT", "MALWARE_WIN_DAVY_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/davy.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/davy", "updated_at": "2026-10-16" }, { "family": "daws", "category": "ransomware", "sample_count": 246, "rule_names": [ "MALWARE_WIN_DAWS_T1_ARTIFACT", "MALWARE_WIN_DAWS_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/daws.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/daws", "updated_at": "2026-10-16" }, { "family": "dazi", "category": "ransomware", "sample_count": 2, "rule_names": [ "MALWARE_WIN_DAZI_T1_ARTIFACT", "MALWARE_WIN_DAZI_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/dazi.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/dazi", "updated_at": "2026-10-16" }, { "family": "dealply", "category": "adware", "sample_count": 3976, "rule_names": [ "MALWARE_WIN_DEALPLY_T1_ARTIFACT", "MALWARE_WIN_DEALPLY_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/dealply.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/dealply", "updated_at": "2026-10-16" }, { "family": "deau", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_DEAU_T1_ARTIFACT", "MALWARE_WIN_DEAU_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/deau.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/deau", "updated_at": "2026-10-16" }, { "family": "deceptor", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_DECEPTOR_T1_ARTIFACT", "MALWARE_WIN_DECEPTOR_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/deceptor.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/deceptor", "updated_at": "2026-10-16" }, { "family": "deceptpcclean", "category": "pua", "sample_count": 19, "rule_names": [ "MALWARE_WIN_DECEPTPCCLEAN_T1_ARTIFACT", "MALWARE_WIN_DECEPTPCCLEAN_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/deceptpcclean.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/deceptpcclean", "updated_at": "2026-10-16" }, { "family": "deepscan", "category": "advanced_threat", "sample_count": 6, "rule_names": [ "MALWARE_WIN_DEEPSCAN_T1_ARTIFACT", "MALWARE_WIN_DEEPSCAN_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/deepscan.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/deepscan", "updated_at": "2026-10-16" }, { "family": "deepsea", "category": "advanced_threat", "sample_count": 1, "rule_names": [ "MALWARE_WIN_DEEPSEA_T1_ARTIFACT", "MALWARE_WIN_DEEPSEA_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/deepsea.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/deepsea", "updated_at": "2026-10-16" }, { "family": "defaulttab", "category": "trojan", "sample_count": 2, "rule_names": [ "MALWARE_WIN_DEFAULTTAB_T1_ARTIFACT", "MALWARE_WIN_DEFAULTTAB_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/defaulttab.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/defaulttab", "updated_at": "2026-10-16" }, { "family": "defmid", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_DEFMID_T1_ARTIFACT", "MALWARE_WIN_DEFMID_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/defmid.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/defmid", "updated_at": "2026-10-16" }, { "family": "defsel", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_DEFSEL_T1_ARTIFACT", "MALWARE_WIN_DEFSEL_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/defsel.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/defsel", "updated_at": "2026-10-16" }, { "family": "delbar", "category": "ransomware", "sample_count": 9, "rule_names": [ "MALWARE_WIN_DELBAR_T1_ARTIFACT", "MALWARE_WIN_DELBAR_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/delbar.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/delbar", "updated_at": "2026-10-16" }, { "family": "deleter", "category": "ransomware", "sample_count": 3, "rule_names": [ "MALWARE_WIN_DELETER_T1_ARTIFACT", "MALWARE_WIN_DELETER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/deleter.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/deleter", "updated_at": "2026-10-16" }, { "family": "delf", "category": "trojan", "sample_count": 1727, "rule_names": [ "MALWARE_WIN_DELF_T1_ARTIFACT", "MALWARE_WIN_DELF_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/delf.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/delf", "updated_at": "2026-10-16" }, { "family": "delfidelfi", "category": "trojan", "sample_count": 6, "rule_names": [ "MALWARE_WIN_DELFIDELFI_T1_ARTIFACT", "MALWARE_WIN_DELFIDELFI_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/delfidelfi.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/delfidelfi", "updated_at": "2026-10-16" }, { "family": "delfile", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_DELFILE_T1_ARTIFACT", "MALWARE_WIN_DELFILE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/delfile.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/delfile", "updated_at": "2026-10-16" }, { "family": "delfiles", "category": "ransomware", "sample_count": 5, "rule_names": [ "MALWARE_WIN_DELFILES_T1_ARTIFACT", "MALWARE_WIN_DELFILES_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/delfiles.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/delfiles", "updated_at": "2026-10-16" }, { "family": "delfinject", "category": "trojan", "sample_count": 26, "rule_names": [ "MALWARE_WIN_DELFINJECT_T1_ARTIFACT", "MALWARE_WIN_DELFINJECT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/delfinject.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/delfinject", "updated_at": "2026-10-16" }, { "family": "delikle", "category": "ransomware", "sample_count": 6, "rule_names": [ "MALWARE_WIN_DELIKLE_T1_ARTIFACT", "MALWARE_WIN_DELIKLE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/delikle.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/delikle", "updated_at": "2026-10-16" }, { "family": "deliric", "category": "ransomware", "sample_count": 2, "rule_names": [ "MALWARE_WIN_DELIRIC_T1_ARTIFACT", "MALWARE_WIN_DELIRIC_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/deliric.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/deliric", "updated_at": "2026-10-16" }, { "family": "delpem", "category": "ransomware", "sample_count": 2, "rule_names": [ "MALWARE_WIN_DELPEM_T1_ARTIFACT", "MALWARE_WIN_DELPEM_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/delpem.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/delpem", "updated_at": "2026-10-16" }, { "family": "delphi", "category": "trojan", "sample_count": 82, "rule_names": [ "MALWARE_WIN_DELPHI_T1_ARTIFACT", "MALWARE_WIN_DELPHI_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/delphi.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/delphi", "updated_at": "2026-10-16" }, { "family": "delphinjector", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_DELPHINJECTOR_T1_ARTIFACT", "MALWARE_WIN_DELPHINJECTOR_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/delphinjector.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/delphinjector", "updated_at": "2026-10-16" }, { "family": "democry", "category": "ransomware", "sample_count": 3, "rule_names": [ "MALWARE_WIN_DEMOCRY_T1_ARTIFACT", "MALWARE_WIN_DEMOCRY_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/democry.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/democry", "updated_at": "2026-10-16" }, { "family": "demp", "category": "ransomware", "sample_count": 18, "rule_names": [ "MALWARE_WIN_DEMP_T1_ARTIFACT", "MALWARE_WIN_DEMP_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/demp.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/demp", "updated_at": "2026-10-16" }, { "family": "denes", "category": "ransomware", "sample_count": 4, "rule_names": [ "MALWARE_WIN_DENES_T1_ARTIFACT", "MALWARE_WIN_DENES_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/denes.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/denes", "updated_at": "2026-10-16" }, { "family": "dervec", "category": "ransomware", "sample_count": 9, "rule_names": [ "MALWARE_WIN_DERVEC_T1_ARTIFACT", "MALWARE_WIN_DERVEC_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/dervec.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/dervec", "updated_at": "2026-10-16" }, { "family": "deshacop", "category": "ransomware", "sample_count": 3, "rule_names": [ "MALWARE_WIN_DESHACOP_T1_ARTIFACT", "MALWARE_WIN_DESHACOP_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/deshacop.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/deshacop", "updated_at": "2026-10-16" }, { "family": "desktop", "category": "ransomware", "sample_count": 2, "rule_names": [ "MALWARE_WIN_DESKTOP_T1_ARTIFACT", "MALWARE_WIN_DESKTOP_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/desktop.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/desktop", "updated_at": "2026-10-16" }, { "family": "destructbot", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_DESTRUCTBOT_T1_ARTIFACT", "MALWARE_WIN_DESTRUCTBOT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/destructbot.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/destructbot", "updated_at": "2026-10-16" }, { "family": "desurou", "category": "ransomware", "sample_count": 2, "rule_names": [ "MALWARE_WIN_DESUROU_T1_ARTIFACT", "MALWARE_WIN_DESUROU_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/desurou.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/desurou", "updated_at": "2026-10-16" }, { "family": "detnat", "category": "trojan", "sample_count": 523, "rule_names": [ "MALWARE_WIN_DETNAT_T1_ARTIFACT", "MALWARE_WIN_DETNAT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/detnat.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/detnat", "updated_at": "2026-10-16" }, { "family": "detplock", "category": "ransomware", "sample_count": 2, "rule_names": [ "MALWARE_WIN_DETPLOCK_T1_ARTIFACT", "MALWARE_WIN_DETPLOCK_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/detplock.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/detplock", "updated_at": "2026-10-16" }, { "family": "detrahere", "category": "rootkit", "sample_count": 38, "rule_names": [ "MALWARE_WIN_DETRAHERE_T1_ARTIFACT", "MALWARE_WIN_DETRAHERE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/detrahere.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/detrahere", "updated_at": "2026-10-16" }, { "family": "detroie", "category": "ransomware", "sample_count": 6, "rule_names": [ "MALWARE_WIN_DETROIE_T1_ARTIFACT", "MALWARE_WIN_DETROIE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/detroie.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/detroie", "updated_at": "2026-10-16" }, { "family": "devilz", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_DEVILZ_T1_ARTIFACT", "MALWARE_WIN_DEVILZ_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/devilz.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/devilz", "updated_at": "2026-10-16" }, { "family": "dexel", "category": "trojan", "sample_count": 20, "rule_names": [ "MALWARE_WIN_DEXEL_T1_ARTIFACT", "MALWARE_WIN_DEXEL_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/dexel.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/dexel", "updated_at": "2026-10-16" }, { "family": "dfay", "category": "trojan", "sample_count": 300, "rule_names": [ "MALWARE_WIN_DFAY_T1_ARTIFACT", "MALWARE_WIN_DFAY_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/dfay.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/dfay", "updated_at": "2026-10-16" }, { "family": "dial", "category": "ransomware", "sample_count": 10, "rule_names": [ "MALWARE_WIN_DIAL_T1_ARTIFACT", "MALWARE_WIN_DIAL_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/dial.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/dial", "updated_at": "2026-10-16" }, { "family": "diamin", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_DIAMIN_T1_ARTIFACT", "MALWARE_WIN_DIAMIN_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/diamin.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/diamin", "updated_at": "2026-10-16" }, { "family": "dico", "category": "ransomware", "sample_count": 16, "rule_names": [ "MALWARE_WIN_DICO_T1_ARTIFACT", "MALWARE_WIN_DICO_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/dico.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/dico", "updated_at": "2026-10-16" }, { "family": "dicsor", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_DICSOR_T1_ARTIFACT", "MALWARE_WIN_DICSOR_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/dicsor.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/dicsor", "updated_at": "2026-10-16" }, { "family": "dimnie", "category": "infostealer", "sample_count": 13, "rule_names": [ "MALWARE_WIN_DIMNIE_T1_ARTIFACT", "MALWARE_WIN_DIMNIE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/dimnie.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/dimnie", "updated_at": "2026-10-16" }, { "family": "dinwod", "category": "file_infector", "sample_count": 973, "rule_names": [ "MALWARE_WIN_DINWOD_T1_ARTIFACT", "MALWARE_WIN_DINWOD_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/dinwod.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/dinwod", "updated_at": "2026-10-16" }, { "family": "directdownloader", "category": "advanced_threat", "sample_count": 5, "rule_names": [ "MALWARE_WIN_DIRECTDOWNLOADER_T1_ARTIFACT", "MALWARE_WIN_DIRECTDOWNLOADER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/directdownloader.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/directdownloader", "updated_at": "2026-10-16" }, { "family": "disabler", "category": "ransomware", "sample_count": 10, "rule_names": [ "MALWARE_WIN_DISABLER_T1_ARTIFACT", "MALWARE_WIN_DISABLER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/disabler.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/disabler", "updated_at": "2026-10-16" }, { "family": "disfa", "category": "trojan", "sample_count": 238, "rule_names": [ "MALWARE_WIN_DISFA_T1_ARTIFACT", "MALWARE_WIN_DISFA_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/disfa.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/disfa", "updated_at": "2026-10-16" }, { "family": "dishigy", "category": "ransomware", "sample_count": 7, "rule_names": [ "MALWARE_WIN_DISHIGY_T1_ARTIFACT", "MALWARE_WIN_DISHIGY_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/dishigy.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/dishigy", "updated_at": "2026-10-16" }, { "family": "diskscanfa", "category": "advanced_threat", "sample_count": 1, "rule_names": [ "MALWARE_WIN_DISKSCANFA_T1_ARTIFACT", "MALWARE_WIN_DISKSCANFA_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/diskscanfa.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/diskscanfa", "updated_at": "2026-10-16" }, { "family": "diskwriter", "category": "trojan", "sample_count": 17, "rule_names": [ "MALWARE_WIN_DISKWRITER_T1_ARTIFACT", "MALWARE_WIN_DISKWRITER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/diskwriter.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/diskwriter", "updated_at": "2026-10-16" }, { "family": "diss", "category": "ransomware", "sample_count": 3, "rule_names": [ "MALWARE_WIN_DISS_T1_ARTIFACT", "MALWARE_WIN_DISS_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/diss.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/diss", "updated_at": "2026-10-16" }, { "family": "district", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_DISTRICT_T1_ARTIFACT", "MALWARE_WIN_DISTRICT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/district.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/district", "updated_at": "2026-10-16" }, { "family": "ditertag", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_DITERTAG_T1_ARTIFACT", "MALWARE_WIN_DITERTAG_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/ditertag.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/ditertag", "updated_at": "2026-10-16" }, { "family": "diztakun", "category": "trojan", "sample_count": 42, "rule_names": [ "MALWARE_WIN_DIZTAKUN_T1_ARTIFACT", "MALWARE_WIN_DIZTAKUN_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/diztakun.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/diztakun", "updated_at": "2026-10-16" }, { "family": "dlassistant", "category": "advanced_threat", "sample_count": 2, "rule_names": [ "MALWARE_WIN_DLASSISTANT_T1_ARTIFACT", "MALWARE_WIN_DLASSISTANT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/dlassistant.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/dlassistant", "updated_at": "2026-10-16" }, { "family": "dlboost", "category": "advanced_threat", "sample_count": 10, "rule_names": [ "MALWARE_WIN_DLBOOST_T1_ARTIFACT", "MALWARE_WIN_DLBOOST_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/dlboost.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/dlboost", "updated_at": "2026-10-16" }, { "family": "dlguide", "category": "pua", "sample_count": 4733, "rule_names": [ "MALWARE_WIN_DLGUIDE_T1_ARTIFACT", "MALWARE_WIN_DLGUIDE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/dlguide.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/dlguide", "updated_at": "2026-10-16" }, { "family": "dlhelper", "category": "downloader", "sample_count": 290, "rule_names": [ "MALWARE_WIN_DLHELPER_T1_ARTIFACT", "MALWARE_WIN_DLHELPER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/dlhelper.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/dlhelper", "updated_at": "2026-10-16" }, { "family": "dllhijack", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_DLLHIJACK_T1_ARTIFACT", "MALWARE_WIN_DLLHIJACK_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/dllhijack.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/dllhijack", "updated_at": "2026-10-16" }, { "family": "dllhijacker", "category": "ransomware", "sample_count": 7, "rule_names": [ "MALWARE_WIN_DLLHIJACKER_T1_ARTIFACT", "MALWARE_WIN_DLLHIJACKER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/dllhijacker.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/dllhijacker", "updated_at": "2026-10-16" }, { "family": "dllinject", "category": "hacktool", "sample_count": 97, "rule_names": [ "MALWARE_WIN_DLLINJECT_T1_ARTIFACT", "MALWARE_WIN_DLLINJECT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/dllinject.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/dllinject", "updated_at": "2026-10-16" }, { "family": "dlsecure", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_DLSECURE_T1_ARTIFACT", "MALWARE_WIN_DLSECURE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/dlsecure.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/dlsecure", "updated_at": "2026-10-16" }, { "family": "dlsponsor", "category": "adware", "sample_count": 151, "rule_names": [ "MALWARE_WIN_DLSPONSOR_T1_ARTIFACT", "MALWARE_WIN_DLSPONSOR_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/dlsponsor.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/dlsponsor", "updated_at": "2026-10-16" }, { "family": "dluca", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_DLUCA_T1_ARTIFACT", "MALWARE_WIN_DLUCA_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/dluca.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/dluca", "updated_at": "2026-10-16" }, { "family": "dlzp", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_DLZP_T1_ARTIFACT", "MALWARE_WIN_DLZP_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/dlzp.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/dlzp", "updated_at": "2026-10-16" }, { "family": "dnguard", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_DNGUARD_T1_ARTIFACT", "MALWARE_WIN_DNGUARD_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/dnguard.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/dnguard", "updated_at": "2026-10-16" }, { "family": "dnschange", "category": "trojan", "sample_count": 5, "rule_names": [ "MALWARE_WIN_DNSCHANGE_T1_ARTIFACT", "MALWARE_WIN_DNSCHANGE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/dnschange.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/dnschange", "updated_at": "2026-10-16" }, { "family": "dnschanger", "category": "trojan", "sample_count": 11, "rule_names": [ "MALWARE_WIN_DNSCHANGER_T1_ARTIFACT", "MALWARE_WIN_DNSCHANGER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/dnschanger.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/dnschanger", "updated_at": "2026-10-16" }, { "family": "dnscleaner", "category": "pua", "sample_count": 14, "rule_names": [ "MALWARE_WIN_DNSCLEANER_T1_ARTIFACT", "MALWARE_WIN_DNSCLEANER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/dnscleaner.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/dnscleaner", "updated_at": "2026-10-16" }, { "family": "dodiw", "category": "ransomware", "sample_count": 5, "rule_names": [ "MALWARE_WIN_DODIW_T1_ARTIFACT", "MALWARE_WIN_DODIW_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/dodiw.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/dodiw", "updated_at": "2026-10-16" }, { "family": "dofoil", "category": "downloader", "sample_count": 90, "rule_names": [ "MALWARE_WIN_DOFOIL_T1_ARTIFACT", "MALWARE_WIN_DOFOIL_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/dofoil.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/dofoil", "updated_at": "2026-10-16" }, { "family": "domaiq", "category": "pua", "sample_count": 63, "rule_names": [ "MALWARE_WIN_DOMAIQ_T1_ARTIFACT", "MALWARE_WIN_DOMAIQ_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/domaiq.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/domaiq", "updated_at": "2026-10-16" }, { "family": "dominator", "category": "ransomware", "sample_count": 5, "rule_names": [ "MALWARE_WIN_DOMINATOR_T1_ARTIFACT", "MALWARE_WIN_DOMINATOR_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/dominator.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/dominator", "updated_at": "2026-10-16" }, { "family": "donex", "category": "ransomware", "sample_count": 7, "rule_names": [ "MALWARE_WIN_DONEX_T1_ARTIFACT", "MALWARE_WIN_DONEX_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/donex.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/donex", "updated_at": "2026-10-16" }, { "family": "donise", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_DONISE_T1_ARTIFACT", "MALWARE_WIN_DONISE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/donise.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/donise", "updated_at": "2026-10-16" }, { "family": "donloz", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_DONLOZ_T1_ARTIFACT", "MALWARE_WIN_DONLOZ_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/donloz.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/donloz", "updated_at": "2026-10-16" }, { "family": "donn", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_DONN_T1_ARTIFACT", "MALWARE_WIN_DONN_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/donn.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/donn", "updated_at": "2026-10-16" }, { "family": "donut", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_DONUT_T1_ARTIFACT", "MALWARE_WIN_DONUT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/donut.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/donut", "updated_at": "2026-10-16" }, { "family": "doqv", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_DOQV_T1_ARTIFACT", "MALWARE_WIN_DOQV_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/doqv.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/doqv", "updated_at": "2026-10-16" }, { "family": "dorgam", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_DORGAM_T1_ARTIFACT", "MALWARE_WIN_DORGAM_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/dorgam.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/dorgam", "updated_at": "2026-10-16" }, { "family": "dorifel", "category": "trojan", "sample_count": 19, "rule_names": [ "MALWARE_WIN_DORIFEL_T1_ARTIFACT", "MALWARE_WIN_DORIFEL_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/dorifel.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/dorifel", "updated_at": "2026-10-16" }, { "family": "dorkbot", "category": "botnet", "sample_count": 86, "rule_names": [ "MALWARE_WIN_DORKBOT_T1_ARTIFACT", "MALWARE_WIN_DORKBOT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/dorkbot.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/dorkbot", "updated_at": "2026-10-16" }, { "family": "dorv", "category": "ransomware", "sample_count": 7, "rule_names": [ "MALWARE_WIN_DORV_T1_ARTIFACT", "MALWARE_WIN_DORV_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/dorv.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/dorv", "updated_at": "2026-10-16" }, { "family": "doser", "category": "trojan", "sample_count": 1, "rule_names": [ "MALWARE_WIN_DOSER_T1_ARTIFACT", "MALWARE_WIN_DOSER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/doser.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/doser", "updated_at": "2026-10-16" }, { "family": "dostre", "category": "trojan", "sample_count": 35, "rule_names": [ "MALWARE_WIN_DOSTRE_T1_ARTIFACT", "MALWARE_WIN_DOSTRE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/dostre.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/dostre", "updated_at": "2026-10-16" }, { "family": "dotbundle", "category": "advanced_threat", "sample_count": 2, "rule_names": [ "MALWARE_WIN_DOTBUNDLE_T1_ARTIFACT", "MALWARE_WIN_DOTBUNDLE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/dotbundle.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/dotbundle", "updated_at": "2026-10-16" }, { "family": "dotdo", "category": "adware", "sample_count": 1678, "rule_names": [ "MALWARE_WIN_DOTDO_T1_ARTIFACT", "MALWARE_WIN_DOTDO_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/dotdo.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/dotdo", "updated_at": "2026-10-16" }, { "family": "dothetuk", "category": "infostealer", "sample_count": 51, "rule_names": [ "MALWARE_WIN_DOTHETUK_T1_ARTIFACT", "MALWARE_WIN_DOTHETUK_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/dothetuk.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/dothetuk", "updated_at": "2026-10-16" }, { "family": "dotnet", "category": "ransomware", "sample_count": 6, "rule_names": [ "MALWARE_WIN_DOTNET_T1_ARTIFACT", "MALWARE_WIN_DOTNET_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/dotnet.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/dotnet", "updated_at": "2026-10-16" }, { "family": "dotto", "category": "ransomware", "sample_count": 6, "rule_names": [ "MALWARE_WIN_DOTTO_T1_ARTIFACT", "MALWARE_WIN_DOTTO_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/dotto.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/dotto", "updated_at": "2026-10-16" }, { "family": "doubleagent", "category": "advanced_threat", "sample_count": 1, "rule_names": [ "MALWARE_WIN_DOUBLEAGENT_T1_ARTIFACT", "MALWARE_WIN_DOUBLEAGENT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/doubleagent.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/doubleagent", "updated_at": "2026-10-16" }, { "family": "doublefantasy", "category": "backdoor", "sample_count": 1, "rule_names": [ "MALWARE_WIN_DOUBLEFANTASY_T1_ARTIFACT", "MALWARE_WIN_DOUBLEFANTASY_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/doublefantasy.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/doublefantasy", "updated_at": "2026-10-16" }, { "family": "dovs", "category": "trojan", "sample_count": 75, "rule_names": [ "MALWARE_WIN_DOVS_T1_ARTIFACT", "MALWARE_WIN_DOVS_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/dovs.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/dovs", "updated_at": "2026-10-16" }, { "family": "dowanun", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_DOWANUN_T1_ARTIFACT", "MALWARE_WIN_DOWANUN_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/dowanun.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/dowanun", "updated_at": "2026-10-16" }, { "family": "downeks", "category": "trojan_downloader", "sample_count": 25, "rule_names": [ "MALWARE_WIN_DOWNEKS_T1_ARTIFACT", "MALWARE_WIN_DOWNEKS_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/downeks.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/downeks", "updated_at": "2026-10-16" }, { "family": "downer", "category": "ransomware", "sample_count": 5, "rule_names": [ "MALWARE_WIN_DOWNER_T1_ARTIFACT", "MALWARE_WIN_DOWNER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/downer.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/downer", "updated_at": "2026-10-16" }, { "family": "downexec", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_DOWNEXEC_T1_ARTIFACT", "MALWARE_WIN_DOWNEXEC_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/downexec.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/downexec", "updated_at": "2026-10-16" }, { "family": "downloadadmin", "category": "pua", "sample_count": 61, "rule_names": [ "MALWARE_WIN_DOWNLOADADMIN_T1_ARTIFACT", "MALWARE_WIN_DOWNLOADADMIN_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/downloadadmin.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/downloadadmin", "updated_at": "2026-10-16" }, { "family": "downloadassistant", "category": "adware", "sample_count": 26, "rule_names": [ "MALWARE_WIN_DOWNLOADASSISTANT_T1_ARTIFACT", "MALWARE_WIN_DOWNLOADASSISTANT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/downloadassistant.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/downloadassistant", "updated_at": "2026-10-16" }, { "family": "downloaderb", "category": "ransomware", "sample_count": 2, "rule_names": [ "MALWARE_WIN_DOWNLOADERB_T1_ARTIFACT", "MALWARE_WIN_DOWNLOADERB_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/downloaderb.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/downloaderb", "updated_at": "2026-10-16" }, { "family": "downloadhelper", "category": "adware", "sample_count": 645, "rule_names": [ "MALWARE_WIN_DOWNLOADHELPER_T1_ARTIFACT", "MALWARE_WIN_DOWNLOADHELPER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/downloadhelper.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/downloadhelper", "updated_at": "2026-10-16" }, { "family": "downloadshield", "category": "pua", "sample_count": 22, "rule_names": [ "MALWARE_WIN_DOWNLOADSHIELD_T1_ARTIFACT", "MALWARE_WIN_DOWNLOADSHIELD_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/downloadshield.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/downloadshield", "updated_at": "2026-10-16" }, { "family": "downloadsoft", "category": "advanced_threat", "sample_count": 5, "rule_names": [ "MALWARE_WIN_DOWNLOADSOFT_T1_ARTIFACT", "MALWARE_WIN_DOWNLOADSOFT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/downloadsoft.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/downloadsoft", "updated_at": "2026-10-16" }, { "family": "doyo", "category": "advanced_threat", "sample_count": 6, "rule_names": [ "MALWARE_WIN_DOYO_T1_ARTIFACT", "MALWARE_WIN_DOYO_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/doyo.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/doyo", "updated_at": "2026-10-16" }, { "family": "dragonbot", "category": "trojan", "sample_count": 1, "rule_names": [ "MALWARE_WIN_DRAGONBOT_T1_ARTIFACT", "MALWARE_WIN_DRAGONBOT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/dragonbot.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/dragonbot", "updated_at": "2026-10-16" }, { "family": "dreambot", "category": "banking_trojan", "sample_count": 17, "rule_names": [ "MALWARE_WIN_DREAMBOT_T1_ARTIFACT", "MALWARE_WIN_DREAMBOT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/dreambot.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/dreambot", "updated_at": "2026-10-16" }, { "family": "drefir", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_DREFIR_T1_ARTIFACT", "MALWARE_WIN_DREFIR_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/drefir.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/drefir", "updated_at": "2026-10-16" }, { "family": "dridex", "category": "banking_trojan", "sample_count": 59, "rule_names": [ "MALWARE_WIN_DRIDEX_T1_ARTIFACT", "MALWARE_WIN_DRIDEX_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/dridex.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/dridex", "updated_at": "2026-10-16" }, { "family": "driverassist", "category": "trojan", "sample_count": 3, "rule_names": [ "MALWARE_WIN_DRIVERASSIST_T1_ARTIFACT", "MALWARE_WIN_DRIVERASSIST_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/driverassist.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/driverassist", "updated_at": "2026-10-16" }, { "family": "driverbooster", "category": "advanced_threat", "sample_count": 1, "rule_names": [ "MALWARE_WIN_DRIVERBOOSTER_T1_ARTIFACT", "MALWARE_WIN_DRIVERBOOSTER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/driverbooster.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/driverbooster", "updated_at": "2026-10-16" }, { "family": "driverdevelop", "category": "trojan", "sample_count": 1, "rule_names": [ "MALWARE_WIN_DRIVERDEVELOP_T1_ARTIFACT", "MALWARE_WIN_DRIVERDEVELOP_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/driverdevelop.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/driverdevelop", "updated_at": "2026-10-16" }, { "family": "driverpack", "category": "pua", "sample_count": 326, "rule_names": [ "MALWARE_WIN_DRIVERPACK_T1_ARTIFACT", "MALWARE_WIN_DRIVERPACK_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/driverpack.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/driverpack", "updated_at": "2026-10-16" }, { "family": "drivertalent", "category": "advanced_threat", "sample_count": 5, "rule_names": [ "MALWARE_WIN_DRIVERTALENT_T1_ARTIFACT", "MALWARE_WIN_DRIVERTALENT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/drivertalent.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/drivertalent", "updated_at": "2026-10-16" }, { "family": "driverturbo", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_DRIVERTURBO_T1_ARTIFACT", "MALWARE_WIN_DRIVERTURBO_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/driverturbo.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/driverturbo", "updated_at": "2026-10-16" }, { "family": "driverupdate", "category": "pua", "sample_count": 13, "rule_names": [ "MALWARE_WIN_DRIVERUPDATE_T1_ARTIFACT", "MALWARE_WIN_DRIVERUPDATE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/driverupdate.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/driverupdate", "updated_at": "2026-10-16" }, { "family": "driverupdater", "category": "ransomware", "sample_count": 10, "rule_names": [ "MALWARE_WIN_DRIVERUPDATER_T1_ARTIFACT", "MALWARE_WIN_DRIVERUPDATER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/driverupdater.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/driverupdater", "updated_at": "2026-10-16" }, { "family": "drmsoft", "category": "advanced_threat", "sample_count": 10, "rule_names": [ "MALWARE_WIN_DRMSOFT_T1_ARTIFACT", "MALWARE_WIN_DRMSOFT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/drmsoft.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/drmsoft", "updated_at": "2026-10-16" }, { "family": "drolnux", "category": "worm", "sample_count": 205, "rule_names": [ "MALWARE_WIN_DROLNUX_T1_ARTIFACT", "MALWARE_WIN_DROLNUX_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/drolnux.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/drolnux", "updated_at": "2026-10-16" }, { "family": "droma", "category": "ransomware", "sample_count": 2, "rule_names": [ "MALWARE_WIN_DROMA_T1_ARTIFACT", "MALWARE_WIN_DROMA_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/droma.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/droma", "updated_at": "2026-10-16" }, { "family": "drooptroop", "category": "trojan", "sample_count": 1, "rule_names": [ "MALWARE_WIN_DROOPTROOP_T1_ARTIFACT", "MALWARE_WIN_DROOPTROOP_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/drooptroop.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/drooptroop", "updated_at": "2026-10-16" }, { "family": "dropware", "category": "trojan_dropper", "sample_count": 26, "rule_names": [ "MALWARE_WIN_DROPWARE_T1_ARTIFACT", "MALWARE_WIN_DROPWARE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/dropware.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/dropware", "updated_at": "2026-10-16" }, { "family": "drowor", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_DROWOR_T1_ARTIFACT", "MALWARE_WIN_DROWOR_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/drowor.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/drowor", "updated_at": "2026-10-16" }, { "family": "dsbot", "category": "trojan", "sample_count": 1, "rule_names": [ "MALWARE_WIN_DSBOT_T1_ARTIFACT", "MALWARE_WIN_DSBOT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/dsbot.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/dsbot", "updated_at": "2026-10-16" }, { "family": "dubfot", "category": "ransomware", "sample_count": 4, "rule_names": [ "MALWARE_WIN_DUBFOT_T1_ARTIFACT", "MALWARE_WIN_DUBFOT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/dubfot.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/dubfot", "updated_at": "2026-10-16" }, { "family": "duduunion", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_DUDUUNION_T1_ARTIFACT", "MALWARE_WIN_DUDUUNION_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/duduunion.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/duduunion", "updated_at": "2026-10-16" }, { "family": "dumpy", "category": "trojan", "sample_count": 4, "rule_names": [ "MALWARE_WIN_DUMPY_T1_ARTIFACT", "MALWARE_WIN_DUMPY_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/dumpy.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/dumpy", "updated_at": "2026-10-16" }, { "family": "dunco", "category": "ransomware", "sample_count": 3, "rule_names": [ "MALWARE_WIN_DUNCO_T1_ARTIFACT", "MALWARE_WIN_DUNCO_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/dunco.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/dunco", "updated_at": "2026-10-16" }, { "family": "dungcoi", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_DUNGCOI_T1_ARTIFACT", "MALWARE_WIN_DUNGCOI_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/dungcoi.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/dungcoi", "updated_at": "2026-10-16" }, { "family": "dunik", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_DUNIK_T1_ARTIFACT", "MALWARE_WIN_DUNIK_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/dunik.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/dunik", "updated_at": "2026-10-16" }, { "family": "duon", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_DUON_T1_ARTIFACT", "MALWARE_WIN_DUON_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/duon.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/duon", "updated_at": "2026-10-16" }, { "family": "dupate", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_DUPATE_T1_ARTIFACT", "MALWARE_WIN_DUPATE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/dupate.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/dupate", "updated_at": "2026-10-16" }, { "family": "duphead", "category": "ransomware", "sample_count": 6, "rule_names": [ "MALWARE_WIN_DUPHEAD_T1_ARTIFACT", "MALWARE_WIN_DUPHEAD_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/duphead.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/duphead", "updated_at": "2026-10-16" }, { "family": "dyamar", "category": "ransomware", "sample_count": 3, "rule_names": [ "MALWARE_WIN_DYAMAR_T1_ARTIFACT", "MALWARE_WIN_DYAMAR_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/dyamar.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/dyamar", "updated_at": "2026-10-16" }, { "family": "dycler", "category": "ransomware", "sample_count": 4, "rule_names": [ "MALWARE_WIN_DYCLER_T1_ARTIFACT", "MALWARE_WIN_DYCLER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/dycler.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/dycler", "updated_at": "2026-10-16" }, { "family": "dyloader", "category": "trojan", "sample_count": 2, "rule_names": [ "MALWARE_WIN_DYLOADER_T1_ARTIFACT", "MALWARE_WIN_DYLOADER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/dyloader.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/dyloader", "updated_at": "2026-10-16" }, { "family": "dynamer", "category": "trojan", "sample_count": 110, "rule_names": [ "MALWARE_WIN_DYNAMER_T1_ARTIFACT", "MALWARE_WIN_DYNAMER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/dynamer.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/dynamer", "updated_at": "2026-10-16" }, { "family": "dzan", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_DZAN_T1_ARTIFACT", "MALWARE_WIN_DZAN_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/dzan.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/dzan", "updated_at": "2026-10-16" }, { "family": "e13044af", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_E13044AF_T1_ARTIFACT", "MALWARE_WIN_E13044AF_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/e13044af.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/e13044af", "updated_at": "2026-10-16" }, { "family": "e2f3f4d", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_E2F3F4D_T1_ARTIFACT", "MALWARE_WIN_E2F3F4D_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/e2f3f4d.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/e2f3f4d", "updated_at": "2026-10-16" }, { "family": "easyspeedcheck", "category": "advanced_threat", "sample_count": 1, "rule_names": [ "MALWARE_WIN_EASYSPEEDCHECK_T1_ARTIFACT", "MALWARE_WIN_EASYSPEEDCHECK_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/easyspeedcheck.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/easyspeedcheck", "updated_at": "2026-10-16" }, { "family": "eb149b", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_EB149B_T1_ARTIFACT", "MALWARE_WIN_EB149B_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/eb149b.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/eb149b", "updated_at": "2026-10-16" }, { "family": "edeals", "category": "advanced_threat", "sample_count": 1, "rule_names": [ "MALWARE_WIN_EDEALS_T1_ARTIFACT", "MALWARE_WIN_EDEALS_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/edeals.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/edeals", "updated_at": "2026-10-16" }, { "family": "effbee", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_EFFBEE_T1_ARTIFACT", "MALWARE_WIN_EFFBEE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/effbee.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/effbee", "updated_at": "2026-10-16" }, { "family": "eggnog", "category": "ransomware", "sample_count": 4, "rule_names": [ "MALWARE_WIN_EGGNOG_T1_ARTIFACT", "MALWARE_WIN_EGGNOG_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/eggnog.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/eggnog", "updated_at": "2026-10-16" }, { "family": "egroupdial", "category": "advanced_threat", "sample_count": 7, "rule_names": [ "MALWARE_WIN_EGROUPDIAL_T1_ARTIFACT", "MALWARE_WIN_EGROUPDIAL_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/egroupdial.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/egroupdial", "updated_at": "2026-10-16" }, { "family": "ei0frdaui", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_EI0FRDAUI_T1_ARTIFACT", "MALWARE_WIN_EI0FRDAUI_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/ei0frdaui.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/ei0frdaui", "updated_at": "2026-10-16" }, { "family": "eicardemo", "category": "advanced_threat", "sample_count": 1, "rule_names": [ "MALWARE_WIN_EICARDEMO_T1_ARTIFACT", "MALWARE_WIN_EICARDEMO_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/eicardemo.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/eicardemo", "updated_at": "2026-10-16" }, { "family": "eitu", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_EITU_T1_ARTIFACT", "MALWARE_WIN_EITU_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/eitu.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/eitu", "updated_at": "2026-10-16" }, { "family": "ekidoa", "category": "ransomware", "sample_count": 6, "rule_names": [ "MALWARE_WIN_EKIDOA_T1_ARTIFACT", "MALWARE_WIN_EKIDOA_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/ekidoa.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/ekidoa", "updated_at": "2026-10-16" }, { "family": "ekisoli", "category": "ransomware", "sample_count": 2, "rule_names": [ "MALWARE_WIN_EKISOLI_T1_ARTIFACT", "MALWARE_WIN_EKISOLI_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/ekisoli.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/ekisoli", "updated_at": "2026-10-16" }, { "family": "ekstak", "category": "trojan", "sample_count": 421, "rule_names": [ "MALWARE_WIN_EKSTAK_T1_ARTIFACT", "MALWARE_WIN_EKSTAK_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/ekstak.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/ekstak", "updated_at": "2026-10-16" }, { "family": "elemental", "category": "adware", "sample_count": 82, "rule_names": [ "MALWARE_WIN_ELEMENTAL_T1_ARTIFACT", "MALWARE_WIN_ELEMENTAL_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/elemental.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/elemental", "updated_at": "2026-10-16" }, { "family": "elevate", "category": "ransomware", "sample_count": 2, "rule_names": [ "MALWARE_WIN_ELEVATE_T1_ARTIFACT", "MALWARE_WIN_ELEVATE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/elevate.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/elevate", "updated_at": "2026-10-16" }, { "family": "elex", "category": "adware", "sample_count": 31, "rule_names": [ "MALWARE_WIN_ELEX_T1_ARTIFACT", "MALWARE_WIN_ELEX_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/elex.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/elex", "updated_at": "2026-10-16" }, { "family": "elite", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_ELITE_T1_ARTIFACT", "MALWARE_WIN_ELITE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/elite.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/elite", "updated_at": "2026-10-16" }, { "family": "elitekeylogger", "category": "advanced_threat", "sample_count": 5, "rule_names": [ "MALWARE_WIN_ELITEKEYLOGGER_T1_ARTIFACT", "MALWARE_WIN_ELITEKEYLOGGER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/elitekeylogger.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/elitekeylogger", "updated_at": "2026-10-16" }, { "family": "elzob", "category": "ransomware", "sample_count": 22, "rule_names": [ "MALWARE_WIN_ELZOB_T1_ARTIFACT", "MALWARE_WIN_ELZOB_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/elzob.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/elzob", "updated_at": "2026-10-16" }, { "family": "emarketing", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_EMARKETING_T1_ARTIFACT", "MALWARE_WIN_EMARKETING_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/emarketing.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/emarketing", "updated_at": "2026-10-16" }, { "family": "emathi", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_EMATHI_T1_ARTIFACT", "MALWARE_WIN_EMATHI_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/emathi.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/emathi", "updated_at": "2026-10-16" }, { "family": "emelent", "category": "ransomware", "sample_count": 4, "rule_names": [ "MALWARE_WIN_EMELENT_T1_ARTIFACT", "MALWARE_WIN_EMELENT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/emelent.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/emelent", "updated_at": "2026-10-16" }, { "family": "emgfamt7gjgi", "category": "trojan", "sample_count": 1, "rule_names": [ "MALWARE_WIN_EMGFAMT7GJGI_T1_ARTIFACT", "MALWARE_WIN_EMGFAMT7GJGI_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/emgfamt7gjgi.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/emgfamt7gjgi", "updated_at": "2026-10-16" }, { "family": "emmfaeuirscb", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_EMMFAEUIRSCB_T1_ARTIFACT", "MALWARE_WIN_EMMFAEUIRSCB_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/emmfaeuirscb.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/emmfaeuirscb", "updated_at": "2026-10-16" }, { "family": "emogen", "category": "ransomware", "sample_count": 4, "rule_names": [ "MALWARE_WIN_EMOGEN_T1_ARTIFACT", "MALWARE_WIN_EMOGEN_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/emogen.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/emogen", "updated_at": "2026-10-16" }, { "family": "emotet", "category": "loader", "sample_count": 12943, "rule_names": [ "MALWARE_WIN_EMOTET_T1_ARTIFACT", "MALWARE_WIN_EMOTET_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/emotet.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/emotet", "updated_at": "2026-10-16" }, { "family": "emotetn", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_EMOTETN_T1_ARTIFACT", "MALWARE_WIN_EMOTETN_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/emotetn.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/emotetn", "updated_at": "2026-10-16" }, { "family": "emudbot", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_EMUDBOT_T1_ARTIFACT", "MALWARE_WIN_EMUDBOT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/emudbot.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/emudbot", "updated_at": "2026-10-16" }, { "family": "encryptpe", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_ENCRYPTPE_T1_ARTIFACT", "MALWARE_WIN_ENCRYPTPE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/encryptpe.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/encryptpe", "updated_at": "2026-10-16" }, { "family": "enestedel", "category": "ransomware", "sample_count": 5, "rule_names": [ "MALWARE_WIN_ENESTEDEL_T1_ARTIFACT", "MALWARE_WIN_ENESTEDEL_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/enestedel.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/enestedel", "updated_at": "2026-10-16" }, { "family": "enfal", "category": "trojan", "sample_count": 9, "rule_names": [ "MALWARE_WIN_ENFAL_T1_ARTIFACT", "MALWARE_WIN_ENFAL_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/enfal.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/enfal", "updated_at": "2026-10-16" }, { "family": "enigma", "category": "ransomware", "sample_count": 14, "rule_names": [ "MALWARE_WIN_ENIGMA_T1_ARTIFACT", "MALWARE_WIN_ENIGMA_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/enigma.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/enigma", "updated_at": "2026-10-16" }, { "family": "enigmaprotector", "category": "packer", "sample_count": 50, "rule_names": [ "MALWARE_WIN_ENIGMAPROTECTOR_T1_ARTIFACT", "MALWARE_WIN_ENIGMAPROTECTOR_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/enigmaprotector.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/enigmaprotector", "updated_at": "2026-10-16" }, { "family": "enistery", "category": "ransomware", "sample_count": 8, "rule_names": [ "MALWARE_WIN_ENISTERY_T1_ARTIFACT", "MALWARE_WIN_ENISTERY_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/enistery.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/enistery", "updated_at": "2026-10-16" }, { "family": "enosch", "category": "ransomware", "sample_count": 3, "rule_names": [ "MALWARE_WIN_ENOSCH_T1_ARTIFACT", "MALWARE_WIN_ENOSCH_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/enosch.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/enosch", "updated_at": "2026-10-16" }, { "family": "eorezo", "category": "adware", "sample_count": 271, "rule_names": [ "MALWARE_WIN_EOREZO_T1_ARTIFACT", "MALWARE_WIN_EOREZO_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/eorezo.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/eorezo", "updated_at": "2026-10-16" }, { "family": "epack", "category": "ransomware", "sample_count": 6, "rule_names": [ "MALWARE_WIN_EPACK_T1_ARTIFACT", "MALWARE_WIN_EPACK_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/epack.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/epack", "updated_at": "2026-10-16" }, { "family": "epicscale", "category": "advanced_threat", "sample_count": 2, "rule_names": [ "MALWARE_WIN_EPICSCALE_T1_ARTIFACT", "MALWARE_WIN_EPICSCALE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/epicscale.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/epicscale", "updated_at": "2026-10-16" }, { "family": "eqtonex", "category": "ransomware", "sample_count": 4, "rule_names": [ "MALWARE_WIN_EQTONEX_T1_ARTIFACT", "MALWARE_WIN_EQTONEX_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/eqtonex.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/eqtonex", "updated_at": "2026-10-16" }, { "family": "equationdrug", "category": "advanced_threat", "sample_count": 25, "rule_names": [ "MALWARE_WIN_EQUATIONDRUG_T1_ARTIFACT", "MALWARE_WIN_EQUATIONDRUG_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/equationdrug.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/equationdrug", "updated_at": "2026-10-16" }, { "family": "erazer", "category": "trojan", "sample_count": 1500, "rule_names": [ "MALWARE_WIN_ERAZER_T1_ARTIFACT", "MALWARE_WIN_ERAZER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/erazer.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/erazer", "updated_at": "2026-10-16" }, { "family": "erazer_lite", "category": "trojan", "sample_count": 1500, "rule_names": [ "MALWARE_WIN_ERAZER_LITE_T1_ARTIFACT", "MALWARE_WIN_ERAZER_LITE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/erazer_lite.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/erazer_lite", "updated_at": "2026-10-16" }, { "family": "erbon", "category": "ransomware", "sample_count": 7, "rule_names": [ "MALWARE_WIN_ERBON_T1_ARTIFACT", "MALWARE_WIN_ERBON_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/erbon.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/erbon", "updated_at": "2026-10-16" }, { "family": "eroyee", "category": "ransomware", "sample_count": 3, "rule_names": [ "MALWARE_WIN_EROYEE_T1_ARTIFACT", "MALWARE_WIN_EROYEE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/eroyee.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/eroyee", "updated_at": "2026-10-16" }, { "family": "esaprof", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_ESAPROF_T1_ARTIFACT", "MALWARE_WIN_ESAPROF_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/esaprof.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/esaprof", "updated_at": "2026-10-16" }, { "family": "esendi", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_ESENDI_T1_ARTIFACT", "MALWARE_WIN_ESENDI_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/esendi.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/esendi", "updated_at": "2026-10-16" }, { "family": "esfury", "category": "trojan", "sample_count": 1, "rule_names": [ "MALWARE_WIN_ESFURY_T1_ARTIFACT", "MALWARE_WIN_ESFURY_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/esfury.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/esfury", "updated_at": "2026-10-16" }, { "family": "eskimo", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_ESKIMO_T1_ARTIFACT", "MALWARE_WIN_ESKIMO_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/eskimo.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/eskimo", "updated_at": "2026-10-16" }, { "family": "esprot", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_ESPROT_T1_ARTIFACT", "MALWARE_WIN_ESPROT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/esprot.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/esprot", "updated_at": "2026-10-16" }, { "family": "estapa", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_ESTAPA_T1_ARTIFACT", "MALWARE_WIN_ESTAPA_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/estapa.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/estapa", "updated_at": "2026-10-16" }, { "family": "estrella", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_ESTRELLA_T1_ARTIFACT", "MALWARE_WIN_ESTRELLA_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/estrella.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/estrella", "updated_at": "2026-10-16" }, { "family": "eszjuxuan", "category": "ransomware", "sample_count": 2, "rule_names": [ "MALWARE_WIN_ESZJUXUAN_T1_ARTIFACT", "MALWARE_WIN_ESZJUXUAN_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/eszjuxuan.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/eszjuxuan", "updated_at": "2026-10-16" }, { "family": "etap", "category": "ransomware", "sample_count": 2, "rule_names": [ "MALWARE_WIN_ETAP_T1_ARTIFACT", "MALWARE_WIN_ETAP_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/etap.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/etap", "updated_at": "2026-10-16" }, { "family": "eventmonitor", "category": "advanced_threat", "sample_count": 1, "rule_names": [ "MALWARE_WIN_EVENTMONITOR_T1_ARTIFACT", "MALWARE_WIN_EVENTMONITOR_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/eventmonitor.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/eventmonitor", "updated_at": "2026-10-16" }, { "family": "evillocker", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_EVILLOCKER_T1_ARTIFACT", "MALWARE_WIN_EVILLOCKER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/evillocker.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/evillocker", "updated_at": "2026-10-16" }, { "family": "evital", "category": "trojan", "sample_count": 40, "rule_names": [ "MALWARE_WIN_EVITAL_T1_ARTIFACT", "MALWARE_WIN_EVITAL_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/evital.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/evital", "updated_at": "2026-10-16" }, { "family": "evrial", "category": "ransomware", "sample_count": 9, "rule_names": [ "MALWARE_WIN_EVRIAL_T1_ARTIFACT", "MALWARE_WIN_EVRIAL_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/evrial.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/evrial", "updated_at": "2026-10-16" }, { "family": "exchanger", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_EXCHANGER_T1_ARTIFACT", "MALWARE_WIN_EXCHANGER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/exchanger.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/exchanger", "updated_at": "2026-10-16" }, { "family": "excrevie", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_EXCREVIE_T1_ARTIFACT", "MALWARE_WIN_EXCREVIE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/excrevie.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/excrevie", "updated_at": "2026-10-16" }, { "family": "exdek", "category": "ransomware", "sample_count": 3, "rule_names": [ "MALWARE_WIN_EXDEK_T1_ARTIFACT", "MALWARE_WIN_EXDEK_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/exdek.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/exdek", "updated_at": "2026-10-16" }, { "family": "exeaqtor", "category": "ransomware", "sample_count": 3, "rule_names": [ "MALWARE_WIN_EXEAQTOR_T1_ARTIFACT", "MALWARE_WIN_EXEAQTOR_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/exeaqtor.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/exeaqtor", "updated_at": "2026-10-16" }, { "family": "exebinder", "category": "trojan", "sample_count": 1, "rule_names": [ "MALWARE_WIN_EXEBINDER_T1_ARTIFACT", "MALWARE_WIN_EXEBINDER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/exebinder.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/exebinder", "updated_at": "2026-10-16" }, { "family": "exent", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_EXENT_T1_ARTIFACT", "MALWARE_WIN_EXENT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/exent.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/exent", "updated_at": "2026-10-16" }, { "family": "exescript", "category": "ransomware", "sample_count": 12, "rule_names": [ "MALWARE_WIN_EXESCRIPT_T1_ARTIFACT", "MALWARE_WIN_EXESCRIPT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/exescript.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/exescript", "updated_at": "2026-10-16" }, { "family": "exfriendalert", "category": "advanced_threat", "sample_count": 2, "rule_names": [ "MALWARE_WIN_EXFRIENDALERT_T1_ARTIFACT", "MALWARE_WIN_EXFRIENDALERT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/exfriendalert.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/exfriendalert", "updated_at": "2026-10-16" }, { "family": "exksws", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_EXKSWS_T1_ARTIFACT", "MALWARE_WIN_EXKSWS_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/exksws.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/exksws", "updated_at": "2026-10-16" }, { "family": "expiro", "category": "file_infector", "sample_count": 305, "rule_names": [ "MALWARE_WIN_EXPIRO_T1_ARTIFACT", "MALWARE_WIN_EXPIRO_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/expiro.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/expiro", "updated_at": "2026-10-16" }, { "family": "exploder", "category": "ransomware", "sample_count": 11, "rule_names": [ "MALWARE_WIN_EXPLODER_T1_ARTIFACT", "MALWARE_WIN_EXPLODER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/exploder.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/exploder", "updated_at": "2026-10-16" }, { "family": "explorerhijack", "category": "trojan", "sample_count": 106, "rule_names": [ "MALWARE_WIN_EXPLORERHIJACK_T1_ARTIFACT", "MALWARE_WIN_EXPLORERHIJACK_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/explorerhijack.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/explorerhijack", "updated_at": "2026-10-16" }, { "family": "expressdownloader", "category": "trojan", "sample_count": 3, "rule_names": [ "MALWARE_WIN_EXPRESSDOWNLOADER_T1_ARTIFACT", "MALWARE_WIN_EXPRESSDOWNLOADER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/expressdownloader.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/expressdownloader", "updated_at": "2026-10-16" }, { "family": "expstart", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_EXPSTART_T1_ARTIFACT", "MALWARE_WIN_EXPSTART_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/expstart.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/expstart", "updated_at": "2026-10-16" }, { "family": "extcrome", "category": "advanced_threat", "sample_count": 2, "rule_names": [ "MALWARE_WIN_EXTCROME_T1_ARTIFACT", "MALWARE_WIN_EXTCROME_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/extcrome.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/extcrome", "updated_at": "2026-10-16" }, { "family": "extenbro", "category": "trojan", "sample_count": 204, "rule_names": [ "MALWARE_WIN_EXTENBRO_T1_ARTIFACT", "MALWARE_WIN_EXTENBRO_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/extenbro.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/extenbro", "updated_at": "2026-10-16" }, { "family": "extinstaller", "category": "advanced_threat", "sample_count": 2, "rule_names": [ "MALWARE_WIN_EXTINSTALLER_T1_ARTIFACT", "MALWARE_WIN_EXTINSTALLER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/extinstaller.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/extinstaller", "updated_at": "2026-10-16" }, { "family": "exxroute", "category": "trojan", "sample_count": 1, "rule_names": [ "MALWARE_WIN_EXXROUTE_T1_ARTIFACT", "MALWARE_WIN_EXXROUTE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/exxroute.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/exxroute", "updated_at": "2026-10-16" }, { "family": "eyestye", "category": "infostealer", "sample_count": 84, "rule_names": [ "MALWARE_WIN_EYESTYE_T1_ARTIFACT", "MALWARE_WIN_EYESTYE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/eyestye.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/eyestye", "updated_at": "2026-10-16" }, { "family": "eyooun", "category": "advanced_threat", "sample_count": 12, "rule_names": [ "MALWARE_WIN_EYOOUN_T1_ARTIFACT", "MALWARE_WIN_EYOOUN_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/eyooun.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/eyooun", "updated_at": "2026-10-16" }, { "family": "eziriznetreactor", "category": "ransomware", "sample_count": 5, "rule_names": [ "MALWARE_WIN_EZIRIZNETREACTOR_T1_ARTIFACT", "MALWARE_WIN_EZIRIZNETREACTOR_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/eziriznetreactor.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/eziriznetreactor", "updated_at": "2026-10-16" }, { "family": "ezoons", "category": "ransomware", "sample_count": 3, "rule_names": [ "MALWARE_WIN_EZOONS_T1_ARTIFACT", "MALWARE_WIN_EZOONS_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/ezoons.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/ezoons", "updated_at": "2026-10-16" }, { "family": "ezsearch", "category": "advanced_threat", "sample_count": 1, "rule_names": [ "MALWARE_WIN_EZSEARCH_T1_ARTIFACT", "MALWARE_WIN_EZSEARCH_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/ezsearch.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/ezsearch", "updated_at": "2026-10-16" }, { "family": "ezsoftwareupdater", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_EZSOFTWAREUPDATER_T1_ARTIFACT", "MALWARE_WIN_EZSOFTWAREUPDATER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/ezsoftwareupdater.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/ezsoftwareupdater", "updated_at": "2026-10-16" }, { "family": "ezula", "category": "advanced_threat", "sample_count": 2, "rule_names": [ "MALWARE_WIN_EZULA_T1_ARTIFACT", "MALWARE_WIN_EZULA_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/ezula.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/ezula", "updated_at": "2026-10-16" }, { "family": "facemoi", "category": "ransomware", "sample_count": 2, "rule_names": [ "MALWARE_WIN_FACEMOI_T1_ARTIFACT", "MALWARE_WIN_FACEMOI_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/facemoi.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/facemoi", "updated_at": "2026-10-16" }, { "family": "facido", "category": "trojan_downloader", "sample_count": 38, "rule_names": [ "MALWARE_WIN_FACIDO_T1_ARTIFACT", "MALWARE_WIN_FACIDO_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/facido.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/facido", "updated_at": "2026-10-16" }, { "family": "fadok", "category": "ransomware", "sample_count": 3, "rule_names": [ "MALWARE_WIN_FADOK_T1_ARTIFACT", "MALWARE_WIN_FADOK_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/fadok.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/fadok", "updated_at": "2026-10-16" }, { "family": "fakeal", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_FAKEAL_T1_ARTIFACT", "MALWARE_WIN_FAKEAL_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/fakeal.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/fakeal", "updated_at": "2026-10-16" }, { "family": "fakecoder", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_FAKECODER_T1_ARTIFACT", "MALWARE_WIN_FAKECODER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/fakecoder.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/fakecoder", "updated_at": "2026-10-16" }, { "family": "fakedos", "category": "trojan", "sample_count": 1, "rule_names": [ "MALWARE_WIN_FAKEDOS_T1_ARTIFACT", "MALWARE_WIN_FAKEDOS_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/fakedos.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/fakedos", "updated_at": "2026-10-16" }, { "family": "fakeff", "category": "trojan", "sample_count": 1, "rule_names": [ "MALWARE_WIN_FAKEFF_T1_ARTIFACT", "MALWARE_WIN_FAKEFF_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/fakeff.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/fakeff", "updated_at": "2026-10-16" }, { "family": "fakefolder", "category": "ransomware", "sample_count": 7, "rule_names": [ "MALWARE_WIN_FAKEFOLDER_T1_ARTIFACT", "MALWARE_WIN_FAKEFOLDER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/fakefolder.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/fakefolder", "updated_at": "2026-10-16" }, { "family": "fakehack", "category": "advanced_threat", "sample_count": 1, "rule_names": [ "MALWARE_WIN_FAKEHACK_T1_ARTIFACT", "MALWARE_WIN_FAKEHACK_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/fakehack.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/fakehack", "updated_at": "2026-10-16" }, { "family": "fakeie", "category": "ransomware", "sample_count": 5, "rule_names": [ "MALWARE_WIN_FAKEIE_T1_ARTIFACT", "MALWARE_WIN_FAKEIE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/fakeie.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/fakeie", "updated_at": "2026-10-16" }, { "family": "fakeime", "category": "ransomware", "sample_count": 4, "rule_names": [ "MALWARE_WIN_FAKEIME_T1_ARTIFACT", "MALWARE_WIN_FAKEIME_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/fakeime.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/fakeime", "updated_at": "2026-10-16" }, { "family": "fakeinstaller", "category": "trojan", "sample_count": 2, "rule_names": [ "MALWARE_WIN_FAKEINSTALLER_T1_ARTIFACT", "MALWARE_WIN_FAKEINSTALLER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/fakeinstaller.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/fakeinstaller", "updated_at": "2026-10-16" }, { "family": "fakeoff", "category": "advanced_threat", "sample_count": 4, "rule_names": [ "MALWARE_WIN_FAKEOFF_T1_ARTIFACT", "MALWARE_WIN_FAKEOFF_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/fakeoff.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/fakeoff", "updated_at": "2026-10-16" }, { "family": "fakeplayer", "category": "trojan", "sample_count": 1, "rule_names": [ "MALWARE_WIN_FAKEPLAYER_T1_ARTIFACT", "MALWARE_WIN_FAKEPLAYER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/fakeplayer.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/fakeplayer", "updated_at": "2026-10-16" }, { "family": "fakeransom", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_FAKERANSOM_T1_ARTIFACT", "MALWARE_WIN_FAKERANSOM_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/fakeransom.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/fakeransom", "updated_at": "2026-10-16" }, { "family": "fakerean", "category": "advanced_threat", "sample_count": 3, "rule_names": [ "MALWARE_WIN_FAKEREAN_T1_ARTIFACT", "MALWARE_WIN_FAKEREAN_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/fakerean.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/fakerean", "updated_at": "2026-10-16" }, { "family": "fakesmoke", "category": "trojan", "sample_count": 3, "rule_names": [ "MALWARE_WIN_FAKESMOKE_T1_ARTIFACT", "MALWARE_WIN_FAKESMOKE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/fakesmoke.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/fakesmoke", "updated_at": "2026-10-16" }, { "family": "fakesupport", "category": "ransomware", "sample_count": 2, "rule_names": [ "MALWARE_WIN_FAKESUPPORT_T1_ARTIFACT", "MALWARE_WIN_FAKESUPPORT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/fakesupport.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/fakesupport", "updated_at": "2026-10-16" }, { "family": "fakesysdef", "category": "advanced_threat", "sample_count": 2, "rule_names": [ "MALWARE_WIN_FAKESYSDEF_T1_ARTIFACT", "MALWARE_WIN_FAKESYSDEF_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/fakesysdef.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/fakesysdef", "updated_at": "2026-10-16" }, { "family": "faketool", "category": "trojan", "sample_count": 20, "rule_names": [ "MALWARE_WIN_FAKETOOL_T1_ARTIFACT", "MALWARE_WIN_FAKETOOL_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/faketool.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/faketool", "updated_at": "2026-10-16" }, { "family": "familykeylogger", "category": "advanced_threat", "sample_count": 1, "rule_names": [ "MALWARE_WIN_FAMILYKEYLOGGER_T1_ARTIFACT", "MALWARE_WIN_FAMILYKEYLOGGER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/familykeylogger.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/familykeylogger", "updated_at": "2026-10-16" }, { "family": "famvt", "category": "ransomware", "sample_count": 2, "rule_names": [ "MALWARE_WIN_FAMVT_T1_ARTIFACT", "MALWARE_WIN_FAMVT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/famvt.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/famvt", "updated_at": "2026-10-16" }, { "family": "fantom", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_FANTOM_T1_ARTIFACT", "MALWARE_WIN_FANTOM_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/fantom.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/fantom", "updated_at": "2026-10-16" }, { "family": "fareit", "category": "infostealer", "sample_count": 10955, "rule_names": [ "MALWARE_WIN_FAREIT_T1_ARTIFACT", "MALWARE_WIN_FAREIT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/fareit.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/fareit", "updated_at": "2026-10-16" }, { "family": "fareitvb", "category": "trojan", "sample_count": 7, "rule_names": [ "MALWARE_WIN_FAREITVB_T1_ARTIFACT", "MALWARE_WIN_FAREITVB_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/fareitvb.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/fareitvb", "updated_at": "2026-10-16" }, { "family": "farfli", "category": "rat", "sample_count": 360, "rule_names": [ "MALWARE_WIN_FARFLI_T1_ARTIFACT", "MALWARE_WIN_FARFLI_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/farfli.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/farfli", "updated_at": "2026-10-16" }, { "family": "farsistall", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_FARSISTALL_T1_ARTIFACT", "MALWARE_WIN_FARSISTALL_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/farsistall.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/farsistall", "updated_at": "2026-10-16" }, { "family": "fasem", "category": "ransomware", "sample_count": 2, "rule_names": [ "MALWARE_WIN_FASEM_T1_ARTIFACT", "MALWARE_WIN_FASEM_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/fasem.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/fasem", "updated_at": "2026-10-16" }, { "family": "fasong", "category": "ransomware", "sample_count": 12, "rule_names": [ "MALWARE_WIN_FASONG_T1_ARTIFACT", "MALWARE_WIN_FASONG_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/fasong.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/fasong", "updated_at": "2026-10-16" }, { "family": "fastpc", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_FASTPC_T1_ARTIFACT", "MALWARE_WIN_FASTPC_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/fastpc.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/fastpc", "updated_at": "2026-10-16" }, { "family": "favadd", "category": "trojan", "sample_count": 1, "rule_names": [ "MALWARE_WIN_FAVADD_T1_ARTIFACT", "MALWARE_WIN_FAVADD_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/favadd.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/favadd", "updated_at": "2026-10-16" }, { "family": "fayu", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_FAYU_T1_ARTIFACT", "MALWARE_WIN_FAYU_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/fayu.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/fayu", "updated_at": "2026-10-16" }, { "family": "fbng", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_FBNG_T1_ARTIFACT", "MALWARE_WIN_FBNG_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/fbng.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/fbng", "updated_at": "2026-10-16" }, { "family": "fbsi", "category": "ransomware", "sample_count": 5, "rule_names": [ "MALWARE_WIN_FBSI_T1_ARTIFACT", "MALWARE_WIN_FBSI_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/fbsi.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/fbsi", "updated_at": "2026-10-16" }, { "family": "fbtaken", "category": "ransomware", "sample_count": 6, "rule_names": [ "MALWARE_WIN_FBTAKEN_T1_ARTIFACT", "MALWARE_WIN_FBTAKEN_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/fbtaken.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/fbtaken", "updated_at": "2026-10-16" }, { "family": "fcb569f", "category": "trojan", "sample_count": 1, "rule_names": [ "MALWARE_WIN_FCB569F_T1_ARTIFACT", "MALWARE_WIN_FCB569F_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/fcb569f.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/fcb569f", "updated_at": "2026-10-16" }, { "family": "fdoh", "category": "ransomware", "sample_count": 2, "rule_names": [ "MALWARE_WIN_FDOH_T1_ARTIFACT", "MALWARE_WIN_FDOH_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/fdoh.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/fdoh", "updated_at": "2026-10-16" }, { "family": "fearless_key_spy", "category": "spyware", "sample_count": 1500, "rule_names": [ "MALWARE_WIN_FEARLESS_KEY_SPY_T1_ARTIFACT", "MALWARE_WIN_FEARLESS_KEY_SPY_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/fearless_key_spy.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/fearless_key_spy", "updated_at": "2026-10-16" }, { "family": "fearless_lite", "category": "spyware", "sample_count": 1500, "rule_names": [ "MALWARE_WIN_FEARLESS_LITE_T1_ARTIFACT", "MALWARE_WIN_FEARLESS_LITE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/fearless_lite.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/fearless_lite", "updated_at": "2026-10-16" }, { "family": "fearso", "category": "ransomware", "sample_count": 2, "rule_names": [ "MALWARE_WIN_FEARSO_T1_ARTIFACT", "MALWARE_WIN_FEARSO_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/fearso.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/fearso", "updated_at": "2026-10-16" }, { "family": "feebs", "category": "trojan", "sample_count": 1, "rule_names": [ "MALWARE_WIN_FEEBS_T1_ARTIFACT", "MALWARE_WIN_FEEBS_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/feebs.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/feebs", "updated_at": "2026-10-16" }, { "family": "feedarch", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_FEEDARCH_T1_ARTIFACT", "MALWARE_WIN_FEEDARCH_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/feedarch.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/feedarch", "updated_at": "2026-10-16" }, { "family": "fenomengame", "category": "trojan", "sample_count": 1, "rule_names": [ "MALWARE_WIN_FENOMENGAME_T1_ARTIFACT", "MALWARE_WIN_FENOMENGAME_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/fenomengame.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/fenomengame", "updated_at": "2026-10-16" }, { "family": "fesber", "category": "ransomware", "sample_count": 4, "rule_names": [ "MALWARE_WIN_FESBER_T1_ARTIFACT", "MALWARE_WIN_FESBER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/fesber.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/fesber", "updated_at": "2026-10-16" }, { "family": "fgarb", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_FGARB_T1_ARTIFACT", "MALWARE_WIN_FGARB_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/fgarb.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/fgarb", "updated_at": "2026-10-16" }, { "family": "figyek", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_FIGYEK_T1_ARTIFACT", "MALWARE_WIN_FIGYEK_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/figyek.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/figyek", "updated_at": "2026-10-16" }, { "family": "filefinder", "category": "ransomware", "sample_count": 4, "rule_names": [ "MALWARE_WIN_FILEFINDER_T1_ARTIFACT", "MALWARE_WIN_FILEFINDER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/filefinder.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/filefinder", "updated_at": "2026-10-16" }, { "family": "filepatch", "category": "ransomware", "sample_count": 2, "rule_names": [ "MALWARE_WIN_FILEPATCH_T1_ARTIFACT", "MALWARE_WIN_FILEPATCH_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/filepatch.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/filepatch", "updated_at": "2026-10-16" }, { "family": "filerepmalware", "category": "trojan", "sample_count": 45, "rule_names": [ "MALWARE_WIN_FILEREPMALWARE_T1_ARTIFACT", "MALWARE_WIN_FILEREPMALWARE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/filerepmalware.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/filerepmalware", "updated_at": "2026-10-16" }, { "family": "filerepmetagen", "category": "advanced_threat", "sample_count": 2, "rule_names": [ "MALWARE_WIN_FILEREPMETAGEN_T1_ARTIFACT", "MALWARE_WIN_FILEREPMETAGEN_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/filerepmetagen.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/filerepmetagen", "updated_at": "2026-10-16" }, { "family": "filetour", "category": "pua", "sample_count": 3238, "rule_names": [ "MALWARE_WIN_FILETOUR_T1_ARTIFACT", "MALWARE_WIN_FILETOUR_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/filetour.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/filetour", "updated_at": "2026-10-16" }, { "family": "filoskeed", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_FILOSKEED_T1_ARTIFACT", "MALWARE_WIN_FILOSKEED_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/filoskeed.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/filoskeed", "updated_at": "2026-10-16" }, { "family": "findkeyxp", "category": "trojan", "sample_count": 1, "rule_names": [ "MALWARE_WIN_FINDKEYXP_T1_ARTIFACT", "MALWARE_WIN_FINDKEYXP_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/findkeyxp.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/findkeyxp", "updated_at": "2026-10-16" }, { "family": "finfish", "category": "advanced_threat", "sample_count": 3, "rule_names": [ "MALWARE_WIN_FINFISH_T1_ARTIFACT", "MALWARE_WIN_FINFISH_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/finfish.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/finfish", "updated_at": "2026-10-16" }, { "family": "fire", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_FIRE_T1_ARTIFACT", "MALWARE_WIN_FIRE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/fire.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/fire", "updated_at": "2026-10-16" }, { "family": "firehooker", "category": "trojan", "sample_count": 1, "rule_names": [ "MALWARE_WIN_FIREHOOKER_T1_ARTIFACT", "MALWARE_WIN_FIREHOOKER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/firehooker.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/firehooker", "updated_at": "2026-10-16" }, { "family": "firseria", "category": "adware", "sample_count": 149, "rule_names": [ "MALWARE_WIN_FIRSERIA_T1_ARTIFACT", "MALWARE_WIN_FIRSERIA_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/firseria.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/firseria", "updated_at": "2026-10-16" }, { "family": "firstinj", "category": "ransomware", "sample_count": 6, "rule_names": [ "MALWARE_WIN_FIRSTINJ_T1_ARTIFACT", "MALWARE_WIN_FIRSTINJ_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/firstinj.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/firstinj", "updated_at": "2026-10-16" }, { "family": "flawedammyy", "category": "ransomware", "sample_count": 2, "rule_names": [ "MALWARE_WIN_FLAWEDAMMYY_T1_ARTIFACT", "MALWARE_WIN_FLAWEDAMMYY_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/flawedammyy.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/flawedammyy", "updated_at": "2026-10-16" }, { "family": "fleercivet", "category": "advanced_threat", "sample_count": 2, "rule_names": [ "MALWARE_WIN_FLEERCIVET_T1_ARTIFACT", "MALWARE_WIN_FLEERCIVET_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/fleercivet.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/fleercivet", "updated_at": "2026-10-16" }, { "family": "flinject", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_FLINJECT_T1_ARTIFACT", "MALWARE_WIN_FLINJECT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/flinject.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/flinject", "updated_at": "2026-10-16" }, { "family": "floder", "category": "ransomware", "sample_count": 4, "rule_names": [ "MALWARE_WIN_FLODER_T1_ARTIFACT", "MALWARE_WIN_FLODER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/floder.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/floder", "updated_at": "2026-10-16" }, { "family": "flowershop", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_FLOWERSHOP_T1_ARTIFACT", "MALWARE_WIN_FLOWERSHOP_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/flowershop.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/flowershop", "updated_at": "2026-10-16" }, { "family": "flowspirit", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_FLOWSPIRIT_T1_ARTIFACT", "MALWARE_WIN_FLOWSPIRIT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/flowspirit.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/flowspirit", "updated_at": "2026-10-16" }, { "family": "flusihoc", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_FLUSIHOC_T1_ARTIFACT", "MALWARE_WIN_FLUSIHOC_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/flusihoc.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/flusihoc", "updated_at": "2026-10-16" }, { "family": "flux", "category": "backdoor", "sample_count": 1500, "rule_names": [ "MALWARE_WIN_FLUX_T1_ARTIFACT", "MALWARE_WIN_FLUX_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/flux.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/flux", "updated_at": "2026-10-16" }, { "family": "flvdirect", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_FLVDIRECT_T1_ARTIFACT", "MALWARE_WIN_FLVDIRECT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/flvdirect.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/flvdirect", "updated_at": "2026-10-16" }, { "family": "flvdownloader", "category": "advanced_threat", "sample_count": 1, "rule_names": [ "MALWARE_WIN_FLVDOWNLOADER_T1_ARTIFACT", "MALWARE_WIN_FLVDOWNLOADER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/flvdownloader.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/flvdownloader", "updated_at": "2026-10-16" }, { "family": "flymux", "category": "advanced_threat", "sample_count": 1, "rule_names": [ "MALWARE_WIN_FLYMUX_T1_ARTIFACT", "MALWARE_WIN_FLYMUX_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/flymux.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/flymux", "updated_at": "2026-10-16" }, { "family": "flystudi", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_FLYSTUDI_T1_ARTIFACT", "MALWARE_WIN_FLYSTUDI_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/flystudi.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/flystudi", "updated_at": "2026-10-16" }, { "family": "flystudio", "category": "packer", "sample_count": 4527, "rule_names": [ "MALWARE_WIN_FLYSTUDIO_T1_ARTIFACT", "MALWARE_WIN_FLYSTUDIO_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/flystudio.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/flystudio", "updated_at": "2026-10-16" }, { "family": "fmgfagns0sge", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_FMGFAGNS0SGE_T1_ARTIFACT", "MALWARE_WIN_FMGFAGNS0SGE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/fmgfagns0sge.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/fmgfagns0sge", "updated_at": "2026-10-16" }, { "family": "fnwabyxmbkm", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_FNWABYXMBKM_T1_ARTIFACT", "MALWARE_WIN_FNWABYXMBKM_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/fnwabyxmbkm.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/fnwabyxmbkm", "updated_at": "2026-10-16" }, { "family": "foler", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_FOLER_T1_ARTIFACT", "MALWARE_WIN_FOLER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/foler.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/foler", "updated_at": "2026-10-16" }, { "family": "folstart", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_FOLSTART_T1_ARTIFACT", "MALWARE_WIN_FOLSTART_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/folstart.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/folstart", "updated_at": "2026-10-16" }, { "family": "fontra", "category": "adware", "sample_count": 25, "rule_names": [ "MALWARE_WIN_FONTRA_T1_ARTIFACT", "MALWARE_WIN_FONTRA_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/fontra.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/fontra", "updated_at": "2026-10-16" }, { "family": "food", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_FOOD_T1_ARTIFACT", "MALWARE_WIN_FOOD_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/food.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/food", "updated_at": "2026-10-16" }, { "family": "forbot", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_FORBOT_T1_ARTIFACT", "MALWARE_WIN_FORBOT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/forbot.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/forbot", "updated_at": "2026-10-16" }, { "family": "forcestartpage", "category": "advanced_threat", "sample_count": 5, "rule_names": [ "MALWARE_WIN_FORCESTARTPAGE_T1_ARTIFACT", "MALWARE_WIN_FORCESTARTPAGE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/forcestartpage.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/forcestartpage", "updated_at": "2026-10-16" }, { "family": "formbook", "category": "spyware", "sample_count": 35, "rule_names": [ "MALWARE_WIN_FORMBOOK_T1_ARTIFACT", "MALWARE_WIN_FORMBOOK_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/formbook.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/formbook", "updated_at": "2026-10-16" }, { "family": "fosniw", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_FOSNIW_T1_ARTIFACT", "MALWARE_WIN_FOSNIW_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/fosniw.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/fosniw", "updated_at": "2026-10-16" }, { "family": "fotopapps", "category": "ransomware", "sample_count": 2, "rule_names": [ "MALWARE_WIN_FOTOPAPPS_T1_ARTIFACT", "MALWARE_WIN_FOTOPAPPS_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/fotopapps.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/fotopapps", "updated_at": "2026-10-16" }, { "family": "fourthrem", "category": "ransomware", "sample_count": 3, "rule_names": [ "MALWARE_WIN_FOURTHREM_T1_ARTIFACT", "MALWARE_WIN_FOURTHREM_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/fourthrem.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/fourthrem", "updated_at": "2026-10-16" }, { "family": "foxhiex", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_FOXHIEX_T1_ARTIFACT", "MALWARE_WIN_FOXHIEX_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/foxhiex.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/foxhiex", "updated_at": "2026-10-16" }, { "family": "fraud", "category": "trojan", "sample_count": 1, "rule_names": [ "MALWARE_WIN_FRAUD_T1_ARTIFACT", "MALWARE_WIN_FRAUD_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/fraud.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/fraud", "updated_at": "2026-10-16" }, { "family": "fraudkrypt", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_FRAUDKRYPT_T1_ARTIFACT", "MALWARE_WIN_FRAUDKRYPT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/fraudkrypt.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/fraudkrypt", "updated_at": "2026-10-16" }, { "family": "fraudload", "category": "trojan_downloader", "sample_count": 25, "rule_names": [ "MALWARE_WIN_FRAUDLOAD_T1_ARTIFACT", "MALWARE_WIN_FRAUDLOAD_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/fraudload.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/fraudload", "updated_at": "2026-10-16" }, { "family": "fraudpack", "category": "exploit_kit", "sample_count": 17, "rule_names": [ "MALWARE_WIN_FRAUDPACK_T1_ARTIFACT", "MALWARE_WIN_FRAUDPACK_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/fraudpack.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/fraudpack", "updated_at": "2026-10-16" }, { "family": "fraudrop", "category": "downloader", "sample_count": 18, "rule_names": [ "MALWARE_WIN_FRAUDROP_T1_ARTIFACT", "MALWARE_WIN_FRAUDROP_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/fraudrop.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/fraudrop", "updated_at": "2026-10-16" }, { "family": "fraudster", "category": "ransomware", "sample_count": 5, "rule_names": [ "MALWARE_WIN_FRAUDSTER_T1_ARTIFACT", "MALWARE_WIN_FRAUDSTER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/fraudster.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/fraudster", "updated_at": "2026-10-16" }, { "family": "freekeylogger", "category": "spyware", "sample_count": 16, "rule_names": [ "MALWARE_WIN_FREEKEYLOGGER_T1_ARTIFACT", "MALWARE_WIN_FREEKEYLOGGER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/freekeylogger.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/freekeylogger", "updated_at": "2026-10-16" }, { "family": "freenew", "category": "advanced_threat", "sample_count": 6, "rule_names": [ "MALWARE_WIN_FREENEW_T1_ARTIFACT", "MALWARE_WIN_FREENEW_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/freenew.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/freenew", "updated_at": "2026-10-16" }, { "family": "frethog", "category": "trojan", "sample_count": 1, "rule_names": [ "MALWARE_WIN_FRETHOG_T1_ARTIFACT", "MALWARE_WIN_FRETHOG_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/frethog.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/frethog", "updated_at": "2026-10-16" }, { "family": "frethoq", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_FRETHOQ_T1_ARTIFACT", "MALWARE_WIN_FRETHOQ_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/frethoq.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/frethoq", "updated_at": "2026-10-16" }, { "family": "freyja", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_FREYJA_T1_ARTIFACT", "MALWARE_WIN_FREYJA_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/freyja.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/freyja", "updated_at": "2026-10-16" }, { "family": "frosparf", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_FROSPARF_T1_ARTIFACT", "MALWARE_WIN_FROSPARF_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/frosparf.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/frosparf", "updated_at": "2026-10-16" }, { "family": "fspm", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_FSPM_T1_ARTIFACT", "MALWARE_WIN_FSPM_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/fspm.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/fspm", "updated_at": "2026-10-16" }, { "family": "fsysna", "category": "trojan", "sample_count": 427, "rule_names": [ "MALWARE_WIN_FSYSNA_T1_ARTIFACT", "MALWARE_WIN_FSYSNA_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/fsysna.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/fsysna", "updated_at": "2026-10-16" }, { "family": "fuerboos", "category": "trojan", "sample_count": 110, "rule_names": [ "MALWARE_WIN_FUERBOOS_T1_ARTIFACT", "MALWARE_WIN_FUERBOOS_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/fuerboos.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/fuerboos", "updated_at": "2026-10-16" }, { "family": "fuery", "category": "trojan", "sample_count": 28, "rule_names": [ "MALWARE_WIN_FUERY_T1_ARTIFACT", "MALWARE_WIN_FUERY_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/fuery.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/fuery", "updated_at": "2026-10-16" }, { "family": "fugrafa", "category": "ransomware", "sample_count": 17, "rule_names": [ "MALWARE_WIN_FUGRAFA_T1_ARTIFACT", "MALWARE_WIN_FUGRAFA_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/fugrafa.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/fugrafa", "updated_at": "2026-10-16" }, { "family": "fujacks", "category": "file_infector", "sample_count": 41, "rule_names": [ "MALWARE_WIN_FUJACKS_T1_ARTIFACT", "MALWARE_WIN_FUJACKS_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/fujacks.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/fujacks", "updated_at": "2026-10-16" }, { "family": "fullscreen", "category": "ransomware", "sample_count": 8, "rule_names": [ "MALWARE_WIN_FULLSCREEN_T1_ARTIFACT", "MALWARE_WIN_FULLSCREEN_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/fullscreen.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/fullscreen", "updated_at": "2026-10-16" }, { "family": "funmood", "category": "advanced_threat", "sample_count": 1, "rule_names": [ "MALWARE_WIN_FUNMOOD_T1_ARTIFACT", "MALWARE_WIN_FUNMOOD_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/funmood.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/funmood", "updated_at": "2026-10-16" }, { "family": "funshion", "category": "adware", "sample_count": 32, "rule_names": [ "MALWARE_WIN_FUNSHION_T1_ARTIFACT", "MALWARE_WIN_FUNSHION_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/funshion.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/funshion", "updated_at": "2026-10-16" }, { "family": "fusioncore", "category": "adware", "sample_count": 104, "rule_names": [ "MALWARE_WIN_FUSIONCORE_T1_ARTIFACT", "MALWARE_WIN_FUSIONCORE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/fusioncore.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/fusioncore", "updated_at": "2026-10-16" }, { "family": "fwwy", "category": "ransomware", "sample_count": 4, "rule_names": [ "MALWARE_WIN_FWWY_T1_ARTIFACT", "MALWARE_WIN_FWWY_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/fwwy.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/fwwy", "updated_at": "2026-10-16" }, { "family": "fz4aaueo2jhi", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_FZ4AAUEO2JHI_T1_ARTIFACT", "MALWARE_WIN_FZ4AAUEO2JHI_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/fz4aaueo2jhi.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/fz4aaueo2jhi", "updated_at": "2026-10-16" }, { "family": "gamania", "category": "trojan", "sample_count": 4, "rule_names": [ "MALWARE_WIN_GAMANIA_T1_ARTIFACT", "MALWARE_WIN_GAMANIA_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/gamania.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/gamania", "updated_at": "2026-10-16" }, { "family": "gamaredon", "category": "trojan", "sample_count": 2, "rule_names": [ "MALWARE_WIN_GAMAREDON_T1_ARTIFACT", "MALWARE_WIN_GAMAREDON_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/gamaredon.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/gamaredon", "updated_at": "2026-10-16" }, { "family": "gamarue", "category": "loader", "sample_count": 2789, "rule_names": [ "MALWARE_WIN_GAMARUE_T1_ARTIFACT", "MALWARE_WIN_GAMARUE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/gamarue.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/gamarue", "updated_at": "2026-10-16" }, { "family": "game", "category": "trojan", "sample_count": 144, "rule_names": [ "MALWARE_WIN_GAME_T1_ARTIFACT", "MALWARE_WIN_GAME_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/game.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/game", "updated_at": "2026-10-16" }, { "family": "gameapp", "category": "advanced_threat", "sample_count": 1, "rule_names": [ "MALWARE_WIN_GAMEAPP_T1_ARTIFACT", "MALWARE_WIN_GAMEAPP_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/gameapp.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/gameapp", "updated_at": "2026-10-16" }, { "family": "gamebox", "category": "advanced_threat", "sample_count": 5, "rule_names": [ "MALWARE_WIN_GAMEBOX_T1_ARTIFACT", "MALWARE_WIN_GAMEBOX_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/gamebox.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/gamebox", "updated_at": "2026-10-16" }, { "family": "gamehack", "category": "pua_tool", "sample_count": 1656, "rule_names": [ "MALWARE_WIN_GAMEHACK_T1_ARTIFACT", "MALWARE_WIN_GAMEHACK_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/gamehack.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/gamehack", "updated_at": "2026-10-16" }, { "family": "gamehuck", "category": "trojan", "sample_count": 8, "rule_names": [ "MALWARE_WIN_GAMEHUCK_T1_ARTIFACT", "MALWARE_WIN_GAMEHUCK_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/gamehuck.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/gamehuck", "updated_at": "2026-10-16" }, { "family": "gamemodding", "category": "pua", "sample_count": 244, "rule_names": [ "MALWARE_WIN_GAMEMODDING_T1_ARTIFACT", "MALWARE_WIN_GAMEMODDING_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/gamemodding.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/gamemodding", "updated_at": "2026-10-16" }, { "family": "gameol", "category": "advanced_threat", "sample_count": 1, "rule_names": [ "MALWARE_WIN_GAMEOL_T1_ARTIFACT", "MALWARE_WIN_GAMEOL_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/gameol.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/gameol", "updated_at": "2026-10-16" }, { "family": "gameserver", "category": "trojan", "sample_count": 2, "rule_names": [ "MALWARE_WIN_GAMESERVER_T1_ARTIFACT", "MALWARE_WIN_GAMESERVER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/gameserver.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/gameserver", "updated_at": "2026-10-16" }, { "family": "gamethief", "category": "trojan", "sample_count": 2, "rule_names": [ "MALWARE_WIN_GAMETHIEF_T1_ARTIFACT", "MALWARE_WIN_GAMETHIEF_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/gamethief.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/gamethief", "updated_at": "2026-10-16" }, { "family": "gametool", "category": "trojan", "sample_count": 17, "rule_names": [ "MALWARE_WIN_GAMETOOL_T1_ARTIFACT", "MALWARE_WIN_GAMETOOL_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/gametool.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/gametool", "updated_at": "2026-10-16" }, { "family": "gamevance", "category": "trojan", "sample_count": 11, "rule_names": [ "MALWARE_WIN_GAMEVANCE_T1_ARTIFACT", "MALWARE_WIN_GAMEVANCE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/gamevance.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/gamevance", "updated_at": "2026-10-16" }, { "family": "gamium", "category": "advanced_threat", "sample_count": 1, "rule_names": [ "MALWARE_WIN_GAMIUM_T1_ARTIFACT", "MALWARE_WIN_GAMIUM_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/gamium.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/gamium", "updated_at": "2026-10-16" }, { "family": "gampass", "category": "trojan", "sample_count": 2, "rule_names": [ "MALWARE_WIN_GAMPASS_T1_ARTIFACT", "MALWARE_WIN_GAMPASS_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/gampass.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/gampass", "updated_at": "2026-10-16" }, { "family": "gamsoft", "category": "trojan", "sample_count": 3, "rule_names": [ "MALWARE_WIN_GAMSOFT_T1_ARTIFACT", "MALWARE_WIN_GAMSOFT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/gamsoft.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/gamsoft", "updated_at": "2026-10-16" }, { "family": "gamsofts", "category": "advanced_threat", "sample_count": 1, "rule_names": [ "MALWARE_WIN_GAMSOFTS_T1_ARTIFACT", "MALWARE_WIN_GAMSOFTS_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/gamsofts.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/gamsofts", "updated_at": "2026-10-16" }, { "family": "gamup", "category": "ransomware", "sample_count": 4, "rule_names": [ "MALWARE_WIN_GAMUP_T1_ARTIFACT", "MALWARE_WIN_GAMUP_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/gamup.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/gamup", "updated_at": "2026-10-16" }, { "family": "gandcrab", "category": "ransomware", "sample_count": 2992, "rule_names": [ "MALWARE_WIN_GANDCRAB_T1_ARTIFACT", "MALWARE_WIN_GANDCRAB_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/gandcrab.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/gandcrab", "updated_at": "2026-10-16" }, { "family": "gandcrypt", "category": "ransomware", "sample_count": 474, "rule_names": [ "MALWARE_WIN_GANDCRYPT_T1_ARTIFACT", "MALWARE_WIN_GANDCRYPT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/gandcrypt.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/gandcrypt", "updated_at": "2026-10-16" }, { "family": "ganelp", "category": "trojan", "sample_count": 348, "rule_names": [ "MALWARE_WIN_GANELP_T1_ARTIFACT", "MALWARE_WIN_GANELP_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/ganelp.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/ganelp", "updated_at": "2026-10-16" }, { "family": "gaofenq", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_GAOFENQ_T1_ARTIFACT", "MALWARE_WIN_GAOFENQ_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/gaofenq.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/gaofenq", "updated_at": "2026-10-16" }, { "family": "gaofenquming", "category": "advanced_threat", "sample_count": 1, "rule_names": [ "MALWARE_WIN_GAOFENQUMING_T1_ARTIFACT", "MALWARE_WIN_GAOFENQUMING_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/gaofenquming.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/gaofenquming", "updated_at": "2026-10-16" }, { "family": "garrun", "category": "trojan", "sample_count": 21, "rule_names": [ "MALWARE_WIN_GARRUN_T1_ARTIFACT", "MALWARE_WIN_GARRUN_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/garrun.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/garrun", "updated_at": "2026-10-16" }, { "family": "garvi", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_GARVI_T1_ARTIFACT", "MALWARE_WIN_GARVI_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/garvi.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/garvi", "updated_at": "2026-10-16" }, { "family": "gasti", "category": "ransomware", "sample_count": 3, "rule_names": [ "MALWARE_WIN_GASTI_T1_ARTIFACT", "MALWARE_WIN_GASTI_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/gasti.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/gasti", "updated_at": "2026-10-16" }, { "family": "gatak", "category": "ransomware", "sample_count": 5, "rule_names": [ "MALWARE_WIN_GATAK_T1_ARTIFACT", "MALWARE_WIN_GATAK_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/gatak.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/gatak", "updated_at": "2026-10-16" }, { "family": "gate", "category": "ransomware", "sample_count": 3, "rule_names": [ "MALWARE_WIN_GATE_T1_ARTIFACT", "MALWARE_WIN_GATE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/gate.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/gate", "updated_at": "2026-10-16" }, { "family": "gator", "category": "adware", "sample_count": 54, "rule_names": [ "MALWARE_WIN_GATOR_T1_ARTIFACT", "MALWARE_WIN_GATOR_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/gator.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/gator", "updated_at": "2026-10-16" }, { "family": "gdsda", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_GDSDA_T1_ARTIFACT", "MALWARE_WIN_GDSDA_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/gdsda.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/gdsda", "updated_at": "2026-10-16" }, { "family": "gemius", "category": "advanced_threat", "sample_count": 1, "rule_names": [ "MALWARE_WIN_GEMIUS_T1_ARTIFACT", "MALWARE_WIN_GEMIUS_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/gemius.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/gemius", "updated_at": "2026-10-16" }, { "family": "gena", "category": "ransomware", "sample_count": 2, "rule_names": [ "MALWARE_WIN_GENA_T1_ARTIFACT", "MALWARE_WIN_GENA_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/gena.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/gena", "updated_at": "2026-10-16" }, { "family": "genasep", "category": "ransomware", "sample_count": 2, "rule_names": [ "MALWARE_WIN_GENASEP_T1_ARTIFACT", "MALWARE_WIN_GENASEP_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/genasep.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/genasep", "updated_at": "2026-10-16" }, { "family": "genasom", "category": "ransomware", "sample_count": 17, "rule_names": [ "MALWARE_WIN_GENASOM_T1_ARTIFACT", "MALWARE_WIN_GENASOM_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/genasom.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/genasom", "updated_at": "2026-10-16" }, { "family": "gendal", "category": "ransomware", "sample_count": 12, "rule_names": [ "MALWARE_WIN_GENDAL_T1_ARTIFACT", "MALWARE_WIN_GENDAL_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/gendal.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/gendal", "updated_at": "2026-10-16" }, { "family": "gendelfan", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_GENDELFAN_T1_ARTIFACT", "MALWARE_WIN_GENDELFAN_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/gendelfan.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/gendelfan", "updated_at": "2026-10-16" }, { "family": "gendwnurl", "category": "ransomware", "sample_count": 11, "rule_names": [ "MALWARE_WIN_GENDWNURL_T1_ARTIFACT", "MALWARE_WIN_GENDWNURL_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/gendwnurl.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/gendwnurl", "updated_at": "2026-10-16" }, { "family": "genericgb", "category": "ransomware", "sample_count": 6, "rule_names": [ "MALWARE_WIN_GENERICGB_T1_ARTIFACT", "MALWARE_WIN_GENERICGB_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/genericgb.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/genericgb", "updated_at": "2026-10-16" }, { "family": "generickdz", "category": "ransomware", "sample_count": 15, "rule_names": [ "MALWARE_WIN_GENERICKDZ_T1_ARTIFACT", "MALWARE_WIN_GENERICKDZ_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/generickdz.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/generickdz", "updated_at": "2026-10-16" }, { "family": "genericrxaa", "category": "ransomware", "sample_count": 3, "rule_names": [ "MALWARE_WIN_GENERICRXAA_T1_ARTIFACT", "MALWARE_WIN_GENERICRXAA_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/genericrxaa.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/genericrxaa", "updated_at": "2026-10-16" }, { "family": "genericrxad", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_GENERICRXAD_T1_ARTIFACT", "MALWARE_WIN_GENERICRXAD_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/genericrxad.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/genericrxad", "updated_at": "2026-10-16" }, { "family": "genericrxaf", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_GENERICRXAF_T1_ARTIFACT", "MALWARE_WIN_GENERICRXAF_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/genericrxaf.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/genericrxaf", "updated_at": "2026-10-16" }, { "family": "genericrxal", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_GENERICRXAL_T1_ARTIFACT", "MALWARE_WIN_GENERICRXAL_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/genericrxal.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/genericrxal", "updated_at": "2026-10-16" }, { "family": "genericrxam", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_GENERICRXAM_T1_ARTIFACT", "MALWARE_WIN_GENERICRXAM_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/genericrxam.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/genericrxam", "updated_at": "2026-10-16" }, { "family": "genericrxaq", "category": "ransomware", "sample_count": 3, "rule_names": [ "MALWARE_WIN_GENERICRXAQ_T1_ARTIFACT", "MALWARE_WIN_GENERICRXAQ_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/genericrxaq.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/genericrxaq", "updated_at": "2026-10-16" }, { "family": "genericrxas", "category": "trojan", "sample_count": 1, "rule_names": [ "MALWARE_WIN_GENERICRXAS_T1_ARTIFACT", "MALWARE_WIN_GENERICRXAS_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/genericrxas.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/genericrxas", "updated_at": "2026-10-16" }, { "family": "genericrxat", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_GENERICRXAT_T1_ARTIFACT", "MALWARE_WIN_GENERICRXAT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/genericrxat.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/genericrxat", "updated_at": "2026-10-16" }, { "family": "genericrxau", "category": "ransomware", "sample_count": 6, "rule_names": [ "MALWARE_WIN_GENERICRXAU_T1_ARTIFACT", "MALWARE_WIN_GENERICRXAU_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/genericrxau.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/genericrxau", "updated_at": "2026-10-16" }, { "family": "genericrxax", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_GENERICRXAX_T1_ARTIFACT", "MALWARE_WIN_GENERICRXAX_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/genericrxax.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/genericrxax", "updated_at": "2026-10-16" }, { "family": "genericrxaz", "category": "ransomware", "sample_count": 2, "rule_names": [ "MALWARE_WIN_GENERICRXAZ_T1_ARTIFACT", "MALWARE_WIN_GENERICRXAZ_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/genericrxaz.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/genericrxaz", "updated_at": "2026-10-16" }, { "family": "genericrxbg", "category": "trojan", "sample_count": 3, "rule_names": [ "MALWARE_WIN_GENERICRXBG_T1_ARTIFACT", "MALWARE_WIN_GENERICRXBG_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/genericrxbg.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/genericrxbg", "updated_at": "2026-10-16" }, { "family": "genericrxbm", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_GENERICRXBM_T1_ARTIFACT", "MALWARE_WIN_GENERICRXBM_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/genericrxbm.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/genericrxbm", "updated_at": "2026-10-16" }, { "family": "genericrxbp", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_GENERICRXBP_T1_ARTIFACT", "MALWARE_WIN_GENERICRXBP_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/genericrxbp.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/genericrxbp", "updated_at": "2026-10-16" }, { "family": "genericrxbu", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_GENERICRXBU_T1_ARTIFACT", "MALWARE_WIN_GENERICRXBU_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/genericrxbu.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/genericrxbu", "updated_at": "2026-10-16" }, { "family": "genericrxbw", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_GENERICRXBW_T1_ARTIFACT", "MALWARE_WIN_GENERICRXBW_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/genericrxbw.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/genericrxbw", "updated_at": "2026-10-16" }, { "family": "genericrxbx", "category": "ransomware", "sample_count": 2, "rule_names": [ "MALWARE_WIN_GENERICRXBX_T1_ARTIFACT", "MALWARE_WIN_GENERICRXBX_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/genericrxbx.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/genericrxbx", "updated_at": "2026-10-16" }, { "family": "genericrxby", "category": "trojan", "sample_count": 1, "rule_names": [ "MALWARE_WIN_GENERICRXBY_T1_ARTIFACT", "MALWARE_WIN_GENERICRXBY_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/genericrxby.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/genericrxby", "updated_at": "2026-10-16" }, { "family": "genericrxbz", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_GENERICRXBZ_T1_ARTIFACT", "MALWARE_WIN_GENERICRXBZ_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/genericrxbz.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/genericrxbz", "updated_at": "2026-10-16" }, { "family": "genericrxca", "category": "ransomware", "sample_count": 2, "rule_names": [ "MALWARE_WIN_GENERICRXCA_T1_ARTIFACT", "MALWARE_WIN_GENERICRXCA_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/genericrxca.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/genericrxca", "updated_at": "2026-10-16" }, { "family": "genericrxcd", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_GENERICRXCD_T1_ARTIFACT", "MALWARE_WIN_GENERICRXCD_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/genericrxcd.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/genericrxcd", "updated_at": "2026-10-16" }, { "family": "genericrxce", "category": "trojan", "sample_count": 3, "rule_names": [ "MALWARE_WIN_GENERICRXCE_T1_ARTIFACT", "MALWARE_WIN_GENERICRXCE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/genericrxce.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/genericrxce", "updated_at": "2026-10-16" }, { "family": "genericrxcf", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_GENERICRXCF_T1_ARTIFACT", "MALWARE_WIN_GENERICRXCF_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/genericrxcf.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/genericrxcf", "updated_at": "2026-10-16" }, { "family": "genericrxcg", "category": "trojan", "sample_count": 1, "rule_names": [ "MALWARE_WIN_GENERICRXCG_T1_ARTIFACT", "MALWARE_WIN_GENERICRXCG_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/genericrxcg.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/genericrxcg", "updated_at": "2026-10-16" }, { "family": "genericrxch", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_GENERICRXCH_T1_ARTIFACT", "MALWARE_WIN_GENERICRXCH_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/genericrxch.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/genericrxch", "updated_at": "2026-10-16" }, { "family": "genericrxci", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_GENERICRXCI_T1_ARTIFACT", "MALWARE_WIN_GENERICRXCI_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/genericrxci.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/genericrxci", "updated_at": "2026-10-16" }, { "family": "genericrxck", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_GENERICRXCK_T1_ARTIFACT", "MALWARE_WIN_GENERICRXCK_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/genericrxck.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/genericrxck", "updated_at": "2026-10-16" }, { "family": "genericrxcl", "category": "ransomware", "sample_count": 5, "rule_names": [ "MALWARE_WIN_GENERICRXCL_T1_ARTIFACT", "MALWARE_WIN_GENERICRXCL_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/genericrxcl.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/genericrxcl", "updated_at": "2026-10-16" }, { "family": "genericrxcp", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_GENERICRXCP_T1_ARTIFACT", "MALWARE_WIN_GENERICRXCP_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/genericrxcp.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/genericrxcp", "updated_at": "2026-10-16" }, { "family": "genericrxcr", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_GENERICRXCR_T1_ARTIFACT", "MALWARE_WIN_GENERICRXCR_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/genericrxcr.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/genericrxcr", "updated_at": "2026-10-16" }, { "family": "genericrxcs", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_GENERICRXCS_T1_ARTIFACT", "MALWARE_WIN_GENERICRXCS_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/genericrxcs.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/genericrxcs", "updated_at": "2026-10-16" }, { "family": "genericrxcu", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_GENERICRXCU_T1_ARTIFACT", "MALWARE_WIN_GENERICRXCU_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/genericrxcu.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/genericrxcu", "updated_at": "2026-10-16" }, { "family": "genericrxcv", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_GENERICRXCV_T1_ARTIFACT", "MALWARE_WIN_GENERICRXCV_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/genericrxcv.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/genericrxcv", "updated_at": "2026-10-16" }, { "family": "genericrxcw", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_GENERICRXCW_T1_ARTIFACT", "MALWARE_WIN_GENERICRXCW_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/genericrxcw.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/genericrxcw", "updated_at": "2026-10-16" }, { "family": "genericrxcy", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_GENERICRXCY_T1_ARTIFACT", "MALWARE_WIN_GENERICRXCY_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/genericrxcy.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/genericrxcy", "updated_at": "2026-10-16" }, { "family": "genericrxda", "category": "ransomware", "sample_count": 7, "rule_names": [ "MALWARE_WIN_GENERICRXDA_T1_ARTIFACT", "MALWARE_WIN_GENERICRXDA_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/genericrxda.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/genericrxda", "updated_at": "2026-10-16" }, { "family": "genericrxdc", "category": "ransomware", "sample_count": 2, "rule_names": [ "MALWARE_WIN_GENERICRXDC_T1_ARTIFACT", "MALWARE_WIN_GENERICRXDC_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/genericrxdc.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/genericrxdc", "updated_at": "2026-10-16" }, { "family": "genericrxde", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_GENERICRXDE_T1_ARTIFACT", "MALWARE_WIN_GENERICRXDE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/genericrxde.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/genericrxde", "updated_at": "2026-10-16" }, { "family": "genericrxdf", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_GENERICRXDF_T1_ARTIFACT", "MALWARE_WIN_GENERICRXDF_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/genericrxdf.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/genericrxdf", "updated_at": "2026-10-16" }, { "family": "genericrxdi", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_GENERICRXDI_T1_ARTIFACT", "MALWARE_WIN_GENERICRXDI_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/genericrxdi.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/genericrxdi", "updated_at": "2026-10-16" }, { "family": "genericrxdm", "category": "ransomware", "sample_count": 2, "rule_names": [ "MALWARE_WIN_GENERICRXDM_T1_ARTIFACT", "MALWARE_WIN_GENERICRXDM_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/genericrxdm.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/genericrxdm", "updated_at": "2026-10-16" }, { "family": "genericrxdr", "category": "ransomware", "sample_count": 4, "rule_names": [ "MALWARE_WIN_GENERICRXDR_T1_ARTIFACT", "MALWARE_WIN_GENERICRXDR_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/genericrxdr.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/genericrxdr", "updated_at": "2026-10-16" }, { "family": "genericrxdt", "category": "ransomware", "sample_count": 67, "rule_names": [ "MALWARE_WIN_GENERICRXDT_T1_ARTIFACT", "MALWARE_WIN_GENERICRXDT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/genericrxdt.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/genericrxdt", "updated_at": "2026-10-16" }, { "family": "genericrxdw", "category": "ransomware", "sample_count": 26, "rule_names": [ "MALWARE_WIN_GENERICRXDW_T1_ARTIFACT", "MALWARE_WIN_GENERICRXDW_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/genericrxdw.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/genericrxdw", "updated_at": "2026-10-16" }, { "family": "genericrxdx", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_GENERICRXDX_T1_ARTIFACT", "MALWARE_WIN_GENERICRXDX_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/genericrxdx.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/genericrxdx", "updated_at": "2026-10-16" }, { "family": "genericrxdz", "category": "ransomware", "sample_count": 14, "rule_names": [ "MALWARE_WIN_GENERICRXDZ_T1_ARTIFACT", "MALWARE_WIN_GENERICRXDZ_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/genericrxdz.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/genericrxdz", "updated_at": "2026-10-16" }, { "family": "genericrxea", "category": "ransomware", "sample_count": 11, "rule_names": [ "MALWARE_WIN_GENERICRXEA_T1_ARTIFACT", "MALWARE_WIN_GENERICRXEA_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/genericrxea.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/genericrxea", "updated_at": "2026-10-16" }, { "family": "genericrxeb", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_GENERICRXEB_T1_ARTIFACT", "MALWARE_WIN_GENERICRXEB_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/genericrxeb.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/genericrxeb", "updated_at": "2026-10-16" }, { "family": "genericrxed", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_GENERICRXED_T1_ARTIFACT", "MALWARE_WIN_GENERICRXED_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/genericrxed.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/genericrxed", "updated_at": "2026-10-16" }, { "family": "genericrxef", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_GENERICRXEF_T1_ARTIFACT", "MALWARE_WIN_GENERICRXEF_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/genericrxef.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/genericrxef", "updated_at": "2026-10-16" }, { "family": "genericrxeg", "category": "ransomware", "sample_count": 11, "rule_names": [ "MALWARE_WIN_GENERICRXEG_T1_ARTIFACT", "MALWARE_WIN_GENERICRXEG_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/genericrxeg.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/genericrxeg", "updated_at": "2026-10-16" }, { "family": "genericrxeh", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_GENERICRXEH_T1_ARTIFACT", "MALWARE_WIN_GENERICRXEH_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/genericrxeh.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/genericrxeh", "updated_at": "2026-10-16" }, { "family": "genericrxel", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_GENERICRXEL_T1_ARTIFACT", "MALWARE_WIN_GENERICRXEL_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/genericrxel.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/genericrxel", "updated_at": "2026-10-16" }, { "family": "genericrxen", "category": "ransomware", "sample_count": 5, "rule_names": [ "MALWARE_WIN_GENERICRXEN_T1_ARTIFACT", "MALWARE_WIN_GENERICRXEN_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/genericrxen.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/genericrxen", "updated_at": "2026-10-16" }, { "family": "genericrxeo", "category": "ransomware", "sample_count": 2, "rule_names": [ "MALWARE_WIN_GENERICRXEO_T1_ARTIFACT", "MALWARE_WIN_GENERICRXEO_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/genericrxeo.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/genericrxeo", "updated_at": "2026-10-16" }, { "family": "genericrxep", "category": "ransomware", "sample_count": 2, "rule_names": [ "MALWARE_WIN_GENERICRXEP_T1_ARTIFACT", "MALWARE_WIN_GENERICRXEP_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/genericrxep.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/genericrxep", "updated_at": "2026-10-16" }, { "family": "genericrxeq", "category": "ransomware", "sample_count": 2, "rule_names": [ "MALWARE_WIN_GENERICRXEQ_T1_ARTIFACT", "MALWARE_WIN_GENERICRXEQ_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/genericrxeq.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/genericrxeq", "updated_at": "2026-10-16" }, { "family": "genericrxer", "category": "ransomware", "sample_count": 2, "rule_names": [ "MALWARE_WIN_GENERICRXER_T1_ARTIFACT", "MALWARE_WIN_GENERICRXER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/genericrxer.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/genericrxer", "updated_at": "2026-10-16" }, { "family": "genericrxet", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_GENERICRXET_T1_ARTIFACT", "MALWARE_WIN_GENERICRXET_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/genericrxet.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/genericrxet", "updated_at": "2026-10-16" }, { "family": "genericrxev", "category": "ransomware", "sample_count": 3, "rule_names": [ "MALWARE_WIN_GENERICRXEV_T1_ARTIFACT", "MALWARE_WIN_GENERICRXEV_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/genericrxev.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/genericrxev", "updated_at": "2026-10-16" }, { "family": "genericrxew", "category": "ransomware", "sample_count": 2, "rule_names": [ "MALWARE_WIN_GENERICRXEW_T1_ARTIFACT", "MALWARE_WIN_GENERICRXEW_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/genericrxew.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/genericrxew", "updated_at": "2026-10-16" }, { "family": "genericrxex", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_GENERICRXEX_T1_ARTIFACT", "MALWARE_WIN_GENERICRXEX_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/genericrxex.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/genericrxex", "updated_at": "2026-10-16" }, { "family": "genericrxfe", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_GENERICRXFE_T1_ARTIFACT", "MALWARE_WIN_GENERICRXFE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/genericrxfe.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/genericrxfe", "updated_at": "2026-10-16" }, { "family": "genericrxfh", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_GENERICRXFH_T1_ARTIFACT", "MALWARE_WIN_GENERICRXFH_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/genericrxfh.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/genericrxfh", "updated_at": "2026-10-16" }, { "family": "genericrxfj", "category": "trojan", "sample_count": 1, "rule_names": [ "MALWARE_WIN_GENERICRXFJ_T1_ARTIFACT", "MALWARE_WIN_GENERICRXFJ_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/genericrxfj.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/genericrxfj", "updated_at": "2026-10-16" }, { "family": "genericrxfo", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_GENERICRXFO_T1_ARTIFACT", "MALWARE_WIN_GENERICRXFO_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/genericrxfo.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/genericrxfo", "updated_at": "2026-10-16" }, { "family": "genericrxfp", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_GENERICRXFP_T1_ARTIFACT", "MALWARE_WIN_GENERICRXFP_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/genericrxfp.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/genericrxfp", "updated_at": "2026-10-16" }, { "family": "genericrxfq", "category": "ransomware", "sample_count": 2, "rule_names": [ "MALWARE_WIN_GENERICRXFQ_T1_ARTIFACT", "MALWARE_WIN_GENERICRXFQ_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/genericrxfq.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/genericrxfq", "updated_at": "2026-10-16" }, { "family": "genericrxfs", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_GENERICRXFS_T1_ARTIFACT", "MALWARE_WIN_GENERICRXFS_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/genericrxfs.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/genericrxfs", "updated_at": "2026-10-16" }, { "family": "genericrxft", "category": "ransomware", "sample_count": 2, "rule_names": [ "MALWARE_WIN_GENERICRXFT_T1_ARTIFACT", "MALWARE_WIN_GENERICRXFT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/genericrxft.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/genericrxft", "updated_at": "2026-10-16" }, { "family": "genericrxfu", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_GENERICRXFU_T1_ARTIFACT", "MALWARE_WIN_GENERICRXFU_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/genericrxfu.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/genericrxfu", "updated_at": "2026-10-16" }, { "family": "genericrxfv", "category": "ransomware", "sample_count": 2, "rule_names": [ "MALWARE_WIN_GENERICRXFV_T1_ARTIFACT", "MALWARE_WIN_GENERICRXFV_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/genericrxfv.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/genericrxfv", "updated_at": "2026-10-16" }, { "family": "genericrxfy", "category": "trojan", "sample_count": 1, "rule_names": [ "MALWARE_WIN_GENERICRXFY_T1_ARTIFACT", "MALWARE_WIN_GENERICRXFY_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/genericrxfy.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/genericrxfy", "updated_at": "2026-10-16" }, { "family": "genericrxgb", "category": "ransomware", "sample_count": 2, "rule_names": [ "MALWARE_WIN_GENERICRXGB_T1_ARTIFACT", "MALWARE_WIN_GENERICRXGB_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/genericrxgb.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/genericrxgb", "updated_at": "2026-10-16" }, { "family": "genericrxge", "category": "trojan", "sample_count": 1, "rule_names": [ "MALWARE_WIN_GENERICRXGE_T1_ARTIFACT", "MALWARE_WIN_GENERICRXGE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/genericrxge.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/genericrxge", "updated_at": "2026-10-16" }, { "family": "genericrxgf", "category": "ransomware", "sample_count": 2, "rule_names": [ "MALWARE_WIN_GENERICRXGF_T1_ARTIFACT", "MALWARE_WIN_GENERICRXGF_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/genericrxgf.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/genericrxgf", "updated_at": "2026-10-16" }, { "family": "genericrxgh", "category": "trojan", "sample_count": 1, "rule_names": [ "MALWARE_WIN_GENERICRXGH_T1_ARTIFACT", "MALWARE_WIN_GENERICRXGH_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/genericrxgh.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/genericrxgh", "updated_at": "2026-10-16" }, { "family": "genericrxgj", "category": "ransomware", "sample_count": 2, "rule_names": [ "MALWARE_WIN_GENERICRXGJ_T1_ARTIFACT", "MALWARE_WIN_GENERICRXGJ_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/genericrxgj.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/genericrxgj", "updated_at": "2026-10-16" }, { "family": "genericrxgk", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_GENERICRXGK_T1_ARTIFACT", "MALWARE_WIN_GENERICRXGK_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/genericrxgk.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/genericrxgk", "updated_at": "2026-10-16" }, { "family": "genericrxgl", "category": "ransomware", "sample_count": 3, "rule_names": [ "MALWARE_WIN_GENERICRXGL_T1_ARTIFACT", "MALWARE_WIN_GENERICRXGL_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/genericrxgl.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/genericrxgl", "updated_at": "2026-10-16" }, { "family": "genericrxgm", "category": "ransomware", "sample_count": 3, "rule_names": [ "MALWARE_WIN_GENERICRXGM_T1_ARTIFACT", "MALWARE_WIN_GENERICRXGM_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/genericrxgm.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/genericrxgm", "updated_at": "2026-10-16" }, { "family": "genericrxgp", "category": "ransomware", "sample_count": 63, "rule_names": [ "MALWARE_WIN_GENERICRXGP_T1_ARTIFACT", "MALWARE_WIN_GENERICRXGP_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/genericrxgp.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/genericrxgp", "updated_at": "2026-10-16" }, { "family": "genericrxgq", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_GENERICRXGQ_T1_ARTIFACT", "MALWARE_WIN_GENERICRXGQ_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/genericrxgq.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/genericrxgq", "updated_at": "2026-10-16" }, { "family": "genericrxgr", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_GENERICRXGR_T1_ARTIFACT", "MALWARE_WIN_GENERICRXGR_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/genericrxgr.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/genericrxgr", "updated_at": "2026-10-16" }, { "family": "generictka", "category": "trojan", "sample_count": 2, "rule_names": [ "MALWARE_WIN_GENERICTKA_T1_ARTIFACT", "MALWARE_WIN_GENERICTKA_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/generictka.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/generictka", "updated_at": "2026-10-16" }, { "family": "geni", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_GENI_T1_ARTIFACT", "MALWARE_WIN_GENI_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/geni.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/geni", "updated_at": "2026-10-16" }, { "family": "genkmsp", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_GENKMSP_T1_ARTIFACT", "MALWARE_WIN_GENKMSP_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/genkmsp.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/genkmsp", "updated_at": "2026-10-16" }, { "family": "genkryptik", "category": "packer", "sample_count": 353, "rule_names": [ "MALWARE_WIN_GENKRYPTIK_T1_ARTIFACT", "MALWARE_WIN_GENKRYPTIK_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/genkryptik.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/genkryptik", "updated_at": "2026-10-16" }, { "family": "genmaldow", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_GENMALDOW_T1_ARTIFACT", "MALWARE_WIN_GENMALDOW_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/genmaldow.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/genmaldow", "updated_at": "2026-10-16" }, { "family": "gentromal", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_GENTROMAL_T1_ARTIFACT", "MALWARE_WIN_GENTROMAL_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/gentromal.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/gentromal", "updated_at": "2026-10-16" }, { "family": "genx", "category": "ransomware", "sample_count": 2, "rule_names": [ "MALWARE_WIN_GENX_T1_ARTIFACT", "MALWARE_WIN_GENX_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/genx.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/genx", "updated_at": "2026-10-16" }, { "family": "gepys", "category": "downloader", "sample_count": 1587, "rule_names": [ "MALWARE_WIN_GEPYS_T1_ARTIFACT", "MALWARE_WIN_GEPYS_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/gepys.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/gepys", "updated_at": "2026-10-16" }, { "family": "geral", "category": "ransomware", "sample_count": 14, "rule_names": [ "MALWARE_WIN_GERAL_T1_ARTIFACT", "MALWARE_WIN_GERAL_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/geral.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/geral", "updated_at": "2026-10-16" }, { "family": "getnow", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_GETNOW_T1_ARTIFACT", "MALWARE_WIN_GETNOW_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/getnow.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/getnow", "updated_at": "2026-10-16" }, { "family": "ggdoor", "category": "trojan", "sample_count": 1, "rule_names": [ "MALWARE_WIN_GGDOOR_T1_ARTIFACT", "MALWARE_WIN_GGDOOR_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/ggdoor.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/ggdoor", "updated_at": "2026-10-16" }, { "family": "ggpass", "category": "trojan", "sample_count": 12, "rule_names": [ "MALWARE_WIN_GGPASS_T1_ARTIFACT", "MALWARE_WIN_GGPASS_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/ggpass.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/ggpass", "updated_at": "2026-10-16" }, { "family": "gh0st", "category": "rat", "sample_count": 4, "rule_names": [ "MALWARE_WIN_GH0ST_T1_ARTIFACT", "MALWARE_WIN_GH0ST_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/gh0st.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/gh0st", "updated_at": "2026-10-16" }, { "family": "ghost", "category": "rat", "sample_count": 1, "rule_names": [ "MALWARE_WIN_GHOST_T1_ARTIFACT", "MALWARE_WIN_GHOST_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/ghost.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/ghost", "updated_at": "2026-10-16" }, { "family": "ghoul", "category": "ransomware", "sample_count": 3, "rule_names": [ "MALWARE_WIN_GHOUL_T1_ARTIFACT", "MALWARE_WIN_GHOUL_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/ghoul.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/ghoul", "updated_at": "2026-10-16" }, { "family": "gibe", "category": "advanced_threat", "sample_count": 1, "rule_names": [ "MALWARE_WIN_GIBE_T1_ARTIFACT", "MALWARE_WIN_GIBE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/gibe.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/gibe", "updated_at": "2026-10-16" }, { "family": "gify", "category": "trojan_downloader", "sample_count": 35, "rule_names": [ "MALWARE_WIN_GIFY_T1_ARTIFACT", "MALWARE_WIN_GIFY_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/gify.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/gify", "updated_at": "2026-10-16" }, { "family": "gimemo", "category": "ransomware", "sample_count": 25, "rule_names": [ "MALWARE_WIN_GIMEMO_T1_ARTIFACT", "MALWARE_WIN_GIMEMO_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/gimemo.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/gimemo", "updated_at": "2026-10-16" }, { "family": "gippers", "category": "ransomware", "sample_count": 7, "rule_names": [ "MALWARE_WIN_GIPPERS_T1_ARTIFACT", "MALWARE_WIN_GIPPERS_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/gippers.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/gippers", "updated_at": "2026-10-16" }, { "family": "giri", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_GIRI_T1_ARTIFACT", "MALWARE_WIN_GIRI_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/giri.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/giri", "updated_at": "2026-10-16" }, { "family": "gjue", "category": "adware", "sample_count": 45, "rule_names": [ "MALWARE_WIN_GJUE_T1_ARTIFACT", "MALWARE_WIN_GJUE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/gjue.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/gjue", "updated_at": "2026-10-16" }, { "family": "globalacces", "category": "advanced_threat", "sample_count": 1, "rule_names": [ "MALWARE_WIN_GLOBALACCES_T1_ARTIFACT", "MALWARE_WIN_GLOBALACCES_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/globalacces.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/globalacces", "updated_at": "2026-10-16" }, { "family": "globalupdate", "category": "advanced_threat", "sample_count": 2, "rule_names": [ "MALWARE_WIN_GLOBALUPDATE_T1_ARTIFACT", "MALWARE_WIN_GLOBALUPDATE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/globalupdate.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/globalupdate", "updated_at": "2026-10-16" }, { "family": "globeimposter", "category": "ransomware", "sample_count": 4, "rule_names": [ "MALWARE_WIN_GLOBEIMPOSTER_T1_ARTIFACT", "MALWARE_WIN_GLOBEIMPOSTER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/globeimposter.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/globeimposter", "updated_at": "2026-10-16" }, { "family": "globim", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_GLOBIM_T1_ARTIFACT", "MALWARE_WIN_GLOBIM_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/globim.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/globim", "updated_at": "2026-10-16" }, { "family": "glox", "category": "ransomware", "sample_count": 3, "rule_names": [ "MALWARE_WIN_GLOX_T1_ARTIFACT", "MALWARE_WIN_GLOX_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/glox.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/glox", "updated_at": "2026-10-16" }, { "family": "glukelira", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_GLUKELIRA_T1_ARTIFACT", "MALWARE_WIN_GLUKELIRA_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/glukelira.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/glukelira", "updated_at": "2026-10-16" }, { "family": "glupteba", "category": "botnet", "sample_count": 32, "rule_names": [ "MALWARE_WIN_GLUPTEBA_T1_ARTIFACT", "MALWARE_WIN_GLUPTEBA_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/glupteba.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/glupteba", "updated_at": "2026-10-16" }, { "family": "goabeny", "category": "ransomware", "sample_count": 3, "rule_names": [ "MALWARE_WIN_GOABENY_T1_ARTIFACT", "MALWARE_WIN_GOABENY_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/goabeny.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/goabeny", "updated_at": "2026-10-16" }, { "family": "gobot", "category": "trojan", "sample_count": 3, "rule_names": [ "MALWARE_WIN_GOBOT_T1_ARTIFACT", "MALWARE_WIN_GOBOT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/gobot.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/gobot", "updated_at": "2026-10-16" }, { "family": "gocloudnet", "category": "advanced_threat", "sample_count": 4, "rule_names": [ "MALWARE_WIN_GOCLOUDNET_T1_ARTIFACT", "MALWARE_WIN_GOCLOUDNET_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/gocloudnet.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/gocloudnet", "updated_at": "2026-10-16" }, { "family": "godzilla", "category": "webshell", "sample_count": 25, "rule_names": [ "MALWARE_WIN_GODZILLA_T1_ARTIFACT", "MALWARE_WIN_GODZILLA_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/godzilla.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/godzilla", "updated_at": "2026-10-16" }, { "family": "gofot", "category": "trojan", "sample_count": 147, "rule_names": [ "MALWARE_WIN_GOFOT_T1_ARTIFACT", "MALWARE_WIN_GOFOT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/gofot.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/gofot", "updated_at": "2026-10-16" }, { "family": "gojdu", "category": "ransomware", "sample_count": 2, "rule_names": [ "MALWARE_WIN_GOJDU_T1_ARTIFACT", "MALWARE_WIN_GOJDU_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/gojdu.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/gojdu", "updated_at": "2026-10-16" }, { "family": "gojdue", "category": "ransomware", "sample_count": 5, "rule_names": [ "MALWARE_WIN_GOJDUE_T1_ARTIFACT", "MALWARE_WIN_GOJDUE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/gojdue.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/gojdue", "updated_at": "2026-10-16" }, { "family": "goldun", "category": "trojan", "sample_count": 1, "rule_names": [ "MALWARE_WIN_GOLDUN_T1_ARTIFACT", "MALWARE_WIN_GOLDUN_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/goldun.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/goldun", "updated_at": "2026-10-16" }, { "family": "golem", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_GOLEM_T1_ARTIFACT", "MALWARE_WIN_GOLEM_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/golem.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/golem", "updated_at": "2026-10-16" }, { "family": "golroted", "category": "ransomware", "sample_count": 21, "rule_names": [ "MALWARE_WIN_GOLROTED_T1_ARTIFACT", "MALWARE_WIN_GOLROTED_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/golroted.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/golroted", "updated_at": "2026-10-16" }, { "family": "goobzo", "category": "trojan", "sample_count": 1, "rule_names": [ "MALWARE_WIN_GOOBZO_T1_ARTIFACT", "MALWARE_WIN_GOOBZO_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/goobzo.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/goobzo", "updated_at": "2026-10-16" }, { "family": "goodpic", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_GOODPIC_T1_ARTIFACT", "MALWARE_WIN_GOODPIC_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/goodpic.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/goodpic", "updated_at": "2026-10-16" }, { "family": "google", "category": "advanced_threat", "sample_count": 1, "rule_names": [ "MALWARE_WIN_GOOGLE_T1_ARTIFACT", "MALWARE_WIN_GOOGLE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/google.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/google", "updated_at": "2026-10-16" }, { "family": "gootkit", "category": "trojan", "sample_count": 13, "rule_names": [ "MALWARE_WIN_GOOTKIT_T1_ARTIFACT", "MALWARE_WIN_GOOTKIT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/gootkit.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/gootkit", "updated_at": "2026-10-16" }, { "family": "goppel", "category": "ransomware", "sample_count": 2, "rule_names": [ "MALWARE_WIN_GOPPEL_T1_ARTIFACT", "MALWARE_WIN_GOPPEL_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/goppel.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/goppel", "updated_at": "2026-10-16" }, { "family": "gorgon", "category": "apt", "sample_count": 13, "rule_names": [ "MALWARE_WIN_GORGON_T1_ARTIFACT", "MALWARE_WIN_GORGON_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/gorgon.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/gorgon", "updated_at": "2026-10-16" }, { "family": "gorillaprice", "category": "adware", "sample_count": 34, "rule_names": [ "MALWARE_WIN_GORILLAPRICE_T1_ARTIFACT", "MALWARE_WIN_GORILLAPRICE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/gorillaprice.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/gorillaprice", "updated_at": "2026-10-16" }, { "family": "gosys", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_GOSYS_T1_ARTIFACT", "MALWARE_WIN_GOSYS_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/gosys.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/gosys", "updated_at": "2026-10-16" }, { "family": "gotango", "category": "browser_modifier", "sample_count": 15, "rule_names": [ "MALWARE_WIN_GOTANGO_T1_ARTIFACT", "MALWARE_WIN_GOTANGO_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/gotango.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/gotango", "updated_at": "2026-10-16" }, { "family": "gottle", "category": "ransomware", "sample_count": 3, "rule_names": [ "MALWARE_WIN_GOTTLE_T1_ARTIFACT", "MALWARE_WIN_GOTTLE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/gottle.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/gottle", "updated_at": "2026-10-16" }, { "family": "gozi", "category": "banking_trojan", "sample_count": 113, "rule_names": [ "MALWARE_WIN_GOZI_T1_ARTIFACT", "MALWARE_WIN_GOZI_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/gozi.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/gozi", "updated_at": "2026-10-16" }, { "family": "goznym", "category": "banking_trojan", "sample_count": 120, "rule_names": [ "MALWARE_WIN_GOZNYM_T1_ARTIFACT", "MALWARE_WIN_GOZNYM_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/goznym.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/goznym", "updated_at": "2026-10-16" }, { "family": "gplyra", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_GPLYRA_T1_ARTIFACT", "MALWARE_WIN_GPLYRA_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/gplyra.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/gplyra", "updated_at": "2026-10-16" }, { "family": "gpukj", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_GPUKJ_T1_ARTIFACT", "MALWARE_WIN_GPUKJ_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/gpukj.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/gpukj", "updated_at": "2026-10-16" }, { "family": "gracewire", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_GRACEWIRE_T1_ARTIFACT", "MALWARE_WIN_GRACEWIRE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/gracewire.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/gracewire", "updated_at": "2026-10-16" }, { "family": "grandcrab", "category": "ransomware", "sample_count": 2, "rule_names": [ "MALWARE_WIN_GRANDCRAB_T1_ARTIFACT", "MALWARE_WIN_GRANDCRAB_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/grandcrab.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/grandcrab", "updated_at": "2026-10-16" }, { "family": "grandcrap", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_GRANDCRAP_T1_ARTIFACT", "MALWARE_WIN_GRANDCRAP_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/grandcrap.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/grandcrap", "updated_at": "2026-10-16" }, { "family": "graybird", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_GRAYBIRD_T1_ARTIFACT", "MALWARE_WIN_GRAYBIRD_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/graybird.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/graybird", "updated_at": "2026-10-16" }, { "family": "graz", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_GRAZ_T1_ARTIFACT", "MALWARE_WIN_GRAZ_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/graz.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/graz", "updated_at": "2026-10-16" }, { "family": "grenam", "category": "advanced_threat", "sample_count": 7, "rule_names": [ "MALWARE_WIN_GRENAM_T1_ARTIFACT", "MALWARE_WIN_GRENAM_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/grenam.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/grenam", "updated_at": "2026-10-16" }, { "family": "gruel", "category": "advanced_threat", "sample_count": 1, "rule_names": [ "MALWARE_WIN_GRUEL_T1_ARTIFACT", "MALWARE_WIN_GRUEL_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/gruel.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/gruel", "updated_at": "2026-10-16" }, { "family": "gt32supportgeeks", "category": "pua", "sample_count": 20, "rule_names": [ "MALWARE_WIN_GT32SUPPORTGEEKS_T1_ARTIFACT", "MALWARE_WIN_GT32SUPPORTGEEKS_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/gt32supportgeeks.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/gt32supportgeeks", "updated_at": "2026-10-16" }, { "family": "gtbot", "category": "trojan", "sample_count": 1, "rule_names": [ "MALWARE_WIN_GTBOT_T1_ARTIFACT", "MALWARE_WIN_GTBOT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/gtbot.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/gtbot", "updated_at": "2026-10-16" }, { "family": "guagua", "category": "trojan", "sample_count": 22, "rule_names": [ "MALWARE_WIN_GUAGUA_T1_ARTIFACT", "MALWARE_WIN_GUAGUA_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/guagua.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/guagua", "updated_at": "2026-10-16" }, { "family": "guildma", "category": "banking_trojan", "sample_count": 109, "rule_names": [ "MALWARE_WIN_GUILDMA_T1_ARTIFACT", "MALWARE_WIN_GUILDMA_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/guildma.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/guildma", "updated_at": "2026-10-16" }, { "family": "gupd", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_GUPD_T1_ARTIFACT", "MALWARE_WIN_GUPD_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/gupd.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/gupd", "updated_at": "2026-10-16" }, { "family": "habbo", "category": "trojan", "sample_count": 2, "rule_names": [ "MALWARE_WIN_HABBO_T1_ARTIFACT", "MALWARE_WIN_HABBO_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/habbo.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/habbo", "updated_at": "2026-10-16" }, { "family": "hacdef", "category": "backdoor", "sample_count": 1, "rule_names": [ "MALWARE_WIN_HACDEF_T1_ARTIFACT", "MALWARE_WIN_HACDEF_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/hacdef.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/hacdef", "updated_at": "2026-10-16" }, { "family": "hack_a_tack", "category": "trojan", "sample_count": 1500, "rule_names": [ "MALWARE_WIN_HACK_A_TACK_T1_ARTIFACT", "MALWARE_WIN_HACK_A_TACK_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/hack_a_tack.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/hack_a_tack", "updated_at": "2026-10-16" }, { "family": "hackav", "category": "ransomware", "sample_count": 2, "rule_names": [ "MALWARE_WIN_HACKAV_T1_ARTIFACT", "MALWARE_WIN_HACKAV_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/hackav.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/hackav", "updated_at": "2026-10-16" }, { "family": "haed", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_HAED_T1_ARTIFACT", "MALWARE_WIN_HAED_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/haed.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/haed", "updated_at": "2026-10-16" }, { "family": "hafen", "category": "backdoor", "sample_count": 120, "rule_names": [ "MALWARE_WIN_HAFEN_T1_ARTIFACT", "MALWARE_WIN_HAFEN_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/hafen.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/hafen", "updated_at": "2026-10-16" }, { "family": "haknata", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_HAKNATA_T1_ARTIFACT", "MALWARE_WIN_HAKNATA_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/haknata.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/haknata", "updated_at": "2026-10-16" }, { "family": "hakopsbot", "category": "advanced_threat", "sample_count": 1, "rule_names": [ "MALWARE_WIN_HAKOPSBOT_T1_ARTIFACT", "MALWARE_WIN_HAKOPSBOT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/hakopsbot.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/hakopsbot", "updated_at": "2026-10-16" }, { "family": "hallaj", "category": "ransomware", "sample_count": 2, "rule_names": [ "MALWARE_WIN_HALLAJ_T1_ARTIFACT", "MALWARE_WIN_HALLAJ_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/hallaj.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/hallaj", "updated_at": "2026-10-16" }, { "family": "hamaetot", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_HAMAETOT_T1_ARTIFACT", "MALWARE_WIN_HAMAETOT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/hamaetot.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/hamaetot", "updated_at": "2026-10-16" }, { "family": "hamer", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_HAMER_T1_ARTIFACT", "MALWARE_WIN_HAMER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/hamer.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/hamer", "updated_at": "2026-10-16" }, { "family": "hamweq", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_HAMWEQ_T1_ARTIFACT", "MALWARE_WIN_HAMWEQ_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/hamweq.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/hamweq", "updated_at": "2026-10-16" }, { "family": "hancitor", "category": "ransomware", "sample_count": 3, "rule_names": [ "MALWARE_WIN_HANCITOR_T1_ARTIFACT", "MALWARE_WIN_HANCITOR_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/hancitor.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/hancitor", "updated_at": "2026-10-16" }, { "family": "hangup", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_HANGUP_T1_ARTIFACT", "MALWARE_WIN_HANGUP_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/hangup.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/hangup", "updated_at": "2026-10-16" }, { "family": "haperlock", "category": "ransomware", "sample_count": 5, "rule_names": [ "MALWARE_WIN_HAPERLOCK_T1_ARTIFACT", "MALWARE_WIN_HAPERLOCK_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/haperlock.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/haperlock", "updated_at": "2026-10-16" }, { "family": "happy", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_HAPPY_T1_ARTIFACT", "MALWARE_WIN_HAPPY_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/happy.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/happy", "updated_at": "2026-10-16" }, { "family": "harnig", "category": "ransomware", "sample_count": 2, "rule_names": [ "MALWARE_WIN_HARNIG_T1_ARTIFACT", "MALWARE_WIN_HARNIG_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/harnig.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/harnig", "updated_at": "2026-10-16" }, { "family": "harvester", "category": "trojan", "sample_count": 1, "rule_names": [ "MALWARE_WIN_HARVESTER_T1_ARTIFACT", "MALWARE_WIN_HARVESTER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/harvester.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/harvester", "updated_at": "2026-10-16" }, { "family": "hav_rat", "category": "rat", "sample_count": 1500, "rule_names": [ "MALWARE_WIN_HAV_RAT_T1_ARTIFACT", "MALWARE_WIN_HAV_RAT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/hav_rat.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/hav_rat", "updated_at": "2026-10-16" }, { "family": "havex", "category": "trojan", "sample_count": 2, "rule_names": [ "MALWARE_WIN_HAVEX_T1_ARTIFACT", "MALWARE_WIN_HAVEX_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/havex.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/havex", "updated_at": "2026-10-16" }, { "family": "hawkeyekeylogger", "category": "infostealer", "sample_count": 620, "rule_names": [ "MALWARE_WIN_HAWKEYEKEYLOGGER_T1_ARTIFACT", "MALWARE_WIN_HAWKEYEKEYLOGGER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/hawkeyekeylogger.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/hawkeyekeylogger", "updated_at": "2026-10-16" }, { "family": "hbov", "category": "ransomware", "sample_count": 2, "rule_names": [ "MALWARE_WIN_HBOV_T1_ARTIFACT", "MALWARE_WIN_HBOV_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/hbov.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/hbov", "updated_at": "2026-10-16" }, { "family": "hc4cakjs5bhi", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_HC4CAKJS5BHI_T1_ARTIFACT", "MALWARE_WIN_HC4CAKJS5BHI_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/hc4cakjs5bhi.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/hc4cakjs5bhi", "updated_at": "2026-10-16" }, { "family": "hckpk", "category": "advanced_threat", "sample_count": 4, "rule_names": [ "MALWARE_WIN_HCKPK_T1_ARTIFACT", "MALWARE_WIN_HCKPK_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/hckpk.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/hckpk", "updated_at": "2026-10-16" }, { "family": "headache", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_HEADACHE_T1_ARTIFACT", "MALWARE_WIN_HEADACHE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/headache.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/headache", "updated_at": "2026-10-16" }, { "family": "hebogo", "category": "ransomware", "sample_count": 31, "rule_names": [ "MALWARE_WIN_HEBOGO_T1_ARTIFACT", "MALWARE_WIN_HEBOGO_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/hebogo.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/hebogo", "updated_at": "2026-10-16" }, { "family": "helper", "category": "advanced_threat", "sample_count": 1, "rule_names": [ "MALWARE_WIN_HELPER_T1_ARTIFACT", "MALWARE_WIN_HELPER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/helper.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/helper", "updated_at": "2026-10-16" }, { "family": "hematite", "category": "trojan", "sample_count": 616, "rule_names": [ "MALWARE_WIN_HEMATITE_T1_ARTIFACT", "MALWARE_WIN_HEMATITE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/hematite.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/hematite", "updated_at": "2026-10-16" }, { "family": "heriplor", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_HERIPLOR_T1_ARTIFACT", "MALWARE_WIN_HERIPLOR_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/heriplor.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/heriplor", "updated_at": "2026-10-16" }, { "family": "hermes", "category": "ransomware", "sample_count": 7, "rule_names": [ "MALWARE_WIN_HERMES_T1_ARTIFACT", "MALWARE_WIN_HERMES_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/hermes.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/hermes", "updated_at": "2026-10-16" }, { "family": "hesv", "category": "trojan", "sample_count": 93, "rule_names": [ "MALWARE_WIN_HESV_T1_ARTIFACT", "MALWARE_WIN_HESV_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/hesv.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/hesv", "updated_at": "2026-10-16" }, { "family": "hexloader", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_HEXLOADER_T1_ARTIFACT", "MALWARE_WIN_HEXLOADER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/hexloader.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/hexloader", "updated_at": "2026-10-16" }, { "family": "hexzone", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_HEXZONE_T1_ARTIFACT", "MALWARE_WIN_HEXZONE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/hexzone.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/hexzone", "updated_at": "2026-10-16" }, { "family": "heye", "category": "advanced_threat", "sample_count": 8, "rule_names": [ "MALWARE_WIN_HEYE_T1_ARTIFACT", "MALWARE_WIN_HEYE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/heye.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/heye", "updated_at": "2026-10-16" }, { "family": "hezhi", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_HEZHI_T1_ARTIFACT", "MALWARE_WIN_HEZHI_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/hezhi.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/hezhi", "updated_at": "2026-10-16" }, { "family": "hg8absxocmcj", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_HG8ABSXOCMCJ_T1_ARTIFACT", "MALWARE_WIN_HG8ABSXOCMCJ_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/hg8absxocmcj.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/hg8absxocmcj", "updated_at": "2026-10-16" }, { "family": "hidcon", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_HIDCON_T1_ARTIFACT", "MALWARE_WIN_HIDCON_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/hidcon.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/hidcon", "updated_at": "2026-10-16" }, { "family": "hiddeninstall", "category": "advanced_threat", "sample_count": 2, "rule_names": [ "MALWARE_WIN_HIDDENINSTALL_T1_ARTIFACT", "MALWARE_WIN_HIDDENINSTALL_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/hiddeninstall.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/hiddeninstall", "updated_at": "2026-10-16" }, { "family": "hiddentear", "category": "ransomware", "sample_count": 8, "rule_names": [ "MALWARE_WIN_HIDDENTEAR_T1_ARTIFACT", "MALWARE_WIN_HIDDENTEAR_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/hiddentear.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/hiddentear", "updated_at": "2026-10-16" }, { "family": "hiddentears", "category": "ransomware", "sample_count": 2, "rule_names": [ "MALWARE_WIN_HIDDENTEARS_T1_ARTIFACT", "MALWARE_WIN_HIDDENTEARS_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/hiddentears.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/hiddentears", "updated_at": "2026-10-16" }, { "family": "hideproc", "category": "trojan", "sample_count": 5, "rule_names": [ "MALWARE_WIN_HIDEPROC_T1_ARTIFACT", "MALWARE_WIN_HIDEPROC_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/hideproc.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/hideproc", "updated_at": "2026-10-16" }, { "family": "high", "category": "generic_detection", "sample_count": 8417, "rule_names": [ "MALWARE_WIN_HIGH_T1_ARTIFACT", "MALWARE_WIN_HIGH_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/high.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/high", "updated_at": "2026-10-16" }, { "family": "higuniel", "category": "ransomware", "sample_count": 3, "rule_names": [ "MALWARE_WIN_HIGUNIEL_T1_ARTIFACT", "MALWARE_WIN_HIGUNIEL_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/higuniel.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/higuniel", "updated_at": "2026-10-16" }, { "family": "hijacker", "category": "adware", "sample_count": 92, "rule_names": [ "MALWARE_WIN_HIJACKER_T1_ARTIFACT", "MALWARE_WIN_HIJACKER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/hijacker.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/hijacker", "updated_at": "2026-10-16" }, { "family": "hilevel", "category": "ransomware", "sample_count": 10, "rule_names": [ "MALWARE_WIN_HILEVEL_T1_ARTIFACT", "MALWARE_WIN_HILEVEL_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/hilevel.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/hilevel", "updated_at": "2026-10-16" }, { "family": "hiloti", "category": "ransomware", "sample_count": 6, "rule_names": [ "MALWARE_WIN_HILOTI_T1_ARTIFACT", "MALWARE_WIN_HILOTI_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/hiloti.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/hiloti", "updated_at": "2026-10-16" }, { "family": "himera", "category": "backdoor", "sample_count": 1, "rule_names": [ "MALWARE_WIN_HIMERA_T1_ARTIFACT", "MALWARE_WIN_HIMERA_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/himera.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/himera", "updated_at": "2026-10-16" }, { "family": "hioles", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_HIOLES_T1_ARTIFACT", "MALWARE_WIN_HIOLES_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/hioles.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/hioles", "updated_at": "2026-10-16" }, { "family": "hiru", "category": "ransomware", "sample_count": 9, "rule_names": [ "MALWARE_WIN_HIRU_T1_ARTIFACT", "MALWARE_WIN_HIRU_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/hiru.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/hiru", "updated_at": "2026-10-16" }, { "family": "hkautoit", "category": "trojan", "sample_count": 1, "rule_names": [ "MALWARE_WIN_HKAUTOIT_T1_ARTIFACT", "MALWARE_WIN_HKAUTOIT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/hkautoit.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/hkautoit", "updated_at": "2026-10-16" }, { "family": "hkmain", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_HKMAIN_T1_ARTIFACT", "MALWARE_WIN_HKMAIN_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/hkmain.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/hkmain", "updated_at": "2026-10-16" }, { "family": "hlubea", "category": "ransomware", "sample_count": 3, "rule_names": [ "MALWARE_WIN_HLUBEA_T1_ARTIFACT", "MALWARE_WIN_HLUBEA_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/hlubea.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/hlubea", "updated_at": "2026-10-16" }, { "family": "hlux", "category": "trojan", "sample_count": 4, "rule_names": [ "MALWARE_WIN_HLUX_T1_ARTIFACT", "MALWARE_WIN_HLUX_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/hlux.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/hlux", "updated_at": "2026-10-16" }, { "family": "hmgfa45id4o", "category": "trojan", "sample_count": 1, "rule_names": [ "MALWARE_WIN_HMGFA45ID4O_T1_ARTIFACT", "MALWARE_WIN_HMGFA45ID4O_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/hmgfa45id4o.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/hmgfa45id4o", "updated_at": "2026-10-16" }, { "family": "hoax", "category": "ransomware", "sample_count": 48, "rule_names": [ "MALWARE_WIN_HOAX_T1_ARTIFACT", "MALWARE_WIN_HOAX_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/hoax.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/hoax", "updated_at": "2026-10-16" }, { "family": "hokobot", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_HOKOBOT_T1_ARTIFACT", "MALWARE_WIN_HOKOBOT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/hokobot.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/hokobot", "updated_at": "2026-10-16" }, { "family": "homles", "category": "ransomware", "sample_count": 2, "rule_names": [ "MALWARE_WIN_HOMLES_T1_ARTIFACT", "MALWARE_WIN_HOMLES_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/homles.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/homles", "updated_at": "2026-10-16" }, { "family": "honk", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_HONK_T1_ARTIFACT", "MALWARE_WIN_HONK_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/honk.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/honk", "updated_at": "2026-10-16" }, { "family": "hooker", "category": "trojan", "sample_count": 1, "rule_names": [ "MALWARE_WIN_HOOKER_T1_ARTIFACT", "MALWARE_WIN_HOOKER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/hooker.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/hooker", "updated_at": "2026-10-16" }, { "family": "hookey", "category": "spyware", "sample_count": 17, "rule_names": [ "MALWARE_WIN_HOOKEY_T1_ARTIFACT", "MALWARE_WIN_HOOKEY_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/hookey.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/hookey", "updated_at": "2026-10-16" }, { "family": "hookmoot", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_HOOKMOOT_T1_ARTIFACT", "MALWARE_WIN_HOOKMOOT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/hookmoot.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/hookmoot", "updated_at": "2026-10-16" }, { "family": "horst", "category": "ransomware", "sample_count": 3, "rule_names": [ "MALWARE_WIN_HORST_T1_ARTIFACT", "MALWARE_WIN_HORST_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/horst.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/horst", "updated_at": "2026-10-16" }, { "family": "hostmodifier", "category": "advanced_threat", "sample_count": 3, "rule_names": [ "MALWARE_WIN_HOSTMODIFIER_T1_ARTIFACT", "MALWARE_WIN_HOSTMODIFIER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/hostmodifier.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/hostmodifier", "updated_at": "2026-10-16" }, { "family": "hosts", "category": "trojan_generic", "sample_count": 267, "rule_names": [ "MALWARE_WIN_HOSTS_T1_ARTIFACT", "MALWARE_WIN_HOSTS_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/hosts.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/hosts", "updated_at": "2026-10-16" }, { "family": "hostschanger", "category": "advanced_threat", "sample_count": 3, "rule_names": [ "MALWARE_WIN_HOSTSCHANGER_T1_ARTIFACT", "MALWARE_WIN_HOSTSCHANGER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/hostschanger.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/hostschanger", "updated_at": "2026-10-16" }, { "family": "hostseditor", "category": "trojan", "sample_count": 1, "rule_names": [ "MALWARE_WIN_HOSTSEDITOR_T1_ARTIFACT", "MALWARE_WIN_HOSTSEDITOR_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/hostseditor.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/hostseditor", "updated_at": "2026-10-16" }, { "family": "hostspatcher", "category": "trojan", "sample_count": 6, "rule_names": [ "MALWARE_WIN_HOSTSPATCHER_T1_ARTIFACT", "MALWARE_WIN_HOSTSPATCHER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/hostspatcher.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/hostspatcher", "updated_at": "2026-10-16" }, { "family": "hostwack", "category": "ransomware", "sample_count": 2, "rule_names": [ "MALWARE_WIN_HOSTWACK_T1_ARTIFACT", "MALWARE_WIN_HOSTWACK_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/hostwack.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/hostwack", "updated_at": "2026-10-16" }, { "family": "hotbar", "category": "adware", "sample_count": 47, "rule_names": [ "MALWARE_WIN_HOTBAR_T1_ARTIFACT", "MALWARE_WIN_HOTBAR_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/hotbar.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/hotbar", "updated_at": "2026-10-16" }, { "family": "hotdownloads", "category": "advanced_threat", "sample_count": 2, "rule_names": [ "MALWARE_WIN_HOTDOWNLOADS_T1_ARTIFACT", "MALWARE_WIN_HOTDOWNLOADS_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/hotdownloads.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/hotdownloads", "updated_at": "2026-10-16" }, { "family": "hotkeyshook", "category": "trojan", "sample_count": 3, "rule_names": [ "MALWARE_WIN_HOTKEYSHOOK_T1_ARTIFACT", "MALWARE_WIN_HOTKEYSHOOK_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/hotkeyshook.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/hotkeyshook", "updated_at": "2026-10-16" }, { "family": "houndhack", "category": "rat", "sample_count": 34, "rule_names": [ "MALWARE_WIN_HOUNDHACK_T1_ARTIFACT", "MALWARE_WIN_HOUNDHACK_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/houndhack.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/houndhack", "updated_at": "2026-10-16" }, { "family": "hpcubestlr", "category": "trojan", "sample_count": 2, "rule_names": [ "MALWARE_WIN_HPCUBESTLR_T1_ARTIFACT", "MALWARE_WIN_HPCUBESTLR_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/hpcubestlr.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/hpcubestlr", "updated_at": "2026-10-16" }, { "family": "hpdefender", "category": "rogue_antivirus", "sample_count": 109, "rule_names": [ "MALWARE_WIN_HPDEFENDER_T1_ARTIFACT", "MALWARE_WIN_HPDEFENDER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/hpdefender.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/hpdefender", "updated_at": "2026-10-16" }, { "family": "hpfareit", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_HPFAREIT_T1_ARTIFACT", "MALWARE_WIN_HPFAREIT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/hpfareit.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/hpfareit", "updated_at": "2026-10-16" }, { "family": "hpgen", "category": "ransomware", "sample_count": 2, "rule_names": [ "MALWARE_WIN_HPGEN_T1_ARTIFACT", "MALWARE_WIN_HPGEN_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/hpgen.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/hpgen", "updated_at": "2026-10-16" }, { "family": "hploki", "category": "infostealer", "sample_count": 58, "rule_names": [ "MALWARE_WIN_HPLOKI_T1_ARTIFACT", "MALWARE_WIN_HPLOKI_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/hploki.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/hploki", "updated_at": "2026-10-16" }, { "family": "hptrickbot", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_HPTRICKBOT_T1_ARTIFACT", "MALWARE_WIN_HPTRICKBOT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/hptrickbot.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/hptrickbot", "updated_at": "2026-10-16" }, { "family": "hpursnif", "category": "trojan", "sample_count": 1, "rule_names": [ "MALWARE_WIN_HPURSNIF_T1_ARTIFACT", "MALWARE_WIN_HPURSNIF_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/hpursnif.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/hpursnif", "updated_at": "2026-10-16" }, { "family": "hqsi", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_HQSI_T1_ARTIFACT", "MALWARE_WIN_HQSI_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/hqsi.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/hqsi", "updated_at": "2026-10-16" }, { "family": "hrup", "category": "ransomware", "sample_count": 2, "rule_names": [ "MALWARE_WIN_HRUP_T1_ARTIFACT", "MALWARE_WIN_HRUP_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/hrup.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/hrup", "updated_at": "2026-10-16" }, { "family": "httpbot", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_HTTPBOT_T1_ARTIFACT", "MALWARE_WIN_HTTPBOT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/httpbot.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/httpbot", "updated_at": "2026-10-16" }, { "family": "hue", "category": "trojan", "sample_count": 1500, "rule_names": [ "MALWARE_WIN_HUE_T1_ARTIFACT", "MALWARE_WIN_HUE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/hue.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/hue", "updated_at": "2026-10-16" }, { "family": "huhk", "category": "ransomware", "sample_count": 6, "rule_names": [ "MALWARE_WIN_HUHK_T1_ARTIFACT", "MALWARE_WIN_HUHK_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/huhk.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/huhk", "updated_at": "2026-10-16" }, { "family": "huntpos", "category": "advanced_threat", "sample_count": 2, "rule_names": [ "MALWARE_WIN_HUNTPOS_T1_ARTIFACT", "MALWARE_WIN_HUNTPOS_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/huntpos.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/huntpos", "updated_at": "2026-10-16" }, { "family": "hupigon", "category": "rat", "sample_count": 146, "rule_names": [ "MALWARE_WIN_HUPIGON_T1_ARTIFACT", "MALWARE_WIN_HUPIGON_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/hupigon.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/hupigon", "updated_at": "2026-10-16" }, { "family": "hvnc", "category": "trojan", "sample_count": 4, "rule_names": [ "MALWARE_WIN_HVNC_T1_ARTIFACT", "MALWARE_WIN_HVNC_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/hvnc.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/hvnc", "updated_at": "2026-10-16" }, { "family": "hvom", "category": "ransomware", "sample_count": 4, "rule_names": [ "MALWARE_WIN_HVOM_T1_ARTIFACT", "MALWARE_WIN_HVOM_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/hvom.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/hvom", "updated_at": "2026-10-16" }, { "family": "hworld", "category": "worm", "sample_count": 166, "rule_names": [ "MALWARE_WIN_HWORLD_T1_ARTIFACT", "MALWARE_WIN_HWORLD_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/hworld.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/hworld", "updated_at": "2026-10-16" }, { "family": "hydracrypt", "category": "ransomware", "sample_count": 180, "rule_names": [ "MALWARE_WIN_HYDRACRYPT_T1_ARTIFACT", "MALWARE_WIN_HYDRACRYPT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/hydracrypt.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/hydracrypt", "updated_at": "2026-10-16" }, { "family": "hydrapos", "category": "pos_malware", "sample_count": 14, "rule_names": [ "MALWARE_WIN_HYDRAPOS_T1_ARTIFACT", "MALWARE_WIN_HYDRAPOS_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/hydrapos.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/hydrapos", "updated_at": "2026-10-16" }, { "family": "hype", "category": "ransomware", "sample_count": 6, "rule_names": [ "MALWARE_WIN_HYPE_T1_ARTIFACT", "MALWARE_WIN_HYPE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/hype.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/hype", "updated_at": "2026-10-16" }, { "family": "hyperbro", "category": "trojan", "sample_count": 1, "rule_names": [ "MALWARE_WIN_HYPERBRO_T1_ARTIFACT", "MALWARE_WIN_HYPERBRO_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/hyperbro.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/hyperbro", "updated_at": "2026-10-16" }, { "family": "ibryte", "category": "adware", "sample_count": 24, "rule_names": [ "MALWARE_WIN_IBRYTE_T1_ARTIFACT", "MALWARE_WIN_IBRYTE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/ibryte.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/ibryte", "updated_at": "2026-10-16" }, { "family": "icecold_reloaded", "category": "rat", "sample_count": 1500, "rule_names": [ "MALWARE_WIN_ICECOLD_RELOADED_T1_ARTIFACT", "MALWARE_WIN_ICECOLD_RELOADED_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/icecold_reloaded.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/icecold_reloaded", "updated_at": "2026-10-16" }, { "family": "icedid", "category": "banking_trojan", "sample_count": 118, "rule_names": [ "MALWARE_WIN_ICEDID_T1_ARTIFACT", "MALWARE_WIN_ICEDID_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/icedid.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/icedid", "updated_at": "2026-10-16" }, { "family": "icloader", "category": "pua", "sample_count": 1145, "rule_names": [ "MALWARE_WIN_ICLOADER_T1_ARTIFACT", "MALWARE_WIN_ICLOADER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/icloader.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/icloader", "updated_at": "2026-10-16" }, { "family": "iczu", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_ICZU_T1_ARTIFACT", "MALWARE_WIN_ICZU_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/iczu.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/iczu", "updated_at": "2026-10-16" }, { "family": "ident", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_IDENT_T1_ARTIFACT", "MALWARE_WIN_IDENT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/ident.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/ident", "updated_at": "2026-10-16" }, { "family": "idlebuddy", "category": "advanced_threat", "sample_count": 7, "rule_names": [ "MALWARE_WIN_IDLEBUDDY_T1_ARTIFACT", "MALWARE_WIN_IDLEBUDDY_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/idlebuddy.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/idlebuddy", "updated_at": "2026-10-16" }, { "family": "idlecrawler", "category": "advanced_threat", "sample_count": 1, "rule_names": [ "MALWARE_WIN_IDLECRAWLER_T1_ARTIFACT", "MALWARE_WIN_IDLECRAWLER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/idlecrawler.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/idlecrawler", "updated_at": "2026-10-16" }, { "family": "idlekms", "category": "ransomware", "sample_count": 10, "rule_names": [ "MALWARE_WIN_IDLEKMS_T1_ARTIFACT", "MALWARE_WIN_IDLEKMS_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/idlekms.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/idlekms", "updated_at": "2026-10-16" }, { "family": "idsohtu", "category": "ransomware", "sample_count": 6, "rule_names": [ "MALWARE_WIN_IDSOHTU_T1_ARTIFACT", "MALWARE_WIN_IDSOHTU_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/idsohtu.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/idsohtu", "updated_at": "2026-10-16" }, { "family": "iespy", "category": "advanced_threat", "sample_count": 1, "rule_names": [ "MALWARE_WIN_IESPY_T1_ARTIFACT", "MALWARE_WIN_IESPY_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/iespy.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/iespy", "updated_at": "2026-10-16" }, { "family": "iezones", "category": "trojan", "sample_count": 1, "rule_names": [ "MALWARE_WIN_IEZONES_T1_ARTIFACT", "MALWARE_WIN_IEZONES_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/iezones.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/iezones", "updated_at": "2026-10-16" }, { "family": "ilomo", "category": "ransomware", "sample_count": 3, "rule_names": [ "MALWARE_WIN_ILOMO_T1_ARTIFACT", "MALWARE_WIN_ILOMO_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/ilomo.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/ilomo", "updated_at": "2026-10-16" }, { "family": "imali", "category": "ransomware", "sample_count": 18, "rule_names": [ "MALWARE_WIN_IMALI_T1_ARTIFACT", "MALWARE_WIN_IMALI_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/imali.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/imali", "updated_at": "2026-10-16" }, { "family": "imaut", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_IMAUT_T1_ARTIFACT", "MALWARE_WIN_IMAUT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/imaut.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/imaut", "updated_at": "2026-10-16" }, { "family": "imestartup", "category": "advanced_threat", "sample_count": 9, "rule_names": [ "MALWARE_WIN_IMESTARTUP_T1_ARTIFACT", "MALWARE_WIN_IMESTARTUP_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/imestartup.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/imestartup", "updated_at": "2026-10-16" }, { "family": "imminent", "category": "trojan", "sample_count": 6, "rule_names": [ "MALWARE_WIN_IMMINENT_T1_ARTIFACT", "MALWARE_WIN_IMMINENT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/imminent.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/imminent", "updated_at": "2026-10-16" }, { "family": "immirat", "category": "rat", "sample_count": 17, "rule_names": [ "MALWARE_WIN_IMMIRAT_T1_ARTIFACT", "MALWARE_WIN_IMMIRAT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/immirat.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/immirat", "updated_at": "2026-10-16" }, { "family": "imps", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_IMPS_T1_ARTIFACT", "MALWARE_WIN_IMPS_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/imps.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/imps", "updated_at": "2026-10-16" }, { "family": "imqaaem1agai", "category": "trojan", "sample_count": 1, "rule_names": [ "MALWARE_WIN_IMQAAEM1AGAI_T1_ARTIFACT", "MALWARE_WIN_IMQAAEM1AGAI_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/imqaaem1agai.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/imqaaem1agai", "updated_at": "2026-10-16" }, { "family": "inbox", "category": "adware", "sample_count": 22, "rule_names": [ "MALWARE_WIN_INBOX_T1_ARTIFACT", "MALWARE_WIN_INBOX_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/inbox.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/inbox", "updated_at": "2026-10-16" }, { "family": "incredimail", "category": "advanced_threat", "sample_count": 3, "rule_names": [ "MALWARE_WIN_INCREDIMAIL_T1_ARTIFACT", "MALWARE_WIN_INCREDIMAIL_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/incredimail.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/incredimail", "updated_at": "2026-10-16" }, { "family": "indigorose", "category": "trojan", "sample_count": 1, "rule_names": [ "MALWARE_WIN_INDIGOROSE_T1_ARTIFACT", "MALWARE_WIN_INDIGOROSE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/indigorose.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/indigorose", "updated_at": "2026-10-16" }, { "family": "indiloadz", "category": "adware", "sample_count": 146, "rule_names": [ "MALWARE_WIN_INDILOADZ_T1_ARTIFACT", "MALWARE_WIN_INDILOADZ_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/indiloadz.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/indiloadz", "updated_at": "2026-10-16" }, { "family": "induc", "category": "advanced_threat", "sample_count": 9, "rule_names": [ "MALWARE_WIN_INDUC_T1_ARTIFACT", "MALWARE_WIN_INDUC_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/induc.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/induc", "updated_at": "2026-10-16" }, { "family": "inegery", "category": "ransomware", "sample_count": 5, "rule_names": [ "MALWARE_WIN_INEGERY_T1_ARTIFACT", "MALWARE_WIN_INEGERY_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/inegery.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/inegery", "updated_at": "2026-10-16" }, { "family": "inexsmar", "category": "trojan", "sample_count": 1, "rule_names": [ "MALWARE_WIN_INEXSMAR_T1_ARTIFACT", "MALWARE_WIN_INEXSMAR_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/inexsmar.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/inexsmar", "updated_at": "2026-10-16" }, { "family": "infector_ng_2004", "category": "trojan", "sample_count": 1500, "rule_names": [ "MALWARE_WIN_INFECTOR_NG_2004_T1_ARTIFACT", "MALWARE_WIN_INFECTOR_NG_2004_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/infector_ng_2004.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/infector_ng_2004", "updated_at": "2026-10-16" }, { "family": "infinitetear", "category": "trojan", "sample_count": 1, "rule_names": [ "MALWARE_WIN_INFINITETEAR_T1_ARTIFACT", "MALWARE_WIN_INFINITETEAR_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/infinitetear.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/infinitetear", "updated_at": "2026-10-16" }, { "family": "informer", "category": "trojan", "sample_count": 8, "rule_names": [ "MALWARE_WIN_INFORMER_T1_ARTIFACT", "MALWARE_WIN_INFORMER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/informer.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/informer", "updated_at": "2026-10-16" }, { "family": "injeber", "category": "trojan", "sample_count": 1, "rule_names": [ "MALWARE_WIN_INJEBER_T1_ARTIFACT", "MALWARE_WIN_INJEBER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/injeber.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/injeber", "updated_at": "2026-10-16" }, { "family": "injectorlib", "category": "ransomware", "sample_count": 3, "rule_names": [ "MALWARE_WIN_INJECTORLIB_T1_ARTIFACT", "MALWARE_WIN_INJECTORLIB_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/injectorlib.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/injectorlib", "updated_at": "2026-10-16" }, { "family": "inno", "category": "advanced_threat", "sample_count": 5, "rule_names": [ "MALWARE_WIN_INNO_T1_ARTIFACT", "MALWARE_WIN_INNO_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/inno.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/inno", "updated_at": "2026-10-16" }, { "family": "innomod", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_INNOMOD_T1_ARTIFACT", "MALWARE_WIN_INNOMOD_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/innomod.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/innomod", "updated_at": "2026-10-16" }, { "family": "inor", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_INOR_T1_ARTIFACT", "MALWARE_WIN_INOR_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/inor.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/inor", "updated_at": "2026-10-16" }, { "family": "inrogatio", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_INROGATIO_T1_ARTIFACT", "MALWARE_WIN_INROGATIO_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/inrogatio.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/inrogatio", "updated_at": "2026-10-16" }, { "family": "insebro", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_INSEBRO_T1_ARTIFACT", "MALWARE_WIN_INSEBRO_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/insebro.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/insebro", "updated_at": "2026-10-16" }, { "family": "inservice", "category": "ransomware", "sample_count": 4, "rule_names": [ "MALWARE_WIN_INSERVICE_T1_ARTIFACT", "MALWARE_WIN_INSERVICE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/inservice.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/inservice", "updated_at": "2026-10-16" }, { "family": "installbar", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_INSTALLBAR_T1_ARTIFACT", "MALWARE_WIN_INSTALLBAR_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/installbar.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/installbar", "updated_at": "2026-10-16" }, { "family": "installbrain", "category": "adware", "sample_count": 13, "rule_names": [ "MALWARE_WIN_INSTALLBRAIN_T1_ARTIFACT", "MALWARE_WIN_INSTALLBRAIN_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/installbrain.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/installbrain", "updated_at": "2026-10-16" }, { "family": "installcore", "category": "pua", "sample_count": 1961, "rule_names": [ "MALWARE_WIN_INSTALLCORE_T1_ARTIFACT", "MALWARE_WIN_INSTALLCORE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/installcore.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/installcore", "updated_at": "2026-10-16" }, { "family": "installerex", "category": "adware", "sample_count": 43, "rule_names": [ "MALWARE_WIN_INSTALLEREX_T1_ARTIFACT", "MALWARE_WIN_INSTALLEREX_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/installerex.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/installerex", "updated_at": "2026-10-16" }, { "family": "installermonetizer", "category": "adware", "sample_count": 14, "rule_names": [ "MALWARE_WIN_INSTALLERMONETIZER_T1_ARTIFACT", "MALWARE_WIN_INSTALLERMONETIZER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/installermonetizer.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/installermonetizer", "updated_at": "2026-10-16" }, { "family": "installflash", "category": "trojan", "sample_count": 3, "rule_names": [ "MALWARE_WIN_INSTALLFLASH_T1_ARTIFACT", "MALWARE_WIN_INSTALLFLASH_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/installflash.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/installflash", "updated_at": "2026-10-16" }, { "family": "installiq", "category": "advanced_threat", "sample_count": 6, "rule_names": [ "MALWARE_WIN_INSTALLIQ_T1_ARTIFACT", "MALWARE_WIN_INSTALLIQ_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/installiq.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/installiq", "updated_at": "2026-10-16" }, { "family": "installm", "category": "advanced_threat", "sample_count": 2, "rule_names": [ "MALWARE_WIN_INSTALLM_T1_ARTIFACT", "MALWARE_WIN_INSTALLM_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/installm.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/installm", "updated_at": "2026-10-16" }, { "family": "installmate", "category": "trojan", "sample_count": 3, "rule_names": [ "MALWARE_WIN_INSTALLMATE_T1_ARTIFACT", "MALWARE_WIN_INSTALLMATE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/installmate.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/installmate", "updated_at": "2026-10-16" }, { "family": "installmetrix", "category": "advanced_threat", "sample_count": 6, "rule_names": [ "MALWARE_WIN_INSTALLMETRIX_T1_ARTIFACT", "MALWARE_WIN_INSTALLMETRIX_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/installmetrix.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/installmetrix", "updated_at": "2026-10-16" }, { "family": "installmonetizer", "category": "advanced_threat", "sample_count": 6, "rule_names": [ "MALWARE_WIN_INSTALLMONETIZER_T1_ARTIFACT", "MALWARE_WIN_INSTALLMONETIZER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/installmonetizer.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/installmonetizer", "updated_at": "2026-10-16" }, { "family": "installmonster", "category": "pua", "sample_count": 16691, "rule_names": [ "MALWARE_WIN_INSTALLMONSTER_T1_ARTIFACT", "MALWARE_WIN_INSTALLMONSTER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/installmonster.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/installmonster", "updated_at": "2026-10-16" }, { "family": "installpack", "category": "advanced_threat", "sample_count": 7, "rule_names": [ "MALWARE_WIN_INSTALLPACK_T1_ARTIFACT", "MALWARE_WIN_INSTALLPACK_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/installpack.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/installpack", "updated_at": "2026-10-16" }, { "family": "installtoolbar", "category": "adware", "sample_count": 18, "rule_names": [ "MALWARE_WIN_INSTALLTOOLBAR_T1_ARTIFACT", "MALWARE_WIN_INSTALLTOOLBAR_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/installtoolbar.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/installtoolbar", "updated_at": "2026-10-16" }, { "family": "instally", "category": "advanced_threat", "sample_count": 2, "rule_names": [ "MALWARE_WIN_INSTALLY_T1_ARTIFACT", "MALWARE_WIN_INSTALLY_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/instally.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/instally", "updated_at": "2026-10-16" }, { "family": "institution_2004", "category": "trojan", "sample_count": 0, "rule_names": [ "MALWARE_WIN_INSTITUTION_2004_T1_ARTIFACT", "MALWARE_WIN_INSTITUTION_2004_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/institution_2004.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/institution_2004", "updated_at": "2026-10-16" }, { "family": "instmonster", "category": "advanced_threat", "sample_count": 2, "rule_names": [ "MALWARE_WIN_INSTMONSTER_T1_ARTIFACT", "MALWARE_WIN_INSTMONSTER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/instmonster.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/instmonster", "updated_at": "2026-10-16" }, { "family": "invader", "category": "file_infector", "sample_count": 27, "rule_names": [ "MALWARE_WIN_INVADER_T1_ARTIFACT", "MALWARE_WIN_INVADER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/invader.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/invader", "updated_at": "2026-10-16" }, { "family": "iobit", "category": "pua", "sample_count": 18, "rule_names": [ "MALWARE_WIN_IOBIT_T1_ARTIFACT", "MALWARE_WIN_IOBIT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/iobit.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/iobit", "updated_at": "2026-10-16" }, { "family": "ipamor", "category": "backdoor", "sample_count": 147, "rule_names": [ "MALWARE_WIN_IPAMOR_T1_ARTIFACT", "MALWARE_WIN_IPAMOR_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/ipamor.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/ipamor", "updated_at": "2026-10-16" }, { "family": "ipswitch", "category": "ransomware", "sample_count": 2, "rule_names": [ "MALWARE_WIN_IPSWITCH_T1_ARTIFACT", "MALWARE_WIN_IPSWITCH_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/ipswitch.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/ipswitch", "updated_at": "2026-10-16" }, { "family": "ircbot", "category": "rat", "sample_count": 348, "rule_names": [ "MALWARE_WIN_IRCBOT_T1_ARTIFACT", "MALWARE_WIN_IRCBOT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/ircbot.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/ircbot", "updated_at": "2026-10-16" }, { "family": "ircbrute", "category": "trojan", "sample_count": 2, "rule_names": [ "MALWARE_WIN_IRCBRUTE_T1_ARTIFACT", "MALWARE_WIN_IRCBRUTE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/ircbrute.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/ircbrute", "updated_at": "2026-10-16" }, { "family": "ircfast", "category": "trojan", "sample_count": 2, "rule_names": [ "MALWARE_WIN_IRCFAST_T1_ARTIFACT", "MALWARE_WIN_IRCFAST_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/ircfast.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/ircfast", "updated_at": "2026-10-16" }, { "family": "ircnite", "category": "trojan", "sample_count": 4, "rule_names": [ "MALWARE_WIN_IRCNITE_T1_ARTIFACT", "MALWARE_WIN_IRCNITE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/ircnite.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/ircnite", "updated_at": "2026-10-16" }, { "family": "irplan", "category": "ransomware", "sample_count": 4, "rule_names": [ "MALWARE_WIN_IRPLAN_T1_ARTIFACT", "MALWARE_WIN_IRPLAN_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/irplan.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/irplan", "updated_at": "2026-10-16" }, { "family": "isnev", "category": "ransomware", "sample_count": 2, "rule_names": [ "MALWARE_WIN_ISNEV_T1_ARTIFACT", "MALWARE_WIN_ISNEV_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/isnev.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/isnev", "updated_at": "2026-10-16" }, { "family": "isof", "category": "ransomware", "sample_count": 2, "rule_names": [ "MALWARE_WIN_ISOF_T1_ARTIFACT", "MALWARE_WIN_ISOF_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/isof.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/isof", "updated_at": "2026-10-16" }, { "family": "istartsurf", "category": "browser_hijacker", "sample_count": 1214, "rule_names": [ "MALWARE_WIN_ISTARTSURF_T1_ARTIFACT", "MALWARE_WIN_ISTARTSURF_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/istartsurf.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/istartsurf", "updated_at": "2026-10-16" }, { "family": "istartsurfinstaller", "category": "advanced_threat", "sample_count": 1, "rule_names": [ "MALWARE_WIN_ISTARTSURFINSTALLER_T1_ARTIFACT", "MALWARE_WIN_ISTARTSURFINSTALLER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/istartsurfinstaller.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/istartsurfinstaller", "updated_at": "2026-10-16" }, { "family": "istbar", "category": "advanced_threat", "sample_count": 1, "rule_names": [ "MALWARE_WIN_ISTBAR_T1_ARTIFACT", "MALWARE_WIN_ISTBAR_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/istbar.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/istbar", "updated_at": "2026-10-16" }, { "family": "itorrent", "category": "advanced_threat", "sample_count": 4, "rule_names": [ "MALWARE_WIN_ITORRENT_T1_ARTIFACT", "MALWARE_WIN_ITORRENT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/itorrent.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/itorrent", "updated_at": "2026-10-16" }, { "family": "itranslator", "category": "advanced_threat", "sample_count": 2, "rule_names": [ "MALWARE_WIN_ITRANSLATOR_T1_ARTIFACT", "MALWARE_WIN_ITRANSLATOR_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/itranslator.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/itranslator", "updated_at": "2026-10-16" }, { "family": "itva", "category": "ransomware", "sample_count": 2, "rule_names": [ "MALWARE_WIN_ITVA_T1_ARTIFACT", "MALWARE_WIN_ITVA_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/itva.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/itva", "updated_at": "2026-10-16" }, { "family": "iwin", "category": "advanced_threat", "sample_count": 1, "rule_names": [ "MALWARE_WIN_IWIN_T1_ARTIFACT", "MALWARE_WIN_IWIN_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/iwin.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/iwin", "updated_at": "2026-10-16" }, { "family": "jacard", "category": "trojan", "sample_count": 69, "rule_names": [ "MALWARE_WIN_JACARD_T1_ARTIFACT", "MALWARE_WIN_JACARD_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/jacard.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/jacard", "updated_at": "2026-10-16" }, { "family": "jacksbot", "category": "trojan", "sample_count": 2, "rule_names": [ "MALWARE_WIN_JACKSBOT_T1_ARTIFACT", "MALWARE_WIN_JACKSBOT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/jacksbot.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/jacksbot", "updated_at": "2026-10-16" }, { "family": "jackservn", "category": "trojan_downloader", "sample_count": 17, "rule_names": [ "MALWARE_WIN_JACKSERVN_T1_ARTIFACT", "MALWARE_WIN_JACKSERVN_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/jackservn.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/jackservn", "updated_at": "2026-10-16" }, { "family": "jaik", "category": "trojan", "sample_count": 39, "rule_names": [ "MALWARE_WIN_JAIK_T1_ARTIFACT", "MALWARE_WIN_JAIK_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/jaik.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/jaik", "updated_at": "2026-10-16" }, { "family": "jaike", "category": "ransomware", "sample_count": 10, "rule_names": [ "MALWARE_WIN_JAIKE_T1_ARTIFACT", "MALWARE_WIN_JAIKE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/jaike.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/jaike", "updated_at": "2026-10-16" }, { "family": "jaiko", "category": "ransomware", "sample_count": 44, "rule_names": [ "MALWARE_WIN_JAIKO_T1_ARTIFACT", "MALWARE_WIN_JAIKO_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/jaiko.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/jaiko", "updated_at": "2026-10-16" }, { "family": "jaiks", "category": "ransomware", "sample_count": 15, "rule_names": [ "MALWARE_WIN_JAIKS_T1_ARTIFACT", "MALWARE_WIN_JAIKS_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/jaiks.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/jaiks", "updated_at": "2026-10-16" }, { "family": "jakuz", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_JAKUZ_T1_ARTIFACT", "MALWARE_WIN_JAKUZ_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/jakuz.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/jakuz", "updated_at": "2026-10-16" }, { "family": "jakyllhyde", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_JAKYLLHYDE_T1_ARTIFACT", "MALWARE_WIN_JAKYLLHYDE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/jakyllhyde.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/jakyllhyde", "updated_at": "2026-10-16" }, { "family": "jatif", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_JATIF_T1_ARTIFACT", "MALWARE_WIN_JATIF_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/jatif.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/jatif", "updated_at": "2026-10-16" }, { "family": "jawego", "category": "adware", "sample_count": 32, "rule_names": [ "MALWARE_WIN_JAWEGO_T1_ARTIFACT", "MALWARE_WIN_JAWEGO_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/jawego.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/jawego", "updated_at": "2026-10-16" }, { "family": "jbomi", "category": "ransomware", "sample_count": 2, "rule_names": [ "MALWARE_WIN_JBOMI_T1_ARTIFACT", "MALWARE_WIN_JBOMI_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/jbomi.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/jbomi", "updated_at": "2026-10-16" }, { "family": "jbonblanc", "category": "trojan", "sample_count": 0, "rule_names": [ "MALWARE_WIN_JBONBLANC_T1_ARTIFACT", "MALWARE_WIN_JBONBLANC_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/jbonblanc.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/jbonblanc", "updated_at": "2026-10-16" }, { "family": "jeefo", "category": "file_infector", "sample_count": 213, "rule_names": [ "MALWARE_WIN_JEEFO_T1_ARTIFACT", "MALWARE_WIN_JEEFO_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/jeefo.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/jeefo", "updated_at": "2026-10-16" }, { "family": "jenxcus", "category": "trojan", "sample_count": 4, "rule_names": [ "MALWARE_WIN_JENXCUS_T1_ARTIFACT", "MALWARE_WIN_JENXCUS_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/jenxcus.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/jenxcus", "updated_at": "2026-10-16" }, { "family": "jetmedia", "category": "advanced_threat", "sample_count": 2, "rule_names": [ "MALWARE_WIN_JETMEDIA_T1_ARTIFACT", "MALWARE_WIN_JETMEDIA_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/jetmedia.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/jetmedia", "updated_at": "2026-10-16" }, { "family": "jevafus", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_JEVAFUS_T1_ARTIFACT", "MALWARE_WIN_JEVAFUS_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/jevafus.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/jevafus", "updated_at": "2026-10-16" }, { "family": "jhee", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_JHEE_T1_ARTIFACT", "MALWARE_WIN_JHEE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/jhee.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/jhee", "updated_at": "2026-10-16" }, { "family": "jigsaw", "category": "ransomware", "sample_count": 16, "rule_names": [ "MALWARE_WIN_JIGSAW_T1_ARTIFACT", "MALWARE_WIN_JIGSAW_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/jigsaw.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/jigsaw", "updated_at": "2026-10-16" }, { "family": "jigsawlocker", "category": "ransomware", "sample_count": 4, "rule_names": [ "MALWARE_WIN_JIGSAWLOCKER_T1_ARTIFACT", "MALWARE_WIN_JIGSAWLOCKER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/jigsawlocker.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/jigsawlocker", "updated_at": "2026-10-16" }, { "family": "jimmy", "category": "ransomware", "sample_count": 57, "rule_names": [ "MALWARE_WIN_JIMMY_T1_ARTIFACT", "MALWARE_WIN_JIMMY_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/jimmy.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/jimmy", "updated_at": "2026-10-16" }, { "family": "jinda", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_JINDA_T1_ARTIFACT", "MALWARE_WIN_JINDA_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/jinda.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/jinda", "updated_at": "2026-10-16" }, { "family": "jintor", "category": "ransomware", "sample_count": 10, "rule_names": [ "MALWARE_WIN_JINTOR_T1_ARTIFACT", "MALWARE_WIN_JINTOR_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/jintor.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/jintor", "updated_at": "2026-10-16" }, { "family": "jnkfasgyvyo", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_JNKFASGYVYO_T1_ARTIFACT", "MALWARE_WIN_JNKFASGYVYO_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/jnkfasgyvyo.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/jnkfasgyvyo", "updated_at": "2026-10-16" }, { "family": "jo0br8hglsii", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_JO0BR8HGLSII_T1_ARTIFACT", "MALWARE_WIN_JO0BR8HGLSII_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/jo0br8hglsii.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/jo0br8hglsii", "updated_at": "2026-10-16" }, { "family": "jobaka", "category": "ransomware", "sample_count": 3, "rule_names": [ "MALWARE_WIN_JOBAKA_T1_ARTIFACT", "MALWARE_WIN_JOBAKA_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/jobaka.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/jobaka", "updated_at": "2026-10-16" }, { "family": "jobcrypter", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_JOBCRYPTER_T1_ARTIFACT", "MALWARE_WIN_JOBCRYPTER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/jobcrypter.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/jobcrypter", "updated_at": "2026-10-16" }, { "family": "johnnie", "category": "trojan", "sample_count": 221, "rule_names": [ "MALWARE_WIN_JOHNNIE_T1_ARTIFACT", "MALWARE_WIN_JOHNNIE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/johnnie.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/johnnie", "updated_at": "2026-10-16" }, { "family": "joiner", "category": "ransomware", "sample_count": 3, "rule_names": [ "MALWARE_WIN_JOINER_T1_ARTIFACT", "MALWARE_WIN_JOINER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/joiner.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/joiner", "updated_at": "2026-10-16" }, { "family": "joke", "category": "advanced_threat", "sample_count": 9, "rule_names": [ "MALWARE_WIN_JOKE_T1_ARTIFACT", "MALWARE_WIN_JOKE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/joke.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/joke", "updated_at": "2026-10-16" }, { "family": "joker", "category": "trojan", "sample_count": 0, "rule_names": [ "MALWARE_WIN_JOKER_T1_ARTIFACT", "MALWARE_WIN_JOKER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/joker.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/joker", "updated_at": "2026-10-16" }, { "family": "joosoft", "category": "advanced_threat", "sample_count": 2, "rule_names": [ "MALWARE_WIN_JOOSOFT_T1_ARTIFACT", "MALWARE_WIN_JOOSOFT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/joosoft.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/joosoft", "updated_at": "2026-10-16" }, { "family": "jord", "category": "ransomware", "sample_count": 11, "rule_names": [ "MALWARE_WIN_JORD_T1_ARTIFACT", "MALWARE_WIN_JORD_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/jord.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/jord", "updated_at": "2026-10-16" }, { "family": "jottix", "category": "ransomware", "sample_count": 16, "rule_names": [ "MALWARE_WIN_JOTTIX_T1_ARTIFACT", "MALWARE_WIN_JOTTIX_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/jottix.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/jottix", "updated_at": "2026-10-16" }, { "family": "jps", "category": "trojan", "sample_count": 0, "rule_names": [ "MALWARE_WIN_JPS_T1_ARTIFACT", "MALWARE_WIN_JPS_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/jps.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/jps", "updated_at": "2026-10-16" }, { "family": "jps_virus_maker", "category": "tool", "sample_count": 0, "rule_names": [ "MALWARE_WIN_JPS_VIRUS_MAKER_T1_ARTIFACT", "MALWARE_WIN_JPS_VIRUS_MAKER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/jps_virus_maker.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/jps_virus_maker", "updated_at": "2026-10-16" }, { "family": "jscriptwrap", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_JSCRIPTWRAP_T1_ARTIFACT", "MALWARE_WIN_JSCRIPTWRAP_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/jscriptwrap.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/jscriptwrap", "updated_at": "2026-10-16" }, { "family": "juicypotato", "category": "trojan", "sample_count": 1, "rule_names": [ "MALWARE_WIN_JUICYPOTATO_T1_ARTIFACT", "MALWARE_WIN_JUICYPOTATO_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/juicypotato.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/juicypotato", "updated_at": "2026-10-16" }, { "family": "jumpta", "category": "ransomware", "sample_count": 6, "rule_names": [ "MALWARE_WIN_JUMPTA_T1_ARTIFACT", "MALWARE_WIN_JUMPTA_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/jumpta.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/jumpta", "updated_at": "2026-10-16" }, { "family": "juntador", "category": "trojan", "sample_count": 1, "rule_names": [ "MALWARE_WIN_JUNTADOR_T1_ARTIFACT", "MALWARE_WIN_JUNTADOR_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/juntador.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/juntador", "updated_at": "2026-10-16" }, { "family": "jusabli", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_JUSABLI_T1_ARTIFACT", "MALWARE_WIN_JUSABLI_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/jusabli.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/jusabli", "updated_at": "2026-10-16" }, { "family": "jyfi", "category": "ransomware", "sample_count": 2, "rule_names": [ "MALWARE_WIN_JYFI_T1_ARTIFACT", "MALWARE_WIN_JYFI_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/jyfi.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/jyfi", "updated_at": "2026-10-16" }, { "family": "jyuqet", "category": "ransomware", "sample_count": 5, "rule_names": [ "MALWARE_WIN_JYUQET_T1_ARTIFACT", "MALWARE_WIN_JYUQET_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/jyuqet.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/jyuqet", "updated_at": "2026-10-16" }, { "family": "kabymj", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_KABYMJ_T1_ARTIFACT", "MALWARE_WIN_KABYMJ_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/kabymj.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/kabymj", "updated_at": "2026-10-16" }, { "family": "kapucen", "category": "ransomware", "sample_count": 4, "rule_names": [ "MALWARE_WIN_KAPUCEN_T1_ARTIFACT", "MALWARE_WIN_KAPUCEN_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/kapucen.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/kapucen", "updated_at": "2026-10-16" }, { "family": "karagany", "category": "trojan", "sample_count": 1, "rule_names": [ "MALWARE_WIN_KARAGANY_T1_ARTIFACT", "MALWARE_WIN_KARAGANY_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/karagany.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/karagany", "updated_at": "2026-10-16" }, { "family": "karamanak", "category": "trojan", "sample_count": 1, "rule_names": [ "MALWARE_WIN_KARAMANAK_T1_ARTIFACT", "MALWARE_WIN_KARAMANAK_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/karamanak.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/karamanak", "updated_at": "2026-10-16" }, { "family": "karius", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_KARIUS_T1_ARTIFACT", "MALWARE_WIN_KARIUS_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/karius.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/karius", "updated_at": "2026-10-16" }, { "family": "kaseya", "category": "ransomware", "sample_count": 3, "rule_names": [ "MALWARE_WIN_KASEYA_T1_ARTIFACT", "MALWARE_WIN_KASEYA_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/kaseya.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/kaseya", "updated_at": "2026-10-16" }, { "family": "kasidet", "category": "pos_malware", "sample_count": 294, "rule_names": [ "MALWARE_WIN_KASIDET_T1_ARTIFACT", "MALWARE_WIN_KASIDET_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/kasidet.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/kasidet", "updated_at": "2026-10-16" }, { "family": "kasinst", "category": "ransomware", "sample_count": 5, "rule_names": [ "MALWARE_WIN_KASINST_T1_ARTIFACT", "MALWARE_WIN_KASINST_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/kasinst.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/kasinst", "updated_at": "2026-10-16" }, { "family": "kastenl", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_KASTENL_T1_ARTIFACT", "MALWARE_WIN_KASTENL_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/kastenl.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/kastenl", "updated_at": "2026-10-16" }, { "family": "kate", "category": "ransomware", "sample_count": 2, "rule_names": [ "MALWARE_WIN_KATE_T1_ARTIFACT", "MALWARE_WIN_KATE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/kate.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/kate", "updated_at": "2026-10-16" }, { "family": "kates", "category": "trojan", "sample_count": 2, "rule_names": [ "MALWARE_WIN_KATES_T1_ARTIFACT", "MALWARE_WIN_KATES_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/kates.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/kates", "updated_at": "2026-10-16" }, { "family": "kavos", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_KAVOS_T1_ARTIFACT", "MALWARE_WIN_KAVOS_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/kavos.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/kavos", "updated_at": "2026-10-16" }, { "family": "kaymundler", "category": "advanced_threat", "sample_count": 5, "rule_names": [ "MALWARE_WIN_KAYMUNDLER_T1_ARTIFACT", "MALWARE_WIN_KAYMUNDLER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/kaymundler.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/kaymundler", "updated_at": "2026-10-16" }, { "family": "kazus", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_KAZUS_T1_ARTIFACT", "MALWARE_WIN_KAZUS_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/kazus.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/kazus", "updated_at": "2026-10-16" }, { "family": "kbot", "category": "ransomware", "sample_count": 2, "rule_names": [ "MALWARE_WIN_KBOT_T1_ARTIFACT", "MALWARE_WIN_KBOT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/kbot.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/kbot", "updated_at": "2026-10-16" }, { "family": "keenm", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_KEENM_T1_ARTIFACT", "MALWARE_WIN_KEENM_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/keenm.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/keenm", "updated_at": "2026-10-16" }, { "family": "kelihos", "category": "spam_bot", "sample_count": 47, "rule_names": [ "MALWARE_WIN_KELIHOS_T1_ARTIFACT", "MALWARE_WIN_KELIHOS_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/kelihos.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/kelihos", "updated_at": "2026-10-16" }, { "family": "kelios", "category": "ransomware", "sample_count": 4, "rule_names": [ "MALWARE_WIN_KELIOS_T1_ARTIFACT", "MALWARE_WIN_KELIOS_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/kelios.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/kelios", "updated_at": "2026-10-16" }, { "family": "kelvir", "category": "trojan", "sample_count": 1, "rule_names": [ "MALWARE_WIN_KELVIR_T1_ARTIFACT", "MALWARE_WIN_KELVIR_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/kelvir.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/kelvir", "updated_at": "2026-10-16" }, { "family": "keybase", "category": "advanced_threat", "sample_count": 2, "rule_names": [ "MALWARE_WIN_KEYBASE_T1_ARTIFACT", "MALWARE_WIN_KEYBASE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/keybase.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/keybase", "updated_at": "2026-10-16" }, { "family": "keyboarddisable", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_KEYBOARDDISABLE_T1_ARTIFACT", "MALWARE_WIN_KEYBOARDDISABLE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/keyboarddisable.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/keyboarddisable", "updated_at": "2026-10-16" }, { "family": "keyboy", "category": "trojan", "sample_count": 2, "rule_names": [ "MALWARE_WIN_KEYBOY_T1_ARTIFACT", "MALWARE_WIN_KEYBOY_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/keyboy.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/keyboy", "updated_at": "2026-10-16" }, { "family": "keydoor", "category": "backdoor", "sample_count": 1, "rule_names": [ "MALWARE_WIN_KEYDOOR_T1_ARTIFACT", "MALWARE_WIN_KEYDOOR_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/keydoor.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/keydoor", "updated_at": "2026-10-16" }, { "family": "keydownload", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_KEYDOWNLOAD_T1_ARTIFACT", "MALWARE_WIN_KEYDOWNLOAD_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/keydownload.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/keydownload", "updated_at": "2026-10-16" }, { "family": "keyer", "category": "advanced_threat", "sample_count": 1, "rule_names": [ "MALWARE_WIN_KEYER_T1_ARTIFACT", "MALWARE_WIN_KEYER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/keyer.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/keyer", "updated_at": "2026-10-16" }, { "family": "keylogr", "category": "trojan", "sample_count": 1, "rule_names": [ "MALWARE_WIN_KEYLOGR_T1_ARTIFACT", "MALWARE_WIN_KEYLOGR_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/keylogr.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/keylogr", "updated_at": "2026-10-16" }, { "family": "keywordfind", "category": "advanced_threat", "sample_count": 3, "rule_names": [ "MALWARE_WIN_KEYWORDFIND_T1_ARTIFACT", "MALWARE_WIN_KEYWORDFIND_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/keywordfind.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/keywordfind", "updated_at": "2026-10-16" }, { "family": "kgbspy", "category": "advanced_threat", "sample_count": 1, "rule_names": [ "MALWARE_WIN_KGBSPY_T1_ARTIFACT", "MALWARE_WIN_KGBSPY_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/kgbspy.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/kgbspy", "updated_at": "2026-10-16" }, { "family": "kgen", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_KGEN_T1_ARTIFACT", "MALWARE_WIN_KGEN_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/kgen.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/kgen", "updated_at": "2026-10-16" }, { "family": "khalesi", "category": "infostealer", "sample_count": 555, "rule_names": [ "MALWARE_WIN_KHALESI_T1_ARTIFACT", "MALWARE_WIN_KHALESI_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/khalesi.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/khalesi", "updated_at": "2026-10-16" }, { "family": "kheagol", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_KHEAGOL_T1_ARTIFACT", "MALWARE_WIN_KHEAGOL_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/kheagol.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/kheagol", "updated_at": "2026-10-16" }, { "family": "kido", "category": "advanced_threat", "sample_count": 5, "rule_names": [ "MALWARE_WIN_KIDO_T1_ARTIFACT", "MALWARE_WIN_KIDO_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/kido.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/kido", "updated_at": "2026-10-16" }, { "family": "killall", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_KILLALL_T1_ARTIFACT", "MALWARE_WIN_KILLALL_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/killall.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/killall", "updated_at": "2026-10-16" }, { "family": "killapp", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_KILLAPP_T1_ARTIFACT", "MALWARE_WIN_KILLAPP_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/killapp.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/killapp", "updated_at": "2026-10-16" }, { "family": "killdisk", "category": "wiper", "sample_count": 1, "rule_names": [ "MALWARE_WIN_KILLDISK_T1_ARTIFACT", "MALWARE_WIN_KILLDISK_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/killdisk.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/killdisk", "updated_at": "2026-10-16" }, { "family": "killmbr", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_KILLMBR_T1_ARTIFACT", "MALWARE_WIN_KILLMBR_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/killmbr.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/killmbr", "updated_at": "2026-10-16" }, { "family": "killnotes", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_KILLNOTES_T1_ARTIFACT", "MALWARE_WIN_KILLNOTES_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/killnotes.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/killnotes", "updated_at": "2026-10-16" }, { "family": "killproc", "category": "trojan", "sample_count": 141, "rule_names": [ "MALWARE_WIN_KILLPROC_T1_ARTIFACT", "MALWARE_WIN_KILLPROC_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/killproc.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/killproc", "updated_at": "2026-10-16" }, { "family": "killwin", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_KILLWIN_T1_ARTIFACT", "MALWARE_WIN_KILLWIN_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/killwin.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/killwin", "updated_at": "2026-10-16" }, { "family": "kingsoft", "category": "advanced_threat", "sample_count": 8, "rule_names": [ "MALWARE_WIN_KINGSOFT_T1_ARTIFACT", "MALWARE_WIN_KINGSOFT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/kingsoft.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/kingsoft", "updated_at": "2026-10-16" }, { "family": "kirts", "category": "ransomware", "sample_count": 13, "rule_names": [ "MALWARE_WIN_KIRTS_T1_ARTIFACT", "MALWARE_WIN_KIRTS_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/kirts.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/kirts", "updated_at": "2026-10-16" }, { "family": "kiser", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_KISER_T1_ARTIFACT", "MALWARE_WIN_KISER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/kiser.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/kiser", "updated_at": "2026-10-16" }, { "family": "kjwar5ju8ibgb", "category": "trojan", "sample_count": 1, "rule_names": [ "MALWARE_WIN_KJWAR5JU8IBGB_T1_ARTIFACT", "MALWARE_WIN_KJWAR5JU8IBGB_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/kjwar5ju8ibgb.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/kjwar5ju8ibgb", "updated_at": "2026-10-16" }, { "family": "klez", "category": "advanced_threat", "sample_count": 8, "rule_names": [ "MALWARE_WIN_KLEZ_T1_ARTIFACT", "MALWARE_WIN_KLEZ_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/klez.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/klez", "updated_at": "2026-10-16" }, { "family": "klone", "category": "ransomware", "sample_count": 7, "rule_names": [ "MALWARE_WIN_KLONE_T1_ARTIFACT", "MALWARE_WIN_KLONE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/klone.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/klone", "updated_at": "2026-10-16" }, { "family": "klozet", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_KLOZET_T1_ARTIFACT", "MALWARE_WIN_KLOZET_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/klozet.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/klozet", "updated_at": "2026-10-16" }, { "family": "kmsactivator", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_KMSACTIVATOR_T1_ARTIFACT", "MALWARE_WIN_KMSACTIVATOR_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/kmsactivator.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/kmsactivator", "updated_at": "2026-10-16" }, { "family": "kmuaaovs", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_KMUAAOVS_T1_ARTIFACT", "MALWARE_WIN_KMUAAOVS_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/kmuaaovs.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/kmuaaovs", "updated_at": "2026-10-16" }, { "family": "koal", "category": "ransomware", "sample_count": 3, "rule_names": [ "MALWARE_WIN_KOAL_T1_ARTIFACT", "MALWARE_WIN_KOAL_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/koal.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/koal", "updated_at": "2026-10-16" }, { "family": "kolab", "category": "worm", "sample_count": 219, "rule_names": [ "MALWARE_WIN_KOLAB_T1_ARTIFACT", "MALWARE_WIN_KOLAB_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/kolab.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/kolab", "updated_at": "2026-10-16" }, { "family": "kolabc", "category": "worm", "sample_count": 143, "rule_names": [ "MALWARE_WIN_KOLABC_T1_ARTIFACT", "MALWARE_WIN_KOLABC_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/kolabc.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/kolabc", "updated_at": "2026-10-16" }, { "family": "kolovorot", "category": "ransomware", "sample_count": 18, "rule_names": [ "MALWARE_WIN_KOLOVOROT_T1_ARTIFACT", "MALWARE_WIN_KOLOVOROT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/kolovorot.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/kolovorot", "updated_at": "2026-10-16" }, { "family": "komilet", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_KOMILET_T1_ARTIFACT", "MALWARE_WIN_KOMILET_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/komilet.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/komilet", "updated_at": "2026-10-16" }, { "family": "komodia", "category": "advanced_threat", "sample_count": 7, "rule_names": [ "MALWARE_WIN_KOMODIA_T1_ARTIFACT", "MALWARE_WIN_KOMODIA_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/komodia.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/komodia", "updated_at": "2026-10-16" }, { "family": "konni", "category": "trojan", "sample_count": 1, "rule_names": [ "MALWARE_WIN_KONNI_T1_ARTIFACT", "MALWARE_WIN_KONNI_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/konni.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/konni", "updated_at": "2026-10-16" }, { "family": "konus", "category": "ransomware", "sample_count": 3, "rule_names": [ "MALWARE_WIN_KONUS_T1_ARTIFACT", "MALWARE_WIN_KONUS_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/konus.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/konus", "updated_at": "2026-10-16" }, { "family": "koobcafe", "category": "ransomware", "sample_count": 3, "rule_names": [ "MALWARE_WIN_KOOBCAFE_T1_ARTIFACT", "MALWARE_WIN_KOOBCAFE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/koobcafe.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/koobcafe", "updated_at": "2026-10-16" }, { "family": "koobface", "category": "worm", "sample_count": 350, "rule_names": [ "MALWARE_WIN_KOOBFACE_T1_ARTIFACT", "MALWARE_WIN_KOOBFACE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/koobface.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/koobface", "updated_at": "2026-10-16" }, { "family": "korad", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_KORAD_T1_ARTIFACT", "MALWARE_WIN_KORAD_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/korad.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/korad", "updated_at": "2026-10-16" }, { "family": "korplug", "category": "trojan", "sample_count": 10, "rule_names": [ "MALWARE_WIN_KORPLUG_T1_ARTIFACT", "MALWARE_WIN_KORPLUG_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/korplug.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/korplug", "updated_at": "2026-10-16" }, { "family": "koutodoor", "category": "backdoor", "sample_count": 11, "rule_names": [ "MALWARE_WIN_KOUTODOOR_T1_ARTIFACT", "MALWARE_WIN_KOUTODOOR_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/koutodoor.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/koutodoor", "updated_at": "2026-10-16" }, { "family": "kovloer", "category": "ransomware", "sample_count": 2, "rule_names": [ "MALWARE_WIN_KOVLOER_T1_ARTIFACT", "MALWARE_WIN_KOVLOER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/kovloer.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/kovloer", "updated_at": "2026-10-16" }, { "family": "kovter", "category": "trojan", "sample_count": 2414, "rule_names": [ "MALWARE_WIN_KOVTER_T1_ARTIFACT", "MALWARE_WIN_KOVTER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/kovter.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/kovter", "updated_at": "2026-10-16" }, { "family": "krachulka", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_KRACHULKA_T1_ARTIFACT", "MALWARE_WIN_KRACHULKA_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/krachulka.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/krachulka", "updated_at": "2026-10-16" }, { "family": "kraddare", "category": "ransomware", "sample_count": 13, "rule_names": [ "MALWARE_WIN_KRADDARE_T1_ARTIFACT", "MALWARE_WIN_KRADDARE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/kraddare.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/kraddare", "updated_at": "2026-10-16" }, { "family": "kradword", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_KRADWORD_T1_ARTIFACT", "MALWARE_WIN_KRADWORD_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/kradword.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/kradword", "updated_at": "2026-10-16" }, { "family": "kraken", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_KRAKEN_T1_ARTIFACT", "MALWARE_WIN_KRAKEN_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/kraken.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/kraken", "updated_at": "2026-10-16" }, { "family": "krakencryptor", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_KRAKENCRYPTOR_T1_ARTIFACT", "MALWARE_WIN_KRAKENCRYPTOR_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/krakencryptor.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/krakencryptor", "updated_at": "2026-10-16" }, { "family": "krament", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_KRAMENT_T1_ARTIFACT", "MALWARE_WIN_KRAMENT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/krament.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/krament", "updated_at": "2026-10-16" }, { "family": "kranet", "category": "trojan", "sample_count": 1, "rule_names": [ "MALWARE_WIN_KRANET_T1_ARTIFACT", "MALWARE_WIN_KRANET_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/kranet.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/kranet", "updated_at": "2026-10-16" }, { "family": "krbanker", "category": "trojan", "sample_count": 21, "rule_names": [ "MALWARE_WIN_KRBANKER_T1_ARTIFACT", "MALWARE_WIN_KRBANKER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/krbanker.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/krbanker", "updated_at": "2026-10-16" }, { "family": "krdr", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_KRDR_T1_ARTIFACT", "MALWARE_WIN_KRDR_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/krdr.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/krdr", "updated_at": "2026-10-16" }, { "family": "krepper", "category": "trojan", "sample_count": 3, "rule_names": [ "MALWARE_WIN_KREPPER_T1_ARTIFACT", "MALWARE_WIN_KREPPER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/krepper.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/krepper", "updated_at": "2026-10-16" }, { "family": "krilog", "category": "trojan", "sample_count": 1, "rule_names": [ "MALWARE_WIN_KRILOG_T1_ARTIFACT", "MALWARE_WIN_KRILOG_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/krilog.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/krilog", "updated_at": "2026-10-16" }, { "family": "kriskynote", "category": "ransomware", "sample_count": 4, "rule_names": [ "MALWARE_WIN_KRISKYNOTE_T1_ARTIFACT", "MALWARE_WIN_KRISKYNOTE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/kriskynote.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/kriskynote", "updated_at": "2026-10-16" }, { "family": "krolol", "category": "ransomware", "sample_count": 2, "rule_names": [ "MALWARE_WIN_KROLOL_T1_ARTIFACT", "MALWARE_WIN_KROLOL_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/krolol.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/krolol", "updated_at": "2026-10-16" }, { "family": "krserv", "category": "ransomware", "sample_count": 16, "rule_names": [ "MALWARE_WIN_KRSERV_T1_ARTIFACT", "MALWARE_WIN_KRSERV_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/krserv.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/krserv", "updated_at": "2026-10-16" }, { "family": "krucky", "category": "ransomware", "sample_count": 22, "rule_names": [ "MALWARE_WIN_KRUCKY_T1_ARTIFACT", "MALWARE_WIN_KRUCKY_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/krucky.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/krucky", "updated_at": "2026-10-16" }, { "family": "krunchy", "category": "ransomware", "sample_count": 3, "rule_names": [ "MALWARE_WIN_KRUNCHY_T1_ARTIFACT", "MALWARE_WIN_KRUNCHY_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/krunchy.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/krunchy", "updated_at": "2026-10-16" }, { "family": "kryptpck", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_KRYPTPCK_T1_ARTIFACT", "MALWARE_WIN_KRYPTPCK_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/kryptpck.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/kryptpck", "updated_at": "2026-10-16" }, { "family": "kryptstarter", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_KRYPTSTARTER_T1_ARTIFACT", "MALWARE_WIN_KRYPTSTARTER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/kryptstarter.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/kryptstarter", "updated_at": "2026-10-16" }, { "family": "kryptyk", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_KRYPTYK_T1_ARTIFACT", "MALWARE_WIN_KRYPTYK_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/kryptyk.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/kryptyk", "updated_at": "2026-10-16" }, { "family": "ksdler", "category": "ransomware", "sample_count": 9, "rule_names": [ "MALWARE_WIN_KSDLER_T1_ARTIFACT", "MALWARE_WIN_KSDLER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/ksdler.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/ksdler", "updated_at": "2026-10-16" }, { "family": "kuaiba", "category": "adware", "sample_count": 53, "rule_names": [ "MALWARE_WIN_KUAIBA_T1_ARTIFACT", "MALWARE_WIN_KUAIBA_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/kuaiba.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/kuaiba", "updated_at": "2026-10-16" }, { "family": "kuaizip", "category": "adware", "sample_count": 483, "rule_names": [ "MALWARE_WIN_KUAIZIP_T1_ARTIFACT", "MALWARE_WIN_KUAIZIP_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/kuaizip.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/kuaizip", "updated_at": "2026-10-16" }, { "family": "kuluoz", "category": "trojan", "sample_count": 22, "rule_names": [ "MALWARE_WIN_KULUOZ_T1_ARTIFACT", "MALWARE_WIN_KULUOZ_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/kuluoz.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/kuluoz", "updated_at": "2026-10-16" }, { "family": "kuping", "category": "advanced_threat", "sample_count": 4, "rule_names": [ "MALWARE_WIN_KUPING_T1_ARTIFACT", "MALWARE_WIN_KUPING_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/kuping.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/kuping", "updated_at": "2026-10-16" }, { "family": "kura", "category": "trojan", "sample_count": 1, "rule_names": [ "MALWARE_WIN_KURA_T1_ARTIFACT", "MALWARE_WIN_KURA_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/kura.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/kura", "updated_at": "2026-10-16" }, { "family": "kuzitui", "category": "adware", "sample_count": 194, "rule_names": [ "MALWARE_WIN_KUZITUI_T1_ARTIFACT", "MALWARE_WIN_KUZITUI_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/kuzitui.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/kuzitui", "updated_at": "2026-10-16" }, { "family": "kwampirs", "category": "trojan", "sample_count": 3, "rule_names": [ "MALWARE_WIN_KWAMPIRS_T1_ARTIFACT", "MALWARE_WIN_KWAMPIRS_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/kwampirs.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/kwampirs", "updated_at": "2026-10-16" }, { "family": "kykymber", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_KYKYMBER_T1_ARTIFACT", "MALWARE_WIN_KYKYMBER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/kykymber.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/kykymber", "updated_at": "2026-10-16" }, { "family": "kz4aamkfbloj", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_KZ4AAMKFBLOJ_T1_ARTIFACT", "MALWARE_WIN_KZ4AAMKFBLOJ_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/kz4aamkfbloj.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/kz4aamkfbloj", "updated_at": "2026-10-16" }, { "family": "laban", "category": "ransomware", "sample_count": 5, "rule_names": [ "MALWARE_WIN_LABAN_T1_ARTIFACT", "MALWARE_WIN_LABAN_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/laban.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/laban", "updated_at": "2026-10-16" }, { "family": "lamer", "category": "worm", "sample_count": 894, "rule_names": [ "MALWARE_WIN_LAMER_T1_ARTIFACT", "MALWARE_WIN_LAMER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/lamer.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/lamer", "updated_at": "2026-10-16" }, { "family": "lanfiltrator", "category": "trojan", "sample_count": 0, "rule_names": [ "MALWARE_WIN_LANFILTRATOR_T1_ARTIFACT", "MALWARE_WIN_LANFILTRATOR_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/lanfiltrator.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/lanfiltrator", "updated_at": "2026-10-16" }, { "family": "lanxue", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_LANXUE_T1_ARTIFACT", "MALWARE_WIN_LANXUE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/lanxue.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/lanxue", "updated_at": "2026-10-16" }, { "family": "lapka", "category": "ransomware", "sample_count": 3, "rule_names": [ "MALWARE_WIN_LAPKA_T1_ARTIFACT", "MALWARE_WIN_LAPKA_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/lapka.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/lapka", "updated_at": "2026-10-16" }, { "family": "laqma", "category": "trojan", "sample_count": 204, "rule_names": [ "MALWARE_WIN_LAQMA_T1_ARTIFACT", "MALWARE_WIN_LAQMA_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/laqma.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/laqma", "updated_at": "2026-10-16" }, { "family": "launcher", "category": "ransomware", "sample_count": 2, "rule_names": [ "MALWARE_WIN_LAUNCHER_T1_ARTIFACT", "MALWARE_WIN_LAUNCHER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/launcher.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/launcher", "updated_at": "2026-10-16" }, { "family": "lazagne", "category": "advanced_threat", "sample_count": 6, "rule_names": [ "MALWARE_WIN_LAZAGNE_T1_ARTIFACT", "MALWARE_WIN_LAZAGNE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/lazagne.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/lazagne", "updated_at": "2026-10-16" }, { "family": "ldpinch", "category": "infostealer", "sample_count": 38, "rule_names": [ "MALWARE_WIN_LDPINCH_T1_ARTIFACT", "MALWARE_WIN_LDPINCH_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/ldpinch.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/ldpinch", "updated_at": "2026-10-16" }, { "family": "lebag", "category": "ransomware", "sample_count": 9, "rule_names": [ "MALWARE_WIN_LEBAG_T1_ARTIFACT", "MALWARE_WIN_LEBAG_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/lebag.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/lebag", "updated_at": "2026-10-16" }, { "family": "ledruppi", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_LEDRUPPI_T1_ARTIFACT", "MALWARE_WIN_LEDRUPPI_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/ledruppi.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/ledruppi", "updated_at": "2026-10-16" }, { "family": "leivion", "category": "ransomware", "sample_count": 6, "rule_names": [ "MALWARE_WIN_LEIVION_T1_ARTIFACT", "MALWARE_WIN_LEIVION_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/leivion.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/leivion", "updated_at": "2026-10-16" }, { "family": "lemoore", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_LEMOORE_T1_ARTIFACT", "MALWARE_WIN_LEMOORE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/lemoore.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/lemoore", "updated_at": "2026-10-16" }, { "family": "lenwadu", "category": "ransomware", "sample_count": 3, "rule_names": [ "MALWARE_WIN_LENWADU_T1_ARTIFACT", "MALWARE_WIN_LENWADU_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/lenwadu.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/lenwadu", "updated_at": "2026-10-16" }, { "family": "leopard", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_LEOPARD_T1_ARTIFACT", "MALWARE_WIN_LEOPARD_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/leopard.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/leopard", "updated_at": "2026-10-16" }, { "family": "lethic", "category": "spam_bot", "sample_count": 4879, "rule_names": [ "MALWARE_WIN_LETHIC_T1_ARTIFACT", "MALWARE_WIN_LETHIC_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/lethic.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/lethic", "updated_at": "2026-10-16" }, { "family": "leymo", "category": "ransomware", "sample_count": 2, "rule_names": [ "MALWARE_WIN_LEYMO_T1_ARTIFACT", "MALWARE_WIN_LEYMO_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/leymo.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/leymo", "updated_at": "2026-10-16" }, { "family": "libie", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_LIBIE_T1_ARTIFACT", "MALWARE_WIN_LIBIE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/libie.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/libie", "updated_at": "2026-10-16" }, { "family": "libsam", "category": "advanced_threat", "sample_count": 1, "rule_names": [ "MALWARE_WIN_LIBSAM_T1_ARTIFACT", "MALWARE_WIN_LIBSAM_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/libsam.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/libsam", "updated_at": "2026-10-16" }, { "family": "liev", "category": "ransomware", "sample_count": 3, "rule_names": [ "MALWARE_WIN_LIEV_T1_ARTIFACT", "MALWARE_WIN_LIEV_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/liev.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/liev", "updated_at": "2026-10-16" }, { "family": "lightlogger", "category": "advanced_threat", "sample_count": 2, "rule_names": [ "MALWARE_WIN_LIGHTLOGGER_T1_ARTIFACT", "MALWARE_WIN_LIGHTLOGGER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/lightlogger.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/lightlogger", "updated_at": "2026-10-16" }, { "family": "lightmoon", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_LIGHTMOON_T1_ARTIFACT", "MALWARE_WIN_LIGHTMOON_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/lightmoon.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/lightmoon", "updated_at": "2026-10-16" }, { "family": "lightsee", "category": "ransomware", "sample_count": 2, "rule_names": [ "MALWARE_WIN_LIGHTSEE_T1_ARTIFACT", "MALWARE_WIN_LIGHTSEE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/lightsee.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/lightsee", "updated_at": "2026-10-16" }, { "family": "liimpact", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_LIIMPACT_T1_ARTIFACT", "MALWARE_WIN_LIIMPACT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/liimpact.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/liimpact", "updated_at": "2026-10-16" }, { "family": "lineage", "category": "advanced_threat", "sample_count": 2, "rule_names": [ "MALWARE_WIN_LINEAGE_T1_ARTIFACT", "MALWARE_WIN_LINEAGE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/lineage.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/lineage", "updated_at": "2026-10-16" }, { "family": "linkhortry", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_LINKHORTRY_T1_ARTIFACT", "MALWARE_WIN_LINKHORTRY_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/linkhortry.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/linkhortry", "updated_at": "2026-10-16" }, { "family": "linkular", "category": "advanced_threat", "sample_count": 3, "rule_names": [ "MALWARE_WIN_LINKULAR_T1_ARTIFACT", "MALWARE_WIN_LINKULAR_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/linkular.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/linkular", "updated_at": "2026-10-16" }, { "family": "linkury", "category": "adware", "sample_count": 1194, "rule_names": [ "MALWARE_WIN_LINKURY_T1_ARTIFACT", "MALWARE_WIN_LINKURY_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/linkury.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/linkury", "updated_at": "2026-10-16" }, { "family": "lipler", "category": "ransomware", "sample_count": 3, "rule_names": [ "MALWARE_WIN_LIPLER_T1_ARTIFACT", "MALWARE_WIN_LIPLER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/lipler.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/lipler", "updated_at": "2026-10-16" }, { "family": "listicka", "category": "ransomware", "sample_count": 4, "rule_names": [ "MALWARE_WIN_LISTICKA_T1_ARTIFACT", "MALWARE_WIN_LISTICKA_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/listicka.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/listicka", "updated_at": "2026-10-16" }, { "family": "litmus", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_LITMUS_T1_ARTIFACT", "MALWARE_WIN_LITMUS_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/litmus.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/litmus", "updated_at": "2026-10-16" }, { "family": "liudoor", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_LIUDOOR_T1_ARTIFACT", "MALWARE_WIN_LIUDOOR_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/liudoor.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/liudoor", "updated_at": "2026-10-16" }, { "family": "liuliangbao", "category": "advanced_threat", "sample_count": 2, "rule_names": [ "MALWARE_WIN_LIULIANGBAO_T1_ARTIFACT", "MALWARE_WIN_LIULIANGBAO_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/liuliangbao.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/liuliangbao", "updated_at": "2026-10-16" }, { "family": "liusky", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_LIUSKY_T1_ARTIFACT", "MALWARE_WIN_LIUSKY_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/liusky.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/liusky", "updated_at": "2026-10-16" }, { "family": "lixeaqbyzsj", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_LIXEAQBYZSJ_T1_ARTIFACT", "MALWARE_WIN_LIXEAQBYZSJ_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/lixeaqbyzsj.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/lixeaqbyzsj", "updated_at": "2026-10-16" }, { "family": "ljoiner", "category": "ransomware", "sample_count": 2, "rule_names": [ "MALWARE_WIN_LJOINER_T1_ARTIFACT", "MALWARE_WIN_LJOINER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/ljoiner.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/ljoiner", "updated_at": "2026-10-16" }, { "family": "llac", "category": "trojan", "sample_count": 104, "rule_names": [ "MALWARE_WIN_LLAC_T1_ARTIFACT", "MALWARE_WIN_LLAC_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/llac.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/llac", "updated_at": "2026-10-16" }, { "family": "lmir", "category": "infostealer", "sample_count": 47, "rule_names": [ "MALWARE_WIN_LMIR_T1_ARTIFACT", "MALWARE_WIN_LMIR_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/lmir.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/lmir", "updated_at": "2026-10-16" }, { "family": "lmkfrhivlcfba", "category": "trojan", "sample_count": 1, "rule_names": [ "MALWARE_WIN_LMKFRHIVLCFBA_T1_ARTIFACT", "MALWARE_WIN_LMKFRHIVLCFBA_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/lmkfrhivlcfba.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/lmkfrhivlcfba", "updated_at": "2026-10-16" }, { "family": "loader", "category": "ransomware", "sample_count": 9, "rule_names": [ "MALWARE_WIN_LOADER_T1_ARTIFACT", "MALWARE_WIN_LOADER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/loader.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/loader", "updated_at": "2026-10-16" }, { "family": "loadmoney", "category": "adware", "sample_count": 398, "rule_names": [ "MALWARE_WIN_LOADMONEY_T1_ARTIFACT", "MALWARE_WIN_LOADMONEY_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/loadmoney.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/loadmoney", "updated_at": "2026-10-16" }, { "family": "lockbit", "category": "ransomware", "sample_count": 340, "rule_names": [ "MALWARE_WIN_LOCKBIT_T1_ARTIFACT", "MALWARE_WIN_LOCKBIT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/lockbit.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/lockbit", "updated_at": "2026-10-16" }, { "family": "lockcrypt", "category": "ransomware", "sample_count": 2, "rule_names": [ "MALWARE_WIN_LOCKCRYPT_T1_ARTIFACT", "MALWARE_WIN_LOCKCRYPT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/lockcrypt.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/lockcrypt", "updated_at": "2026-10-16" }, { "family": "lockpos", "category": "trojan", "sample_count": 1, "rule_names": [ "MALWARE_WIN_LOCKPOS_T1_ARTIFACT", "MALWARE_WIN_LOCKPOS_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/lockpos.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/lockpos", "updated_at": "2026-10-16" }, { "family": "lockscreen", "category": "ransomware", "sample_count": 27, "rule_names": [ "MALWARE_WIN_LOCKSCREEN_T1_ARTIFACT", "MALWARE_WIN_LOCKSCREEN_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/lockscreen.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/lockscreen", "updated_at": "2026-10-16" }, { "family": "locky", "category": "ransomware", "sample_count": 11, "rule_names": [ "MALWARE_WIN_LOCKY_T1_ARTIFACT", "MALWARE_WIN_LOCKY_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/locky.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/locky", "updated_at": "2026-10-16" }, { "family": "lockyc", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_LOCKYC_T1_ARTIFACT", "MALWARE_WIN_LOCKYC_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/lockyc.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/lockyc", "updated_at": "2026-10-16" }, { "family": "lodbak", "category": "ransomware", "sample_count": 3, "rule_names": [ "MALWARE_WIN_LODBAK_T1_ARTIFACT", "MALWARE_WIN_LODBAK_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/lodbak.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/lodbak", "updated_at": "2026-10-16" }, { "family": "logicielsespions", "category": "advanced_threat", "sample_count": 1, "rule_names": [ "MALWARE_WIN_LOGICIELSESPIONS_T1_ARTIFACT", "MALWARE_WIN_LOGICIELSESPIONS_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/logicielsespions.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/logicielsespions", "updated_at": "2026-10-16" }, { "family": "lojulox", "category": "ransomware", "sample_count": 2, "rule_names": [ "MALWARE_WIN_LOJULOX_T1_ARTIFACT", "MALWARE_WIN_LOJULOX_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/lojulox.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/lojulox", "updated_at": "2026-10-16" }, { "family": "loki", "category": "trojan", "sample_count": 5, "rule_names": [ "MALWARE_WIN_LOKI_T1_ARTIFACT", "MALWARE_WIN_LOKI_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/loki.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/loki", "updated_at": "2026-10-16" }, { "family": "lokibot", "category": "infostealer", "sample_count": 55, "rule_names": [ "MALWARE_WIN_LOKIBOT_T1_ARTIFACT", "MALWARE_WIN_LOKIBOT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/lokibot.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/lokibot", "updated_at": "2026-10-16" }, { "family": "lolbot", "category": "worm", "sample_count": 374, "rule_names": [ "MALWARE_WIN_LOLBOT_T1_ARTIFACT", "MALWARE_WIN_LOLBOT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/lolbot.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/lolbot", "updated_at": "2026-10-16" }, { "family": "lollipop", "category": "advanced_threat", "sample_count": 10, "rule_names": [ "MALWARE_WIN_LOLLIPOP_T1_ARTIFACT", "MALWARE_WIN_LOLLIPOP_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/lollipop.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/lollipop", "updated_at": "2026-10-16" }, { "family": "lolojan", "category": "ransomware", "sample_count": 7, "rule_names": [ "MALWARE_WIN_LOLOJAN_T1_ARTIFACT", "MALWARE_WIN_LOLOJAN_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/lolojan.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/lolojan", "updated_at": "2026-10-16" }, { "family": "look2me", "category": "trojan", "sample_count": 1, "rule_names": [ "MALWARE_WIN_LOOK2ME_T1_ARTIFACT", "MALWARE_WIN_LOOK2ME_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/look2me.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/look2me", "updated_at": "2026-10-16" }, { "family": "loops", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_LOOPS_T1_ARTIFACT", "MALWARE_WIN_LOOPS_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/loops.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/loops", "updated_at": "2026-10-16" }, { "family": "loring", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_LORING_T1_ARTIFACT", "MALWARE_WIN_LORING_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/loring.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/loring", "updated_at": "2026-10-16" }, { "family": "losabel", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_LOSABEL_T1_ARTIFACT", "MALWARE_WIN_LOSABEL_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/losabel.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/losabel", "updated_at": "2026-10-16" }, { "family": "loskad", "category": "ransomware", "sample_count": 7, "rule_names": [ "MALWARE_WIN_LOSKAD_T1_ARTIFACT", "MALWARE_WIN_LOSKAD_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/loskad.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/loskad", "updated_at": "2026-10-16" }, { "family": "lost_door", "category": "rat", "sample_count": 0, "rule_names": [ "MALWARE_WIN_LOST_DOOR_T1_ARTIFACT", "MALWARE_WIN_LOST_DOOR_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/lost_door.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/lost_door", "updated_at": "2026-10-16" }, { "family": "lotoor", "category": "trojan", "sample_count": 6, "rule_names": [ "MALWARE_WIN_LOTOOR_T1_ARTIFACT", "MALWARE_WIN_LOTOOR_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/lotoor.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/lotoor", "updated_at": "2026-10-16" }, { "family": "loveletter", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_LOVELETTER_T1_ARTIFACT", "MALWARE_WIN_LOVELETTER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/loveletter.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/loveletter", "updated_at": "2026-10-16" }, { "family": "lovgate", "category": "worm", "sample_count": 15, "rule_names": [ "MALWARE_WIN_LOVGATE_T1_ARTIFACT", "MALWARE_WIN_LOVGATE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/lovgate.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/lovgate", "updated_at": "2026-10-16" }, { "family": "lowzones", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_LOWZONES_T1_ARTIFACT", "MALWARE_WIN_LOWZONES_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/lowzones.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/lowzones", "updated_at": "2026-10-16" }, { "family": "loyeetro", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_LOYEETRO_T1_ARTIFACT", "MALWARE_WIN_LOYEETRO_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/loyeetro.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/loyeetro", "updated_at": "2026-10-16" }, { "family": "lozer", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_LOZER_T1_ARTIFACT", "MALWARE_WIN_LOZER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/lozer.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/lozer", "updated_at": "2026-10-16" }, { "family": "lpt8mkfbyfsjgnkb", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_LPT8MKFBYFSJGNKB_T1_ARTIFACT", "MALWARE_WIN_LPT8MKFBYFSJGNKB_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/lpt8mkfbyfsjgnkb.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/lpt8mkfbyfsjgnkb", "updated_at": "2026-10-16" }, { "family": "lsslogger", "category": "trojan", "sample_count": 4, "rule_names": [ "MALWARE_WIN_LSSLOGGER_T1_ARTIFACT", "MALWARE_WIN_LSSLOGGER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/lsslogger.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/lsslogger", "updated_at": "2026-10-16" }, { "family": "lucky", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_LUCKY_T1_ARTIFACT", "MALWARE_WIN_LUCKY_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/lucky.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/lucky", "updated_at": "2026-10-16" }, { "family": "ludbaruma", "category": "worm", "sample_count": 283, "rule_names": [ "MALWARE_WIN_LUDBARUMA_T1_ARTIFACT", "MALWARE_WIN_LUDBARUMA_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/ludbaruma.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/ludbaruma", "updated_at": "2026-10-16" }, { "family": "luder", "category": "ransomware", "sample_count": 3, "rule_names": [ "MALWARE_WIN_LUDER_T1_ARTIFACT", "MALWARE_WIN_LUDER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/luder.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/luder", "updated_at": "2026-10-16" }, { "family": "ludicrouz", "category": "ransomware", "sample_count": 2, "rule_names": [ "MALWARE_WIN_LUDICROUZ_T1_ARTIFACT", "MALWARE_WIN_LUDICROUZ_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/ludicrouz.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/ludicrouz", "updated_at": "2026-10-16" }, { "family": "luhn", "category": "trojan", "sample_count": 1, "rule_names": [ "MALWARE_WIN_LUHN_T1_ARTIFACT", "MALWARE_WIN_LUHN_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/luhn.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/luhn", "updated_at": "2026-10-16" }, { "family": "lulusoftware", "category": "advanced_threat", "sample_count": 2, "rule_names": [ "MALWARE_WIN_LULUSOFTWARE_T1_ARTIFACT", "MALWARE_WIN_LULUSOFTWARE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/lulusoftware.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/lulusoftware", "updated_at": "2026-10-16" }, { "family": "luminorat", "category": "trojan", "sample_count": 1, "rule_names": [ "MALWARE_WIN_LUMINORAT_T1_ARTIFACT", "MALWARE_WIN_LUMINORAT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/luminorat.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/luminorat", "updated_at": "2026-10-16" }, { "family": "luna", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_LUNA_T1_ARTIFACT", "MALWARE_WIN_LUNA_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/luna.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/luna", "updated_at": "2026-10-16" }, { "family": "lunam", "category": "ransomware", "sample_count": 9, "rule_names": [ "MALWARE_WIN_LUNAM_T1_ARTIFACT", "MALWARE_WIN_LUNAM_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/lunam.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/lunam", "updated_at": "2026-10-16" }, { "family": "lurk", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_LURK_T1_ARTIFACT", "MALWARE_WIN_LURK_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/lurk.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/lurk", "updated_at": "2026-10-16" }, { "family": "lyckriks", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_LYCKRIKS_T1_ARTIFACT", "MALWARE_WIN_LYCKRIKS_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/lyckriks.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/lyckriks", "updated_at": "2026-10-16" }, { "family": "lydra", "category": "ransomware", "sample_count": 8, "rule_names": [ "MALWARE_WIN_LYDRA_T1_ARTIFACT", "MALWARE_WIN_LYDRA_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/lydra.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/lydra", "updated_at": "2026-10-16" }, { "family": "lynx", "category": "infostealer", "sample_count": 19, "rule_names": [ "MALWARE_WIN_LYNX_T1_ARTIFACT", "MALWARE_WIN_LYNX_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/lynx.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/lynx", "updated_at": "2026-10-16" }, { "family": "lyposit", "category": "ransomware", "sample_count": 27, "rule_names": [ "MALWARE_WIN_LYPOSIT_T1_ARTIFACT", "MALWARE_WIN_LYPOSIT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/lyposit.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/lyposit", "updated_at": "2026-10-16" }, { "family": "lyrics", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_LYRICS_T1_ARTIFACT", "MALWARE_WIN_LYRICS_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/lyrics.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/lyrics", "updated_at": "2026-10-16" }, { "family": "mabezat", "category": "worm", "sample_count": 36, "rule_names": [ "MALWARE_WIN_MABEZAT_T1_ARTIFACT", "MALWARE_WIN_MABEZAT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/mabezat.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/mabezat", "updated_at": "2026-10-16" }, { "family": "machaer", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_MACHAER_T1_ARTIFACT", "MALWARE_WIN_MACHAER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/machaer.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/machaer", "updated_at": "2026-10-16" }, { "family": "macoute", "category": "ransomware", "sample_count": 3, "rule_names": [ "MALWARE_WIN_MACOUTE_T1_ARTIFACT", "MALWARE_WIN_MACOUTE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/macoute.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/macoute", "updated_at": "2026-10-16" }, { "family": "macri", "category": "ransomware", "sample_count": 13, "rule_names": [ "MALWARE_WIN_MACRI_T1_ARTIFACT", "MALWARE_WIN_MACRI_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/macri.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/macri", "updated_at": "2026-10-16" }, { "family": "macrodrop", "category": "ransomware", "sample_count": 2, "rule_names": [ "MALWARE_WIN_MACRODROP_T1_ARTIFACT", "MALWARE_WIN_MACRODROP_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/macrodrop.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/macrodrop", "updated_at": "2026-10-16" }, { "family": "maener", "category": "cryptominer", "sample_count": 387, "rule_names": [ "MALWARE_WIN_MAENER_T1_ARTIFACT", "MALWARE_WIN_MAENER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/maener.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/maener", "updated_at": "2026-10-16" }, { "family": "maesorn", "category": "ransomware", "sample_count": 3, "rule_names": [ "MALWARE_WIN_MAESORN_T1_ARTIFACT", "MALWARE_WIN_MAESORN_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/maesorn.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/maesorn", "updated_at": "2026-10-16" }, { "family": "magala", "category": "trojan", "sample_count": 7, "rule_names": [ "MALWARE_WIN_MAGALA_T1_ARTIFACT", "MALWARE_WIN_MAGALA_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/magala.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/magala", "updated_at": "2026-10-16" }, { "family": "magania", "category": "trojan", "sample_count": 63, "rule_names": [ "MALWARE_WIN_MAGANIA_T1_ARTIFACT", "MALWARE_WIN_MAGANIA_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/magania.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/magania", "updated_at": "2026-10-16" }, { "family": "magic", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_MAGIC_T1_ARTIFACT", "MALWARE_WIN_MAGIC_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/magic.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/magic", "updated_at": "2026-10-16" }, { "family": "magistrcorr", "category": "advanced_threat", "sample_count": 1, "rule_names": [ "MALWARE_WIN_MAGISTRCORR_T1_ARTIFACT", "MALWARE_WIN_MAGISTRCORR_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/magistrcorr.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/magistrcorr", "updated_at": "2026-10-16" }, { "family": "magnat", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_MAGNAT_T1_ARTIFACT", "MALWARE_WIN_MAGNAT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/magnat.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/magnat", "updated_at": "2026-10-16" }, { "family": "magni", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_MAGNI_T1_ARTIFACT", "MALWARE_WIN_MAGNI_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/magni.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/magni", "updated_at": "2026-10-16" }, { "family": "mago", "category": "ransomware", "sample_count": 7, "rule_names": [ "MALWARE_WIN_MAGO_T1_ARTIFACT", "MALWARE_WIN_MAGO_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/mago.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/mago", "updated_at": "2026-10-16" }, { "family": "mahato", "category": "ransomware", "sample_count": 4, "rule_names": [ "MALWARE_WIN_MAHATO_T1_ARTIFACT", "MALWARE_WIN_MAHATO_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/mahato.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/mahato", "updated_at": "2026-10-16" }, { "family": "mailbot", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_MAILBOT_T1_ARTIFACT", "MALWARE_WIN_MAILBOT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/mailbot.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/mailbot", "updated_at": "2026-10-16" }, { "family": "mailcheck", "category": "trojan", "sample_count": 1, "rule_names": [ "MALWARE_WIN_MAILCHECK_T1_ARTIFACT", "MALWARE_WIN_MAILCHECK_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/mailcheck.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/mailcheck", "updated_at": "2026-10-16" }, { "family": "mailpassview", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_MAILPASSVIEW_T1_ARTIFACT", "MALWARE_WIN_MAILPASSVIEW_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/mailpassview.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/mailpassview", "updated_at": "2026-10-16" }, { "family": "mailru", "category": "adware", "sample_count": 174, "rule_names": [ "MALWARE_WIN_MAILRU_T1_ARTIFACT", "MALWARE_WIN_MAILRU_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/mailru.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/mailru", "updated_at": "2026-10-16" }, { "family": "mailspy", "category": "trojan", "sample_count": 1, "rule_names": [ "MALWARE_WIN_MAILSPY_T1_ARTIFACT", "MALWARE_WIN_MAILSPY_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/mailspy.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/mailspy", "updated_at": "2026-10-16" }, { "family": "malex", "category": "trojan", "sample_count": 30, "rule_names": [ "MALWARE_WIN_MALEX_T1_ARTIFACT", "MALWARE_WIN_MALEX_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/malex.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/malex", "updated_at": "2026-10-16" }, { "family": "malkryp", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_MALKRYP_T1_ARTIFACT", "MALWARE_WIN_MALKRYP_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/malkryp.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/malkryp", "updated_at": "2026-10-16" }, { "family": "malmaker", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_MALMAKER_T1_ARTIFACT", "MALWARE_WIN_MALMAKER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/malmaker.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/malmaker", "updated_at": "2026-10-16" }, { "family": "malushka", "category": "ransomware", "sample_count": 2, "rule_names": [ "MALWARE_WIN_MALUSHKA_T1_ARTIFACT", "MALWARE_WIN_MALUSHKA_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/malushka.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/malushka", "updated_at": "2026-10-16" }, { "family": "malwar", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_MALWAR_T1_ARTIFACT", "MALWARE_WIN_MALWAR_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/malwar.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/malwar", "updated_at": "2026-10-16" }, { "family": "malwarecrypter", "category": "ransomware", "sample_count": 10, "rule_names": [ "MALWARE_WIN_MALWARECRYPTER_T1_ARTIFACT", "MALWARE_WIN_MALWARECRYPTER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/malwarecrypter.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/malwarecrypter", "updated_at": "2026-10-16" }, { "family": "malwares", "category": "ransomware", "sample_count": 2, "rule_names": [ "MALWARE_WIN_MALWARES_T1_ARTIFACT", "MALWARE_WIN_MALWARES_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/malwares.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/malwares", "updated_at": "2026-10-16" }, { "family": "malxmr", "category": "advanced_threat", "sample_count": 1, "rule_names": [ "MALWARE_WIN_MALXMR_T1_ARTIFACT", "MALWARE_WIN_MALXMR_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/malxmr.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/malxmr", "updated_at": "2026-10-16" }, { "family": "mamianune", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_MAMIANUNE_T1_ARTIFACT", "MALWARE_WIN_MAMIANUNE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/mamianune.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/mamianune", "updated_at": "2026-10-16" }, { "family": "manbat", "category": "ransomware", "sample_count": 2, "rule_names": [ "MALWARE_WIN_MANBAT_T1_ARTIFACT", "MALWARE_WIN_MANBAT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/manbat.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/manbat", "updated_at": "2026-10-16" }, { "family": "mansabo", "category": "trojan", "sample_count": 98, "rule_names": [ "MALWARE_WIN_MANSABO_T1_ARTIFACT", "MALWARE_WIN_MANSABO_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/mansabo.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/mansabo", "updated_at": "2026-10-16" }, { "family": "mantana", "category": "ransomware", "sample_count": 2, "rule_names": [ "MALWARE_WIN_MANTANA_T1_ARTIFACT", "MALWARE_WIN_MANTANA_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/mantana.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/mantana", "updated_at": "2026-10-16" }, { "family": "manuscrypt", "category": "trojan", "sample_count": 2, "rule_names": [ "MALWARE_WIN_MANUSCRYPT_T1_ARTIFACT", "MALWARE_WIN_MANUSCRYPT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/manuscrypt.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/manuscrypt", "updated_at": "2026-10-16" }, { "family": "maplestory", "category": "trojan", "sample_count": 1, "rule_names": [ "MALWARE_WIN_MAPLESTORY_T1_ARTIFACT", "MALWARE_WIN_MAPLESTORY_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/maplestory.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/maplestory", "updated_at": "2026-10-16" }, { "family": "mapsgory", "category": "advanced_threat", "sample_count": 12, "rule_names": [ "MALWARE_WIN_MAPSGORY_T1_ARTIFACT", "MALWARE_WIN_MAPSGORY_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/mapsgory.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/mapsgory", "updated_at": "2026-10-16" }, { "family": "mapstosteal", "category": "trojan", "sample_count": 1, "rule_names": [ "MALWARE_WIN_MAPSTOSTEAL_T1_ARTIFACT", "MALWARE_WIN_MAPSTOSTEAL_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/mapstosteal.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/mapstosteal", "updated_at": "2026-10-16" }, { "family": "marketscore", "category": "advanced_threat", "sample_count": 2, "rule_names": [ "MALWARE_WIN_MARKETSCORE_T1_ARTIFACT", "MALWARE_WIN_MARKETSCORE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/marketscore.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/marketscore", "updated_at": "2026-10-16" }, { "family": "marocan", "category": "ransomware", "sample_count": 4, "rule_names": [ "MALWARE_WIN_MAROCAN_T1_ARTIFACT", "MALWARE_WIN_MAROCAN_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/marocan.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/marocan", "updated_at": "2026-10-16" }, { "family": "matrix", "category": "ransomware", "sample_count": 22, "rule_names": [ "MALWARE_WIN_MATRIX_T1_ARTIFACT", "MALWARE_WIN_MATRIX_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/matrix.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/matrix", "updated_at": "2026-10-16" }, { "family": "matsnu", "category": "ransomware", "sample_count": 2, "rule_names": [ "MALWARE_WIN_MATSNU_T1_ARTIFACT", "MALWARE_WIN_MATSNU_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/matsnu.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/matsnu", "updated_at": "2026-10-16" }, { "family": "maxdriver", "category": "trojan", "sample_count": 3, "rule_names": [ "MALWARE_WIN_MAXDRIVER_T1_ARTIFACT", "MALWARE_WIN_MAXDRIVER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/maxdriver.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/maxdriver", "updated_at": "2026-10-16" }, { "family": "maxsecure", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_MAXSECURE_T1_ARTIFACT", "MALWARE_WIN_MAXSECURE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/maxsecure.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/maxsecure", "updated_at": "2026-10-16" }, { "family": "mazben", "category": "ransomware", "sample_count": 4, "rule_names": [ "MALWARE_WIN_MAZBEN_T1_ARTIFACT", "MALWARE_WIN_MAZBEN_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/mazben.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/mazben", "updated_at": "2026-10-16" }, { "family": "mbrlock", "category": "ransomware", "sample_count": 7, "rule_names": [ "MALWARE_WIN_MBRLOCK_T1_ARTIFACT", "MALWARE_WIN_MBRLOCK_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/mbrlock.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/mbrlock", "updated_at": "2026-10-16" }, { "family": "mdeclass", "category": "ransomware", "sample_count": 3, "rule_names": [ "MALWARE_WIN_MDECLASS_T1_ARTIFACT", "MALWARE_WIN_MDECLASS_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/mdeclass.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/mdeclass", "updated_at": "2026-10-16" }, { "family": "mdrop", "category": "ransomware", "sample_count": 5, "rule_names": [ "MALWARE_WIN_MDROP_T1_ARTIFACT", "MALWARE_WIN_MDROP_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/mdrop.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/mdrop", "updated_at": "2026-10-16" }, { "family": "medfos", "category": "ransomware", "sample_count": 2, "rule_names": [ "MALWARE_WIN_MEDFOS_T1_ARTIFACT", "MALWARE_WIN_MEDFOS_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/medfos.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/medfos", "updated_at": "2026-10-16" }, { "family": "mediafinder", "category": "advanced_threat", "sample_count": 2, "rule_names": [ "MALWARE_WIN_MEDIAFINDER_T1_ARTIFACT", "MALWARE_WIN_MEDIAFINDER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/mediafinder.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/mediafinder", "updated_at": "2026-10-16" }, { "family": "mediaget", "category": "ransomware", "sample_count": 9, "rule_names": [ "MALWARE_WIN_MEDIAGET_T1_ARTIFACT", "MALWARE_WIN_MEDIAGET_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/mediaget.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/mediaget", "updated_at": "2026-10-16" }, { "family": "medialabs", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_MEDIALABS_T1_ARTIFACT", "MALWARE_WIN_MEDIALABS_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/medialabs.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/medialabs", "updated_at": "2026-10-16" }, { "family": "mediamagnet", "category": "advanced_threat", "sample_count": 7, "rule_names": [ "MALWARE_WIN_MEDIAMAGNET_T1_ARTIFACT", "MALWARE_WIN_MEDIAMAGNET_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/mediamagnet.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/mediamagnet", "updated_at": "2026-10-16" }, { "family": "mediamine", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_MEDIAMINE_T1_ARTIFACT", "MALWARE_WIN_MEDIAMINE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/mediamine.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/mediamine", "updated_at": "2026-10-16" }, { "family": "mediana", "category": "advanced_threat", "sample_count": 1, "rule_names": [ "MALWARE_WIN_MEDIANA_T1_ARTIFACT", "MALWARE_WIN_MEDIANA_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/mediana.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/mediana", "updated_at": "2026-10-16" }, { "family": "megasearch", "category": "advanced_threat", "sample_count": 5, "rule_names": [ "MALWARE_WIN_MEGASEARCH_T1_ARTIFACT", "MALWARE_WIN_MEGASEARCH_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/megasearch.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/megasearch", "updated_at": "2026-10-16" }, { "family": "meikehuayi", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_MEIKEHUAYI_T1_ARTIFACT", "MALWARE_WIN_MEIKEHUAYI_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/meikehuayi.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/meikehuayi", "updated_at": "2026-10-16" }, { "family": "meinhudong", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_MEINHUDONG_T1_ARTIFACT", "MALWARE_WIN_MEINHUDONG_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/meinhudong.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/meinhudong", "updated_at": "2026-10-16" }, { "family": "meinv", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_MEINV_T1_ARTIFACT", "MALWARE_WIN_MEINV_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/meinv.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/meinv", "updated_at": "2026-10-16" }, { "family": "mekotio", "category": "banking_trojan", "sample_count": 44, "rule_names": [ "MALWARE_WIN_MEKOTIO_T1_ARTIFACT", "MALWARE_WIN_MEKOTIO_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/mekotio.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/mekotio", "updated_at": "2026-10-16" }, { "family": "memery", "category": "trojan", "sample_count": 445, "rule_names": [ "MALWARE_WIN_MEMERY_T1_ARTIFACT", "MALWARE_WIN_MEMERY_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/memery.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/memery", "updated_at": "2026-10-16" }, { "family": "meno", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_MENO_T1_ARTIFACT", "MALWARE_WIN_MENO_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/meno.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/meno", "updated_at": "2026-10-16" }, { "family": "mensa", "category": "ransomware", "sample_count": 5, "rule_names": [ "MALWARE_WIN_MENSA_T1_ARTIFACT", "MALWARE_WIN_MENSA_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/mensa.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/mensa", "updated_at": "2026-10-16" }, { "family": "menti", "category": "advanced_threat", "sample_count": 11, "rule_names": [ "MALWARE_WIN_MENTI_T1_ARTIFACT", "MALWARE_WIN_MENTI_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/menti.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/menti", "updated_at": "2026-10-16" }, { "family": "mepaow", "category": "trojan", "sample_count": 68, "rule_names": [ "MALWARE_WIN_MEPAOW_T1_ARTIFACT", "MALWARE_WIN_MEPAOW_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/mepaow.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/mepaow", "updated_at": "2026-10-16" }, { "family": "messengerpass", "category": "trojan", "sample_count": 1, "rule_names": [ "MALWARE_WIN_MESSENGERPASS_T1_ARTIFACT", "MALWARE_WIN_MESSENGERPASS_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/messengerpass.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/messengerpass", "updated_at": "2026-10-16" }, { "family": "messiah", "category": "trojan", "sample_count": 0, "rule_names": [ "MALWARE_WIN_MESSIAH_T1_ARTIFACT", "MALWARE_WIN_MESSIAH_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/messiah.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/messiah", "updated_at": "2026-10-16" }, { "family": "metel", "category": "trojan", "sample_count": 2, "rule_names": [ "MALWARE_WIN_METEL_T1_ARTIFACT", "MALWARE_WIN_METEL_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/metel.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/metel", "updated_at": "2026-10-16" }, { "family": "meterpreter", "category": "hacktool", "sample_count": 78, "rule_names": [ "MALWARE_WIN_METERPRETER_T1_ARTIFACT", "MALWARE_WIN_METERPRETER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/meterpreter.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/meterpreter", "updated_at": "2026-10-16" }, { "family": "mewsspy", "category": "ransomware", "sample_count": 3, "rule_names": [ "MALWARE_WIN_MEWSSPY_T1_ARTIFACT", "MALWARE_WIN_MEWSSPY_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/mewsspy.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/mewsspy", "updated_at": "2026-10-16" }, { "family": "mezzo", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_MEZZO_T1_ARTIFACT", "MALWARE_WIN_MEZZO_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/mezzo.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/mezzo", "updated_at": "2026-10-16" }, { "family": "mi0ax8mhb4ji", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_MI0AX8MHB4JI_T1_ARTIFACT", "MALWARE_WIN_MI0AX8MHB4JI_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/mi0ax8mhb4ji.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/mi0ax8mhb4ji", "updated_at": "2026-10-16" }, { "family": "miancha", "category": "ransomware", "sample_count": 9, "rule_names": [ "MALWARE_WIN_MIANCHA_T1_ARTIFACT", "MALWARE_WIN_MIANCHA_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/miancha.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/miancha", "updated_at": "2026-10-16" }, { "family": "microfake", "category": "scareware", "sample_count": 14, "rule_names": [ "MALWARE_WIN_MICROFAKE_T1_ARTIFACT", "MALWARE_WIN_MICROFAKE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/microfake.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/microfake", "updated_at": "2026-10-16" }, { "family": "microjoin", "category": "ransomware", "sample_count": 9, "rule_names": [ "MALWARE_WIN_MICROJOIN_T1_ARTIFACT", "MALWARE_WIN_MICROJOIN_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/microjoin.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/microjoin", "updated_at": "2026-10-16" }, { "family": "micronames", "category": "trojan", "sample_count": 1, "rule_names": [ "MALWARE_WIN_MICRONAMES_T1_ARTIFACT", "MALWARE_WIN_MICRONAMES_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/micronames.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/micronames", "updated_at": "2026-10-16" }, { "family": "midia", "category": "ransomware", "sample_count": 11, "rule_names": [ "MALWARE_WIN_MIDIA_T1_ARTIFACT", "MALWARE_WIN_MIDIA_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/midia.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/midia", "updated_at": "2026-10-16" }, { "family": "midie", "category": "trojan", "sample_count": 341, "rule_names": [ "MALWARE_WIN_MIDIE_T1_ARTIFACT", "MALWARE_WIN_MIDIE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/midie.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/midie", "updated_at": "2026-10-16" }, { "family": "mikey", "category": "adware", "sample_count": 314, "rule_names": [ "MALWARE_WIN_MIKEY_T1_ARTIFACT", "MALWARE_WIN_MIKEY_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/mikey.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/mikey", "updated_at": "2026-10-16" }, { "family": "milicry", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_MILICRY_T1_ARTIFACT", "MALWARE_WIN_MILICRY_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/milicry.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/milicry", "updated_at": "2026-10-16" }, { "family": "mimikatz", "category": "credential_dumper", "sample_count": 41, "rule_names": [ "MALWARE_WIN_MIMIKATZ_T1_ARTIFACT", "MALWARE_WIN_MIMIKATZ_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/mimikatz.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/mimikatz", "updated_at": "2026-10-16" }, { "family": "mimilove", "category": "ransomware", "sample_count": 2, "rule_names": [ "MALWARE_WIN_MIMILOVE_T1_ARTIFACT", "MALWARE_WIN_MIMILOVE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/mimilove.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/mimilove", "updated_at": "2026-10-16" }, { "family": "mine", "category": "advanced_threat", "sample_count": 10, "rule_names": [ "MALWARE_WIN_MINE_T1_ARTIFACT", "MALWARE_WIN_MINE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/mine.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/mine", "updated_at": "2026-10-16" }, { "family": "minebicoin", "category": "ransomware", "sample_count": 2, "rule_names": [ "MALWARE_WIN_MINEBICOIN_T1_ARTIFACT", "MALWARE_WIN_MINEBICOIN_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/minebicoin.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/minebicoin", "updated_at": "2026-10-16" }, { "family": "minerbat", "category": "trojan", "sample_count": 2, "rule_names": [ "MALWARE_WIN_MINERBAT_T1_ARTIFACT", "MALWARE_WIN_MINERBAT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/minerbat.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/minerbat", "updated_at": "2026-10-16" }, { "family": "minerbot", "category": "ransomware", "sample_count": 8, "rule_names": [ "MALWARE_WIN_MINERBOT_T1_ARTIFACT", "MALWARE_WIN_MINERBOT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/minerbot.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/minerbot", "updated_at": "2026-10-16" }, { "family": "minggy", "category": "ransomware", "sample_count": 2, "rule_names": [ "MALWARE_WIN_MINGGY_T1_ARTIFACT", "MALWARE_WIN_MINGGY_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/minggy.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/minggy", "updated_at": "2026-10-16" }, { "family": "miniduke", "category": "trojan", "sample_count": 22, "rule_names": [ "MALWARE_WIN_MINIDUKE_T1_ARTIFACT", "MALWARE_WIN_MINIDUKE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/miniduke.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/miniduke", "updated_at": "2026-10-16" }, { "family": "minimal", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_MINIMAL_T1_ARTIFACT", "MALWARE_WIN_MINIMAL_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/minimal.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/minimal", "updated_at": "2026-10-16" }, { "family": "mintluks", "category": "infostealer", "sample_count": 330, "rule_names": [ "MALWARE_WIN_MINTLUKS_T1_ARTIFACT", "MALWARE_WIN_MINTLUKS_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/mintluks.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/mintluks", "updated_at": "2026-10-16" }, { "family": "mira", "category": "worm", "sample_count": 729, "rule_names": [ "MALWARE_WIN_MIRA_T1_ARTIFACT", "MALWARE_WIN_MIRA_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/mira.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/mira", "updated_at": "2026-10-16" }, { "family": "miragefox", "category": "trojan", "sample_count": 1, "rule_names": [ "MALWARE_WIN_MIRAGEFOX_T1_ARTIFACT", "MALWARE_WIN_MIRAGEFOX_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/miragefox.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/miragefox", "updated_at": "2026-10-16" }, { "family": "mirai", "category": "botnet", "sample_count": 1, "rule_names": [ "MALWARE_WIN_MIRAI_T1_ARTIFACT", "MALWARE_WIN_MIRAI_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/mirai.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/mirai", "updated_at": "2026-10-16" }, { "family": "mirc", "category": "trojan", "sample_count": 10, "rule_names": [ "MALWARE_WIN_MIRC_T1_ARTIFACT", "MALWARE_WIN_MIRC_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/mirc.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/mirc", "updated_at": "2026-10-16" }, { "family": "mirkov", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_MIRKOV_T1_ARTIFACT", "MALWARE_WIN_MIRKOV_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/mirkov.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/mirkov", "updated_at": "2026-10-16" }, { "family": "miuref", "category": "click_fraud", "sample_count": 7, "rule_names": [ "MALWARE_WIN_MIUREF_T1_ARTIFACT", "MALWARE_WIN_MIUREF_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/miuref.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/miuref", "updated_at": "2026-10-16" }, { "family": "mkar", "category": "ransomware", "sample_count": 4, "rule_names": [ "MALWARE_WIN_MKAR_T1_ARTIFACT", "MALWARE_WIN_MKAR_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/mkar.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/mkar", "updated_at": "2026-10-16" }, { "family": "mlwr", "category": "trojan", "sample_count": 3, "rule_names": [ "MALWARE_WIN_MLWR_T1_ARTIFACT", "MALWARE_WIN_MLWR_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/mlwr.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/mlwr", "updated_at": "2026-10-16" }, { "family": "mmnfbgfpueki", "category": "trojan", "sample_count": 1, "rule_names": [ "MALWARE_WIN_MMNFBGFPUEKI_T1_ARTIFACT", "MALWARE_WIN_MMNFBGFPUEKI_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/mmnfbgfpueki.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/mmnfbgfpueki", "updated_at": "2026-10-16" }, { "family": "mmorpg", "category": "trojan", "sample_count": 1, "rule_names": [ "MALWARE_WIN_MMORPG_T1_ARTIFACT", "MALWARE_WIN_MMORPG_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/mmorpg.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/mmorpg", "updated_at": "2026-10-16" }, { "family": "mmsfrmqm16ci", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_MMSFRMQM16CI_T1_ARTIFACT", "MALWARE_WIN_MMSFRMQM16CI_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/mmsfrmqm16ci.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/mmsfrmqm16ci", "updated_at": "2026-10-16" }, { "family": "mmxmr", "category": "trojan", "sample_count": 1, "rule_names": [ "MALWARE_WIN_MMXMR_T1_ARTIFACT", "MALWARE_WIN_MMXMR_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/mmxmr.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/mmxmr", "updated_at": "2026-10-16" }, { "family": "mobogenie", "category": "advanced_threat", "sample_count": 3, "rule_names": [ "MALWARE_WIN_MOBOGENIE_T1_ARTIFACT", "MALWARE_WIN_MOBOGENIE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/mobogenie.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/mobogenie", "updated_at": "2026-10-16" }, { "family": "moderate", "category": "generic_detection", "sample_count": 1146, "rule_names": [ "MALWARE_WIN_MODERATE_T1_ARTIFACT", "MALWARE_WIN_MODERATE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/moderate.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/moderate", "updated_at": "2026-10-16" }, { "family": "mods", "category": "advanced_threat", "sample_count": 5, "rule_names": [ "MALWARE_WIN_MODS_T1_ARTIFACT", "MALWARE_WIN_MODS_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/mods.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/mods", "updated_at": "2026-10-16" }, { "family": "mofin", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_MOFIN_T1_ARTIFACT", "MALWARE_WIN_MOFIN_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/mofin.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/mofin", "updated_at": "2026-10-16" }, { "family": "mofksys", "category": "worm", "sample_count": 14, "rule_names": [ "MALWARE_WIN_MOFKSYS_T1_ARTIFACT", "MALWARE_WIN_MOFKSYS_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/mofksys.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/mofksys", "updated_at": "2026-10-16" }, { "family": "mogoogwi", "category": "worm", "sample_count": 66, "rule_names": [ "MALWARE_WIN_MOGOOGWI_T1_ARTIFACT", "MALWARE_WIN_MOGOOGWI_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/mogoogwi.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/mogoogwi", "updated_at": "2026-10-16" }, { "family": "mokes", "category": "rat", "sample_count": 35, "rule_names": [ "MALWARE_WIN_MOKES_T1_ARTIFACT", "MALWARE_WIN_MOKES_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/mokes.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/mokes", "updated_at": "2026-10-16" }, { "family": "mokssteal", "category": "trojan", "sample_count": 8, "rule_names": [ "MALWARE_WIN_MOKSSTEAL_T1_ARTIFACT", "MALWARE_WIN_MOKSSTEAL_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/mokssteal.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/mokssteal", "updated_at": "2026-10-16" }, { "family": "molebox", "category": "advanced_threat", "sample_count": 1, "rule_names": [ "MALWARE_WIN_MOLEBOX_T1_ARTIFACT", "MALWARE_WIN_MOLEBOX_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/molebox.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/molebox", "updated_at": "2026-10-16" }, { "family": "moleboxultra", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_MOLEBOXULTRA_T1_ARTIFACT", "MALWARE_WIN_MOLEBOXULTRA_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/moleboxultra.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/moleboxultra", "updated_at": "2026-10-16" }, { "family": "moleboxvs", "category": "trojan", "sample_count": 10, "rule_names": [ "MALWARE_WIN_MOLEBOXVS_T1_ARTIFACT", "MALWARE_WIN_MOLEBOXVS_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/moleboxvs.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/moleboxvs", "updated_at": "2026-10-16" }, { "family": "moljec", "category": "ransomware", "sample_count": 2, "rule_names": [ "MALWARE_WIN_MOLJEC_T1_ARTIFACT", "MALWARE_WIN_MOLJEC_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/moljec.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/moljec", "updated_at": "2026-10-16" }, { "family": "molock", "category": "ransomware", "sample_count": 7, "rule_names": [ "MALWARE_WIN_MOLOCK_T1_ARTIFACT", "MALWARE_WIN_MOLOCK_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/molock.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/molock", "updated_at": "2026-10-16" }, { "family": "monder", "category": "advanced_threat", "sample_count": 3, "rule_names": [ "MALWARE_WIN_MONDER_T1_ARTIFACT", "MALWARE_WIN_MONDER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/monder.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/monder", "updated_at": "2026-10-16" }, { "family": "moneyinst", "category": "trojan", "sample_count": 3, "rule_names": [ "MALWARE_WIN_MONEYINST_T1_ARTIFACT", "MALWARE_WIN_MONEYINST_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/moneyinst.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/moneyinst", "updated_at": "2026-10-16" }, { "family": "mongolock", "category": "ransomware", "sample_count": 7, "rule_names": [ "MALWARE_WIN_MONGOLOCK_T1_ARTIFACT", "MALWARE_WIN_MONGOLOCK_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/mongolock.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/mongolock", "updated_at": "2026-10-16" }, { "family": "monitoringtool", "category": "trojan", "sample_count": 1, "rule_names": [ "MALWARE_WIN_MONITORINGTOOL_T1_ARTIFACT", "MALWARE_WIN_MONITORINGTOOL_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/monitoringtool.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/monitoringtool", "updated_at": "2026-10-16" }, { "family": "monitortool", "category": "advanced_threat", "sample_count": 2, "rule_names": [ "MALWARE_WIN_MONITORTOOL_T1_ARTIFACT", "MALWARE_WIN_MONITORTOOL_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/monitortool.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/monitortool", "updated_at": "2026-10-16" }, { "family": "montague", "category": "trojan", "sample_count": 1, "rule_names": [ "MALWARE_WIN_MONTAGUE_T1_ARTIFACT", "MALWARE_WIN_MONTAGUE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/montague.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/montague", "updated_at": "2026-10-16" }, { "family": "montp", "category": "ransomware", "sample_count": 8, "rule_names": [ "MALWARE_WIN_MONTP_T1_ARTIFACT", "MALWARE_WIN_MONTP_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/montp.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/montp", "updated_at": "2026-10-16" }, { "family": "moonlight", "category": "ransomware", "sample_count": 7, "rule_names": [ "MALWARE_WIN_MOONLIGHT_T1_ARTIFACT", "MALWARE_WIN_MOONLIGHT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/moonlight.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/moonlight", "updated_at": "2026-10-16" }, { "family": "moonpie", "category": "trojan", "sample_count": 1, "rule_names": [ "MALWARE_WIN_MOONPIE_T1_ARTIFACT", "MALWARE_WIN_MOONPIE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/moonpie.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/moonpie", "updated_at": "2026-10-16" }, { "family": "morphex", "category": "ransomware", "sample_count": 4, "rule_names": [ "MALWARE_WIN_MORPHEX_T1_ARTIFACT", "MALWARE_WIN_MORPHEX_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/morphex.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/morphex", "updated_at": "2026-10-16" }, { "family": "morphine", "category": "ransomware", "sample_count": 7, "rule_names": [ "MALWARE_WIN_MORPHINE_T1_ARTIFACT", "MALWARE_WIN_MORPHINE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/morphine.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/morphine", "updated_at": "2026-10-16" }, { "family": "morto", "category": "advanced_threat", "sample_count": 4, "rule_names": [ "MALWARE_WIN_MORTO_T1_ARTIFACT", "MALWARE_WIN_MORTO_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/morto.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/morto", "updated_at": "2026-10-16" }, { "family": "mostofate", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_MOSTOFATE_T1_ARTIFACT", "MALWARE_WIN_MOSTOFATE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/mostofate.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/mostofate", "updated_at": "2026-10-16" }, { "family": "mosu", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_MOSU_T1_ARTIFACT", "MALWARE_WIN_MOSU_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/mosu.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/mosu", "updated_at": "2026-10-16" }, { "family": "mosucker", "category": "trojan", "sample_count": 5, "rule_names": [ "MALWARE_WIN_MOSUCKER_T1_ARTIFACT", "MALWARE_WIN_MOSUCKER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/mosucker.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/mosucker", "updated_at": "2026-10-16" }, { "family": "mousedisable", "category": "ransomware", "sample_count": 2, "rule_names": [ "MALWARE_WIN_MOUSEDISABLE_T1_ARTIFACT", "MALWARE_WIN_MOUSEDISABLE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/mousedisable.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/mousedisable", "updated_at": "2026-10-16" }, { "family": "mozla", "category": "trojan", "sample_count": 1, "rule_names": [ "MALWARE_WIN_MOZLA_T1_ARTIFACT", "MALWARE_WIN_MOZLA_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/mozla.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/mozla", "updated_at": "2026-10-16" }, { "family": "mrdec", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_MRDEC_T1_ARTIFACT", "MALWARE_WIN_MRDEC_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/mrdec.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/mrdec", "updated_at": "2026-10-16" }, { "family": "mresmon", "category": "ransomware", "sample_count": 2, "rule_names": [ "MALWARE_WIN_MRESMON_T1_ARTIFACT", "MALWARE_WIN_MRESMON_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/mresmon.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/mresmon", "updated_at": "2026-10-16" }, { "family": "msidrop", "category": "ransomware", "sample_count": 3, "rule_names": [ "MALWARE_WIN_MSIDROP_T1_ARTIFACT", "MALWARE_WIN_MSIDROP_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/msidrop.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/msidrop", "updated_at": "2026-10-16" }, { "family": "msilbot", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_MSILBOT_T1_ARTIFACT", "MALWARE_WIN_MSILBOT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/msilbot.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/msilbot", "updated_at": "2026-10-16" }, { "family": "msildrop", "category": "ransomware", "sample_count": 5, "rule_names": [ "MALWARE_WIN_MSILDROP_T1_ARTIFACT", "MALWARE_WIN_MSILDROP_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/msildrop.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/msildrop", "updated_at": "2026-10-16" }, { "family": "msilinj", "category": "trojan", "sample_count": 2, "rule_names": [ "MALWARE_WIN_MSILINJ_T1_ARTIFACT", "MALWARE_WIN_MSILINJ_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/msilinj.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/msilinj", "updated_at": "2026-10-16" }, { "family": "msilkrypt", "category": "crypter", "sample_count": 28, "rule_names": [ "MALWARE_WIN_MSILKRYPT_T1_ARTIFACT", "MALWARE_WIN_MSILKRYPT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/msilkrypt.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/msilkrypt", "updated_at": "2026-10-16" }, { "family": "msilpack", "category": "advanced_threat", "sample_count": 1, "rule_names": [ "MALWARE_WIN_MSILPACK_T1_ARTIFACT", "MALWARE_WIN_MSILPACK_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/msilpack.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/msilpack", "updated_at": "2026-10-16" }, { "family": "msilperseus", "category": "infostealer", "sample_count": 596, "rule_names": [ "MALWARE_WIN_MSILPERSEUS_T1_ARTIFACT", "MALWARE_WIN_MSILPERSEUS_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/msilperseus.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/msilperseus", "updated_at": "2026-10-16" }, { "family": "msposer", "category": "ransomware", "sample_count": 2, "rule_names": [ "MALWARE_WIN_MSPOSER_T1_ARTIFACT", "MALWARE_WIN_MSPOSER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/msposer.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/msposer", "updated_at": "2026-10-16" }, { "family": "mucc", "category": "adware", "sample_count": 42, "rule_names": [ "MALWARE_WIN_MUCC_T1_ARTIFACT", "MALWARE_WIN_MUCC_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/mucc.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/mucc", "updated_at": "2026-10-16" }, { "family": "mudrop", "category": "trojan", "sample_count": 45, "rule_names": [ "MALWARE_WIN_MUDROP_T1_ARTIFACT", "MALWARE_WIN_MUDROP_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/mudrop.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/mudrop", "updated_at": "2026-10-16" }, { "family": "mufanom", "category": "ransomware", "sample_count": 5, "rule_names": [ "MALWARE_WIN_MUFANOM_T1_ARTIFACT", "MALWARE_WIN_MUFANOM_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/mufanom.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/mufanom", "updated_at": "2026-10-16" }, { "family": "multibanker", "category": "trojan", "sample_count": 1, "rule_names": [ "MALWARE_WIN_MULTIBANKER_T1_ARTIFACT", "MALWARE_WIN_MULTIBANKER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/multibanker.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/multibanker", "updated_at": "2026-10-16" }, { "family": "multibar", "category": "advanced_threat", "sample_count": 5, "rule_names": [ "MALWARE_WIN_MULTIBAR_T1_ARTIFACT", "MALWARE_WIN_MULTIBAR_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/multibar.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/multibar", "updated_at": "2026-10-16" }, { "family": "multidl", "category": "trojan", "sample_count": 11, "rule_names": [ "MALWARE_WIN_MULTIDL_T1_ARTIFACT", "MALWARE_WIN_MULTIDL_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/multidl.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/multidl", "updated_at": "2026-10-16" }, { "family": "multidropper", "category": "trojan_dropper", "sample_count": 17, "rule_names": [ "MALWARE_WIN_MULTIDROPPER_T1_ARTIFACT", "MALWARE_WIN_MULTIDROPPER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/multidropper.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/multidropper", "updated_at": "2026-10-16" }, { "family": "multiinjector", "category": "trojan", "sample_count": 1, "rule_names": [ "MALWARE_WIN_MULTIINJECTOR_T1_ARTIFACT", "MALWARE_WIN_MULTIINJECTOR_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/multiinjector.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/multiinjector", "updated_at": "2026-10-16" }, { "family": "multijoiner", "category": "trojan", "sample_count": 1, "rule_names": [ "MALWARE_WIN_MULTIJOINER_T1_ARTIFACT", "MALWARE_WIN_MULTIJOINER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/multijoiner.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/multijoiner", "updated_at": "2026-10-16" }, { "family": "multim", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_MULTIM_T1_ARTIFACT", "MALWARE_WIN_MULTIM_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/multim.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/multim", "updated_at": "2026-10-16" }, { "family": "multiminer", "category": "ransomware", "sample_count": 3, "rule_names": [ "MALWARE_WIN_MULTIMINER_T1_ARTIFACT", "MALWARE_WIN_MULTIMINER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/multiminer.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/multiminer", "updated_at": "2026-10-16" }, { "family": "multipacked", "category": "packer", "sample_count": 36, "rule_names": [ "MALWARE_WIN_MULTIPACKED_T1_ARTIFACT", "MALWARE_WIN_MULTIPACKED_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/multipacked.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/multipacked", "updated_at": "2026-10-16" }, { "family": "multiplug", "category": "adware", "sample_count": 53, "rule_names": [ "MALWARE_WIN_MULTIPLUG_T1_ARTIFACT", "MALWARE_WIN_MULTIPLUG_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/multiplug.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/multiplug", "updated_at": "2026-10-16" }, { "family": "muma", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_MUMA_T1_ARTIFACT", "MALWARE_WIN_MUMA_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/muma.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/muma", "updated_at": "2026-10-16" }, { "family": "mumawow", "category": "advanced_threat", "sample_count": 1, "rule_names": [ "MALWARE_WIN_MUMAWOW_T1_ARTIFACT", "MALWARE_WIN_MUMAWOW_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/mumawow.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/mumawow", "updated_at": "2026-10-16" }, { "family": "mupx", "category": "trojan", "sample_count": 1, "rule_names": [ "MALWARE_WIN_MUPX_T1_ARTIFACT", "MALWARE_WIN_MUPX_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/mupx.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/mupx", "updated_at": "2026-10-16" }, { "family": "murka", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_MURKA_T1_ARTIFACT", "MALWARE_WIN_MURKA_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/murka.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/murka", "updated_at": "2026-10-16" }, { "family": "murlo", "category": "ransomware", "sample_count": 2, "rule_names": [ "MALWARE_WIN_MURLO_T1_ARTIFACT", "MALWARE_WIN_MURLO_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/murlo.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/murlo", "updated_at": "2026-10-16" }, { "family": "murofet", "category": "trojan", "sample_count": 53, "rule_names": [ "MALWARE_WIN_MUROFET_T1_ARTIFACT", "MALWARE_WIN_MUROFET_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/murofet.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/murofet", "updated_at": "2026-10-16" }, { "family": "musclecar", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_MUSCLECAR_T1_ARTIFACT", "MALWARE_WIN_MUSCLECAR_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/musclecar.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/musclecar", "updated_at": "2026-10-16" }, { "family": "mutabaha", "category": "advanced_threat", "sample_count": 1, "rule_names": [ "MALWARE_WIN_MUTABAHA_T1_ARTIFACT", "MALWARE_WIN_MUTABAHA_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/mutabaha.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/mutabaha", "updated_at": "2026-10-16" }, { "family": "mutant", "category": "ransomware", "sample_count": 3, "rule_names": [ "MALWARE_WIN_MUTANT_T1_ARTIFACT", "MALWARE_WIN_MUTANT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/mutant.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/mutant", "updated_at": "2026-10-16" }, { "family": "mutuodo", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_MUTUODO_T1_ARTIFACT", "MALWARE_WIN_MUTUODO_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/mutuodo.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/mutuodo", "updated_at": "2026-10-16" }, { "family": "mwpm", "category": "ransomware", "sample_count": 9, "rule_names": [ "MALWARE_WIN_MWPM_T1_ARTIFACT", "MALWARE_WIN_MWPM_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/mwpm.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/mwpm", "updated_at": "2026-10-16" }, { "family": "mybeesearch", "category": "advanced_threat", "sample_count": 9, "rule_names": [ "MALWARE_WIN_MYBEESEARCH_T1_ARTIFACT", "MALWARE_WIN_MYBEESEARCH_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/mybeesearch.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/mybeesearch", "updated_at": "2026-10-16" }, { "family": "mycleanpc", "category": "advanced_threat", "sample_count": 1, "rule_names": [ "MALWARE_WIN_MYCLEANPC_T1_ARTIFACT", "MALWARE_WIN_MYCLEANPC_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/mycleanpc.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/mycleanpc", "updated_at": "2026-10-16" }, { "family": "mycop", "category": "ransomware", "sample_count": 3, "rule_names": [ "MALWARE_WIN_MYCOP_T1_ARTIFACT", "MALWARE_WIN_MYCOP_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/mycop.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/mycop", "updated_at": "2026-10-16" }, { "family": "mydisksu", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_MYDISKSU_T1_ARTIFACT", "MALWARE_WIN_MYDISKSU_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/mydisksu.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/mydisksu", "updated_at": "2026-10-16" }, { "family": "mydoom", "category": "worm", "sample_count": 88, "rule_names": [ "MALWARE_WIN_MYDOOM_T1_ARTIFACT", "MALWARE_WIN_MYDOOM_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/mydoom.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/mydoom", "updated_at": "2026-10-16" }, { "family": "mypcbackup", "category": "advanced_threat", "sample_count": 9, "rule_names": [ "MALWARE_WIN_MYPCBACKUP_T1_ARTIFACT", "MALWARE_WIN_MYPCBACKUP_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/mypcbackup.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/mypcbackup", "updated_at": "2026-10-16" }, { "family": "myransom", "category": "ransomware", "sample_count": 3, "rule_names": [ "MALWARE_WIN_MYRANSOM_T1_ARTIFACT", "MALWARE_WIN_MYRANSOM_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/myransom.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/myransom", "updated_at": "2026-10-16" }, { "family": "mytob", "category": "backdoor", "sample_count": 1, "rule_names": [ "MALWARE_WIN_MYTOB_T1_ARTIFACT", "MALWARE_WIN_MYTOB_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/mytob.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/mytob", "updated_at": "2026-10-16" }, { "family": "mytonel", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_MYTONEL_T1_ARTIFACT", "MALWARE_WIN_MYTONEL_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/mytonel.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/mytonel", "updated_at": "2026-10-16" }, { "family": "mywebsearch", "category": "adware", "sample_count": 223, "rule_names": [ "MALWARE_WIN_MYWEBSEARCH_T1_ARTIFACT", "MALWARE_WIN_MYWEBSEARCH_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/mywebsearch.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/mywebsearch", "updated_at": "2026-10-16" }, { "family": "myxah", "category": "ransomware", "sample_count": 3, "rule_names": [ "MALWARE_WIN_MYXAH_T1_ARTIFACT", "MALWARE_WIN_MYXAH_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/myxah.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/myxah", "updated_at": "2026-10-16" }, { "family": "mz0a4gxuisb", "category": "trojan", "sample_count": 1, "rule_names": [ "MALWARE_WIN_MZ0A4GXUISB_T1_ARTIFACT", "MALWARE_WIN_MZ0A4GXUISB_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/mz0a4gxuisb.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/mz0a4gxuisb", "updated_at": "2026-10-16" }, { "family": "nabasa", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_NABASA_T1_ARTIFACT", "MALWARE_WIN_NABASA_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/nabasa.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/nabasa", "updated_at": "2026-10-16" }, { "family": "naco", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_NACO_T1_ARTIFACT", "MALWARE_WIN_NACO_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/naco.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/naco", "updated_at": "2026-10-16" }, { "family": "nadrac", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_NADRAC_T1_ARTIFACT", "MALWARE_WIN_NADRAC_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/nadrac.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/nadrac", "updated_at": "2026-10-16" }, { "family": "naffy", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_NAFFY_T1_ARTIFACT", "MALWARE_WIN_NAFFY_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/naffy.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/naffy", "updated_at": "2026-10-16" }, { "family": "nagoot", "category": "ransomware", "sample_count": 10, "rule_names": [ "MALWARE_WIN_NAGOOT_T1_ARTIFACT", "MALWARE_WIN_NAGOOT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/nagoot.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/nagoot", "updated_at": "2026-10-16" }, { "family": "nagram", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_NAGRAM_T1_ARTIFACT", "MALWARE_WIN_NAGRAM_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/nagram.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/nagram", "updated_at": "2026-10-16" }, { "family": "nakoctb", "category": "ransomware", "sample_count": 134, "rule_names": [ "MALWARE_WIN_NAKOCTB_T1_ARTIFACT", "MALWARE_WIN_NAKOCTB_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/nakoctb.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/nakoctb", "updated_at": "2026-10-16" }, { "family": "nanobot", "category": "rat", "sample_count": 306, "rule_names": [ "MALWARE_WIN_NANOBOT_T1_ARTIFACT", "MALWARE_WIN_NANOBOT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/nanobot.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/nanobot", "updated_at": "2026-10-16" }, { "family": "nanocore", "category": "rat", "sample_count": 2400, "rule_names": [ "MALWARE_WIN_NANOCORE_T1_ARTIFACT", "MALWARE_WIN_NANOCORE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/nanocore.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/nanocore", "updated_at": "2026-10-16" }, { "family": "napolar", "category": "trojan", "sample_count": 2, "rule_names": [ "MALWARE_WIN_NAPOLAR_T1_ARTIFACT", "MALWARE_WIN_NAPOLAR_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/napolar.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/napolar", "updated_at": "2026-10-16" }, { "family": "naprat", "category": "ransomware", "sample_count": 5, "rule_names": [ "MALWARE_WIN_NAPRAT_T1_ARTIFACT", "MALWARE_WIN_NAPRAT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/naprat.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/naprat", "updated_at": "2026-10-16" }, { "family": "narcha", "category": "ransomware", "sample_count": 2, "rule_names": [ "MALWARE_WIN_NARCHA_T1_ARTIFACT", "MALWARE_WIN_NARCHA_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/narcha.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/narcha", "updated_at": "2026-10-16" }, { "family": "navipromo", "category": "advanced_threat", "sample_count": 3, "rule_names": [ "MALWARE_WIN_NAVIPROMO_T1_ARTIFACT", "MALWARE_WIN_NAVIPROMO_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/navipromo.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/navipromo", "updated_at": "2026-10-16" }, { "family": "nbcont", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_NBCONT_T1_ARTIFACT", "MALWARE_WIN_NBCONT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/nbcont.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/nbcont", "updated_at": "2026-10-16" }, { "family": "nebuler", "category": "ransomware", "sample_count": 2, "rule_names": [ "MALWARE_WIN_NEBULER_T1_ARTIFACT", "MALWARE_WIN_NEBULER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/nebuler.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/nebuler", "updated_at": "2026-10-16" }, { "family": "necne", "category": "ransomware", "sample_count": 5, "rule_names": [ "MALWARE_WIN_NECNE_T1_ARTIFACT", "MALWARE_WIN_NECNE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/necne.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/necne", "updated_at": "2026-10-16" }, { "family": "necurs", "category": "spam_bot", "sample_count": 2, "rule_names": [ "MALWARE_WIN_NECURS_T1_ARTIFACT", "MALWARE_WIN_NECURS_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/necurs.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/necurs", "updated_at": "2026-10-16" }, { "family": "negasteal", "category": "trojan", "sample_count": 1, "rule_names": [ "MALWARE_WIN_NEGASTEAL_T1_ARTIFACT", "MALWARE_WIN_NEGASTEAL_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/negasteal.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/negasteal", "updated_at": "2026-10-16" }, { "family": "neksminer", "category": "cryptominer", "sample_count": 25, "rule_names": [ "MALWARE_WIN_NEKSMINER_T1_ARTIFACT", "MALWARE_WIN_NEKSMINER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/neksminer.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/neksminer", "updated_at": "2026-10-16" }, { "family": "nemesis", "category": "bootkit", "sample_count": 103, "rule_names": [ "MALWARE_WIN_NEMESIS_T1_ARTIFACT", "MALWARE_WIN_NEMESIS_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/nemesis.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/nemesis", "updated_at": "2026-10-16" }, { "family": "nemucod", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_NEMUCOD_T1_ARTIFACT", "MALWARE_WIN_NEMUCOD_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/nemucod.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/nemucod", "updated_at": "2026-10-16" }, { "family": "neobar", "category": "adware", "sample_count": 21, "rule_names": [ "MALWARE_WIN_NEOBAR_T1_ARTIFACT", "MALWARE_WIN_NEOBAR_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/neobar.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/neobar", "updated_at": "2026-10-16" }, { "family": "neoreklami", "category": "adware", "sample_count": 170, "rule_names": [ "MALWARE_WIN_NEOREKLAMI_T1_ARTIFACT", "MALWARE_WIN_NEOREKLAMI_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/neoreklami.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/neoreklami", "updated_at": "2026-10-16" }, { "family": "neos", "category": "ransomware", "sample_count": 8, "rule_names": [ "MALWARE_WIN_NEOS_T1_ARTIFACT", "MALWARE_WIN_NEOS_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/neos.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/neos", "updated_at": "2026-10-16" }, { "family": "neshta", "category": "file_infector", "sample_count": 443, "rule_names": [ "MALWARE_WIN_NESHTA_T1_ARTIFACT", "MALWARE_WIN_NESHTA_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/neshta.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/neshta", "updated_at": "2026-10-16" }, { "family": "netbus", "category": "rat", "sample_count": 0, "rule_names": [ "MALWARE_WIN_NETBUS_T1_ARTIFACT", "MALWARE_WIN_NETBUS_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/netbus.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/netbus", "updated_at": "2026-10-16" }, { "family": "netcat", "category": "advanced_threat", "sample_count": 6, "rule_names": [ "MALWARE_WIN_NETCAT_T1_ARTIFACT", "MALWARE_WIN_NETCAT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/netcat.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/netcat", "updated_at": "2026-10-16" }, { "family": "netdevil", "category": "trojan", "sample_count": 1, "rule_names": [ "MALWARE_WIN_NETDEVIL_T1_ARTIFACT", "MALWARE_WIN_NETDEVIL_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/netdevil.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/netdevil", "updated_at": "2026-10-16" }, { "family": "netinject", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_NETINJECT_T1_ARTIFACT", "MALWARE_WIN_NETINJECT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/netinject.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/netinject", "updated_at": "2026-10-16" }, { "family": "netpass", "category": "trojan", "sample_count": 9, "rule_names": [ "MALWARE_WIN_NETPASS_T1_ARTIFACT", "MALWARE_WIN_NETPASS_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/netpass.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/netpass", "updated_at": "2026-10-16" }, { "family": "netshadow", "category": "trojan", "sample_count": 1, "rule_names": [ "MALWARE_WIN_NETSHADOW_T1_ARTIFACT", "MALWARE_WIN_NETSHADOW_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/netshadow.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/netshadow", "updated_at": "2026-10-16" }, { "family": "netshrink", "category": "ransomware", "sample_count": 3, "rule_names": [ "MALWARE_WIN_NETSHRINK_T1_ARTIFACT", "MALWARE_WIN_NETSHRINK_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/netshrink.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/netshrink", "updated_at": "2026-10-16" }, { "family": "netsky", "category": "worm", "sample_count": 105, "rule_names": [ "MALWARE_WIN_NETSKY_T1_ARTIFACT", "MALWARE_WIN_NETSKY_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/netsky.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/netsky", "updated_at": "2026-10-16" }, { "family": "netsphere", "category": "trojan", "sample_count": 0, "rule_names": [ "MALWARE_WIN_NETSPHERE_T1_ARTIFACT", "MALWARE_WIN_NETSPHERE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/netsphere.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/netsphere", "updated_at": "2026-10-16" }, { "family": "netstream", "category": "backdoor", "sample_count": 18, "rule_names": [ "MALWARE_WIN_NETSTREAM_T1_ARTIFACT", "MALWARE_WIN_NETSTREAM_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/netstream.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/netstream", "updated_at": "2026-10-16" }, { "family": "netthief", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_NETTHIEF_T1_ARTIFACT", "MALWARE_WIN_NETTHIEF_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/netthief.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/netthief", "updated_at": "2026-10-16" }, { "family": "nettool", "category": "hacktool", "sample_count": 23, "rule_names": [ "MALWARE_WIN_NETTOOL_T1_ARTIFACT", "MALWARE_WIN_NETTOOL_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/nettool.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/nettool", "updated_at": "2026-10-16" }, { "family": "netwire", "category": "rat", "sample_count": 55, "rule_names": [ "MALWARE_WIN_NETWIRE_T1_ARTIFACT", "MALWARE_WIN_NETWIRE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/netwire.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/netwire", "updated_at": "2026-10-16" }, { "family": "netwiredrc", "category": "rat", "sample_count": 72, "rule_names": [ "MALWARE_WIN_NETWIREDRC_T1_ARTIFACT", "MALWARE_WIN_NETWIREDRC_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/netwiredrc.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/netwiredrc", "updated_at": "2026-10-16" }, { "family": "neurevt", "category": "trojan", "sample_count": 68, "rule_names": [ "MALWARE_WIN_NEUREVT_T1_ARTIFACT", "MALWARE_WIN_NEUREVT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/neurevt.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/neurevt", "updated_at": "2026-10-16" }, { "family": "neutrinopos", "category": "trojan", "sample_count": 60, "rule_names": [ "MALWARE_WIN_NEUTRINOPOS_T1_ARTIFACT", "MALWARE_WIN_NEUTRINOPOS_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/neutrinopos.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/neutrinopos", "updated_at": "2026-10-16" }, { "family": "newheur", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_NEWHEUR_T1_ARTIFACT", "MALWARE_WIN_NEWHEUR_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/newheur.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/newheur", "updated_at": "2026-10-16" }, { "family": "ngrbot", "category": "worm", "sample_count": 110, "rule_names": [ "MALWARE_WIN_NGRBOT_T1_ARTIFACT", "MALWARE_WIN_NGRBOT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/ngrbot.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/ngrbot", "updated_at": "2026-10-16" }, { "family": "ngvck", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_NGVCK_T1_ARTIFACT", "MALWARE_WIN_NGVCK_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/ngvck.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/ngvck", "updated_at": "2026-10-16" }, { "family": "nhopro", "category": "advanced_threat", "sample_count": 1, "rule_names": [ "MALWARE_WIN_NHOPRO_T1_ARTIFACT", "MALWARE_WIN_NHOPRO_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/nhopro.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/nhopro", "updated_at": "2026-10-16" }, { "family": "nicehashminer", "category": "advanced_threat", "sample_count": 1, "rule_names": [ "MALWARE_WIN_NICEHASHMINER_T1_ARTIFACT", "MALWARE_WIN_NICEHASHMINER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/nicehashminer.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/nicehashminer", "updated_at": "2026-10-16" }, { "family": "nieguide", "category": "advanced_threat", "sample_count": 4, "rule_names": [ "MALWARE_WIN_NIEGUIDE_T1_ARTIFACT", "MALWARE_WIN_NIEGUIDE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/nieguide.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/nieguide", "updated_at": "2026-10-16" }, { "family": "nilage", "category": "ransomware", "sample_count": 6, "rule_names": [ "MALWARE_WIN_NILAGE_T1_ARTIFACT", "MALWARE_WIN_NILAGE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/nilage.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/nilage", "updated_at": "2026-10-16" }, { "family": "nilaspo", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_NILASPO_T1_ARTIFACT", "MALWARE_WIN_NILASPO_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/nilaspo.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/nilaspo", "updated_at": "2026-10-16" }, { "family": "nion", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_NION_T1_ARTIFACT", "MALWARE_WIN_NION_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/nion.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/nion", "updated_at": "2026-10-16" }, { "family": "nircmd", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_NIRCMD_T1_ARTIFACT", "MALWARE_WIN_NIRCMD_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/nircmd.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/nircmd", "updated_at": "2026-10-16" }, { "family": "nirsoft", "category": "advanced_threat", "sample_count": 2, "rule_names": [ "MALWARE_WIN_NIRSOFT_T1_ARTIFACT", "MALWARE_WIN_NIRSOFT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/nirsoft.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/nirsoft", "updated_at": "2026-10-16" }, { "family": "nisloder", "category": "loader", "sample_count": 103, "rule_names": [ "MALWARE_WIN_NISLODER_T1_ARTIFACT", "MALWARE_WIN_NISLODER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/nisloder.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/nisloder", "updated_at": "2026-10-16" }, { "family": "nistio", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_NISTIO_T1_ARTIFACT", "MALWARE_WIN_NISTIO_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/nistio.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/nistio", "updated_at": "2026-10-16" }, { "family": "nitol", "category": "ddos_bot", "sample_count": 694, "rule_names": [ "MALWARE_WIN_NITOL_T1_ARTIFACT", "MALWARE_WIN_NITOL_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/nitol.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/nitol", "updated_at": "2026-10-16" }, { "family": "nitter", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_NITTER_T1_ARTIFACT", "MALWARE_WIN_NITTER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/nitter.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/nitter", "updated_at": "2026-10-16" }, { "family": "nivdort", "category": "trojan", "sample_count": 6, "rule_names": [ "MALWARE_WIN_NIVDORT_T1_ARTIFACT", "MALWARE_WIN_NIVDORT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/nivdort.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/nivdort", "updated_at": "2026-10-16" }, { "family": "niwaa8lfbrj", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_NIWAA8LFBRJ_T1_ARTIFACT", "MALWARE_WIN_NIWAA8LFBRJ_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/niwaa8lfbrj.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/niwaa8lfbrj", "updated_at": "2026-10-16" }, { "family": "njlogger", "category": "trojan", "sample_count": 4, "rule_names": [ "MALWARE_WIN_NJLOGGER_T1_ARTIFACT", "MALWARE_WIN_NJLOGGER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/njlogger.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/njlogger", "updated_at": "2026-10-16" }, { "family": "njrat", "category": "rat", "sample_count": 280, "rule_names": [ "MALWARE_WIN_NJRAT_T1_ARTIFACT", "MALWARE_WIN_NJRAT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/njrat.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/njrat", "updated_at": "2026-10-16" }, { "family": "nlbrute", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_NLBRUTE_T1_ARTIFACT", "MALWARE_WIN_NLBRUTE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/nlbrute.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/nlbrute", "updated_at": "2026-10-16" }, { "family": "nmkfacwya3cg", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_NMKFACWYA3CG_T1_ARTIFACT", "MALWARE_WIN_NMKFACWYA3CG_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/nmkfacwya3cg.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/nmkfacwya3cg", "updated_at": "2026-10-16" }, { "family": "nmkfxmdtnmoi", "category": "trojan", "sample_count": 1, "rule_names": [ "MALWARE_WIN_NMKFXMDTNMOI_T1_ARTIFACT", "MALWARE_WIN_NMKFXMDTNMOI_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/nmkfxmdtnmoi.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/nmkfxmdtnmoi", "updated_at": "2026-10-16" }, { "family": "noancooe", "category": "backdoor", "sample_count": 56, "rule_names": [ "MALWARE_WIN_NOANCOOE_T1_ARTIFACT", "MALWARE_WIN_NOANCOOE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/noancooe.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/noancooe", "updated_at": "2026-10-16" }, { "family": "noobyprotect", "category": "packer", "sample_count": 136, "rule_names": [ "MALWARE_WIN_NOOBYPROTECT_T1_ARTIFACT", "MALWARE_WIN_NOOBYPROTECT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/noobyprotect.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/noobyprotect", "updated_at": "2026-10-16" }, { "family": "noon", "category": "adware", "sample_count": 926, "rule_names": [ "MALWARE_WIN_NOON_T1_ARTIFACT", "MALWARE_WIN_NOON_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/noon.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/noon", "updated_at": "2026-10-16" }, { "family": "noonlight", "category": "ransomware", "sample_count": 7, "rule_names": [ "MALWARE_WIN_NOONLIGHT_T1_ARTIFACT", "MALWARE_WIN_NOONLIGHT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/noonlight.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/noonlight", "updated_at": "2026-10-16" }, { "family": "nosok", "category": "ransomware", "sample_count": 2, "rule_names": [ "MALWARE_WIN_NOSOK_T1_ARTIFACT", "MALWARE_WIN_NOSOK_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/nosok.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/nosok", "updated_at": "2026-10-16" }, { "family": "nottotrack", "category": "advanced_threat", "sample_count": 1, "rule_names": [ "MALWARE_WIN_NOTTOTRACK_T1_ARTIFACT", "MALWARE_WIN_NOTTOTRACK_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/nottotrack.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/nottotrack", "updated_at": "2026-10-16" }, { "family": "noupack", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_NOUPACK_T1_ARTIFACT", "MALWARE_WIN_NOUPACK_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/noupack.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/noupack", "updated_at": "2026-10-16" }, { "family": "npack", "category": "advanced_threat", "sample_count": 2, "rule_names": [ "MALWARE_WIN_NPACK_T1_ARTIFACT", "MALWARE_WIN_NPACK_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/npack.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/npack", "updated_at": "2026-10-16" }, { "family": "npgi", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_NPGI_T1_ARTIFACT", "MALWARE_WIN_NPGI_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/npgi.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/npgi", "updated_at": "2026-10-16" }, { "family": "nrww", "category": "ransomware", "sample_count": 7, "rule_names": [ "MALWARE_WIN_NRWW_T1_ARTIFACT", "MALWARE_WIN_NRWW_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/nrww.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/nrww", "updated_at": "2026-10-16" }, { "family": "nsanti", "category": "ransomware", "sample_count": 7, "rule_names": [ "MALWARE_WIN_NSANTI_T1_ARTIFACT", "MALWARE_WIN_NSANTI_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/nsanti.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/nsanti", "updated_at": "2026-10-16" }, { "family": "nscauth", "category": "ransomware", "sample_count": 2, "rule_names": [ "MALWARE_WIN_NSCAUTH_T1_ARTIFACT", "MALWARE_WIN_NSCAUTH_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/nscauth.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/nscauth", "updated_at": "2026-10-16" }, { "family": "nsismod", "category": "trojan_downloader", "sample_count": 55, "rule_names": [ "MALWARE_WIN_NSISMOD_T1_ARTIFACT", "MALWARE_WIN_NSISMOD_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/nsismod.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/nsismod", "updated_at": "2026-10-16" }, { "family": "nspm", "category": "advanced_threat", "sample_count": 9, "rule_names": [ "MALWARE_WIN_NSPM_T1_ARTIFACT", "MALWARE_WIN_NSPM_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/nspm.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/nspm", "updated_at": "2026-10-16" }, { "family": "nssm", "category": "hacktool", "sample_count": 15, "rule_names": [ "MALWARE_WIN_NSSM_T1_ARTIFACT", "MALWARE_WIN_NSSM_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/nssm.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/nssm", "updated_at": "2026-10-16" }, { "family": "ntkrnl", "category": "trojan", "sample_count": 2, "rule_names": [ "MALWARE_WIN_NTKRNL_T1_ARTIFACT", "MALWARE_WIN_NTKRNL_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/ntkrnl.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/ntkrnl", "updated_at": "2026-10-16" }, { "family": "ntrootkit", "category": "rootkit", "sample_count": 17, "rule_names": [ "MALWARE_WIN_NTROOTKIT_T1_ARTIFACT", "MALWARE_WIN_NTROOTKIT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/ntrootkit.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/ntrootkit", "updated_at": "2026-10-16" }, { "family": "nuclear_rat", "category": "rat", "sample_count": 0, "rule_names": [ "MALWARE_WIN_NUCLEAR_RAT_T1_ARTIFACT", "MALWARE_WIN_NUCLEAR_RAT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/nuclear_rat.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/nuclear_rat", "updated_at": "2026-10-16" }, { "family": "nukesped", "category": "trojan", "sample_count": 4, "rule_names": [ "MALWARE_WIN_NUKESPED_T1_ARTIFACT", "MALWARE_WIN_NUKESPED_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/nukesped.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/nukesped", "updated_at": "2026-10-16" }, { "family": "nussamoc", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_NUSSAMOC_T1_ARTIFACT", "MALWARE_WIN_NUSSAMOC_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/nussamoc.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/nussamoc", "updated_at": "2026-10-16" }, { "family": "nymaim", "category": "downloader", "sample_count": 756, "rule_names": [ "MALWARE_WIN_NYMAIM_T1_ARTIFACT", "MALWARE_WIN_NYMAIM_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/nymaim.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/nymaim", "updated_at": "2026-10-16" }, { "family": "nymeria", "category": "downloader", "sample_count": 102, "rule_names": [ "MALWARE_WIN_NYMERIA_T1_ARTIFACT", "MALWARE_WIN_NYMERIA_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/nymeria.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/nymeria", "updated_at": "2026-10-16" }, { "family": "nystprac", "category": "ransomware", "sample_count": 3, "rule_names": [ "MALWARE_WIN_NYSTPRAC_T1_ARTIFACT", "MALWARE_WIN_NYSTPRAC_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/nystprac.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/nystprac", "updated_at": "2026-10-16" }, { "family": "nyxem", "category": "advanced_threat", "sample_count": 1, "rule_names": [ "MALWARE_WIN_NYXEM_T1_ARTIFACT", "MALWARE_WIN_NYXEM_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/nyxem.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/nyxem", "updated_at": "2026-10-16" }, { "family": "oasisminus", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_OASISMINUS_T1_ARTIFACT", "MALWARE_WIN_OASISMINUS_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/oasisminus.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/oasisminus", "updated_at": "2026-10-16" }, { "family": "obfusransom", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_OBFUSRANSOM_T1_ARTIFACT", "MALWARE_WIN_OBFUSRANSOM_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/obfusransom.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/obfusransom", "updated_at": "2026-10-16" }, { "family": "obrypser", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_OBRYPSER_T1_ARTIFACT", "MALWARE_WIN_OBRYPSER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/obrypser.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/obrypser", "updated_at": "2026-10-16" }, { "family": "obsidium", "category": "packer", "sample_count": 57, "rule_names": [ "MALWARE_WIN_OBSIDIUM_T1_ARTIFACT", "MALWARE_WIN_OBSIDIUM_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/obsidium.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/obsidium", "updated_at": "2026-10-16" }, { "family": "occamy", "category": "trojan", "sample_count": 589, "rule_names": [ "MALWARE_WIN_OCCAMY_T1_ARTIFACT", "MALWARE_WIN_OCCAMY_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/occamy.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/occamy", "updated_at": "2026-10-16" }, { "family": "oceanlotus", "category": "backdoor", "sample_count": 1, "rule_names": [ "MALWARE_WIN_OCEANLOTUS_T1_ARTIFACT", "MALWARE_WIN_OCEANLOTUS_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/oceanlotus.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/oceanlotus", "updated_at": "2026-10-16" }, { "family": "ocna", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_OCNA_T1_ARTIFACT", "MALWARE_WIN_OCNA_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/ocna.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/ocna", "updated_at": "2026-10-16" }, { "family": "octopus", "category": "ransomware", "sample_count": 3, "rule_names": [ "MALWARE_WIN_OCTOPUS_T1_ARTIFACT", "MALWARE_WIN_OCTOPUS_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/octopus.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/octopus", "updated_at": "2026-10-16" }, { "family": "oepass", "category": "trojan", "sample_count": 1, "rule_names": [ "MALWARE_WIN_OEPASS_T1_ARTIFACT", "MALWARE_WIN_OEPASS_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/oepass.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/oepass", "updated_at": "2026-10-16" }, { "family": "offend", "category": "ransomware", "sample_count": 2, "rule_names": [ "MALWARE_WIN_OFFEND_T1_ARTIFACT", "MALWARE_WIN_OFFEND_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/offend.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/offend", "updated_at": "2026-10-16" }, { "family": "offerbox", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_OFFERBOX_T1_ARTIFACT", "MALWARE_WIN_OFFERBOX_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/offerbox.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/offerbox", "updated_at": "2026-10-16" }, { "family": "offergenerator", "category": "advanced_threat", "sample_count": 3, "rule_names": [ "MALWARE_WIN_OFFERGENERATOR_T1_ARTIFACT", "MALWARE_WIN_OFFERGENERATOR_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/offergenerator.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/offergenerator", "updated_at": "2026-10-16" }, { "family": "offerinstall", "category": "advanced_threat", "sample_count": 5, "rule_names": [ "MALWARE_WIN_OFFERINSTALL_T1_ARTIFACT", "MALWARE_WIN_OFFERINSTALL_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/offerinstall.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/offerinstall", "updated_at": "2026-10-16" }, { "family": "offtoup", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_OFFTOUP_T1_ARTIFACT", "MALWARE_WIN_OFFTOUP_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/offtoup.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/offtoup", "updated_at": "2026-10-16" }, { "family": "oficla", "category": "trojan", "sample_count": 2, "rule_names": [ "MALWARE_WIN_OFICLA_T1_ARTIFACT", "MALWARE_WIN_OFICLA_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/oficla.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/oficla", "updated_at": "2026-10-16" }, { "family": "oflwr", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_OFLWR_T1_ARTIFACT", "MALWARE_WIN_OFLWR_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/oflwr.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/oflwr", "updated_at": "2026-10-16" }, { "family": "ohmytabs", "category": "advanced_threat", "sample_count": 2, "rule_names": [ "MALWARE_WIN_OHMYTABS_T1_ARTIFACT", "MALWARE_WIN_OHMYTABS_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/ohmytabs.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/ohmytabs", "updated_at": "2026-10-16" }, { "family": "olala", "category": "ransomware", "sample_count": 2, "rule_names": [ "MALWARE_WIN_OLALA_T1_ARTIFACT", "MALWARE_WIN_OLALA_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/olala.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/olala", "updated_at": "2026-10-16" }, { "family": "olext", "category": "advanced_threat", "sample_count": 1, "rule_names": [ "MALWARE_WIN_OLEXT_T1_ARTIFACT", "MALWARE_WIN_OLEXT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/olext.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/olext", "updated_at": "2026-10-16" }, { "family": "olgames", "category": "infostealer", "sample_count": 243, "rule_names": [ "MALWARE_WIN_OLGAMES_T1_ARTIFACT", "MALWARE_WIN_OLGAMES_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/olgames.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/olgames", "updated_at": "2026-10-16" }, { "family": "oligo", "category": "ransomware", "sample_count": 2, "rule_names": [ "MALWARE_WIN_OLIGO_T1_ARTIFACT", "MALWARE_WIN_OLIGO_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/oligo.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/oligo", "updated_at": "2026-10-16" }, { "family": "olympicdestroyer", "category": "ransomware", "sample_count": 5, "rule_names": [ "MALWARE_WIN_OLYMPICDESTROYER_T1_ARTIFACT", "MALWARE_WIN_OLYMPICDESTROYER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/olympicdestroyer.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/olympicdestroyer", "updated_at": "2026-10-16" }, { "family": "omaneat", "category": "trojan", "sample_count": 66, "rule_names": [ "MALWARE_WIN_OMANEAT_T1_ARTIFACT", "MALWARE_WIN_OMANEAT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/omaneat.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/omaneat", "updated_at": "2026-10-16" }, { "family": "omgfamcremci", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_OMGFAMCREMCI_T1_ARTIFACT", "MALWARE_WIN_OMGFAMCREMCI_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/omgfamcremci.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/omgfamcremci", "updated_at": "2026-10-16" }, { "family": "omyaamfbexii", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_OMYAAMFBEXII_T1_ARTIFACT", "MALWARE_WIN_OMYAAMFBEXII_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/omyaamfbexii.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/omyaamfbexii", "updated_at": "2026-10-16" }, { "family": "oneclick", "category": "advanced_threat", "sample_count": 4, "rule_names": [ "MALWARE_WIN_ONECLICK_T1_ARTIFACT", "MALWARE_WIN_ONECLICK_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/oneclick.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/oneclick", "updated_at": "2026-10-16" }, { "family": "oneclickdownloader", "category": "advanced_threat", "sample_count": 2, "rule_names": [ "MALWARE_WIN_ONECLICKDOWNLOADER_T1_ARTIFACT", "MALWARE_WIN_ONECLICKDOWNLOADER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/oneclickdownloader.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/oneclickdownloader", "updated_at": "2026-10-16" }, { "family": "oneinstaller", "category": "advanced_threat", "sample_count": 2, "rule_names": [ "MALWARE_WIN_ONEINSTALLER_T1_ARTIFACT", "MALWARE_WIN_ONEINSTALLER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/oneinstaller.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/oneinstaller", "updated_at": "2026-10-16" }, { "family": "onescan", "category": "advanced_threat", "sample_count": 3, "rule_names": [ "MALWARE_WIN_ONESCAN_T1_ARTIFACT", "MALWARE_WIN_ONESCAN_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/onescan.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/onescan", "updated_at": "2026-10-16" }, { "family": "onesyscare", "category": "trojan", "sample_count": 3, "rule_names": [ "MALWARE_WIN_ONESYSCARE_T1_ARTIFACT", "MALWARE_WIN_ONESYSCARE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/onesyscare.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/onesyscare", "updated_at": "2026-10-16" }, { "family": "onesystemcare", "category": "pua", "sample_count": 14, "rule_names": [ "MALWARE_WIN_ONESYSTEMCARE_T1_ARTIFACT", "MALWARE_WIN_ONESYSTEMCARE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/onesystemcare.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/onesystemcare", "updated_at": "2026-10-16" }, { "family": "onkfa0sahzhg", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_ONKFA0SAHZHG_T1_ARTIFACT", "MALWARE_WIN_ONKFA0SAHZHG_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/onkfa0sahzhg.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/onkfa0sahzhg", "updated_at": "2026-10-16" }, { "family": "onlineg", "category": "advanced_threat", "sample_count": 1, "rule_names": [ "MALWARE_WIN_ONLINEG_T1_ARTIFACT", "MALWARE_WIN_ONLINEG_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/onlineg.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/onlineg", "updated_at": "2026-10-16" }, { "family": "opanki", "category": "backdoor", "sample_count": 9, "rule_names": [ "MALWARE_WIN_OPANKI_T1_ARTIFACT", "MALWARE_WIN_OPANKI_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/opanki.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/opanki", "updated_at": "2026-10-16" }, { "family": "opencandy", "category": "adware", "sample_count": 110, "rule_names": [ "MALWARE_WIN_OPENCANDY_T1_ARTIFACT", "MALWARE_WIN_OPENCANDY_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/opencandy.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/opencandy", "updated_at": "2026-10-16" }, { "family": "opendownloadmanager", "category": "adware", "sample_count": 13, "rule_names": [ "MALWARE_WIN_OPENDOWNLOADMANAGER_T1_ARTIFACT", "MALWARE_WIN_OPENDOWNLOADMANAGER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/opendownloadmanager.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/opendownloadmanager", "updated_at": "2026-10-16" }, { "family": "openinstall", "category": "adware", "sample_count": 14, "rule_names": [ "MALWARE_WIN_OPENINSTALL_T1_ARTIFACT", "MALWARE_WIN_OPENINSTALL_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/openinstall.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/openinstall", "updated_at": "2026-10-16" }, { "family": "openshopper", "category": "advanced_threat", "sample_count": 2, "rule_names": [ "MALWARE_WIN_OPENSHOPPER_T1_ARTIFACT", "MALWARE_WIN_OPENSHOPPER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/openshopper.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/openshopper", "updated_at": "2026-10-16" }, { "family": "opensupdater", "category": "adware", "sample_count": 91, "rule_names": [ "MALWARE_WIN_OPENSUPDATER_T1_ARTIFACT", "MALWARE_WIN_OPENSUPDATER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/opensupdater.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/opensupdater", "updated_at": "2026-10-16" }, { "family": "opesup", "category": "ransomware", "sample_count": 3, "rule_names": [ "MALWARE_WIN_OPESUP_T1_ARTIFACT", "MALWARE_WIN_OPESUP_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/opesup.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/opesup", "updated_at": "2026-10-16" }, { "family": "opriupdater", "category": "advanced_threat", "sample_count": 1, "rule_names": [ "MALWARE_WIN_OPRIUPDATER_T1_ARTIFACT", "MALWARE_WIN_OPRIUPDATER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/opriupdater.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/opriupdater", "updated_at": "2026-10-16" }, { "family": "optimizer", "category": "pua", "sample_count": 14, "rule_names": [ "MALWARE_WIN_OPTIMIZER_T1_ARTIFACT", "MALWARE_WIN_OPTIMIZER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/optimizer.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/optimizer", "updated_at": "2026-10-16" }, { "family": "optispeed", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_OPTISPEED_T1_ARTIFACT", "MALWARE_WIN_OPTISPEED_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/optispeed.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/optispeed", "updated_at": "2026-10-16" }, { "family": "optix", "category": "trojan", "sample_count": 1, "rule_names": [ "MALWARE_WIN_OPTIX_T1_ARTIFACT", "MALWARE_WIN_OPTIX_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/optix.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/optix", "updated_at": "2026-10-16" }, { "family": "orangedefender", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_ORANGEDEFENDER_T1_ARTIFACT", "MALWARE_WIN_ORANGEDEFENDER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/orangedefender.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/orangedefender", "updated_at": "2026-10-16" }, { "family": "orbus", "category": "ransomware", "sample_count": 8, "rule_names": [ "MALWARE_WIN_ORBUS_T1_ARTIFACT", "MALWARE_WIN_ORBUS_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/orbus.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/orbus", "updated_at": "2026-10-16" }, { "family": "orcus", "category": "backdoor", "sample_count": 66, "rule_names": [ "MALWARE_WIN_ORCUS_T1_ARTIFACT", "MALWARE_WIN_ORCUS_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/orcus.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/orcus", "updated_at": "2026-10-16" }, { "family": "orcusrat", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_ORCUSRAT_T1_ARTIFACT", "MALWARE_WIN_ORCUSRAT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/orcusrat.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/orcusrat", "updated_at": "2026-10-16" }, { "family": "orcusrot", "category": "backdoor", "sample_count": 1, "rule_names": [ "MALWARE_WIN_ORCUSROT_T1_ARTIFACT", "MALWARE_WIN_ORCUSROT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/orcusrot.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/orcusrot", "updated_at": "2026-10-16" }, { "family": "oremu", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_OREMU_T1_ARTIFACT", "MALWARE_WIN_OREMU_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/oremu.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/oremu", "updated_at": "2026-10-16" }, { "family": "orsam", "category": "ransomware", "sample_count": 6, "rule_names": [ "MALWARE_WIN_ORSAM_T1_ARTIFACT", "MALWARE_WIN_ORSAM_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/orsam.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/orsam", "updated_at": "2026-10-16" }, { "family": "otezinu", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_OTEZINU_T1_ARTIFACT", "MALWARE_WIN_OTEZINU_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/otezinu.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/otezinu", "updated_at": "2026-10-16" }, { "family": "otorunq", "category": "trojan", "sample_count": 1, "rule_names": [ "MALWARE_WIN_OTORUNQ_T1_ARTIFACT", "MALWARE_WIN_OTORUNQ_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/otorunq.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/otorunq", "updated_at": "2026-10-16" }, { "family": "ou0bsubcbkhb", "category": "trojan", "sample_count": 1, "rule_names": [ "MALWARE_WIN_OU0BSUBCBKHB_T1_ARTIFACT", "MALWARE_WIN_OU0BSUBCBKHB_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/ou0bsubcbkhb.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/ou0bsubcbkhb", "updated_at": "2026-10-16" }, { "family": "outbreak", "category": "ransomware", "sample_count": 2, "rule_names": [ "MALWARE_WIN_OUTBREAK_T1_ARTIFACT", "MALWARE_WIN_OUTBREAK_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/outbreak.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/outbreak", "updated_at": "2026-10-16" }, { "family": "outbrowse", "category": "pua", "sample_count": 34, "rule_names": [ "MALWARE_WIN_OUTBROWSE_T1_ARTIFACT", "MALWARE_WIN_OUTBROWSE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/outbrowse.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/outbrowse", "updated_at": "2026-10-16" }, { "family": "oxynoxy", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_OXYNOXY_T1_ARTIFACT", "MALWARE_WIN_OXYNOXY_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/oxynoxy.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/oxynoxy", "updated_at": "2026-10-16" }, { "family": "oxypumper", "category": "pua_tool", "sample_count": 35, "rule_names": [ "MALWARE_WIN_OXYPUMPER_T1_ARTIFACT", "MALWARE_WIN_OXYPUMPER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/oxypumper.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/oxypumper", "updated_at": "2026-10-16" }, { "family": "oyom", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_OYOM_T1_ARTIFACT", "MALWARE_WIN_OYOM_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/oyom.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/oyom", "updated_at": "2026-10-16" }, { "family": "oztar", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_OZTAR_T1_ARTIFACT", "MALWARE_WIN_OZTAR_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/oztar.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/oztar", "updated_at": "2026-10-16" }, { "family": "p2pworm", "category": "ransomware", "sample_count": 2, "rule_names": [ "MALWARE_WIN_P2PWORM_T1_ARTIFACT", "MALWARE_WIN_P2PWORM_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/p2pworm.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/p2pworm", "updated_at": "2026-10-16" }, { "family": "pabin", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_PABIN_T1_ARTIFACT", "MALWARE_WIN_PABIN_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/pabin.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/pabin", "updated_at": "2026-10-16" }, { "family": "pacex", "category": "ransomware", "sample_count": 2, "rule_names": [ "MALWARE_WIN_PACEX_T1_ARTIFACT", "MALWARE_WIN_PACEX_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/pacex.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/pacex", "updated_at": "2026-10-16" }, { "family": "packedent", "category": "packer", "sample_count": 43, "rule_names": [ "MALWARE_WIN_PACKEDENT_T1_ARTIFACT", "MALWARE_WIN_PACKEDENT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/packedent.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/packedent", "updated_at": "2026-10-16" }, { "family": "packy", "category": "packer", "sample_count": 39, "rule_names": [ "MALWARE_WIN_PACKY_T1_ARTIFACT", "MALWARE_WIN_PACKY_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/packy.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/packy", "updated_at": "2026-10-16" }, { "family": "padmer", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_PADMER_T1_ARTIFACT", "MALWARE_WIN_PADMER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/padmer.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/padmer", "updated_at": "2026-10-16" }, { "family": "pajetbin", "category": "ransomware", "sample_count": 21, "rule_names": [ "MALWARE_WIN_PAJETBIN_T1_ARTIFACT", "MALWARE_WIN_PAJETBIN_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/pajetbin.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/pajetbin", "updated_at": "2026-10-16" }, { "family": "pakes", "category": "packer", "sample_count": 33, "rule_names": [ "MALWARE_WIN_PAKES_T1_ARTIFACT", "MALWARE_WIN_PAKES_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/pakes.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/pakes", "updated_at": "2026-10-16" }, { "family": "palevo", "category": "botnet", "sample_count": 106, "rule_names": [ "MALWARE_WIN_PALEVO_T1_ARTIFACT", "MALWARE_WIN_PALEVO_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/palevo.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/palevo", "updated_at": "2026-10-16" }, { "family": "palibu", "category": "ransomware", "sample_count": 3, "rule_names": [ "MALWARE_WIN_PALIBU_T1_ARTIFACT", "MALWARE_WIN_PALIBU_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/palibu.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/palibu", "updated_at": "2026-10-16" }, { "family": "pandex", "category": "ransomware", "sample_count": 8, "rule_names": [ "MALWARE_WIN_PANDEX_T1_ARTIFACT", "MALWARE_WIN_PANDEX_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/pandex.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/pandex", "updated_at": "2026-10-16" }, { "family": "pandview", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_PANDVIEW_T1_ARTIFACT", "MALWARE_WIN_PANDVIEW_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/pandview.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/pandview", "updated_at": "2026-10-16" }, { "family": "pantera", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_PANTERA_T1_ARTIFACT", "MALWARE_WIN_PANTERA_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/pantera.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/pantera", "updated_at": "2026-10-16" }, { "family": "paper", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_PAPER_T1_ARTIFACT", "MALWARE_WIN_PAPER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/paper.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/paper", "updated_at": "2026-10-16" }, { "family": "paph", "category": "ransomware", "sample_count": 11, "rule_names": [ "MALWARE_WIN_PAPH_T1_ARTIFACT", "MALWARE_WIN_PAPH_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/paph.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/paph", "updated_at": "2026-10-16" }, { "family": "papras", "category": "infostealer", "sample_count": 15, "rule_names": [ "MALWARE_WIN_PAPRAS_T1_ARTIFACT", "MALWARE_WIN_PAPRAS_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/papras.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/papras", "updated_at": "2026-10-16" }, { "family": "paradise", "category": "ransomware", "sample_count": 4, "rule_names": [ "MALWARE_WIN_PARADISE_T1_ARTIFACT", "MALWARE_WIN_PARADISE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/paradise.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/paradise", "updated_at": "2026-10-16" }, { "family": "parite", "category": "file_infector", "sample_count": 163, "rule_names": [ "MALWARE_WIN_PARITE_T1_ARTIFACT", "MALWARE_WIN_PARITE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/parite.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/parite", "updated_at": "2026-10-16" }, { "family": "passcrypt", "category": "ransomware", "sample_count": 5, "rule_names": [ "MALWARE_WIN_PASSCRYPT_T1_ARTIFACT", "MALWARE_WIN_PASSCRYPT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/passcrypt.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/passcrypt", "updated_at": "2026-10-16" }, { "family": "passcv", "category": "trojan", "sample_count": 1, "rule_names": [ "MALWARE_WIN_PASSCV_T1_ARTIFACT", "MALWARE_WIN_PASSCV_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/passcv.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/passcv", "updated_at": "2026-10-16" }, { "family": "passma", "category": "ransomware", "sample_count": 3, "rule_names": [ "MALWARE_WIN_PASSMA_T1_ARTIFACT", "MALWARE_WIN_PASSMA_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/passma.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/passma", "updated_at": "2026-10-16" }, { "family": "passview", "category": "advanced_threat", "sample_count": 7, "rule_names": [ "MALWARE_WIN_PASSVIEW_T1_ARTIFACT", "MALWARE_WIN_PASSVIEW_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/passview.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/passview", "updated_at": "2026-10-16" }, { "family": "passwordfox", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_PASSWORDFOX_T1_ARTIFACT", "MALWARE_WIN_PASSWORDFOX_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/passwordfox.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/passwordfox", "updated_at": "2026-10-16" }, { "family": "passwordstealer", "category": "ransomware", "sample_count": 7, "rule_names": [ "MALWARE_WIN_PASSWORDSTEALER_T1_ARTIFACT", "MALWARE_WIN_PASSWORDSTEALER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/passwordstealer.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/passwordstealer", "updated_at": "2026-10-16" }, { "family": "pasta", "category": "ransomware", "sample_count": 20, "rule_names": [ "MALWARE_WIN_PASTA_T1_ARTIFACT", "MALWARE_WIN_PASTA_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/pasta.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/pasta", "updated_at": "2026-10-16" }, { "family": "pastraw", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_PASTRAW_T1_ARTIFACT", "MALWARE_WIN_PASTRAW_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/pastraw.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/pastraw", "updated_at": "2026-10-16" }, { "family": "pasur", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_PASUR_T1_ARTIFACT", "MALWARE_WIN_PASUR_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/pasur.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/pasur", "updated_at": "2026-10-16" }, { "family": "patch", "category": "ransomware", "sample_count": 2, "rule_names": [ "MALWARE_WIN_PATCH_T1_ARTIFACT", "MALWARE_WIN_PATCH_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/patch.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/patch", "updated_at": "2026-10-16" }, { "family": "patchload", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_PATCHLOAD_T1_ARTIFACT", "MALWARE_WIN_PATCHLOAD_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/patchload.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/patchload", "updated_at": "2026-10-16" }, { "family": "patchupplus", "category": "advanced_threat", "sample_count": 2, "rule_names": [ "MALWARE_WIN_PATCHUPPLUS_T1_ARTIFACT", "MALWARE_WIN_PATCHUPPLUS_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/patchupplus.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/patchupplus", "updated_at": "2026-10-16" }, { "family": "patpoopy", "category": "ransomware", "sample_count": 4, "rule_names": [ "MALWARE_WIN_PATPOOPY_T1_ARTIFACT", "MALWARE_WIN_PATPOOPY_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/patpoopy.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/patpoopy", "updated_at": "2026-10-16" }, { "family": "pavica", "category": "ransomware", "sample_count": 6, "rule_names": [ "MALWARE_WIN_PAVICA_T1_ARTIFACT", "MALWARE_WIN_PAVICA_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/pavica.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/pavica", "updated_at": "2026-10-16" }, { "family": "payer", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_PAYER_T1_ARTIFACT", "MALWARE_WIN_PAYER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/payer.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/payer", "updated_at": "2026-10-16" }, { "family": "pbot", "category": "trojan", "sample_count": 22, "rule_names": [ "MALWARE_WIN_PBOT_T1_ARTIFACT", "MALWARE_WIN_PBOT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/pbot.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/pbot", "updated_at": "2026-10-16" }, { "family": "pcacceleratepro", "category": "advanced_threat", "sample_count": 8, "rule_names": [ "MALWARE_WIN_PCACCELERATEPRO_T1_ARTIFACT", "MALWARE_WIN_PCACCELERATEPRO_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/pcacceleratepro.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/pcacceleratepro", "updated_at": "2026-10-16" }, { "family": "pcbooster", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_PCBOOSTER_T1_ARTIFACT", "MALWARE_WIN_PCBOOSTER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/pcbooster.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/pcbooster", "updated_at": "2026-10-16" }, { "family": "pcclean", "category": "ransomware", "sample_count": 7, "rule_names": [ "MALWARE_WIN_PCCLEAN_T1_ARTIFACT", "MALWARE_WIN_PCCLEAN_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/pcclean.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/pcclean", "updated_at": "2026-10-16" }, { "family": "pccleaner", "category": "pua", "sample_count": 17, "rule_names": [ "MALWARE_WIN_PCCLEANER_T1_ARTIFACT", "MALWARE_WIN_PCCLEANER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/pccleaner.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/pccleaner", "updated_at": "2026-10-16" }, { "family": "pccleaners", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_PCCLEANERS_T1_ARTIFACT", "MALWARE_WIN_PCCLEANERS_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/pccleaners.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/pccleaners", "updated_at": "2026-10-16" }, { "family": "pccleaningutility", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_PCCLEANINGUTILITY_T1_ARTIFACT", "MALWARE_WIN_PCCLEANINGUTILITY_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/pccleaningutility.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/pccleaningutility", "updated_at": "2026-10-16" }, { "family": "pccleanplus", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_PCCLEANPLUS_T1_ARTIFACT", "MALWARE_WIN_PCCLEANPLUS_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/pccleanplus.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/pccleanplus", "updated_at": "2026-10-16" }, { "family": "pccleanup", "category": "advanced_threat", "sample_count": 2, "rule_names": [ "MALWARE_WIN_PCCLEANUP_T1_ARTIFACT", "MALWARE_WIN_PCCLEANUP_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/pccleanup.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/pccleanup", "updated_at": "2026-10-16" }, { "family": "pcclient", "category": "rat", "sample_count": 31, "rule_names": [ "MALWARE_WIN_PCCLIENT_T1_ARTIFACT", "MALWARE_WIN_PCCLIENT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/pcclient.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/pcclient", "updated_at": "2026-10-16" }, { "family": "pcfixer", "category": "trojan", "sample_count": 4, "rule_names": [ "MALWARE_WIN_PCFIXER_T1_ARTIFACT", "MALWARE_WIN_PCFIXER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/pcfixer.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/pcfixer", "updated_at": "2026-10-16" }, { "family": "pchealthboost", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_PCHEALTHBOOST_T1_ARTIFACT", "MALWARE_WIN_PCHEALTHBOOST_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/pchealthboost.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/pchealthboost", "updated_at": "2026-10-16" }, { "family": "pckdflystudio", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_PCKDFLYSTUDIO_T1_ARTIFACT", "MALWARE_WIN_PCKDFLYSTUDIO_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/pckdflystudio.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/pckdflystudio", "updated_at": "2026-10-16" }, { "family": "pckeeper", "category": "advanced_threat", "sample_count": 9, "rule_names": [ "MALWARE_WIN_PCKEEPER_T1_ARTIFACT", "MALWARE_WIN_PCKEEPER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/pckeeper.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/pckeeper", "updated_at": "2026-10-16" }, { "family": "pclnt", "category": "trojan", "sample_count": 1, "rule_names": [ "MALWARE_WIN_PCLNT_T1_ARTIFACT", "MALWARE_WIN_PCLNT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/pclnt.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/pclnt", "updated_at": "2026-10-16" }, { "family": "pcmechanic", "category": "advanced_threat", "sample_count": 2, "rule_names": [ "MALWARE_WIN_PCMECHANIC_T1_ARTIFACT", "MALWARE_WIN_PCMECHANIC_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/pcmechanic.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/pcmechanic", "updated_at": "2026-10-16" }, { "family": "pcmedic", "category": "advanced_threat", "sample_count": 8, "rule_names": [ "MALWARE_WIN_PCMEDIC_T1_ARTIFACT", "MALWARE_WIN_PCMEDIC_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/pcmedic.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/pcmedic", "updated_at": "2026-10-16" }, { "family": "pcmega", "category": "trojan", "sample_count": 3, "rule_names": [ "MALWARE_WIN_PCMEGA_T1_ARTIFACT", "MALWARE_WIN_PCMEGA_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/pcmega.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/pcmega", "updated_at": "2026-10-16" }, { "family": "pcopticlean", "category": "ransomware", "sample_count": 2, "rule_names": [ "MALWARE_WIN_PCOPTICLEAN_T1_ARTIFACT", "MALWARE_WIN_PCOPTICLEAN_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/pcopticlean.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/pcopticlean", "updated_at": "2026-10-16" }, { "family": "pcoptimizerpro", "category": "advanced_threat", "sample_count": 2, "rule_names": [ "MALWARE_WIN_PCOPTIMIZERPRO_T1_ARTIFACT", "MALWARE_WIN_PCOPTIMIZERPRO_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/pcoptimizerpro.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/pcoptimizerpro", "updated_at": "2026-10-16" }, { "family": "pcrepair", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_PCREPAIR_T1_ARTIFACT", "MALWARE_WIN_PCREPAIR_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/pcrepair.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/pcrepair", "updated_at": "2026-10-16" }, { "family": "pcreviver", "category": "trojan", "sample_count": 4, "rule_names": [ "MALWARE_WIN_PCREVIVER_T1_ARTIFACT", "MALWARE_WIN_PCREVIVER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/pcreviver.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/pcreviver", "updated_at": "2026-10-16" }, { "family": "pcvark", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_PCVARK_T1_ARTIFACT", "MALWARE_WIN_PCVARK_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/pcvark.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/pcvark", "updated_at": "2026-10-16" }, { "family": "pdxbbkgat9ci", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_PDXBBKGAT9CI_T1_ARTIFACT", "MALWARE_WIN_PDXBBKGAT9CI_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/pdxbbkgat9ci.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/pdxbbkgat9ci", "updated_at": "2026-10-16" }, { "family": "peals", "category": "ransomware", "sample_count": 6, "rule_names": [ "MALWARE_WIN_PEALS_T1_ARTIFACT", "MALWARE_WIN_PEALS_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/peals.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/peals", "updated_at": "2026-10-16" }, { "family": "pedex", "category": "crypter", "sample_count": 23, "rule_names": [ "MALWARE_WIN_PEDEX_T1_ARTIFACT", "MALWARE_WIN_PEDEX_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/pedex.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/pedex", "updated_at": "2026-10-16" }, { "family": "peed", "category": "advanced_threat", "sample_count": 1, "rule_names": [ "MALWARE_WIN_PEED_T1_ARTIFACT", "MALWARE_WIN_PEED_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/peed.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/peed", "updated_at": "2026-10-16" }, { "family": "peepviewer", "category": "trojan", "sample_count": 1, "rule_names": [ "MALWARE_WIN_PEEPVIEWER_T1_ARTIFACT", "MALWARE_WIN_PEEPVIEWER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/peepviewer.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/peepviewer", "updated_at": "2026-10-16" }, { "family": "pef13c", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_PEF13C_T1_ARTIFACT", "MALWARE_WIN_PEF13C_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/pef13c.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/pef13c", "updated_at": "2026-10-16" }, { "family": "peflog", "category": "trojan", "sample_count": 1, "rule_names": [ "MALWARE_WIN_PEFLOG_T1_ARTIFACT", "MALWARE_WIN_PEFLOG_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/peflog.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/peflog", "updated_at": "2026-10-16" }, { "family": "pennybee", "category": "advanced_threat", "sample_count": 3, "rule_names": [ "MALWARE_WIN_PENNYBEE_T1_ARTIFACT", "MALWARE_WIN_PENNYBEE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/pennybee.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/pennybee", "updated_at": "2026-10-16" }, { "family": "penzievs", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_PENZIEVS_T1_ARTIFACT", "MALWARE_WIN_PENZIEVS_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/penzievs.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/penzievs", "updated_at": "2026-10-16" }, { "family": "pepex", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_PEPEX_T1_ARTIFACT", "MALWARE_WIN_PEPEX_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/pepex.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/pepex", "updated_at": "2026-10-16" }, { "family": "pepm", "category": "ransomware", "sample_count": 7, "rule_names": [ "MALWARE_WIN_PEPM_T1_ARTIFACT", "MALWARE_WIN_PEPM_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/pepm.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/pepm", "updated_at": "2026-10-16" }, { "family": "perez", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_PEREZ_T1_ARTIFACT", "MALWARE_WIN_PEREZ_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/perez.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/perez", "updated_at": "2026-10-16" }, { "family": "perfectoptimizer", "category": "trojan", "sample_count": 4, "rule_names": [ "MALWARE_WIN_PERFECTOPTIMIZER_T1_ARTIFACT", "MALWARE_WIN_PERFECTOPTIMIZER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/perfectoptimizer.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/perfectoptimizer", "updated_at": "2026-10-16" }, { "family": "perflogger", "category": "trojan", "sample_count": 11, "rule_names": [ "MALWARE_WIN_PERFLOGGER_T1_ARTIFACT", "MALWARE_WIN_PERFLOGGER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/perflogger.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/perflogger", "updated_at": "2026-10-16" }, { "family": "perinet", "category": "worm", "sample_count": 24, "rule_names": [ "MALWARE_WIN_PERINET_T1_ARTIFACT", "MALWARE_WIN_PERINET_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/perinet.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/perinet", "updated_at": "2026-10-16" }, { "family": "perion", "category": "adware", "sample_count": 17, "rule_names": [ "MALWARE_WIN_PERION_T1_ARTIFACT", "MALWARE_WIN_PERION_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/perion.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/perion", "updated_at": "2026-10-16" }, { "family": "perkesh", "category": "ransomware", "sample_count": 2, "rule_names": [ "MALWARE_WIN_PERKESH_T1_ARTIFACT", "MALWARE_WIN_PERKESH_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/perkesh.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/perkesh", "updated_at": "2026-10-16" }, { "family": "perkiler", "category": "ransomware", "sample_count": 5, "rule_names": [ "MALWARE_WIN_PERKILER_T1_ARTIFACT", "MALWARE_WIN_PERKILER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/perkiler.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/perkiler", "updated_at": "2026-10-16" }, { "family": "perseus", "category": "ransomware", "sample_count": 4, "rule_names": [ "MALWARE_WIN_PERSEUS_T1_ARTIFACT", "MALWARE_WIN_PERSEUS_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/perseus.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/perseus", "updated_at": "2026-10-16" }, { "family": "pespin", "category": "ransomware", "sample_count": 8, "rule_names": [ "MALWARE_WIN_PESPIN_T1_ARTIFACT", "MALWARE_WIN_PESPIN_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/pespin.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/pespin", "updated_at": "2026-10-16" }, { "family": "petal", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_PETAL_T1_ARTIFACT", "MALWARE_WIN_PETAL_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/petal.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/petal", "updated_at": "2026-10-16" }, { "family": "petun", "category": "ransomware", "sample_count": 3, "rule_names": [ "MALWARE_WIN_PETUN_T1_ARTIFACT", "MALWARE_WIN_PETUN_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/petun.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/petun", "updated_at": "2026-10-16" }, { "family": "petya", "category": "ransomware", "sample_count": 121, "rule_names": [ "MALWARE_WIN_PETYA_T1_ARTIFACT", "MALWARE_WIN_PETYA_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/petya.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/petya", "updated_at": "2026-10-16" }, { "family": "pfoenic", "category": "ransomware", "sample_count": 2, "rule_names": [ "MALWARE_WIN_PFOENIC_T1_ARTIFACT", "MALWARE_WIN_PFOENIC_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/pfoenic.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/pfoenic", "updated_at": "2026-10-16" }, { "family": "pgpsnippet", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_PGPSNIPPET_T1_ARTIFACT", "MALWARE_WIN_PGPSNIPPET_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/pgpsnippet.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/pgpsnippet", "updated_at": "2026-10-16" }, { "family": "phires", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_PHIRES_T1_ARTIFACT", "MALWARE_WIN_PHIRES_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/phires.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/phires", "updated_at": "2026-10-16" }, { "family": "phnu", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_PHNU_T1_ARTIFACT", "MALWARE_WIN_PHNU_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/phnu.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/phnu", "updated_at": "2026-10-16" }, { "family": "phny", "category": "ransomware", "sample_count": 25, "rule_names": [ "MALWARE_WIN_PHNY_T1_ARTIFACT", "MALWARE_WIN_PHNY_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/phny.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/phny", "updated_at": "2026-10-16" }, { "family": "phonerooter", "category": "trojan", "sample_count": 1, "rule_names": [ "MALWARE_WIN_PHONEROOTER_T1_ARTIFACT", "MALWARE_WIN_PHONEROOTER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/phonerooter.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/phonerooter", "updated_at": "2026-10-16" }, { "family": "phorpiex", "category": "botnet", "sample_count": 115, "rule_names": [ "MALWARE_WIN_PHORPIEX_T1_ARTIFACT", "MALWARE_WIN_PHORPIEX_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/phorpiex.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/phorpiex", "updated_at": "2026-10-16" }, { "family": "phpain", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_PHPAIN_T1_ARTIFACT", "MALWARE_WIN_PHPAIN_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/phpain.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/phpain", "updated_at": "2026-10-16" }, { "family": "phpw", "category": "trojan", "sample_count": 195, "rule_names": [ "MALWARE_WIN_PHPW_T1_ARTIFACT", "MALWARE_WIN_PHPW_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/phpw.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/phpw", "updated_at": "2026-10-16" }, { "family": "phtg", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_PHTG_T1_ARTIFACT", "MALWARE_WIN_PHTG_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/phtg.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/phtg", "updated_at": "2026-10-16" }, { "family": "picsys", "category": "trojan", "sample_count": 82, "rule_names": [ "MALWARE_WIN_PICSYS_T1_ARTIFACT", "MALWARE_WIN_PICSYS_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/picsys.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/picsys", "updated_at": "2026-10-16" }, { "family": "pidgeon", "category": "trojan_downloader", "sample_count": 23, "rule_names": [ "MALWARE_WIN_PIDGEON_T1_ARTIFACT", "MALWARE_WIN_PIDGEON_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/pidgeon.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/pidgeon", "updated_at": "2026-10-16" }, { "family": "pidmecc", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_PIDMECC_T1_ARTIFACT", "MALWARE_WIN_PIDMECC_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/pidmecc.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/pidmecc", "updated_at": "2026-10-16" }, { "family": "pieshua", "category": "ransomware", "sample_count": 2, "rule_names": [ "MALWARE_WIN_PIESHUA_T1_ARTIFACT", "MALWARE_WIN_PIESHUA_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/pieshua.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/pieshua", "updated_at": "2026-10-16" }, { "family": "pikabot", "category": "loader", "sample_count": 850, "rule_names": [ "MALWARE_WIN_PIKABOT_T1_ARTIFACT", "MALWARE_WIN_PIKABOT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/pikabot.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/pikabot", "updated_at": "2026-10-16" }, { "family": "pikachu", "category": "advanced_threat", "sample_count": 1, "rule_names": [ "MALWARE_WIN_PIKACHU_T1_ARTIFACT", "MALWARE_WIN_PIKACHU_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/pikachu.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/pikachu", "updated_at": "2026-10-16" }, { "family": "piker", "category": "ransomware", "sample_count": 2, "rule_names": [ "MALWARE_WIN_PIKER_T1_ARTIFACT", "MALWARE_WIN_PIKER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/piker.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/piker", "updated_at": "2026-10-16" }, { "family": "pincav", "category": "adware", "sample_count": 35, "rule_names": [ "MALWARE_WIN_PINCAV_T1_ARTIFACT", "MALWARE_WIN_PINCAV_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/pincav.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/pincav", "updated_at": "2026-10-16" }, { "family": "pincher", "category": "ransomware", "sample_count": 2, "rule_names": [ "MALWARE_WIN_PINCHER_T1_ARTIFACT", "MALWARE_WIN_PINCHER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/pincher.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/pincher", "updated_at": "2026-10-16" }, { "family": "pinkblocker", "category": "ransomware", "sample_count": 3, "rule_names": [ "MALWARE_WIN_PINKBLOCKER_T1_ARTIFACT", "MALWARE_WIN_PINKBLOCKER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/pinkblocker.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/pinkblocker", "updated_at": "2026-10-16" }, { "family": "pintu", "category": "ransomware", "sample_count": 5, "rule_names": [ "MALWARE_WIN_PINTU_T1_ARTIFACT", "MALWARE_WIN_PINTU_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/pintu.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/pintu", "updated_at": "2026-10-16" }, { "family": "pioneer", "category": "file_infector", "sample_count": 203, "rule_names": [ "MALWARE_WIN_PIONEER_T1_ARTIFACT", "MALWARE_WIN_PIONEER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/pioneer.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/pioneer", "updated_at": "2026-10-16" }, { "family": "pipo", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_PIPO_T1_ARTIFACT", "MALWARE_WIN_PIPO_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/pipo.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/pipo", "updated_at": "2026-10-16" }, { "family": "pirminay", "category": "infostealer", "sample_count": 13, "rule_names": [ "MALWARE_WIN_PIRMINAY_T1_ARTIFACT", "MALWARE_WIN_PIRMINAY_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/pirminay.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/pirminay", "updated_at": "2026-10-16" }, { "family": "pitin", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_PITIN_T1_ARTIFACT", "MALWARE_WIN_PITIN_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/pitin.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/pitin", "updated_at": "2026-10-16" }, { "family": "pizchao", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_PIZCHAO_T1_ARTIFACT", "MALWARE_WIN_PIZCHAO_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/pizchao.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/pizchao", "updated_at": "2026-10-16" }, { "family": "pjtbinder", "category": "ransomware", "sample_count": 2, "rule_names": [ "MALWARE_WIN_PJTBINDER_T1_ARTIFACT", "MALWARE_WIN_PJTBINDER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/pjtbinder.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/pjtbinder", "updated_at": "2026-10-16" }, { "family": "pjzab0jsupjb", "category": "trojan", "sample_count": 1, "rule_names": [ "MALWARE_WIN_PJZAB0JSUPJB_T1_ARTIFACT", "MALWARE_WIN_PJZAB0JSUPJB_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/pjzab0jsupjb.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/pjzab0jsupjb", "updated_at": "2026-10-16" }, { "family": "plasma", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_PLASMA_T1_ARTIFACT", "MALWARE_WIN_PLASMA_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/plasma.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/plasma", "updated_at": "2026-10-16" }, { "family": "platan", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_PLATAN_T1_ARTIFACT", "MALWARE_WIN_PLATAN_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/platan.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/platan", "updated_at": "2026-10-16" }, { "family": "playgames", "category": "advanced_threat", "sample_count": 1, "rule_names": [ "MALWARE_WIN_PLAYGAMES_T1_ARTIFACT", "MALWARE_WIN_PLAYGAMES_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/playgames.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/playgames", "updated_at": "2026-10-16" }, { "family": "playtech", "category": "pua", "sample_count": 216, "rule_names": [ "MALWARE_WIN_PLAYTECH_T1_ARTIFACT", "MALWARE_WIN_PLAYTECH_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/playtech.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/playtech", "updated_at": "2026-10-16" }, { "family": "plead", "category": "trojan", "sample_count": 2, "rule_names": [ "MALWARE_WIN_PLEAD_T1_ARTIFACT", "MALWARE_WIN_PLEAD_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/plead.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/plead", "updated_at": "2026-10-16" }, { "family": "plicker", "category": "advanced_threat", "sample_count": 1, "rule_names": [ "MALWARE_WIN_PLICKER_T1_ARTIFACT", "MALWARE_WIN_PLICKER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/plicker.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/plicker", "updated_at": "2026-10-16" }, { "family": "plimrost", "category": "ransomware", "sample_count": 2, "rule_names": [ "MALWARE_WIN_PLIMROST_T1_ARTIFACT", "MALWARE_WIN_PLIMROST_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/plimrost.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/plimrost", "updated_at": "2026-10-16" }, { "family": "plinch", "category": "trojan", "sample_count": 1, "rule_names": [ "MALWARE_WIN_PLINCH_T1_ARTIFACT", "MALWARE_WIN_PLINCH_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/plinch.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/plinch", "updated_at": "2026-10-16" }, { "family": "pliskal", "category": "trojan", "sample_count": 23, "rule_names": [ "MALWARE_WIN_PLISKAL_T1_ARTIFACT", "MALWARE_WIN_PLISKAL_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/pliskal.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/pliskal", "updated_at": "2026-10-16" }, { "family": "ploprolo", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_PLOPROLO_T1_ARTIFACT", "MALWARE_WIN_PLOPROLO_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/ploprolo.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/ploprolo", "updated_at": "2026-10-16" }, { "family": "plugs", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_PLUGS_T1_ARTIFACT", "MALWARE_WIN_PLUGS_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/plugs.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/plugs", "updated_at": "2026-10-16" }, { "family": "plugx", "category": "rat", "sample_count": 8, "rule_names": [ "MALWARE_WIN_PLUGX_T1_ARTIFACT", "MALWARE_WIN_PLUGX_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/plugx.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/plugx", "updated_at": "2026-10-16" }, { "family": "pluto", "category": "worm", "sample_count": 209, "rule_names": [ "MALWARE_WIN_PLUTO_T1_ARTIFACT", "MALWARE_WIN_PLUTO_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/pluto.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/pluto", "updated_at": "2026-10-16" }, { "family": "podnuha", "category": "advanced_threat", "sample_count": 1, "rule_names": [ "MALWARE_WIN_PODNUHA_T1_ARTIFACT", "MALWARE_WIN_PODNUHA_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/podnuha.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/podnuha", "updated_at": "2026-10-16" }, { "family": "poison", "category": "rat", "sample_count": 261, "rule_names": [ "MALWARE_WIN_POISON_T1_ARTIFACT", "MALWARE_WIN_POISON_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/poison.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/poison", "updated_at": "2026-10-16" }, { "family": "polip", "category": "trojan", "sample_count": 4, "rule_names": [ "MALWARE_WIN_POLIP_T1_ARTIFACT", "MALWARE_WIN_POLIP_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/polip.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/polip", "updated_at": "2026-10-16" }, { "family": "polycrypt", "category": "ransomware", "sample_count": 4, "rule_names": [ "MALWARE_WIN_POLYCRYPT_T1_ARTIFACT", "MALWARE_WIN_POLYCRYPT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/polycrypt.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/polycrypt", "updated_at": "2026-10-16" }, { "family": "polypatch", "category": "trojan", "sample_count": 11, "rule_names": [ "MALWARE_WIN_POLYPATCH_T1_ARTIFACT", "MALWARE_WIN_POLYPATCH_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/polypatch.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/polypatch", "updated_at": "2026-10-16" }, { "family": "pondfull", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_PONDFULL_T1_ARTIFACT", "MALWARE_WIN_PONDFULL_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/pondfull.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/pondfull", "updated_at": "2026-10-16" }, { "family": "ponmocup", "category": "trojan", "sample_count": 4, "rule_names": [ "MALWARE_WIN_PONMOCUP_T1_ARTIFACT", "MALWARE_WIN_PONMOCUP_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/ponmocup.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/ponmocup", "updated_at": "2026-10-16" }, { "family": "pontoeb", "category": "advanced_threat", "sample_count": 1, "rule_names": [ "MALWARE_WIN_PONTOEB_T1_ARTIFACT", "MALWARE_WIN_PONTOEB_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/pontoeb.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/pontoeb", "updated_at": "2026-10-16" }, { "family": "pony", "category": "infostealer", "sample_count": 10, "rule_names": [ "MALWARE_WIN_PONY_T1_ARTIFACT", "MALWARE_WIN_PONY_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/pony.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/pony", "updated_at": "2026-10-16" }, { "family": "ponystealer", "category": "infostealer", "sample_count": 374, "rule_names": [ "MALWARE_WIN_PONYSTEALER_T1_ARTIFACT", "MALWARE_WIN_PONYSTEALER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/ponystealer.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/ponystealer", "updated_at": "2026-10-16" }, { "family": "popad", "category": "trojan", "sample_count": 1, "rule_names": [ "MALWARE_WIN_POPAD_T1_ARTIFACT", "MALWARE_WIN_POPAD_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/popad.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/popad", "updated_at": "2026-10-16" }, { "family": "pophot", "category": "ransomware", "sample_count": 2, "rule_names": [ "MALWARE_WIN_POPHOT_T1_ARTIFACT", "MALWARE_WIN_POPHOT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/pophot.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/pophot", "updated_at": "2026-10-16" }, { "family": "popwin", "category": "advanced_threat", "sample_count": 2, "rule_names": [ "MALWARE_WIN_POPWIN_T1_ARTIFACT", "MALWARE_WIN_POPWIN_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/popwin.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/popwin", "updated_at": "2026-10-16" }, { "family": "porex", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_POREX_T1_ARTIFACT", "MALWARE_WIN_POREX_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/porex.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/porex", "updated_at": "2026-10-16" }, { "family": "pornblackmailer", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_PORNBLACKMAILER_T1_ARTIFACT", "MALWARE_WIN_PORNBLACKMAILER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/pornblackmailer.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/pornblackmailer", "updated_at": "2026-10-16" }, { "family": "pornoblocker", "category": "ransomware", "sample_count": 11, "rule_names": [ "MALWARE_WIN_PORNOBLOCKER_T1_ARTIFACT", "MALWARE_WIN_PORNOBLOCKER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/pornoblocker.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/pornoblocker", "updated_at": "2026-10-16" }, { "family": "porntool", "category": "ransomware", "sample_count": 7, "rule_names": [ "MALWARE_WIN_PORNTOOL_T1_ARTIFACT", "MALWARE_WIN_PORNTOOL_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/porntool.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/porntool", "updated_at": "2026-10-16" }, { "family": "poscardstealer", "category": "trojan", "sample_count": 6, "rule_names": [ "MALWARE_WIN_POSCARDSTEALER_T1_ARTIFACT", "MALWARE_WIN_POSCARDSTEALER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/poscardstealer.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/poscardstealer", "updated_at": "2026-10-16" }, { "family": "possiblemalware", "category": "trojan", "sample_count": 1, "rule_names": [ "MALWARE_WIN_POSSIBLEMALWARE_T1_ARTIFACT", "MALWARE_WIN_POSSIBLEMALWARE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/possiblemalware.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/possiblemalware", "updated_at": "2026-10-16" }, { "family": "potao", "category": "trojan", "sample_count": 1, "rule_names": [ "MALWARE_WIN_POTAO_T1_ARTIFACT", "MALWARE_WIN_POTAO_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/potao.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/potao", "updated_at": "2026-10-16" }, { "family": "potukorp", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_POTUKORP_T1_ARTIFACT", "MALWARE_WIN_POTUKORP_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/potukorp.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/potukorp", "updated_at": "2026-10-16" }, { "family": "povertel", "category": "ransomware", "sample_count": 3, "rule_names": [ "MALWARE_WIN_POVERTEL_T1_ARTIFACT", "MALWARE_WIN_POVERTEL_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/povertel.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/povertel", "updated_at": "2026-10-16" }, { "family": "powerless", "category": "ransomware", "sample_count": 3, "rule_names": [ "MALWARE_WIN_POWERLESS_T1_ARTIFACT", "MALWARE_WIN_POWERLESS_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/powerless.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/powerless", "updated_at": "2026-10-16" }, { "family": "powerspritz", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_POWERSPRITZ_T1_ARTIFACT", "MALWARE_WIN_POWERSPRITZ_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/powerspritz.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/powerspritz", "updated_at": "2026-10-16" }, { "family": "powerun", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_POWERUN_T1_ARTIFACT", "MALWARE_WIN_POWERUN_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/powerun.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/powerun", "updated_at": "2026-10-16" }, { "family": "powp", "category": "adware", "sample_count": 99, "rule_names": [ "MALWARE_WIN_POWP_T1_ARTIFACT", "MALWARE_WIN_POWP_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/powp.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/powp", "updated_at": "2026-10-16" }, { "family": "powstage", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_POWSTAGE_T1_ARTIFACT", "MALWARE_WIN_POWSTAGE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/powstage.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/powstage", "updated_at": "2026-10-16" }, { "family": "powzip", "category": "ransomware", "sample_count": 15, "rule_names": [ "MALWARE_WIN_POWZIP_T1_ARTIFACT", "MALWARE_WIN_POWZIP_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/powzip.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/powzip", "updated_at": "2026-10-16" }, { "family": "poxters", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_POXTERS_T1_ARTIFACT", "MALWARE_WIN_POXTERS_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/poxters.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/poxters", "updated_at": "2026-10-16" }, { "family": "pramro", "category": "ransomware", "sample_count": 2, "rule_names": [ "MALWARE_WIN_PRAMRO_T1_ARTIFACT", "MALWARE_WIN_PRAMRO_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/pramro.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/pramro", "updated_at": "2026-10-16" }, { "family": "prast", "category": "advanced_threat", "sample_count": 1, "rule_names": [ "MALWARE_WIN_PRAST_T1_ARTIFACT", "MALWARE_WIN_PRAST_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/prast.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/prast", "updated_at": "2026-10-16" }, { "family": "predator", "category": "spyware", "sample_count": 120, "rule_names": [ "MALWARE_WIN_PREDATOR_T1_ARTIFACT", "MALWARE_WIN_PREDATOR_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/predator.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/predator", "updated_at": "2026-10-16" }, { "family": "predatorthief", "category": "backdoor", "sample_count": 1, "rule_names": [ "MALWARE_WIN_PREDATORTHIEF_T1_ARTIFACT", "MALWARE_WIN_PREDATORTHIEF_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/predatorthief.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/predatorthief", "updated_at": "2026-10-16" }, { "family": "premium", "category": "trojan", "sample_count": 3, "rule_names": [ "MALWARE_WIN_PREMIUM_T1_ARTIFACT", "MALWARE_WIN_PREMIUM_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/premium.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/premium", "updated_at": "2026-10-16" }, { "family": "prepscram", "category": "pua", "sample_count": 3130, "rule_names": [ "MALWARE_WIN_PREPSCRAM_T1_ARTIFACT", "MALWARE_WIN_PREPSCRAM_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/prepscram.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/prepscram", "updated_at": "2026-10-16" }, { "family": "pres", "category": "ransomware", "sample_count": 5, "rule_names": [ "MALWARE_WIN_PRES_T1_ARTIFACT", "MALWARE_WIN_PRES_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/pres.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/pres", "updated_at": "2026-10-16" }, { "family": "presenoker", "category": "pua", "sample_count": 406, "rule_names": [ "MALWARE_WIN_PRESENOKER_T1_ARTIFACT", "MALWARE_WIN_PRESENOKER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/presenoker.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/presenoker", "updated_at": "2026-10-16" }, { "family": "prex", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_PREX_T1_ARTIFACT", "MALWARE_WIN_PREX_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/prex.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/prex", "updated_at": "2026-10-16" }, { "family": "primarypass", "category": "adware", "sample_count": 30, "rule_names": [ "MALWARE_WIN_PRIMARYPASS_T1_ARTIFACT", "MALWARE_WIN_PRIMARYPASS_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/primarypass.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/primarypass", "updated_at": "2026-10-16" }, { "family": "primawega", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_PRIMAWEGA_T1_ARTIFACT", "MALWARE_WIN_PRIMAWEGA_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/primawega.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/primawega", "updated_at": "2026-10-16" }, { "family": "primecasino", "category": "advanced_threat", "sample_count": 9, "rule_names": [ "MALWARE_WIN_PRIMECASINO_T1_ARTIFACT", "MALWARE_WIN_PRIMECASINO_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/primecasino.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/primecasino", "updated_at": "2026-10-16" }, { "family": "prjraptor", "category": "trojan", "sample_count": 0, "rule_names": [ "MALWARE_WIN_PRJRAPTOR_T1_ARTIFACT", "MALWARE_WIN_PRJRAPTOR_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/prjraptor.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/prjraptor", "updated_at": "2026-10-16" }, { "family": "processhijack", "category": "trojan", "sample_count": 187, "rule_names": [ "MALWARE_WIN_PROCESSHIJACK_T1_ARTIFACT", "MALWARE_WIN_PROCESSHIJACK_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/processhijack.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/processhijack", "updated_at": "2026-10-16" }, { "family": "procgmar", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_PROCGMAR_T1_ARTIFACT", "MALWARE_WIN_PROCGMAR_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/procgmar.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/procgmar", "updated_at": "2026-10-16" }, { "family": "prochack", "category": "advanced_threat", "sample_count": 8, "rule_names": [ "MALWARE_WIN_PROCHACK_T1_ARTIFACT", "MALWARE_WIN_PROCHACK_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/prochack.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/prochack", "updated_at": "2026-10-16" }, { "family": "procpatcher", "category": "trojan", "sample_count": 3, "rule_names": [ "MALWARE_WIN_PROCPATCHER_T1_ARTIFACT", "MALWARE_WIN_PROCPATCHER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/procpatcher.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/procpatcher", "updated_at": "2026-10-16" }, { "family": "progressive", "category": "advanced_threat", "sample_count": 2, "rule_names": [ "MALWARE_WIN_PROGRESSIVE_T1_ARTIFACT", "MALWARE_WIN_PROGRESSIVE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/progressive.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/progressive", "updated_at": "2026-10-16" }, { "family": "proinstall", "category": "advanced_threat", "sample_count": 3, "rule_names": [ "MALWARE_WIN_PROINSTALL_T1_ARTIFACT", "MALWARE_WIN_PROINSTALL_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/proinstall.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/proinstall", "updated_at": "2026-10-16" }, { "family": "propagate", "category": "ransomware", "sample_count": 67, "rule_names": [ "MALWARE_WIN_PROPAGATE_T1_ARTIFACT", "MALWARE_WIN_PROPAGATE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/propagate.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/propagate", "updated_at": "2026-10-16" }, { "family": "prorat", "category": "rat", "sample_count": 14, "rule_names": [ "MALWARE_WIN_PRORAT_T1_ARTIFACT", "MALWARE_WIN_PRORAT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/prorat.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/prorat", "updated_at": "2026-10-16" }, { "family": "prosti", "category": "ransomware", "sample_count": 4, "rule_names": [ "MALWARE_WIN_PROSTI_T1_ARTIFACT", "MALWARE_WIN_PROSTI_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/prosti.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/prosti", "updated_at": "2026-10-16" }, { "family": "protector", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_PROTECTOR_T1_ARTIFACT", "MALWARE_WIN_PROTECTOR_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/protector.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/protector", "updated_at": "2026-10-16" }, { "family": "proteus", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_PROTEUS_T1_ARTIFACT", "MALWARE_WIN_PROTEUS_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/proteus.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/proteus", "updated_at": "2026-10-16" }, { "family": "protux", "category": "rat", "sample_count": 33, "rule_names": [ "MALWARE_WIN_PROTUX_T1_ARTIFACT", "MALWARE_WIN_PROTUX_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/protux.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/protux", "updated_at": "2026-10-16" }, { "family": "proxyagent", "category": "trojan", "sample_count": 1, "rule_names": [ "MALWARE_WIN_PROXYAGENT_T1_ARTIFACT", "MALWARE_WIN_PROXYAGENT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/proxyagent.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/proxyagent", "updated_at": "2026-10-16" }, { "family": "proxygate", "category": "advanced_threat", "sample_count": 1, "rule_names": [ "MALWARE_WIN_PROXYGATE_T1_ARTIFACT", "MALWARE_WIN_PROXYGATE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/proxygate.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/proxygate", "updated_at": "2026-10-16" }, { "family": "proxyweb", "category": "trojan", "sample_count": 4, "rule_names": [ "MALWARE_WIN_PROXYWEB_T1_ARTIFACT", "MALWARE_WIN_PROXYWEB_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/proxyweb.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/proxyweb", "updated_at": "2026-10-16" }, { "family": "psdownload", "category": "trojan_downloader", "sample_count": 41, "rule_names": [ "MALWARE_WIN_PSDOWNLOAD_T1_ARTIFACT", "MALWARE_WIN_PSDOWNLOAD_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/psdownload.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/psdownload", "updated_at": "2026-10-16" }, { "family": "psexec", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_PSEXEC_T1_ARTIFACT", "MALWARE_WIN_PSEXEC_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/psexec.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/psexec", "updated_at": "2026-10-16" }, { "family": "pshell", "category": "ransomware", "sample_count": 3, "rule_names": [ "MALWARE_WIN_PSHELL_T1_ARTIFACT", "MALWARE_WIN_PSHELL_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/pshell.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/pshell", "updated_at": "2026-10-16" }, { "family": "psloader", "category": "ransomware", "sample_count": 6, "rule_names": [ "MALWARE_WIN_PSLOADER_T1_ARTIFACT", "MALWARE_WIN_PSLOADER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/psloader.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/psloader", "updated_at": "2026-10-16" }, { "family": "psshell", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_PSSHELL_T1_ARTIFACT", "MALWARE_WIN_PSSHELL_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/psshell.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/psshell", "updated_at": "2026-10-16" }, { "family": "pstinb", "category": "ransomware", "sample_count": 3, "rule_names": [ "MALWARE_WIN_PSTINB_T1_ARTIFACT", "MALWARE_WIN_PSTINB_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/pstinb.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/pstinb", "updated_at": "2026-10-16" }, { "family": "pswdump", "category": "advanced_threat", "sample_count": 1, "rule_names": [ "MALWARE_WIN_PSWDUMP_T1_ARTIFACT", "MALWARE_WIN_PSWDUMP_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/pswdump.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/pswdump", "updated_at": "2026-10-16" }, { "family": "pswtool", "category": "hacktool", "sample_count": 18, "rule_names": [ "MALWARE_WIN_PSWTOOL_T1_ARTIFACT", "MALWARE_WIN_PSWTOOL_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/pswtool.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/pswtool", "updated_at": "2026-10-16" }, { "family": "psyme", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_PSYME_T1_ARTIFACT", "MALWARE_WIN_PSYME_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/psyme.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/psyme", "updated_at": "2026-10-16" }, { "family": "psyokym", "category": "ransomware", "sample_count": 2, "rule_names": [ "MALWARE_WIN_PSYOKYM_T1_ARTIFACT", "MALWARE_WIN_PSYOKYM_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/psyokym.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/psyokym", "updated_at": "2026-10-16" }, { "family": "pterodo", "category": "backdoor", "sample_count": 19, "rule_names": [ "MALWARE_WIN_PTERODO_T1_ARTIFACT", "MALWARE_WIN_PTERODO_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/pterodo.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/pterodo", "updated_at": "2026-10-16" }, { "family": "puamson", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_PUAMSON_T1_ARTIFACT", "MALWARE_WIN_PUAMSON_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/puamson.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/puamson", "updated_at": "2026-10-16" }, { "family": "pullupdate", "category": "advanced_threat", "sample_count": 7, "rule_names": [ "MALWARE_WIN_PULLUPDATE_T1_ARTIFACT", "MALWARE_WIN_PULLUPDATE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/pullupdate.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/pullupdate", "updated_at": "2026-10-16" }, { "family": "pulobe", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_PULOBE_T1_ARTIFACT", "MALWARE_WIN_PULOBE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/pulobe.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/pulobe", "updated_at": "2026-10-16" }, { "family": "puontib", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_PUONTIB_T1_ARTIFACT", "MALWARE_WIN_PUONTIB_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/puontib.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/puontib", "updated_at": "2026-10-16" }, { "family": "pupstudio", "category": "pua", "sample_count": 33, "rule_names": [ "MALWARE_WIN_PUPSTUDIO_T1_ARTIFACT", "MALWARE_WIN_PUPSTUDIO_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/pupstudio.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/pupstudio", "updated_at": "2026-10-16" }, { "family": "purga", "category": "ransomware", "sample_count": 5, "rule_names": [ "MALWARE_WIN_PURGA_T1_ARTIFACT", "MALWARE_WIN_PURGA_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/purga.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/purga", "updated_at": "2026-10-16" }, { "family": "purgen", "category": "ransomware", "sample_count": 3, "rule_names": [ "MALWARE_WIN_PURGEN_T1_ARTIFACT", "MALWARE_WIN_PURGEN_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/purgen.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/purgen", "updated_at": "2026-10-16" }, { "family": "purgory", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_PURGORY_T1_ARTIFACT", "MALWARE_WIN_PURGORY_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/purgory.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/purgory", "updated_at": "2026-10-16" }, { "family": "purityscan", "category": "advanced_threat", "sample_count": 2, "rule_names": [ "MALWARE_WIN_PURITYSCAN_T1_ARTIFACT", "MALWARE_WIN_PURITYSCAN_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/purityscan.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/purityscan", "updated_at": "2026-10-16" }, { "family": "pushel", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_PUSHEL_T1_ARTIFACT", "MALWARE_WIN_PUSHEL_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/pushel.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/pushel", "updated_at": "2026-10-16" }, { "family": "putabmow", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_PUTABMOW_T1_ARTIFACT", "MALWARE_WIN_PUTABMOW_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/putabmow.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/putabmow", "updated_at": "2026-10-16" }, { "family": "puwaders", "category": "ransomware", "sample_count": 8, "rule_names": [ "MALWARE_WIN_PUWADERS_T1_ARTIFACT", "MALWARE_WIN_PUWADERS_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/puwaders.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/puwaders", "updated_at": "2026-10-16" }, { "family": "pwdump", "category": "advanced_threat", "sample_count": 1, "rule_names": [ "MALWARE_WIN_PWDUMP_T1_ARTIFACT", "MALWARE_WIN_PWDUMP_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/pwdump.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/pwdump", "updated_at": "2026-10-16" }, { "family": "pwkiller", "category": "trojan", "sample_count": 1, "rule_names": [ "MALWARE_WIN_PWKILLER_T1_ARTIFACT", "MALWARE_WIN_PWKILLER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/pwkiller.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/pwkiller", "updated_at": "2026-10-16" }, { "family": "pwsime", "category": "ransomware", "sample_count": 4, "rule_names": [ "MALWARE_WIN_PWSIME_T1_ARTIFACT", "MALWARE_WIN_PWSIME_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/pwsime.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/pwsime", "updated_at": "2026-10-16" }, { "family": "pwszbot", "category": "trojan", "sample_count": 4, "rule_names": [ "MALWARE_WIN_PWSZBOT_T1_ARTIFACT", "MALWARE_WIN_PWSZBOT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/pwszbot.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/pwszbot", "updated_at": "2026-10-16" }, { "family": "pycrypter", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_PYCRYPTER_T1_ARTIFACT", "MALWARE_WIN_PYCRYPTER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/pycrypter.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/pycrypter", "updated_at": "2026-10-16" }, { "family": "pyfiledel", "category": "ransomware", "sample_count": 4, "rule_names": [ "MALWARE_WIN_PYFILEDEL_T1_ARTIFACT", "MALWARE_WIN_PYFILEDEL_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/pyfiledel.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/pyfiledel", "updated_at": "2026-10-16" }, { "family": "pyinstaller", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_PYINSTALLER_T1_ARTIFACT", "MALWARE_WIN_PYINSTALLER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/pyinstaller.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/pyinstaller", "updated_at": "2026-10-16" }, { "family": "pykspa", "category": "worm", "sample_count": 169, "rule_names": [ "MALWARE_WIN_PYKSPA_T1_ARTIFACT", "MALWARE_WIN_PYKSPA_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/pykspa.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/pykspa", "updated_at": "2026-10-16" }, { "family": "pyme", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_PYME_T1_ARTIFACT", "MALWARE_WIN_PYME_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/pyme.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/pyme", "updated_at": "2026-10-16" }, { "family": "pynamer", "category": "trojan", "sample_count": 67, "rule_names": [ "MALWARE_WIN_PYNAMER_T1_ARTIFACT", "MALWARE_WIN_PYNAMER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/pynamer.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/pynamer", "updated_at": "2026-10-16" }, { "family": "pyspy", "category": "trojan", "sample_count": 1, "rule_names": [ "MALWARE_WIN_PYSPY_T1_ARTIFACT", "MALWARE_WIN_PYSPY_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/pyspy.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/pyspy", "updated_at": "2026-10-16" }, { "family": "qaccel", "category": "advanced_threat", "sample_count": 3, "rule_names": [ "MALWARE_WIN_QACCEL_T1_ARTIFACT", "MALWARE_WIN_QACCEL_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/qaccel.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/qaccel", "updated_at": "2026-10-16" }, { "family": "qadars", "category": "trojan", "sample_count": 5, "rule_names": [ "MALWARE_WIN_QADARS_T1_ARTIFACT", "MALWARE_WIN_QADARS_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/qadars.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/qadars", "updated_at": "2026-10-16" }, { "family": "qbot", "category": "banking_trojan", "sample_count": 1758, "rule_names": [ "MALWARE_WIN_QBOT_T1_ARTIFACT", "MALWARE_WIN_QBOT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/qbot.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/qbot", "updated_at": "2026-10-16" }, { "family": "qdownb", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_QDOWNB_T1_ARTIFACT", "MALWARE_WIN_QDOWNB_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/qdownb.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/qdownb", "updated_at": "2026-10-16" }, { "family": "qhost", "category": "trojan", "sample_count": 1722, "rule_names": [ "MALWARE_WIN_QHOST_T1_ARTIFACT", "MALWARE_WIN_QHOST_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/qhost.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/qhost", "updated_at": "2026-10-16" }, { "family": "qhosts", "category": "trojan", "sample_count": 2, "rule_names": [ "MALWARE_WIN_QHOSTS_T1_ARTIFACT", "MALWARE_WIN_QHOSTS_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/qhosts.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/qhosts", "updated_at": "2026-10-16" }, { "family": "qjwmonkey", "category": "adware", "sample_count": 190, "rule_names": [ "MALWARE_WIN_QJWMONKEY_T1_ARTIFACT", "MALWARE_WIN_QJWMONKEY_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/qjwmonkey.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/qjwmonkey", "updated_at": "2026-10-16" }, { "family": "qmlfrt0j91kid", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_QMLFRT0J91KID_T1_ARTIFACT", "MALWARE_WIN_QMLFRT0J91KID_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/qmlfrt0j91kid.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/qmlfrt0j91kid", "updated_at": "2026-10-16" }, { "family": "qmuabwpoobbg", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_QMUABWPOOBBG_T1_ARTIFACT", "MALWARE_WIN_QMUABWPOOBBG_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/qmuabwpoobbg.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/qmuabwpoobbg", "updated_at": "2026-10-16" }, { "family": "qqfarmassist", "category": "advanced_threat", "sample_count": 1, "rule_names": [ "MALWARE_WIN_QQFARMASSIST_T1_ARTIFACT", "MALWARE_WIN_QQFARMASSIST_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/qqfarmassist.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/qqfarmassist", "updated_at": "2026-10-16" }, { "family": "qqfarmer", "category": "ransomware", "sample_count": 3, "rule_names": [ "MALWARE_WIN_QQFARMER_T1_ARTIFACT", "MALWARE_WIN_QQFARMER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/qqfarmer.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/qqfarmer", "updated_at": "2026-10-16" }, { "family": "qqlogger", "category": "spyware", "sample_count": 29, "rule_names": [ "MALWARE_WIN_QQLOGGER_T1_ARTIFACT", "MALWARE_WIN_QQLOGGER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/qqlogger.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/qqlogger", "updated_at": "2026-10-16" }, { "family": "qqmima", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_QQMIMA_T1_ARTIFACT", "MALWARE_WIN_QQMIMA_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/qqmima.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/qqmima", "updated_at": "2026-10-16" }, { "family": "qqpass", "category": "infostealer", "sample_count": 612, "rule_names": [ "MALWARE_WIN_QQPASS_T1_ARTIFACT", "MALWARE_WIN_QQPASS_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/qqpass.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/qqpass", "updated_at": "2026-10-16" }, { "family": "qqrob", "category": "trojan", "sample_count": 2, "rule_names": [ "MALWARE_WIN_QQROB_T1_ARTIFACT", "MALWARE_WIN_QQROB_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/qqrob.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/qqrob", "updated_at": "2026-10-16" }, { "family": "qqshou", "category": "trojan", "sample_count": 2, "rule_names": [ "MALWARE_WIN_QQSHOU_T1_ARTIFACT", "MALWARE_WIN_QQSHOU_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/qqshou.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/qqshou", "updated_at": "2026-10-16" }, { "family": "qqspy", "category": "advanced_threat", "sample_count": 1, "rule_names": [ "MALWARE_WIN_QQSPY_T1_ARTIFACT", "MALWARE_WIN_QQSPY_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/qqspy.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/qqspy", "updated_at": "2026-10-16" }, { "family": "qqten", "category": "ransomware", "sample_count": 4, "rule_names": [ "MALWARE_WIN_QQTEN_T1_ARTIFACT", "MALWARE_WIN_QQTEN_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/qqten.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/qqten", "updated_at": "2026-10-16" }, { "family": "qqware", "category": "browser_modifier", "sample_count": 14, "rule_names": [ "MALWARE_WIN_QQWARE_T1_ARTIFACT", "MALWARE_WIN_QQWARE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/qqware.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/qqware", "updated_at": "2026-10-16" }, { "family": "quant", "category": "ransomware", "sample_count": 12, "rule_names": [ "MALWARE_WIN_QUANT_T1_ARTIFACT", "MALWARE_WIN_QUANT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/quant.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/quant", "updated_at": "2026-10-16" }, { "family": "quasar", "category": "rat", "sample_count": 148, "rule_names": [ "MALWARE_WIN_QUASAR_T1_ARTIFACT", "MALWARE_WIN_QUASAR_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/quasar.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/quasar", "updated_at": "2026-10-16" }, { "family": "quasarrat", "category": "rat", "sample_count": 280, "rule_names": [ "MALWARE_WIN_QUASARRAT_T1_ARTIFACT", "MALWARE_WIN_QUASARRAT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/quasarrat.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/quasarrat", "updated_at": "2026-10-16" }, { "family": "quchispy", "category": "ransomware", "sample_count": 2, "rule_names": [ "MALWARE_WIN_QUCHISPY_T1_ARTIFACT", "MALWARE_WIN_QUCHISPY_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/quchispy.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/quchispy", "updated_at": "2026-10-16" }, { "family": "quervar", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_QUERVAR_T1_ARTIFACT", "MALWARE_WIN_QUERVAR_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/quervar.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/quervar", "updated_at": "2026-10-16" }, { "family": "quireap", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_QUIREAP_T1_ARTIFACT", "MALWARE_WIN_QUIREAP_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/quireap.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/quireap", "updated_at": "2026-10-16" }, { "family": "qzonit", "category": "ransomware", "sample_count": 20, "rule_names": [ "MALWARE_WIN_QZONIT_T1_ARTIFACT", "MALWARE_WIN_QZONIT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/qzonit.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/qzonit", "updated_at": "2026-10-16" }, { "family": "rabased", "category": "ransomware", "sample_count": 4, "rule_names": [ "MALWARE_WIN_RABASED_T1_ARTIFACT", "MALWARE_WIN_RABASED_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/rabased.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/rabased", "updated_at": "2026-10-16" }, { "family": "radmin", "category": "ransomware", "sample_count": 2, "rule_names": [ "MALWARE_WIN_RADMIN_T1_ARTIFACT", "MALWARE_WIN_RADMIN_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/radmin.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/radmin", "updated_at": "2026-10-16" }, { "family": "ragua", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_RAGUA_T1_ARTIFACT", "MALWARE_WIN_RAGUA_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/ragua.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/ragua", "updated_at": "2026-10-16" }, { "family": "rakhni", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_RAKHNI_T1_ARTIFACT", "MALWARE_WIN_RAKHNI_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/rakhni.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/rakhni", "updated_at": "2026-10-16" }, { "family": "ramdo", "category": "click_fraud", "sample_count": 8, "rule_names": [ "MALWARE_WIN_RAMDO_T1_ARTIFACT", "MALWARE_WIN_RAMDO_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/ramdo.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/ramdo", "updated_at": "2026-10-16" }, { "family": "ramnif", "category": "trojan", "sample_count": 1, "rule_names": [ "MALWARE_WIN_RAMNIF_T1_ARTIFACT", "MALWARE_WIN_RAMNIF_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/ramnif.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/ramnif", "updated_at": "2026-10-16" }, { "family": "ramnit", "category": "worm_banker", "sample_count": 20595, "rule_names": [ "MALWARE_WIN_RAMNIT_T1_ARTIFACT", "MALWARE_WIN_RAMNIT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/ramnit.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/ramnit", "updated_at": "2026-10-16" }, { "family": "ranapama", "category": "ransomware", "sample_count": 9, "rule_names": [ "MALWARE_WIN_RANAPAMA_T1_ARTIFACT", "MALWARE_WIN_RANAPAMA_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/ranapama.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/ranapama", "updated_at": "2026-10-16" }, { "family": "randrew", "category": "ransomware", "sample_count": 3, "rule_names": [ "MALWARE_WIN_RANDREW_T1_ARTIFACT", "MALWARE_WIN_RANDREW_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/randrew.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/randrew", "updated_at": "2026-10-16" }, { "family": "ranion", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_RANION_T1_ARTIFACT", "MALWARE_WIN_RANION_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/ranion.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/ranion", "updated_at": "2026-10-16" }, { "family": "ranna", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_RANNA_T1_ARTIFACT", "MALWARE_WIN_RANNA_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/ranna.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/ranna", "updated_at": "2026-10-16" }, { "family": "ranos", "category": "ransomware", "sample_count": 11, "rule_names": [ "MALWARE_WIN_RANOS_T1_ARTIFACT", "MALWARE_WIN_RANOS_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/ranos.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/ranos", "updated_at": "2026-10-16" }, { "family": "ranpax", "category": "ransomware", "sample_count": 2, "rule_names": [ "MALWARE_WIN_RANPAX_T1_ARTIFACT", "MALWARE_WIN_RANPAX_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/ranpax.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/ranpax", "updated_at": "2026-10-16" }, { "family": "ranserkd", "category": "ransomware", "sample_count": 5, "rule_names": [ "MALWARE_WIN_RANSERKD_T1_ARTIFACT", "MALWARE_WIN_RANSERKD_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/ranserkd.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/ranserkd", "updated_at": "2026-10-16" }, { "family": "ransim", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_RANSIM_T1_ARTIFACT", "MALWARE_WIN_RANSIM_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/ransim.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/ransim", "updated_at": "2026-10-16" }, { "family": "ransomheur", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_RANSOMHEUR_T1_ARTIFACT", "MALWARE_WIN_RANSOMHEUR_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/ransomheur.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/ransomheur", "updated_at": "2026-10-16" }, { "family": "ransomkd", "category": "ransomware", "sample_count": 3, "rule_names": [ "MALWARE_WIN_RANSOMKD_T1_ARTIFACT", "MALWARE_WIN_RANSOMKD_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/ransomkd.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/ransomkd", "updated_at": "2026-10-16" }, { "family": "rantest", "category": "ransomware", "sample_count": 5, "rule_names": [ "MALWARE_WIN_RANTEST_T1_ARTIFACT", "MALWARE_WIN_RANTEST_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/rantest.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/rantest", "updated_at": "2026-10-16" }, { "family": "rapid", "category": "ransomware", "sample_count": 18, "rule_names": [ "MALWARE_WIN_RAPID_T1_ARTIFACT", "MALWARE_WIN_RAPID_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/rapid.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/rapid", "updated_at": "2026-10-16" }, { "family": "rapidpass", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_RAPIDPASS_T1_ARTIFACT", "MALWARE_WIN_RAPIDPASS_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/rapidpass.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/rapidpass", "updated_at": "2026-10-16" }, { "family": "rapkill", "category": "ransomware", "sample_count": 2, "rule_names": [ "MALWARE_WIN_RAPKILL_T1_ARTIFACT", "MALWARE_WIN_RAPKILL_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/rapkill.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/rapkill", "updated_at": "2026-10-16" }, { "family": "rarmal", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_RARMAL_T1_ARTIFACT", "MALWARE_WIN_RARMAL_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/rarmal.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/rarmal", "updated_at": "2026-10-16" }, { "family": "rasch", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_RASCH_T1_ARTIFACT", "MALWARE_WIN_RASCH_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/rasch.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/rasch", "updated_at": "2026-10-16" }, { "family": "rasftuby", "category": "ransomware", "sample_count": 31, "rule_names": [ "MALWARE_WIN_RASFTUBY_T1_ARTIFACT", "MALWARE_WIN_RASFTUBY_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/rasftuby.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/rasftuby", "updated_at": "2026-10-16" }, { "family": "rasoon", "category": "trojan", "sample_count": 1, "rule_names": [ "MALWARE_WIN_RASOON_T1_ARTIFACT", "MALWARE_WIN_RASOON_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/rasoon.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/rasoon", "updated_at": "2026-10-16" }, { "family": "rastabaf", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_RASTABAF_T1_ARTIFACT", "MALWARE_WIN_RASTABAF_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/rastabaf.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/rastabaf", "updated_at": "2026-10-16" }, { "family": "rastarby", "category": "ransomware", "sample_count": 6, "rule_names": [ "MALWARE_WIN_RASTARBY_T1_ARTIFACT", "MALWARE_WIN_RASTARBY_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/rastarby.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/rastarby", "updated_at": "2026-10-16" }, { "family": "ravs", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_RAVS_T1_ARTIFACT", "MALWARE_WIN_RAVS_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/ravs.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/ravs", "updated_at": "2026-10-16" }, { "family": "razy", "category": "infostealer", "sample_count": 3391, "rule_names": [ "MALWARE_WIN_RAZY_T1_ARTIFACT", "MALWARE_WIN_RAZY_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/razy.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/razy", "updated_at": "2026-10-16" }, { "family": "rbot", "category": "backdoor", "sample_count": 109, "rule_names": [ "MALWARE_WIN_RBOT_T1_ARTIFACT", "MALWARE_WIN_RBOT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/rbot.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/rbot", "updated_at": "2026-10-16" }, { "family": "realspy", "category": "advanced_threat", "sample_count": 1, "rule_names": [ "MALWARE_WIN_REALSPY_T1_ARTIFACT", "MALWARE_WIN_REALSPY_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/realspy.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/realspy", "updated_at": "2026-10-16" }, { "family": "rebhip", "category": "rat", "sample_count": 120, "rule_names": [ "MALWARE_WIN_REBHIP_T1_ARTIFACT", "MALWARE_WIN_REBHIP_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/rebhip.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/rebhip", "updated_at": "2026-10-16" }, { "family": "recam", "category": "rat", "sample_count": 30, "rule_names": [ "MALWARE_WIN_RECAM_T1_ARTIFACT", "MALWARE_WIN_RECAM_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/recam.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/recam", "updated_at": "2026-10-16" }, { "family": "recex", "category": "ransomware", "sample_count": 6, "rule_names": [ "MALWARE_WIN_RECEX_T1_ARTIFACT", "MALWARE_WIN_RECEX_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/recex.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/recex", "updated_at": "2026-10-16" }, { "family": "reconyc", "category": "downloader", "sample_count": 222, "rule_names": [ "MALWARE_WIN_RECONYC_T1_ARTIFACT", "MALWARE_WIN_RECONYC_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/reconyc.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/reconyc", "updated_at": "2026-10-16" }, { "family": "recory", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_RECORY_T1_ARTIFACT", "MALWARE_WIN_RECORY_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/recory.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/recory", "updated_at": "2026-10-16" }, { "family": "redaman", "category": "trojan", "sample_count": 1, "rule_names": [ "MALWARE_WIN_REDAMAN_T1_ARTIFACT", "MALWARE_WIN_REDAMAN_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/redaman.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/redaman", "updated_at": "2026-10-16" }, { "family": "redator", "category": "trojan", "sample_count": 1, "rule_names": [ "MALWARE_WIN_REDATOR_T1_ARTIFACT", "MALWARE_WIN_REDATOR_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/redator.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/redator", "updated_at": "2026-10-16" }, { "family": "redcap", "category": "backdoor", "sample_count": 39, "rule_names": [ "MALWARE_WIN_REDCAP_T1_ARTIFACT", "MALWARE_WIN_REDCAP_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/redcap.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/redcap", "updated_at": "2026-10-16" }, { "family": "redeye", "category": "ransomware", "sample_count": 2, "rule_names": [ "MALWARE_WIN_REDEYE_T1_ARTIFACT", "MALWARE_WIN_REDEYE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/redeye.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/redeye", "updated_at": "2026-10-16" }, { "family": "redgirl", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_REDGIRL_T1_ARTIFACT", "MALWARE_WIN_REDGIRL_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/redgirl.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/redgirl", "updated_at": "2026-10-16" }, { "family": "redirect", "category": "browser_modifier", "sample_count": 16, "rule_names": [ "MALWARE_WIN_REDIRECT_T1_ARTIFACT", "MALWARE_WIN_REDIRECT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/redirect.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/redirect", "updated_at": "2026-10-16" }, { "family": "redirected", "category": "trojan", "sample_count": 2, "rule_names": [ "MALWARE_WIN_REDIRECTED_T1_ARTIFACT", "MALWARE_WIN_REDIRECTED_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/redirected.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/redirected", "updated_at": "2026-10-16" }, { "family": "redlonam", "category": "ransomware", "sample_count": 3, "rule_names": [ "MALWARE_WIN_REDLONAM_T1_ARTIFACT", "MALWARE_WIN_REDLONAM_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/redlonam.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/redlonam", "updated_at": "2026-10-16" }, { "family": "redneck", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_REDNECK_T1_ARTIFACT", "MALWARE_WIN_REDNECK_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/redneck.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/redneck", "updated_at": "2026-10-16" }, { "family": "redosdru", "category": "ransomware", "sample_count": 12, "rule_names": [ "MALWARE_WIN_REDOSDRU_T1_ARTIFACT", "MALWARE_WIN_REDOSDRU_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/redosdru.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/redosdru", "updated_at": "2026-10-16" }, { "family": "redsip", "category": "trojan", "sample_count": 1, "rule_names": [ "MALWARE_WIN_REDSIP_T1_ARTIFACT", "MALWARE_WIN_REDSIP_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/redsip.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/redsip", "updated_at": "2026-10-16" }, { "family": "redyms", "category": "ransomware", "sample_count": 10, "rule_names": [ "MALWARE_WIN_REDYMS_T1_ARTIFACT", "MALWARE_WIN_REDYMS_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/redyms.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/redyms", "updated_at": "2026-10-16" }, { "family": "refinka", "category": "ransomware", "sample_count": 26, "rule_names": [ "MALWARE_WIN_REFINKA_T1_ARTIFACT", "MALWARE_WIN_REFINKA_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/refinka.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/refinka", "updated_at": "2026-10-16" }, { "family": "refog", "category": "advanced_threat", "sample_count": 6, "rule_names": [ "MALWARE_WIN_REFOG_T1_ARTIFACT", "MALWARE_WIN_REFOG_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/refog.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/refog", "updated_at": "2026-10-16" }, { "family": "refogkeylogging", "category": "advanced_threat", "sample_count": 2, "rule_names": [ "MALWARE_WIN_REFOGKEYLOGGING_T1_ARTIFACT", "MALWARE_WIN_REFOGKEYLOGGING_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/refogkeylogging.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/refogkeylogging", "updated_at": "2026-10-16" }, { "family": "refpron", "category": "ransomware", "sample_count": 2, "rule_names": [ "MALWARE_WIN_REFPRON_T1_ARTIFACT", "MALWARE_WIN_REFPRON_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/refpron.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/refpron", "updated_at": "2026-10-16" }, { "family": "refroso", "category": "ransomware", "sample_count": 11, "rule_names": [ "MALWARE_WIN_REFROSO_T1_ARTIFACT", "MALWARE_WIN_REFROSO_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/refroso.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/refroso", "updated_at": "2026-10-16" }, { "family": "regcure", "category": "advanced_threat", "sample_count": 9, "rule_names": [ "MALWARE_WIN_REGCURE_T1_ARTIFACT", "MALWARE_WIN_REGCURE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/regcure.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/regcure", "updated_at": "2026-10-16" }, { "family": "regcurepro", "category": "advanced_threat", "sample_count": 1, "rule_names": [ "MALWARE_WIN_REGCUREPRO_T1_ARTIFACT", "MALWARE_WIN_REGCUREPRO_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/regcurepro.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/regcurepro", "updated_at": "2026-10-16" }, { "family": "regger", "category": "trojan", "sample_count": 4, "rule_names": [ "MALWARE_WIN_REGGER_T1_ARTIFACT", "MALWARE_WIN_REGGER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/regger.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/regger", "updated_at": "2026-10-16" }, { "family": "regrun", "category": "trojan", "sample_count": 45, "rule_names": [ "MALWARE_WIN_REGRUN_T1_ARTIFACT", "MALWARE_WIN_REGRUN_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/regrun.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/regrun", "updated_at": "2026-10-16" }, { "family": "regsup", "category": "trojan", "sample_count": 296, "rule_names": [ "MALWARE_WIN_REGSUP_T1_ARTIFACT", "MALWARE_WIN_REGSUP_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/regsup.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/regsup", "updated_at": "2026-10-16" }, { "family": "regub", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_REGUB_T1_ARTIFACT", "MALWARE_WIN_REGUB_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/regub.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/regub", "updated_at": "2026-10-16" }, { "family": "reimage", "category": "rogue", "sample_count": 23, "rule_names": [ "MALWARE_WIN_REIMAGE_T1_ARTIFACT", "MALWARE_WIN_REIMAGE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/reimage.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/reimage", "updated_at": "2026-10-16" }, { "family": "relevantknowledge", "category": "spyware", "sample_count": 209, "rule_names": [ "MALWARE_WIN_RELEVANTKNOWLEDGE_T1_ARTIFACT", "MALWARE_WIN_RELEVANTKNOWLEDGE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/relevantknowledge.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/relevantknowledge", "updated_at": "2026-10-16" }, { "family": "remas", "category": "ransomware", "sample_count": 2, "rule_names": [ "MALWARE_WIN_REMAS_T1_ARTIFACT", "MALWARE_WIN_REMAS_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/remas.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/remas", "updated_at": "2026-10-16" }, { "family": "remcos", "category": "rat", "sample_count": 198, "rule_names": [ "MALWARE_WIN_REMCOS_T1_ARTIFACT", "MALWARE_WIN_REMCOS_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/remcos.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/remcos", "updated_at": "2026-10-16" }, { "family": "remexi", "category": "trojan", "sample_count": 1, "rule_names": [ "MALWARE_WIN_REMEXI_T1_ARTIFACT", "MALWARE_WIN_REMEXI_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/remexi.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/remexi", "updated_at": "2026-10-16" }, { "family": "remoh", "category": "ransomware", "sample_count": 5, "rule_names": [ "MALWARE_WIN_REMOH_T1_ARTIFACT", "MALWARE_WIN_REMOH_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/remoh.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/remoh", "updated_at": "2026-10-16" }, { "family": "remote", "category": "trojan", "sample_count": 1, "rule_names": [ "MALWARE_WIN_REMOTE_T1_ARTIFACT", "MALWARE_WIN_REMOTE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/remote.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/remote", "updated_at": "2026-10-16" }, { "family": "remoteadmin", "category": "hacktool", "sample_count": 95, "rule_names": [ "MALWARE_WIN_REMOTEADMIN_T1_ARTIFACT", "MALWARE_WIN_REMOTEADMIN_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/remoteadmin.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/remoteadmin", "updated_at": "2026-10-16" }, { "family": "remotehack", "category": "trojan", "sample_count": 1, "rule_names": [ "MALWARE_WIN_REMOTEHACK_T1_ARTIFACT", "MALWARE_WIN_REMOTEHACK_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/remotehack.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/remotehack", "updated_at": "2026-10-16" }, { "family": "remotemanipulator", "category": "ransomware", "sample_count": 9, "rule_names": [ "MALWARE_WIN_REMOTEMANIPULATOR_T1_ARTIFACT", "MALWARE_WIN_REMOTEMANIPULATOR_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/remotemanipulator.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/remotemanipulator", "updated_at": "2026-10-16" }, { "family": "removewga", "category": "backdoor", "sample_count": 1, "rule_names": [ "MALWARE_WIN_REMOVEWGA_T1_ARTIFACT", "MALWARE_WIN_REMOVEWGA_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/removewga.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/removewga", "updated_at": "2026-10-16" }, { "family": "remoxec", "category": "trojan", "sample_count": 1, "rule_names": [ "MALWARE_WIN_REMOXEC_T1_ARTIFACT", "MALWARE_WIN_REMOXEC_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/remoxec.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/remoxec", "updated_at": "2026-10-16" }, { "family": "renaz", "category": "ransomware", "sample_count": 2, "rule_names": [ "MALWARE_WIN_RENAZ_T1_ARTIFACT", "MALWARE_WIN_RENAZ_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/renaz.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/renaz", "updated_at": "2026-10-16" }, { "family": "renos", "category": "trojan_downloader", "sample_count": 24, "rule_names": [ "MALWARE_WIN_RENOS_T1_ARTIFACT", "MALWARE_WIN_RENOS_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/renos.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/renos", "updated_at": "2026-10-16" }, { "family": "reposfxg", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_REPOSFXG_T1_ARTIFACT", "MALWARE_WIN_REPOSFXG_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/reposfxg.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/reposfxg", "updated_at": "2026-10-16" }, { "family": "reptile", "category": "rootkit", "sample_count": 13, "rule_names": [ "MALWARE_WIN_REPTILE_T1_ARTIFACT", "MALWARE_WIN_REPTILE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/reptile.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/reptile", "updated_at": "2026-10-16" }, { "family": "rescoms", "category": "rat", "sample_count": 26, "rule_names": [ "MALWARE_WIN_RESCOMS_T1_ARTIFACT", "MALWARE_WIN_RESCOMS_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/rescoms.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/rescoms", "updated_at": "2026-10-16" }, { "family": "resdro", "category": "ransomware", "sample_count": 7, "rule_names": [ "MALWARE_WIN_RESDRO_T1_ARTIFACT", "MALWARE_WIN_RESDRO_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/resdro.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/resdro", "updated_at": "2026-10-16" }, { "family": "reset", "category": "ransomware", "sample_count": 13, "rule_names": [ "MALWARE_WIN_RESET_T1_ARTIFACT", "MALWARE_WIN_RESET_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/reset.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/reset", "updated_at": "2026-10-16" }, { "family": "resod", "category": "ransomware", "sample_count": 19, "rule_names": [ "MALWARE_WIN_RESOD_T1_ARTIFACT", "MALWARE_WIN_RESOD_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/resod.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/resod", "updated_at": "2026-10-16" }, { "family": "restoro", "category": "advanced_threat", "sample_count": 8, "rule_names": [ "MALWARE_WIN_RESTORO_T1_ARTIFACT", "MALWARE_WIN_RESTORO_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/restoro.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/restoro", "updated_at": "2026-10-16" }, { "family": "resur", "category": "ransomware", "sample_count": 8, "rule_names": [ "MALWARE_WIN_RESUR_T1_ARTIFACT", "MALWARE_WIN_RESUR_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/resur.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/resur", "updated_at": "2026-10-16" }, { "family": "retefe", "category": "trojan", "sample_count": 13, "rule_names": [ "MALWARE_WIN_RETEFE_T1_ARTIFACT", "MALWARE_WIN_RETEFE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/retefe.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/retefe", "updated_at": "2026-10-16" }, { "family": "retribution", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_RETRIBUTION_T1_ARTIFACT", "MALWARE_WIN_RETRIBUTION_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/retribution.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/retribution", "updated_at": "2026-10-16" }, { "family": "revealerkeylogger", "category": "advanced_threat", "sample_count": 1, "rule_names": [ "MALWARE_WIN_REVEALERKEYLOGGER_T1_ARTIFACT", "MALWARE_WIN_REVEALERKEYLOGGER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/revealerkeylogger.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/revealerkeylogger", "updated_at": "2026-10-16" }, { "family": "revenge", "category": "backdoor", "sample_count": 41, "rule_names": [ "MALWARE_WIN_REVENGE_T1_ARTIFACT", "MALWARE_WIN_REVENGE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/revenge.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/revenge", "updated_at": "2026-10-16" }, { "family": "revengerat", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_REVENGERAT_T1_ARTIFACT", "MALWARE_WIN_REVENGERAT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/revengerat.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/revengerat", "updated_at": "2026-10-16" }, { "family": "reveton", "category": "ransomware", "sample_count": 4, "rule_names": [ "MALWARE_WIN_REVETON_T1_ARTIFACT", "MALWARE_WIN_REVETON_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/reveton.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/reveton", "updated_at": "2026-10-16" }, { "family": "revetrat", "category": "trojan", "sample_count": 50, "rule_names": [ "MALWARE_WIN_REVETRAT_T1_ARTIFACT", "MALWARE_WIN_REVETRAT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/revetrat.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/revetrat", "updated_at": "2026-10-16" }, { "family": "revizer", "category": "advanced_threat", "sample_count": 2, "rule_names": [ "MALWARE_WIN_REVIZER_T1_ARTIFACT", "MALWARE_WIN_REVIZER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/revizer.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/revizer", "updated_at": "2026-10-16" }, { "family": "rewriteboota", "category": "trojan", "sample_count": 2, "rule_names": [ "MALWARE_WIN_REWRITEBOOTA_T1_ARTIFACT", "MALWARE_WIN_REWRITEBOOTA_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/rewriteboota.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/rewriteboota", "updated_at": "2026-10-16" }, { "family": "reymbz", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_REYMBZ_T1_ARTIFACT", "MALWARE_WIN_REYMBZ_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/reymbz.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/reymbz", "updated_at": "2026-10-16" }, { "family": "reyptson", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_REYPTSON_T1_ARTIFACT", "MALWARE_WIN_REYPTSON_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/reyptson.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/reyptson", "updated_at": "2026-10-16" }, { "family": "rialega", "category": "trojan", "sample_count": 1, "rule_names": [ "MALWARE_WIN_RIALEGA_T1_ARTIFACT", "MALWARE_WIN_RIALEGA_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/rialega.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/rialega", "updated_at": "2026-10-16" }, { "family": "ribaj", "category": "infostealer", "sample_count": 1199, "rule_names": [ "MALWARE_WIN_RIBAJ_T1_ARTIFACT", "MALWARE_WIN_RIBAJ_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/ribaj.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/ribaj", "updated_at": "2026-10-16" }, { "family": "ridapi", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_RIDAPI_T1_ARTIFACT", "MALWARE_WIN_RIDAPI_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/ridapi.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/ridapi", "updated_at": "2026-10-16" }, { "family": "ridnu", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_RIDNU_T1_ARTIFACT", "MALWARE_WIN_RIDNU_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/ridnu.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/ridnu", "updated_at": "2026-10-16" }, { "family": "rietspoof", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_RIETSPOOF_T1_ARTIFACT", "MALWARE_WIN_RIETSPOOF_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/rietspoof.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/rietspoof", "updated_at": "2026-10-16" }, { "family": "rifbu", "category": "ransomware", "sample_count": 2, "rule_names": [ "MALWARE_WIN_RIFBU_T1_ARTIFACT", "MALWARE_WIN_RIFBU_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/rifbu.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/rifbu", "updated_at": "2026-10-16" }, { "family": "rifdoor", "category": "ransomware", "sample_count": 3, "rule_names": [ "MALWARE_WIN_RIFDOOR_T1_ARTIFACT", "MALWARE_WIN_RIFDOOR_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/rifdoor.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/rifdoor", "updated_at": "2026-10-16" }, { "family": "rimic", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_RIMIC_T1_ARTIFACT", "MALWARE_WIN_RIMIC_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/rimic.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/rimic", "updated_at": "2026-10-16" }, { "family": "riodrv", "category": "trojan", "sample_count": 1, "rule_names": [ "MALWARE_WIN_RIODRV_T1_ARTIFACT", "MALWARE_WIN_RIODRV_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/riodrv.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/riodrv", "updated_at": "2026-10-16" }, { "family": "rising", "category": "ransomware", "sample_count": 3, "rule_names": [ "MALWARE_WIN_RISING_T1_ARTIFACT", "MALWARE_WIN_RISING_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/rising.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/rising", "updated_at": "2026-10-16" }, { "family": "rkit", "category": "trojan", "sample_count": 4, "rule_names": [ "MALWARE_WIN_RKIT_T1_ARTIFACT", "MALWARE_WIN_RKIT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/rkit.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/rkit", "updated_at": "2026-10-16" }, { "family": "rmkef9zs0zhi", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_RMKEF9ZS0ZHI_T1_ARTIFACT", "MALWARE_WIN_RMKEF9ZS0ZHI_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/rmkef9zs0zhi.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/rmkef9zs0zhi", "updated_at": "2026-10-16" }, { "family": "rmkefbclnjpi", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_RMKEFBCLNJPI_T1_ARTIFACT", "MALWARE_WIN_RMKEFBCLNJPI_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/rmkefbclnjpi.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/rmkefbclnjpi", "updated_at": "2026-10-16" }, { "family": "rmkefdlslaoi", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_RMKEFDLSLAOI_T1_ARTIFACT", "MALWARE_WIN_RMKEFDLSLAOI_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/rmkefdlslaoi.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/rmkefdlslaoi", "updated_at": "2026-10-16" }, { "family": "roboinstall", "category": "advanced_threat", "sample_count": 1, "rule_names": [ "MALWARE_WIN_ROBOINSTALL_T1_ARTIFACT", "MALWARE_WIN_ROBOINSTALL_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/roboinstall.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/roboinstall", "updated_at": "2026-10-16" }, { "family": "rockrat", "category": "trojan", "sample_count": 1, "rule_names": [ "MALWARE_WIN_ROCKRAT_T1_ARTIFACT", "MALWARE_WIN_ROCKRAT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/rockrat.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/rockrat", "updated_at": "2026-10-16" }, { "family": "rodecap", "category": "trojan", "sample_count": 165, "rule_names": [ "MALWARE_WIN_RODECAP_T1_ARTIFACT", "MALWARE_WIN_RODECAP_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/rodecap.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/rodecap", "updated_at": "2026-10-16" }, { "family": "rofin", "category": "ransomware", "sample_count": 2, "rule_names": [ "MALWARE_WIN_ROFIN_T1_ARTIFACT", "MALWARE_WIN_ROFIN_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/rofin.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/rofin", "updated_at": "2026-10-16" }, { "family": "rogan", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_ROGAN_T1_ARTIFACT", "MALWARE_WIN_ROGAN_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/rogan.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/rogan", "updated_at": "2026-10-16" }, { "family": "rontokbr", "category": "advanced_threat", "sample_count": 5, "rule_names": [ "MALWARE_WIN_RONTOKBR_T1_ARTIFACT", "MALWARE_WIN_RONTOKBR_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/rontokbr.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/rontokbr", "updated_at": "2026-10-16" }, { "family": "rootkitdrv", "category": "advanced_threat", "sample_count": 3, "rule_names": [ "MALWARE_WIN_ROOTKITDRV_T1_ARTIFACT", "MALWARE_WIN_ROOTKITDRV_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/rootkitdrv.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/rootkitdrv", "updated_at": "2026-10-16" }, { "family": "rostpay", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_ROSTPAY_T1_ARTIFACT", "MALWARE_WIN_ROSTPAY_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/rostpay.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/rostpay", "updated_at": "2026-10-16" }, { "family": "rovnix", "category": "bootkit", "sample_count": 5, "rule_names": [ "MALWARE_WIN_ROVNIX_T1_ARTIFACT", "MALWARE_WIN_ROVNIX_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/rovnix.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/rovnix", "updated_at": "2026-10-16" }, { "family": "rozena", "category": "backdoor", "sample_count": 75, "rule_names": [ "MALWARE_WIN_ROZENA_T1_ARTIFACT", "MALWARE_WIN_ROZENA_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/rozena.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/rozena", "updated_at": "2026-10-16" }, { "family": "rozenaa", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_ROZENAA_T1_ARTIFACT", "MALWARE_WIN_ROZENAA_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/rozenaa.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/rozenaa", "updated_at": "2026-10-16" }, { "family": "rpcdcom", "category": "advanced_threat", "sample_count": 3, "rule_names": [ "MALWARE_WIN_RPCDCOM_T1_ARTIFACT", "MALWARE_WIN_RPCDCOM_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/rpcdcom.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/rpcdcom", "updated_at": "2026-10-16" }, { "family": "rpdpatch", "category": "backdoor", "sample_count": 1, "rule_names": [ "MALWARE_WIN_RPDPATCH_T1_ARTIFACT", "MALWARE_WIN_RPDPATCH_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/rpdpatch.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/rpdpatch", "updated_at": "2026-10-16" }, { "family": "ruandmel", "category": "ransomware", "sample_count": 3, "rule_names": [ "MALWARE_WIN_RUANDMEL_T1_ARTIFACT", "MALWARE_WIN_RUANDMEL_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/ruandmel.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/ruandmel", "updated_at": "2026-10-16" }, { "family": "ruanmei", "category": "advanced_threat", "sample_count": 1, "rule_names": [ "MALWARE_WIN_RUANMEI_T1_ARTIFACT", "MALWARE_WIN_RUANMEI_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/ruanmei.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/ruanmei", "updated_at": "2026-10-16" }, { "family": "rubar", "category": "advanced_threat", "sample_count": 2, "rule_names": [ "MALWARE_WIN_RUBAR_T1_ARTIFACT", "MALWARE_WIN_RUBAR_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/rubar.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/rubar", "updated_at": "2026-10-16" }, { "family": "rubat", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_RUBAT_T1_ARTIFACT", "MALWARE_WIN_RUBAT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/rubat.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/rubat", "updated_at": "2026-10-16" }, { "family": "rubinurd", "category": "downloader", "sample_count": 87, "rule_names": [ "MALWARE_WIN_RUBINURD_T1_ARTIFACT", "MALWARE_WIN_RUBINURD_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/rubinurd.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/rubinurd", "updated_at": "2026-10-16" }, { "family": "ruby", "category": "ransomware", "sample_count": 2, "rule_names": [ "MALWARE_WIN_RUBY_T1_ARTIFACT", "MALWARE_WIN_RUBY_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/ruby.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/ruby", "updated_at": "2026-10-16" }, { "family": "ruco", "category": "ransomware", "sample_count": 5, "rule_names": [ "MALWARE_WIN_RUCO_T1_ARTIFACT", "MALWARE_WIN_RUCO_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/ruco.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/ruco", "updated_at": "2026-10-16" }, { "family": "ructo", "category": "ransomware", "sample_count": 2, "rule_names": [ "MALWARE_WIN_RUCTO_T1_ARTIFACT", "MALWARE_WIN_RUCTO_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/ructo.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/ructo", "updated_at": "2026-10-16" }, { "family": "ruho", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_RUHO_T1_ARTIFACT", "MALWARE_WIN_RUHO_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/ruho.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/ruho", "updated_at": "2026-10-16" }, { "family": "rukoma", "category": "ransomware", "sample_count": 2, "rule_names": [ "MALWARE_WIN_RUKOMA_T1_ARTIFACT", "MALWARE_WIN_RUKOMA_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/rukoma.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/rukoma", "updated_at": "2026-10-16" }, { "family": "rukometa", "category": "ransomware", "sample_count": 3, "rule_names": [ "MALWARE_WIN_RUKOMETA_T1_ARTIFACT", "MALWARE_WIN_RUKOMETA_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/rukometa.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/rukometa", "updated_at": "2026-10-16" }, { "family": "runbooster", "category": "pua", "sample_count": 21, "rule_names": [ "MALWARE_WIN_RUNBOOSTER_T1_ARTIFACT", "MALWARE_WIN_RUNBOOSTER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/runbooster.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/runbooster", "updated_at": "2026-10-16" }, { "family": "rungbu", "category": "adware", "sample_count": 40, "rule_names": [ "MALWARE_WIN_RUNGBU_T1_ARTIFACT", "MALWARE_WIN_RUNGBU_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/rungbu.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/rungbu", "updated_at": "2026-10-16" }, { "family": "runner", "category": "trojan", "sample_count": 18, "rule_names": [ "MALWARE_WIN_RUNNER_T1_ARTIFACT", "MALWARE_WIN_RUNNER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/runner.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/runner", "updated_at": "2026-10-16" }, { "family": "rupttass", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_RUPTTASS_T1_ARTIFACT", "MALWARE_WIN_RUPTTASS_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/rupttass.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/rupttass", "updated_at": "2026-10-16" }, { "family": "ruskill", "category": "ransomware", "sample_count": 46, "rule_names": [ "MALWARE_WIN_RUSKILL_T1_ARTIFACT", "MALWARE_WIN_RUSKILL_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/ruskill.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/ruskill", "updated_at": "2026-10-16" }, { "family": "russoturisto", "category": "advanced_threat", "sample_count": 2, "rule_names": [ "MALWARE_WIN_RUSSOTURISTO_T1_ARTIFACT", "MALWARE_WIN_RUSSOTURISTO_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/russoturisto.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/russoturisto", "updated_at": "2026-10-16" }, { "family": "rustock", "category": "advanced_threat", "sample_count": 2, "rule_names": [ "MALWARE_WIN_RUSTOCK_T1_ARTIFACT", "MALWARE_WIN_RUSTOCK_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/rustock.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/rustock", "updated_at": "2026-10-16" }, { "family": "rvrat", "category": "trojan", "sample_count": 1, "rule_names": [ "MALWARE_WIN_RVRAT_T1_ARTIFACT", "MALWARE_WIN_RVRAT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/rvrat.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/rvrat", "updated_at": "2026-10-16" }, { "family": "ryuk", "category": "ransomware", "sample_count": 210, "rule_names": [ "MALWARE_WIN_RYUK_T1_ARTIFACT", "MALWARE_WIN_RYUK_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/ryuk.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/ryuk", "updated_at": "2026-10-16" }, { "family": "ryzerlo", "category": "ransomware", "sample_count": 2, "rule_names": [ "MALWARE_WIN_RYZERLO_T1_ARTIFACT", "MALWARE_WIN_RYZERLO_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/ryzerlo.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/ryzerlo", "updated_at": "2026-10-16" }, { "family": "rz0a4oaeuqdi", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_RZ0A4OAEUQDI_T1_ARTIFACT", "MALWARE_WIN_RZ0A4OAEUQDI_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/rz0a4oaeuqdi.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/rz0a4oaeuqdi", "updated_at": "2026-10-16" }, { "family": "rz0auircb0di", "category": "trojan", "sample_count": 1, "rule_names": [ "MALWARE_WIN_RZ0AUIRCB0DI_T1_ARTIFACT", "MALWARE_WIN_RZ0AUIRCB0DI_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/rz0auircb0di.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/rz0auircb0di", "updated_at": "2026-10-16" }, { "family": "rzwaagpbkfii", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_RZWAAGPBKFII_T1_ARTIFACT", "MALWARE_WIN_RZWAAGPBKFII_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/rzwaagpbkfii.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/rzwaagpbkfii", "updated_at": "2026-10-16" }, { "family": "sadenav", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_SADENAV_T1_ARTIFACT", "MALWARE_WIN_SADENAV_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/sadenav.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/sadenav", "updated_at": "2026-10-16" }, { "family": "sadredi", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_SADREDI_T1_ARTIFACT", "MALWARE_WIN_SADREDI_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/sadredi.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/sadredi", "updated_at": "2026-10-16" }, { "family": "saencrypt", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_SAENCRYPT_T1_ARTIFACT", "MALWARE_WIN_SAENCRYPT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/saencrypt.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/saencrypt", "updated_at": "2026-10-16" }, { "family": "safebreas", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_SAFEBREAS_T1_ARTIFACT", "MALWARE_WIN_SAFEBREAS_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/safebreas.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/safebreas", "updated_at": "2026-10-16" }, { "family": "safebytes", "category": "rogueware", "sample_count": 169, "rule_names": [ "MALWARE_WIN_SAFEBYTES_T1_ARTIFACT", "MALWARE_WIN_SAFEBYTES_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/safebytes.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/safebytes", "updated_at": "2026-10-16" }, { "family": "safeterra", "category": "advanced_threat", "sample_count": 6, "rule_names": [ "MALWARE_WIN_SAFETERRA_T1_ARTIFACT", "MALWARE_WIN_SAFETERRA_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/safeterra.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/safeterra", "updated_at": "2026-10-16" }, { "family": "sage", "category": "ransomware", "sample_count": 3, "rule_names": [ "MALWARE_WIN_SAGE_T1_ARTIFACT", "MALWARE_WIN_SAGE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/sage.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/sage", "updated_at": "2026-10-16" }, { "family": "sagecrypt", "category": "ransomware", "sample_count": 6, "rule_names": [ "MALWARE_WIN_SAGECRYPT_T1_ARTIFACT", "MALWARE_WIN_SAGECRYPT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/sagecrypt.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/sagecrypt", "updated_at": "2026-10-16" }, { "family": "sagonaire", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_SAGONAIRE_T1_ARTIFACT", "MALWARE_WIN_SAGONAIRE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/sagonaire.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/sagonaire", "updated_at": "2026-10-16" }, { "family": "sahat", "category": "ransomware", "sample_count": 5, "rule_names": [ "MALWARE_WIN_SAHAT_T1_ARTIFACT", "MALWARE_WIN_SAHAT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/sahat.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/sahat", "updated_at": "2026-10-16" }, { "family": "sakto", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_SAKTO_T1_ARTIFACT", "MALWARE_WIN_SAKTO_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/sakto.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/sakto", "updated_at": "2026-10-16" }, { "family": "salgorea", "category": "backdoor", "sample_count": 135, "rule_names": [ "MALWARE_WIN_SALGOREA_T1_ARTIFACT", "MALWARE_WIN_SALGOREA_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/salgorea.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/salgorea", "updated_at": "2026-10-16" }, { "family": "sality", "category": "file_infector", "sample_count": 18572, "rule_names": [ "MALWARE_WIN_SALITY_T1_ARTIFACT", "MALWARE_WIN_SALITY_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/sality.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/sality", "updated_at": "2026-10-16" }, { "family": "samas", "category": "ransomware", "sample_count": 6, "rule_names": [ "MALWARE_WIN_SAMAS_T1_ARTIFACT", "MALWARE_WIN_SAMAS_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/samas.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/samas", "updated_at": "2026-10-16" }, { "family": "samca", "category": "ransomware", "sample_count": 6, "rule_names": [ "MALWARE_WIN_SAMCA_T1_ARTIFACT", "MALWARE_WIN_SAMCA_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/samca.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/samca", "updated_at": "2026-10-16" }, { "family": "samsam", "category": "ransomware", "sample_count": 3, "rule_names": [ "MALWARE_WIN_SAMSAM_T1_ARTIFACT", "MALWARE_WIN_SAMSAM_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/samsam.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/samsam", "updated_at": "2026-10-16" }, { "family": "sanctionedmedia", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_SANCTIONEDMEDIA_T1_ARTIFACT", "MALWARE_WIN_SANCTIONEDMEDIA_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/sanctionedmedia.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/sanctionedmedia", "updated_at": "2026-10-16" }, { "family": "sankei", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_SANKEI_T1_ARTIFACT", "MALWARE_WIN_SANKEI_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/sankei.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/sankei", "updated_at": "2026-10-16" }, { "family": "sasfis", "category": "trojan", "sample_count": 5, "rule_names": [ "MALWARE_WIN_SASFIS_T1_ARTIFACT", "MALWARE_WIN_SASFIS_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/sasfis.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/sasfis", "updated_at": "2026-10-16" }, { "family": "sasquor", "category": "ransomware", "sample_count": 3, "rule_names": [ "MALWARE_WIN_SASQUOR_T1_ARTIFACT", "MALWARE_WIN_SASQUOR_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/sasquor.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/sasquor", "updated_at": "2026-10-16" }, { "family": "satan", "category": "ransomware", "sample_count": 26, "rule_names": [ "MALWARE_WIN_SATAN_T1_ARTIFACT", "MALWARE_WIN_SATAN_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/satan.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/satan", "updated_at": "2026-10-16" }, { "family": "satana", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_SATANA_T1_ARTIFACT", "MALWARE_WIN_SATANA_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/satana.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/satana", "updated_at": "2026-10-16" }, { "family": "satancrypt", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_SATANCRYPT_T1_ARTIFACT", "MALWARE_WIN_SATANCRYPT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/satancrypt.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/satancrypt", "updated_at": "2026-10-16" }, { "family": "sathurbot", "category": "trojan", "sample_count": 1, "rule_names": [ "MALWARE_WIN_SATHURBOT_T1_ARTIFACT", "MALWARE_WIN_SATHURBOT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/sathurbot.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/sathurbot", "updated_at": "2026-10-16" }, { "family": "saturn", "category": "ransomware", "sample_count": 2, "rule_names": [ "MALWARE_WIN_SATURN_T1_ARTIFACT", "MALWARE_WIN_SATURN_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/saturn.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/saturn", "updated_at": "2026-10-16" }, { "family": "satwancrypt", "category": "ransomware", "sample_count": 7, "rule_names": [ "MALWARE_WIN_SATWANCRYPT_T1_ARTIFACT", "MALWARE_WIN_SATWANCRYPT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/satwancrypt.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/satwancrypt", "updated_at": "2026-10-16" }, { "family": "sbdbat2exe", "category": "advanced_threat", "sample_count": 3, "rule_names": [ "MALWARE_WIN_SBDBAT2EXE_T1_ARTIFACT", "MALWARE_WIN_SBDBAT2EXE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/sbdbat2exe.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/sbdbat2exe", "updated_at": "2026-10-16" }, { "family": "sbdld", "category": "trojan", "sample_count": 1, "rule_names": [ "MALWARE_WIN_SBDLD_T1_ARTIFACT", "MALWARE_WIN_SBDLD_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/sbdld.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/sbdld", "updated_at": "2026-10-16" }, { "family": "sbyinying", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_SBYINYING_T1_ARTIFACT", "MALWARE_WIN_SBYINYING_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/sbyinying.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/sbyinying", "updated_at": "2026-10-16" }, { "family": "scano", "category": "ransomware", "sample_count": 3, "rule_names": [ "MALWARE_WIN_SCANO_T1_ARTIFACT", "MALWARE_WIN_SCANO_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/scano.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/scano", "updated_at": "2026-10-16" }, { "family": "scar", "category": "trojan", "sample_count": 984, "rule_names": [ "MALWARE_WIN_SCAR_T1_ARTIFACT", "MALWARE_WIN_SCAR_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/scar.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/scar", "updated_at": "2026-10-16" }, { "family": "scarab", "category": "ransomware", "sample_count": 57, "rule_names": [ "MALWARE_WIN_SCARAB_T1_ARTIFACT", "MALWARE_WIN_SCARAB_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/scarab.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/scarab", "updated_at": "2026-10-16" }, { "family": "scarcruft", "category": "trojan", "sample_count": 1, "rule_names": [ "MALWARE_WIN_SCARCRUFT_T1_ARTIFACT", "MALWARE_WIN_SCARCRUFT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/scarcruft.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/scarcruft", "updated_at": "2026-10-16" }, { "family": "scarsi", "category": "backdoor", "sample_count": 133, "rule_names": [ "MALWARE_WIN_SCARSI_T1_ARTIFACT", "MALWARE_WIN_SCARSI_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/scarsi.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/scarsi", "updated_at": "2026-10-16" }, { "family": "schoolboy", "category": "ransomware", "sample_count": 21, "rule_names": [ "MALWARE_WIN_SCHOOLBOY_T1_ARTIFACT", "MALWARE_WIN_SCHOOLBOY_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/schoolboy.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/schoolboy", "updated_at": "2026-10-16" }, { "family": "schoolbus", "category": "trojan", "sample_count": 0, "rule_names": [ "MALWARE_WIN_SCHOOLBUS_T1_ARTIFACT", "MALWARE_WIN_SCHOOLBUS_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/schoolbus.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/schoolbus", "updated_at": "2026-10-16" }, { "family": "schoolgirl", "category": "trojan", "sample_count": 9, "rule_names": [ "MALWARE_WIN_SCHOOLGIRL_T1_ARTIFACT", "MALWARE_WIN_SCHOOLGIRL_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/schoolgirl.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/schoolgirl", "updated_at": "2026-10-16" }, { "family": "schwarzesonne", "category": "ransomware", "sample_count": 5, "rule_names": [ "MALWARE_WIN_SCHWARZESONNE_T1_ARTIFACT", "MALWARE_WIN_SCHWARZESONNE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/schwarzesonne.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/schwarzesonne", "updated_at": "2026-10-16" }, { "family": "sciagnij", "category": "advanced_threat", "sample_count": 6, "rule_names": [ "MALWARE_WIN_SCIAGNIJ_T1_ARTIFACT", "MALWARE_WIN_SCIAGNIJ_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/sciagnij.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/sciagnij", "updated_at": "2026-10-16" }, { "family": "scomma", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_SCOMMA_T1_ARTIFACT", "MALWARE_WIN_SCOMMA_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/scomma.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/scomma", "updated_at": "2026-10-16" }, { "family": "scoopy", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_SCOOPY_T1_ARTIFACT", "MALWARE_WIN_SCOOPY_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/scoopy.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/scoopy", "updated_at": "2026-10-16" }, { "family": "scrami", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_SCRAMI_T1_ARTIFACT", "MALWARE_WIN_SCRAMI_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/scrami.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/scrami", "updated_at": "2026-10-16" }, { "family": "scramupx", "category": "advanced_threat", "sample_count": 1, "rule_names": [ "MALWARE_WIN_SCRAMUPX_T1_ARTIFACT", "MALWARE_WIN_SCRAMUPX_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/scramupx.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/scramupx", "updated_at": "2026-10-16" }, { "family": "screen", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_SCREEN_T1_ARTIFACT", "MALWARE_WIN_SCREEN_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/screen.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/screen", "updated_at": "2026-10-16" }, { "family": "screenconnect", "category": "hacktool", "sample_count": 14, "rule_names": [ "MALWARE_WIN_SCREENCONNECT_T1_ARTIFACT", "MALWARE_WIN_SCREENCONNECT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/screenconnect.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/screenconnect", "updated_at": "2026-10-16" }, { "family": "screenmate", "category": "advanced_threat", "sample_count": 6, "rule_names": [ "MALWARE_WIN_SCREENMATE_T1_ARTIFACT", "MALWARE_WIN_SCREENMATE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/screenmate.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/screenmate", "updated_at": "2026-10-16" }, { "family": "scribble", "category": "ransomware", "sample_count": 4, "rule_names": [ "MALWARE_WIN_SCRIBBLE_T1_ARTIFACT", "MALWARE_WIN_SCRIBBLE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/scribble.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/scribble", "updated_at": "2026-10-16" }, { "family": "scriptkd", "category": "ransomware", "sample_count": 15, "rule_names": [ "MALWARE_WIN_SCRIPTKD_T1_ARTIFACT", "MALWARE_WIN_SCRIPTKD_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/scriptkd.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/scriptkd", "updated_at": "2026-10-16" }, { "family": "scrop", "category": "trojan_downloader", "sample_count": 53, "rule_names": [ "MALWARE_WIN_SCROP_T1_ARTIFACT", "MALWARE_WIN_SCROP_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/scrop.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/scrop", "updated_at": "2026-10-16" }, { "family": "sdbot", "category": "rat", "sample_count": 1931, "rule_names": [ "MALWARE_WIN_SDBOT_T1_ARTIFACT", "MALWARE_WIN_SDBOT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/sdbot.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/sdbot", "updated_at": "2026-10-16" }, { "family": "sdld", "category": "ransomware", "sample_count": 3, "rule_names": [ "MALWARE_WIN_SDLD_T1_ARTIFACT", "MALWARE_WIN_SDLD_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/sdld.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/sdld", "updated_at": "2026-10-16" }, { "family": "sdrop", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_SDROP_T1_ARTIFACT", "MALWARE_WIN_SDROP_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/sdrop.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/sdrop", "updated_at": "2026-10-16" }, { "family": "searchbar", "category": "advanced_threat", "sample_count": 1, "rule_names": [ "MALWARE_WIN_SEARCHBAR_T1_ARTIFACT", "MALWARE_WIN_SEARCHBAR_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/searchbar.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/searchbar", "updated_at": "2026-10-16" }, { "family": "searchgo", "category": "advanced_threat", "sample_count": 3, "rule_names": [ "MALWARE_WIN_SEARCHGO_T1_ARTIFACT", "MALWARE_WIN_SEARCHGO_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/searchgo.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/searchgo", "updated_at": "2026-10-16" }, { "family": "searchpage", "category": "browser_modifier", "sample_count": 17, "rule_names": [ "MALWARE_WIN_SEARCHPAGE_T1_ARTIFACT", "MALWARE_WIN_SEARCHPAGE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/searchpage.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/searchpage", "updated_at": "2026-10-16" }, { "family": "searchprovide", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_SEARCHPROVIDE_T1_ARTIFACT", "MALWARE_WIN_SEARCHPROVIDE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/searchprovide.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/searchprovide", "updated_at": "2026-10-16" }, { "family": "searchsetter", "category": "advanced_threat", "sample_count": 1, "rule_names": [ "MALWARE_WIN_SEARCHSETTER_T1_ARTIFACT", "MALWARE_WIN_SEARCHSETTER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/searchsetter.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/searchsetter", "updated_at": "2026-10-16" }, { "family": "secucharge", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_SECUCHARGE_T1_ARTIFACT", "MALWARE_WIN_SECUCHARGE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/secucharge.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/secucharge", "updated_at": "2026-10-16" }, { "family": "security", "category": "advanced_threat", "sample_count": 1, "rule_names": [ "MALWARE_WIN_SECURITY_T1_ARTIFACT", "MALWARE_WIN_SECURITY_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/security.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/security", "updated_at": "2026-10-16" }, { "family": "securityshield", "category": "trojan", "sample_count": 1, "rule_names": [ "MALWARE_WIN_SECURITYSHIELD_T1_ARTIFACT", "MALWARE_WIN_SECURITYSHIELD_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/securityshield.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/securityshield", "updated_at": "2026-10-16" }, { "family": "securityxploded", "category": "advanced_threat", "sample_count": 3, "rule_names": [ "MALWARE_WIN_SECURITYXPLODED_T1_ARTIFACT", "MALWARE_WIN_SECURITYXPLODED_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/securityxploded.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/securityxploded", "updated_at": "2026-10-16" }, { "family": "seeav", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_SEEAV_T1_ARTIFACT", "MALWARE_WIN_SEEAV_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/seeav.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/seeav", "updated_at": "2026-10-16" }, { "family": "seed", "category": "trojan", "sample_count": 0, "rule_names": [ "MALWARE_WIN_SEED_T1_ARTIFACT", "MALWARE_WIN_SEED_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/seed.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/seed", "updated_at": "2026-10-16" }, { "family": "sefnit", "category": "trojan", "sample_count": 11, "rule_names": [ "MALWARE_WIN_SEFNIT_T1_ARTIFACT", "MALWARE_WIN_SEFNIT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/sefnit.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/sefnit", "updated_at": "2026-10-16" }, { "family": "selcry", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_SELCRY_T1_ARTIFACT", "MALWARE_WIN_SELCRY_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/selcry.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/selcry", "updated_at": "2026-10-16" }, { "family": "selltim", "category": "ransomware", "sample_count": 2, "rule_names": [ "MALWARE_WIN_SELLTIM_T1_ARTIFACT", "MALWARE_WIN_SELLTIM_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/selltim.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/selltim", "updated_at": "2026-10-16" }, { "family": "sennaonemaker", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_SENNAONEMAKER_T1_ARTIFACT", "MALWARE_WIN_SENNAONEMAKER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/sennaonemaker.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/sennaonemaker", "updated_at": "2026-10-16" }, { "family": "sennoma", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_SENNOMA_T1_ARTIFACT", "MALWARE_WIN_SENNOMA_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/sennoma.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/sennoma", "updated_at": "2026-10-16" }, { "family": "senta", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_SENTA_T1_ARTIFACT", "MALWARE_WIN_SENTA_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/senta.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/senta", "updated_at": "2026-10-16" }, { "family": "sentinel", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_SENTINEL_T1_ARTIFACT", "MALWARE_WIN_SENTINEL_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/sentinel.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/sentinel", "updated_at": "2026-10-16" }, { "family": "seodec", "category": "ransomware", "sample_count": 2, "rule_names": [ "MALWARE_WIN_SEODEC_T1_ARTIFACT", "MALWARE_WIN_SEODEC_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/seodec.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/seodec", "updated_at": "2026-10-16" }, { "family": "separ", "category": "trojan", "sample_count": 5, "rule_names": [ "MALWARE_WIN_SEPAR_T1_ARTIFACT", "MALWARE_WIN_SEPAR_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/separ.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/separ", "updated_at": "2026-10-16" }, { "family": "serenity_rat", "category": "rat", "sample_count": 0, "rule_names": [ "MALWARE_WIN_SERENITY_RAT_T1_ARTIFACT", "MALWARE_WIN_SERENITY_RAT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/serenity_rat.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/serenity_rat", "updated_at": "2026-10-16" }, { "family": "serveradmin", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_SERVERADMIN_T1_ARTIFACT", "MALWARE_WIN_SERVERADMIN_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/serveradmin.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/serveradmin", "updated_at": "2026-10-16" }, { "family": "seznam", "category": "trojan", "sample_count": 1, "rule_names": [ "MALWARE_WIN_SEZNAM_T1_ARTIFACT", "MALWARE_WIN_SEZNAM_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/seznam.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/seznam", "updated_at": "2026-10-16" }, { "family": "sfdld", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_SFDLD_T1_ARTIFACT", "MALWARE_WIN_SFDLD_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/sfdld.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/sfdld", "updated_at": "2026-10-16" }, { "family": "sfone", "category": "worm", "sample_count": 332, "rule_names": [ "MALWARE_WIN_SFONE_T1_ARTIFACT", "MALWARE_WIN_SFONE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/sfone.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/sfone", "updated_at": "2026-10-16" }, { "family": "sfuzuan", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_SFUZUAN_T1_ARTIFACT", "MALWARE_WIN_SFUZUAN_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/sfuzuan.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/sfuzuan", "updated_at": "2026-10-16" }, { "family": "shade", "category": "ransomware", "sample_count": 72, "rule_names": [ "MALWARE_WIN_SHADE_T1_ARTIFACT", "MALWARE_WIN_SHADE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/shade.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/shade", "updated_at": "2026-10-16" }, { "family": "shadowbrokers", "category": "advanced_threat", "sample_count": 36, "rule_names": [ "MALWARE_WIN_SHADOWBROKERS_T1_ARTIFACT", "MALWARE_WIN_SHADOWBROKERS_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/shadowbrokers.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/shadowbrokers", "updated_at": "2026-10-16" }, { "family": "shadowhammer", "category": "backdoor", "sample_count": 1, "rule_names": [ "MALWARE_WIN_SHADOWHAMMER_T1_ARTIFACT", "MALWARE_WIN_SHADOWHAMMER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/shadowhammer.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/shadowhammer", "updated_at": "2026-10-16" }, { "family": "shakblades", "category": "ransomware", "sample_count": 48, "rule_names": [ "MALWARE_WIN_SHAKBLADES_T1_ARTIFACT", "MALWARE_WIN_SHAKBLADES_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/shakblades.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/shakblades", "updated_at": "2026-10-16" }, { "family": "shandaadd", "category": "advanced_threat", "sample_count": 9, "rule_names": [ "MALWARE_WIN_SHANDAADD_T1_ARTIFACT", "MALWARE_WIN_SHANDAADD_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/shandaadd.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/shandaadd", "updated_at": "2026-10-16" }, { "family": "shaosmine", "category": "ransomware", "sample_count": 4, "rule_names": [ "MALWARE_WIN_SHAOSMINE_T1_ARTIFACT", "MALWARE_WIN_SHAOSMINE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/shaosmine.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/shaosmine", "updated_at": "2026-10-16" }, { "family": "sharer", "category": "trojan", "sample_count": 1, "rule_names": [ "MALWARE_WIN_SHARER_T1_ARTIFACT", "MALWARE_WIN_SHARER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/sharer.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/sharer", "updated_at": "2026-10-16" }, { "family": "shark", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_SHARK_T1_ARTIFACT", "MALWARE_WIN_SHARK_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/shark.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/shark", "updated_at": "2026-10-16" }, { "family": "shaskooth", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_SHASKOOTH_T1_ARTIFACT", "MALWARE_WIN_SHASKOOTH_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/shaskooth.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/shaskooth", "updated_at": "2026-10-16" }, { "family": "sheldor", "category": "ransomware", "sample_count": 2, "rule_names": [ "MALWARE_WIN_SHELDOR_T1_ARTIFACT", "MALWARE_WIN_SHELDOR_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/sheldor.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/sheldor", "updated_at": "2026-10-16" }, { "family": "shell", "category": "backdoor", "sample_count": 1, "rule_names": [ "MALWARE_WIN_SHELL_T1_ARTIFACT", "MALWARE_WIN_SHELL_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/shell.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/shell", "updated_at": "2026-10-16" }, { "family": "shellcodef", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_SHELLCODEF_T1_ARTIFACT", "MALWARE_WIN_SHELLCODEF_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/shellcodef.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/shellcodef", "updated_at": "2026-10-16" }, { "family": "shellme", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_SHELLME_T1_ARTIFACT", "MALWARE_WIN_SHELLME_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/shellme.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/shellme", "updated_at": "2026-10-16" }, { "family": "shelma", "category": "trojan", "sample_count": 57, "rule_names": [ "MALWARE_WIN_SHELMA_T1_ARTIFACT", "MALWARE_WIN_SHELMA_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/shelma.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/shelma", "updated_at": "2026-10-16" }, { "family": "shenzhen", "category": "advanced_threat", "sample_count": 3, "rule_names": [ "MALWARE_WIN_SHENZHEN_T1_ARTIFACT", "MALWARE_WIN_SHENZHEN_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/shenzhen.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/shenzhen", "updated_at": "2026-10-16" }, { "family": "shepher", "category": "ransomware", "sample_count": 3, "rule_names": [ "MALWARE_WIN_SHEPHER_T1_ARTIFACT", "MALWARE_WIN_SHEPHER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/shepher.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/shepher", "updated_at": "2026-10-16" }, { "family": "shezkrypt", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_SHEZKRYPT_T1_ARTIFACT", "MALWARE_WIN_SHEZKRYPT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/shezkrypt.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/shezkrypt", "updated_at": "2026-10-16" }, { "family": "shinolock", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_SHINOLOCK_T1_ARTIFACT", "MALWARE_WIN_SHINOLOCK_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/shinolock.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/shinolock", "updated_at": "2026-10-16" }, { "family": "shiotob", "category": "banking_trojan", "sample_count": 47, "rule_names": [ "MALWARE_WIN_SHIOTOB_T1_ARTIFACT", "MALWARE_WIN_SHIOTOB_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/shiotob.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/shiotob", "updated_at": "2026-10-16" }, { "family": "shipup", "category": "adware", "sample_count": 896, "rule_names": [ "MALWARE_WIN_SHIPUP_T1_ARTIFACT", "MALWARE_WIN_SHIPUP_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/shipup.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/shipup", "updated_at": "2026-10-16" }, { "family": "shiz", "category": "banking_trojan", "sample_count": 302, "rule_names": [ "MALWARE_WIN_SHIZ_T1_ARTIFACT", "MALWARE_WIN_SHIZ_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/shiz.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/shiz", "updated_at": "2026-10-16" }, { "family": "shodi", "category": "backdoor", "sample_count": 76, "rule_names": [ "MALWARE_WIN_SHODI_T1_ARTIFACT", "MALWARE_WIN_SHODI_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/shodi.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/shodi", "updated_at": "2026-10-16" }, { "family": "shopbot", "category": "advanced_threat", "sample_count": 7, "rule_names": [ "MALWARE_WIN_SHOPBOT_T1_ARTIFACT", "MALWARE_WIN_SHOPBOT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/shopbot.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/shopbot", "updated_at": "2026-10-16" }, { "family": "shopperpro", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_SHOPPERPRO_T1_ARTIFACT", "MALWARE_WIN_SHOPPERPRO_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/shopperpro.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/shopperpro", "updated_at": "2026-10-16" }, { "family": "shopperz", "category": "advanced_threat", "sample_count": 1, "rule_names": [ "MALWARE_WIN_SHOPPERZ_T1_ARTIFACT", "MALWARE_WIN_SHOPPERZ_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/shopperz.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/shopperz", "updated_at": "2026-10-16" }, { "family": "shopro", "category": "advanced_threat", "sample_count": 2, "rule_names": [ "MALWARE_WIN_SHOPRO_T1_ARTIFACT", "MALWARE_WIN_SHOPRO_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/shopro.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/shopro", "updated_at": "2026-10-16" }, { "family": "shrejh", "category": "ransomware", "sample_count": 2, "rule_names": [ "MALWARE_WIN_SHREJH_T1_ARTIFACT", "MALWARE_WIN_SHREJH_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/shrejh.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/shrejh", "updated_at": "2026-10-16" }, { "family": "shufab", "category": "ransomware", "sample_count": 2, "rule_names": [ "MALWARE_WIN_SHUFAB_T1_ARTIFACT", "MALWARE_WIN_SHUFAB_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/shufab.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/shufab", "updated_at": "2026-10-16" }, { "family": "shutdown", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_SHUTDOWN_T1_ARTIFACT", "MALWARE_WIN_SHUTDOWN_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/shutdown.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/shutdown", "updated_at": "2026-10-16" }, { "family": "shutdowner", "category": "backdoor", "sample_count": 1, "rule_names": [ "MALWARE_WIN_SHUTDOWNER_T1_ARTIFACT", "MALWARE_WIN_SHUTDOWNER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/shutdowner.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/shutdowner", "updated_at": "2026-10-16" }, { "family": "shyape", "category": "adware", "sample_count": 50, "rule_names": [ "MALWARE_WIN_SHYAPE_T1_ARTIFACT", "MALWARE_WIN_SHYAPE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/shyape.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/shyape", "updated_at": "2026-10-16" }, { "family": "shylock", "category": "banking_trojan", "sample_count": 21, "rule_names": [ "MALWARE_WIN_SHYLOCK_T1_ARTIFACT", "MALWARE_WIN_SHYLOCK_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/shylock.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/shylock", "updated_at": "2026-10-16" }, { "family": "sigma", "category": "ransomware", "sample_count": 4, "rule_names": [ "MALWARE_WIN_SIGMA_T1_ARTIFACT", "MALWARE_WIN_SIGMA_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/sigma.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/sigma", "updated_at": "2026-10-16" }, { "family": "sign0fmisery", "category": "trojan", "sample_count": 1, "rule_names": [ "MALWARE_WIN_SIGN0FMISERY_T1_ARTIFACT", "MALWARE_WIN_SIGN0FMISERY_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/sign0fmisery.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/sign0fmisery", "updated_at": "2026-10-16" }, { "family": "sigrun", "category": "ransomware", "sample_count": 3, "rule_names": [ "MALWARE_WIN_SIGRUN_T1_ARTIFACT", "MALWARE_WIN_SIGRUN_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/sigrun.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/sigrun", "updated_at": "2026-10-16" }, { "family": "siho", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_SIHO_T1_ARTIFACT", "MALWARE_WIN_SIHO_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/siho.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/siho", "updated_at": "2026-10-16" }, { "family": "silcon", "category": "ransomware", "sample_count": 2, "rule_names": [ "MALWARE_WIN_SILCON_T1_ARTIFACT", "MALWARE_WIN_SILCON_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/silcon.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/silcon", "updated_at": "2026-10-16" }, { "family": "silentall", "category": "advanced_threat", "sample_count": 10, "rule_names": [ "MALWARE_WIN_SILENTALL_T1_ARTIFACT", "MALWARE_WIN_SILENTALL_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/silentall.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/silentall", "updated_at": "2026-10-16" }, { "family": "silentinstall", "category": "advanced_threat", "sample_count": 1, "rule_names": [ "MALWARE_WIN_SILENTINSTALL_T1_ARTIFACT", "MALWARE_WIN_SILENTINSTALL_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/silentinstall.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/silentinstall", "updated_at": "2026-10-16" }, { "family": "silly", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_SILLY_T1_ARTIFACT", "MALWARE_WIN_SILLY_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/silly.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/silly", "updated_at": "2026-10-16" }, { "family": "sillyfdc", "category": "advanced_threat", "sample_count": 2, "rule_names": [ "MALWARE_WIN_SILLYFDC_T1_ARTIFACT", "MALWARE_WIN_SILLYFDC_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/sillyfdc.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/sillyfdc", "updated_at": "2026-10-16" }, { "family": "sillyp2p", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_SILLYP2P_T1_ARTIFACT", "MALWARE_WIN_SILLYP2P_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/sillyp2p.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/sillyp2p", "updated_at": "2026-10-16" }, { "family": "sillysharecopy", "category": "advanced_threat", "sample_count": 4, "rule_names": [ "MALWARE_WIN_SILLYSHARECOPY_T1_ARTIFACT", "MALWARE_WIN_SILLYSHARECOPY_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/sillysharecopy.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/sillysharecopy", "updated_at": "2026-10-16" }, { "family": "simbot", "category": "backdoor", "sample_count": 634, "rule_names": [ "MALWARE_WIN_SIMBOT_T1_ARTIFACT", "MALWARE_WIN_SIMBOT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/simbot.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/simbot", "updated_at": "2026-10-16" }, { "family": "simda", "category": "botnet", "sample_count": 8, "rule_names": [ "MALWARE_WIN_SIMDA_T1_ARTIFACT", "MALWARE_WIN_SIMDA_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/simda.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/simda", "updated_at": "2026-10-16" }, { "family": "simple", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_SIMPLE_T1_ARTIFACT", "MALWARE_WIN_SIMPLE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/simple.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/simple", "updated_at": "2026-10-16" }, { "family": "simpleregistrycleaner", "category": "advanced_threat", "sample_count": 2, "rule_names": [ "MALWARE_WIN_SIMPLEREGISTRYCLEANER_T1_ARTIFACT", "MALWARE_WIN_SIMPLEREGISTRYCLEANER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/simpleregistrycleaner.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/simpleregistrycleaner", "updated_at": "2026-10-16" }, { "family": "simplified", "category": "advanced_threat", "sample_count": 7, "rule_names": [ "MALWARE_WIN_SIMPLIFIED_T1_ARTIFACT", "MALWARE_WIN_SIMPLIFIED_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/simplified.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/simplified", "updated_at": "2026-10-16" }, { "family": "simplyinstaller", "category": "advanced_threat", "sample_count": 1, "rule_names": [ "MALWARE_WIN_SIMPLYINSTALLER_T1_ARTIFACT", "MALWARE_WIN_SIMPLYINSTALLER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/simplyinstaller.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/simplyinstaller", "updated_at": "2026-10-16" }, { "family": "singleclickoptimizer", "category": "advanced_threat", "sample_count": 5, "rule_names": [ "MALWARE_WIN_SINGLECLICKOPTIMIZER_T1_ARTIFACT", "MALWARE_WIN_SINGLECLICKOPTIMIZER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/singleclickoptimizer.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/singleclickoptimizer", "updated_at": "2026-10-16" }, { "family": "singleclickreg", "category": "advanced_threat", "sample_count": 1, "rule_names": [ "MALWARE_WIN_SINGLECLICKREG_T1_ARTIFACT", "MALWARE_WIN_SINGLECLICKREG_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/singleclickreg.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/singleclickreg", "updated_at": "2026-10-16" }, { "family": "sinique", "category": "trojan", "sample_count": 0, "rule_names": [ "MALWARE_WIN_SINIQUE_T1_ARTIFACT", "MALWARE_WIN_SINIQUE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/sinique.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/sinique", "updated_at": "2026-10-16" }, { "family": "sinowal", "category": "banking_trojan", "sample_count": 13, "rule_names": [ "MALWARE_WIN_SINOWAL_T1_ARTIFACT", "MALWARE_WIN_SINOWAL_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/sinowal.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/sinowal", "updated_at": "2026-10-16" }, { "family": "sinresby", "category": "ransomware", "sample_count": 6, "rule_names": [ "MALWARE_WIN_SINRESBY_T1_ARTIFACT", "MALWARE_WIN_SINRESBY_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/sinresby.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/sinresby", "updated_at": "2026-10-16" }, { "family": "sipia", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_SIPIA_T1_ARTIFACT", "MALWARE_WIN_SIPIA_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/sipia.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/sipia", "updated_at": "2026-10-16" }, { "family": "siplog", "category": "trojan", "sample_count": 2, "rule_names": [ "MALWARE_WIN_SIPLOG_T1_ARTIFACT", "MALWARE_WIN_SIPLOG_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/siplog.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/siplog", "updated_at": "2026-10-16" }, { "family": "sisbot", "category": "ransomware", "sample_count": 10, "rule_names": [ "MALWARE_WIN_SISBOT_T1_ARTIFACT", "MALWARE_WIN_SISBOT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/sisbot.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/sisbot", "updated_at": "2026-10-16" }, { "family": "siscos", "category": "trojan", "sample_count": 47, "rule_names": [ "MALWARE_WIN_SISCOS_T1_ARTIFACT", "MALWARE_WIN_SISCOS_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/siscos.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/siscos", "updated_at": "2026-10-16" }, { "family": "sisron", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_SISRON_T1_ARTIFACT", "MALWARE_WIN_SISRON_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/sisron.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/sisron", "updated_at": "2026-10-16" }, { "family": "sivis", "category": "file_infector", "sample_count": 7180, "rule_names": [ "MALWARE_WIN_SIVIS_T1_ARTIFACT", "MALWARE_WIN_SIVIS_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/sivis.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/sivis", "updated_at": "2026-10-16" }, { "family": "sixer", "category": "ransomware", "sample_count": 16, "rule_names": [ "MALWARE_WIN_SIXER_T1_ARTIFACT", "MALWARE_WIN_SIXER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/sixer.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/sixer", "updated_at": "2026-10-16" }, { "family": "sixmuch", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_SIXMUCH_T1_ARTIFACT", "MALWARE_WIN_SIXMUCH_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/sixmuch.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/sixmuch", "updated_at": "2026-10-16" }, { "family": "sixxpack", "category": "trojan", "sample_count": 21, "rule_names": [ "MALWARE_WIN_SIXXPACK_T1_ARTIFACT", "MALWARE_WIN_SIXXPACK_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/sixxpack.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/sixxpack", "updated_at": "2026-10-16" }, { "family": "skeeyah", "category": "trojan", "sample_count": 440, "rule_names": [ "MALWARE_WIN_SKEEYAH_T1_ARTIFACT", "MALWARE_WIN_SKEEYAH_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/skeeyah.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/skeeyah", "updated_at": "2026-10-16" }, { "family": "skillis", "category": "ransomware", "sample_count": 5, "rule_names": [ "MALWARE_WIN_SKILLIS_T1_ARTIFACT", "MALWARE_WIN_SKILLIS_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/skillis.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/skillis", "updated_at": "2026-10-16" }, { "family": "skintrim", "category": "adware", "sample_count": 33, "rule_names": [ "MALWARE_WIN_SKINTRIM_T1_ARTIFACT", "MALWARE_WIN_SKINTRIM_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/skintrim.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/skintrim", "updated_at": "2026-10-16" }, { "family": "skorik", "category": "trojan", "sample_count": 70, "rule_names": [ "MALWARE_WIN_SKORIK_T1_ARTIFACT", "MALWARE_WIN_SKORIK_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/skorik.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/skorik", "updated_at": "2026-10-16" }, { "family": "skypespam", "category": "worm", "sample_count": 95, "rule_names": [ "MALWARE_WIN_SKYPESPAM_T1_ARTIFACT", "MALWARE_WIN_SKYPESPAM_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/skypespam.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/skypespam", "updated_at": "2026-10-16" }, { "family": "slefdel", "category": "ransomware", "sample_count": 2, "rule_names": [ "MALWARE_WIN_SLEFDEL_T1_ARTIFACT", "MALWARE_WIN_SLEFDEL_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/slefdel.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/slefdel", "updated_at": "2026-10-16" }, { "family": "slenfbot", "category": "advanced_threat", "sample_count": 2, "rule_names": [ "MALWARE_WIN_SLENFBOT_T1_ARTIFACT", "MALWARE_WIN_SLENFBOT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/slenfbot.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/slenfbot", "updated_at": "2026-10-16" }, { "family": "slimdrivers", "category": "advanced_threat", "sample_count": 7, "rule_names": [ "MALWARE_WIN_SLIMDRIVERS_T1_ARTIFACT", "MALWARE_WIN_SLIMDRIVERS_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/slimdrivers.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/slimdrivers", "updated_at": "2026-10-16" }, { "family": "slimware", "category": "rogueware", "sample_count": 566, "rule_names": [ "MALWARE_WIN_SLIMWARE_T1_ARTIFACT", "MALWARE_WIN_SLIMWARE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/slimware.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/slimware", "updated_at": "2026-10-16" }, { "family": "slingshot", "category": "advanced_threat", "sample_count": 1, "rule_names": [ "MALWARE_WIN_SLINGSHOT_T1_ARTIFACT", "MALWARE_WIN_SLINGSHOT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/slingshot.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/slingshot", "updated_at": "2026-10-16" }, { "family": "slingup", "category": "advanced_threat", "sample_count": 9, "rule_names": [ "MALWARE_WIN_SLINGUP_T1_ARTIFACT", "MALWARE_WIN_SLINGUP_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/slingup.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/slingup", "updated_at": "2026-10-16" }, { "family": "slipafext", "category": "ransomware", "sample_count": 2, "rule_names": [ "MALWARE_WIN_SLIPAFEXT_T1_ARTIFACT", "MALWARE_WIN_SLIPAFEXT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/slipafext.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/slipafext", "updated_at": "2026-10-16" }, { "family": "sloddat", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_SLODDAT_T1_ARTIFACT", "MALWARE_WIN_SLODDAT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/sloddat.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/sloddat", "updated_at": "2026-10-16" }, { "family": "slowpcfighter", "category": "trojan", "sample_count": 4, "rule_names": [ "MALWARE_WIN_SLOWPCFIGHTER_T1_ARTIFACT", "MALWARE_WIN_SLOWPCFIGHTER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/slowpcfighter.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/slowpcfighter", "updated_at": "2026-10-16" }, { "family": "slugin", "category": "trojan_downloader", "sample_count": 31, "rule_names": [ "MALWARE_WIN_SLUGIN_T1_ARTIFACT", "MALWARE_WIN_SLUGIN_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/slugin.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/slugin", "updated_at": "2026-10-16" }, { "family": "smal", "category": "advanced_threat", "sample_count": 7, "rule_names": [ "MALWARE_WIN_SMAL_T1_ARTIFACT", "MALWARE_WIN_SMAL_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/smal.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/smal", "updated_at": "2026-10-16" }, { "family": "smallhttp", "category": "advanced_threat", "sample_count": 1, "rule_names": [ "MALWARE_WIN_SMALLHTTP_T1_ARTIFACT", "MALWARE_WIN_SMALLHTTP_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/smallhttp.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/smallhttp", "updated_at": "2026-10-16" }, { "family": "smalo", "category": "ransomware", "sample_count": 3, "rule_names": [ "MALWARE_WIN_SMALO_T1_ARTIFACT", "MALWARE_WIN_SMALO_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/smalo.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/smalo", "updated_at": "2026-10-16" }, { "family": "smartapplicationcontroller", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_SMARTAPPLICATIONCONTROLLER_T1_ARTIFACT", "MALWARE_WIN_SMARTAPPLICATIONCONTROLLER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/smartapplicationcontroller.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/smartapplicationcontroller", "updated_at": "2026-10-16" }, { "family": "smartapps", "category": "advanced_threat", "sample_count": 11, "rule_names": [ "MALWARE_WIN_SMARTAPPS_T1_ARTIFACT", "MALWARE_WIN_SMARTAPPS_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/smartapps.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/smartapps", "updated_at": "2026-10-16" }, { "family": "smartassembly", "category": "ransomware", "sample_count": 3, "rule_names": [ "MALWARE_WIN_SMARTASSEMBLY_T1_ARTIFACT", "MALWARE_WIN_SMARTASSEMBLY_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/smartassembly.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/smartassembly", "updated_at": "2026-10-16" }, { "family": "smartfortress", "category": "trojan", "sample_count": 1, "rule_names": [ "MALWARE_WIN_SMARTFORTRESS_T1_ARTIFACT", "MALWARE_WIN_SMARTFORTRESS_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/smartfortress.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/smartfortress", "updated_at": "2026-10-16" }, { "family": "smartinstaller", "category": "advanced_threat", "sample_count": 6, "rule_names": [ "MALWARE_WIN_SMARTINSTALLER_T1_ARTIFACT", "MALWARE_WIN_SMARTINSTALLER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/smartinstaller.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/smartinstaller", "updated_at": "2026-10-16" }, { "family": "smartpctweaker", "category": "advanced_threat", "sample_count": 1, "rule_names": [ "MALWARE_WIN_SMARTPCTWEAKER_T1_ARTIFACT", "MALWARE_WIN_SMARTPCTWEAKER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/smartpctweaker.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/smartpctweaker", "updated_at": "2026-10-16" }, { "family": "smbd", "category": "advanced_threat", "sample_count": 5, "rule_names": [ "MALWARE_WIN_SMBD_T1_ARTIFACT", "MALWARE_WIN_SMBD_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/smbd.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/smbd", "updated_at": "2026-10-16" }, { "family": "smearpasse", "category": "ransomware", "sample_count": 5, "rule_names": [ "MALWARE_WIN_SMEARPASSE_T1_ARTIFACT", "MALWARE_WIN_SMEARPASSE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/smearpasse.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/smearpasse", "updated_at": "2026-10-16" }, { "family": "smee", "category": "ransomware", "sample_count": 6, "rule_names": [ "MALWARE_WIN_SMEE_T1_ARTIFACT", "MALWARE_WIN_SMEE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/smee.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/smee", "updated_at": "2026-10-16" }, { "family": "smheist", "category": "backdoor", "sample_count": 1, "rule_names": [ "MALWARE_WIN_SMHEIST_T1_ARTIFACT", "MALWARE_WIN_SMHEIST_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/smheist.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/smheist", "updated_at": "2026-10-16" }, { "family": "sminager", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_SMINAGER_T1_ARTIFACT", "MALWARE_WIN_SMINAGER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/sminager.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/sminager", "updated_at": "2026-10-16" }, { "family": "smokeloader", "category": "loader", "sample_count": 21, "rule_names": [ "MALWARE_WIN_SMOKELOADER_T1_ARTIFACT", "MALWARE_WIN_SMOKELOADER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/smokeloader.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/smokeloader", "updated_at": "2026-10-16" }, { "family": "smominru", "category": "advanced_threat", "sample_count": 1, "rule_names": [ "MALWARE_WIN_SMOMINRU_T1_ARTIFACT", "MALWARE_WIN_SMOMINRU_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/smominru.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/smominru", "updated_at": "2026-10-16" }, { "family": "smshoax", "category": "trojan", "sample_count": 7, "rule_names": [ "MALWARE_WIN_SMSHOAX_T1_ARTIFACT", "MALWARE_WIN_SMSHOAX_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/smshoax.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/smshoax", "updated_at": "2026-10-16" }, { "family": "smsspy", "category": "trojan", "sample_count": 1, "rule_names": [ "MALWARE_WIN_SMSSPY_T1_ARTIFACT", "MALWARE_WIN_SMSSPY_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/smsspy.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/smsspy", "updated_at": "2026-10-16" }, { "family": "smuatemisagi", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_SMUATEMISAGI_T1_ARTIFACT", "MALWARE_WIN_SMUATEMISAGI_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/smuatemisagi.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/smuatemisagi", "updated_at": "2026-10-16" }, { "family": "snake", "category": "advanced_threat", "sample_count": 450, "rule_names": [ "MALWARE_WIN_SNAKE_T1_ARTIFACT", "MALWARE_WIN_SNAKE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/snake.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/snake", "updated_at": "2026-10-16" }, { "family": "snarasite", "category": "trojan", "sample_count": 70, "rule_names": [ "MALWARE_WIN_SNARASITE_T1_ARTIFACT", "MALWARE_WIN_SNARASITE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/snarasite.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/snarasite", "updated_at": "2026-10-16" }, { "family": "snare", "category": "trojan", "sample_count": 5, "rule_names": [ "MALWARE_WIN_SNARE_T1_ARTIFACT", "MALWARE_WIN_SNARE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/snare.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/snare", "updated_at": "2026-10-16" }, { "family": "sneepy", "category": "trojan", "sample_count": 1, "rule_names": [ "MALWARE_WIN_SNEEPY_T1_ARTIFACT", "MALWARE_WIN_SNEEPY_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/sneepy.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/sneepy", "updated_at": "2026-10-16" }, { "family": "snifie", "category": "advanced_threat", "sample_count": 1, "rule_names": [ "MALWARE_WIN_SNIFIE_T1_ARTIFACT", "MALWARE_WIN_SNIFIE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/snifie.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/snifie", "updated_at": "2026-10-16" }, { "family": "snifula", "category": "banking_trojan", "sample_count": 1, "rule_names": [ "MALWARE_WIN_SNIFULA_T1_ARTIFACT", "MALWARE_WIN_SNIFULA_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/snifula.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/snifula", "updated_at": "2026-10-16" }, { "family": "snipr", "category": "advanced_threat", "sample_count": 2, "rule_names": [ "MALWARE_WIN_SNIPR_T1_ARTIFACT", "MALWARE_WIN_SNIPR_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/snipr.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/snipr", "updated_at": "2026-10-16" }, { "family": "snobar", "category": "ransomware", "sample_count": 9, "rule_names": [ "MALWARE_WIN_SNOBAR_T1_ARTIFACT", "MALWARE_WIN_SNOBAR_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/snobar.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/snobar", "updated_at": "2026-10-16" }, { "family": "snocry", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_SNOCRY_T1_ARTIFACT", "MALWARE_WIN_SNOCRY_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/snocry.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/snocry", "updated_at": "2026-10-16" }, { "family": "snojan", "category": "trojan", "sample_count": 324, "rule_names": [ "MALWARE_WIN_SNOJAN_T1_ARTIFACT", "MALWARE_WIN_SNOJAN_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/snojan.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/snojan", "updated_at": "2026-10-16" }, { "family": "snoload", "category": "ransomware", "sample_count": 2, "rule_names": [ "MALWARE_WIN_SNOLOAD_T1_ARTIFACT", "MALWARE_WIN_SNOLOAD_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/snoload.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/snoload", "updated_at": "2026-10-16" }, { "family": "snorm", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_SNORM_T1_ARTIFACT", "MALWARE_WIN_SNORM_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/snorm.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/snorm", "updated_at": "2026-10-16" }, { "family": "snow", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_SNOW_T1_ARTIFACT", "MALWARE_WIN_SNOW_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/snow.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/snow", "updated_at": "2026-10-16" }, { "family": "socelars", "category": "infostealer", "sample_count": 159, "rule_names": [ "MALWARE_WIN_SOCELARS_T1_ARTIFACT", "MALWARE_WIN_SOCELARS_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/socelars.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/socelars", "updated_at": "2026-10-16" }, { "family": "socks", "category": "trojan", "sample_count": 143, "rule_names": [ "MALWARE_WIN_SOCKS_T1_ARTIFACT", "MALWARE_WIN_SOCKS_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/socks.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/socks", "updated_at": "2026-10-16" }, { "family": "socstealer", "category": "trojan", "sample_count": 3, "rule_names": [ "MALWARE_WIN_SOCSTEALER_T1_ARTIFACT", "MALWARE_WIN_SOCSTEALER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/socstealer.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/socstealer", "updated_at": "2026-10-16" }, { "family": "sofacy", "category": "trojan", "sample_count": 5, "rule_names": [ "MALWARE_WIN_SOFACY_T1_ARTIFACT", "MALWARE_WIN_SOFACY_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/sofacy.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/sofacy", "updated_at": "2026-10-16" }, { "family": "soft32dl", "category": "pua", "sample_count": 715, "rule_names": [ "MALWARE_WIN_SOFT32DL_T1_ARTIFACT", "MALWARE_WIN_SOFT32DL_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/soft32dl.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/soft32dl", "updated_at": "2026-10-16" }, { "family": "softcdn", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_SOFTCDN_T1_ARTIFACT", "MALWARE_WIN_SOFTCDN_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/softcdn.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/softcdn", "updated_at": "2026-10-16" }, { "family": "softcnapp", "category": "adware", "sample_count": 520, "rule_names": [ "MALWARE_WIN_SOFTCNAPP_T1_ARTIFACT", "MALWARE_WIN_SOFTCNAPP_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/softcnapp.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/softcnapp", "updated_at": "2026-10-16" }, { "family": "softobase", "category": "advanced_threat", "sample_count": 6, "rule_names": [ "MALWARE_WIN_SOFTOBASE_T1_ARTIFACT", "MALWARE_WIN_SOFTOBASE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/softobase.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/softobase", "updated_at": "2026-10-16" }, { "family": "softomate", "category": "advanced_threat", "sample_count": 5, "rule_names": [ "MALWARE_WIN_SOFTOMATE_T1_ARTIFACT", "MALWARE_WIN_SOFTOMATE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/softomate.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/softomate", "updated_at": "2026-10-16" }, { "family": "softonic", "category": "pua", "sample_count": 35, "rule_names": [ "MALWARE_WIN_SOFTONIC_T1_ARTIFACT", "MALWARE_WIN_SOFTONIC_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/softonic.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/softonic", "updated_at": "2026-10-16" }, { "family": "softpulse", "category": "adware", "sample_count": 121, "rule_names": [ "MALWARE_WIN_SOFTPULSE_T1_ARTIFACT", "MALWARE_WIN_SOFTPULSE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/softpulse.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/softpulse", "updated_at": "2026-10-16" }, { "family": "sogou", "category": "advanced_threat", "sample_count": 11, "rule_names": [ "MALWARE_WIN_SOGOU_T1_ARTIFACT", "MALWARE_WIN_SOGOU_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/sogou.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/sogou", "updated_at": "2026-10-16" }, { "family": "sohanad", "category": "trojan", "sample_count": 11, "rule_names": [ "MALWARE_WIN_SOHANAD_T1_ARTIFACT", "MALWARE_WIN_SOHANAD_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/sohanad.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/sohanad", "updated_at": "2026-10-16" }, { "family": "sokuxuan", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_SOKUXUAN_T1_ARTIFACT", "MALWARE_WIN_SOKUXUAN_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/sokuxuan.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/sokuxuan", "updated_at": "2026-10-16" }, { "family": "soldier", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_SOLDIER_T1_ARTIFACT", "MALWARE_WIN_SOLDIER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/soldier.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/soldier", "updated_at": "2026-10-16" }, { "family": "somoto", "category": "advanced_threat", "sample_count": 3, "rule_names": [ "MALWARE_WIN_SOMOTO_T1_ARTIFACT", "MALWARE_WIN_SOMOTO_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/somoto.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/somoto", "updated_at": "2026-10-16" }, { "family": "sonbokli", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_SONBOKLI_T1_ARTIFACT", "MALWARE_WIN_SONBOKLI_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/sonbokli.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/sonbokli", "updated_at": "2026-10-16" }, { "family": "sorcurat", "category": "ransomware", "sample_count": 2, "rule_names": [ "MALWARE_WIN_SORCURAT_T1_ARTIFACT", "MALWARE_WIN_SORCURAT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/sorcurat.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/sorcurat", "updated_at": "2026-10-16" }, { "family": "soul", "category": "ransomware", "sample_count": 2, "rule_names": [ "MALWARE_WIN_SOUL_T1_ARTIFACT", "MALWARE_WIN_SOUL_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/soul.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/soul", "updated_at": "2026-10-16" }, { "family": "soulclose", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_SOULCLOSE_T1_ARTIFACT", "MALWARE_WIN_SOULCLOSE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/soulclose.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/soulclose", "updated_at": "2026-10-16" }, { "family": "spamer", "category": "trojan", "sample_count": 1, "rule_names": [ "MALWARE_WIN_SPAMER_T1_ARTIFACT", "MALWARE_WIN_SPAMER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/spamer.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/spamer", "updated_at": "2026-10-16" }, { "family": "spamha", "category": "trojan", "sample_count": 1, "rule_names": [ "MALWARE_WIN_SPAMHA_T1_ARTIFACT", "MALWARE_WIN_SPAMHA_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/spamha.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/spamha", "updated_at": "2026-10-16" }, { "family": "spammy", "category": "advanced_threat", "sample_count": 2, "rule_names": [ "MALWARE_WIN_SPAMMY_T1_ARTIFACT", "MALWARE_WIN_SPAMMY_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/spammy.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/spammy", "updated_at": "2026-10-16" }, { "family": "specialsearchoffer", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_SPECIALSEARCHOFFER_T1_ARTIFACT", "MALWARE_WIN_SPECIALSEARCHOFFER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/specialsearchoffer.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/specialsearchoffer", "updated_at": "2026-10-16" }, { "family": "spector", "category": "advanced_threat", "sample_count": 1, "rule_names": [ "MALWARE_WIN_SPECTOR_T1_ARTIFACT", "MALWARE_WIN_SPECTOR_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/spector.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/spector", "updated_at": "2026-10-16" }, { "family": "spectorpro", "category": "advanced_threat", "sample_count": 1, "rule_names": [ "MALWARE_WIN_SPECTORPRO_T1_ARTIFACT", "MALWARE_WIN_SPECTORPRO_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/spectorpro.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/spectorpro", "updated_at": "2026-10-16" }, { "family": "spectre", "category": "advanced_threat", "sample_count": 2, "rule_names": [ "MALWARE_WIN_SPECTRE_T1_ARTIFACT", "MALWARE_WIN_SPECTRE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/spectre.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/spectre", "updated_at": "2026-10-16" }, { "family": "specx", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_SPECX_T1_ARTIFACT", "MALWARE_WIN_SPECX_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/specx.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/specx", "updated_at": "2026-10-16" }, { "family": "speed", "category": "advanced_threat", "sample_count": 2, "rule_names": [ "MALWARE_WIN_SPEED_T1_ARTIFACT", "MALWARE_WIN_SPEED_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/speed.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/speed", "updated_at": "2026-10-16" }, { "family": "speedbit", "category": "advanced_threat", "sample_count": 7, "rule_names": [ "MALWARE_WIN_SPEEDBIT_T1_ARTIFACT", "MALWARE_WIN_SPEEDBIT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/speedbit.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/speedbit", "updated_at": "2026-10-16" }, { "family": "speedcat", "category": "advanced_threat", "sample_count": 6, "rule_names": [ "MALWARE_WIN_SPEEDCAT_T1_ARTIFACT", "MALWARE_WIN_SPEEDCAT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/speedcat.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/speedcat", "updated_at": "2026-10-16" }, { "family": "speedchecker", "category": "advanced_threat", "sample_count": 9, "rule_names": [ "MALWARE_WIN_SPEEDCHECKER_T1_ARTIFACT", "MALWARE_WIN_SPEEDCHECKER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/speedchecker.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/speedchecker", "updated_at": "2026-10-16" }, { "family": "speedingupmypc", "category": "pup", "sample_count": 740, "rule_names": [ "MALWARE_WIN_SPEEDINGUPMYPC_T1_ARTIFACT", "MALWARE_WIN_SPEEDINGUPMYPC_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/speedingupmypc.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/speedingupmypc", "updated_at": "2026-10-16" }, { "family": "speesipro", "category": "advanced_threat", "sample_count": 3, "rule_names": [ "MALWARE_WIN_SPEESIPRO_T1_ARTIFACT", "MALWARE_WIN_SPEESIPRO_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/speesipro.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/speesipro", "updated_at": "2026-10-16" }, { "family": "sperolz", "category": "ransomware", "sample_count": 3, "rule_names": [ "MALWARE_WIN_SPEROLZ_T1_ARTIFACT", "MALWARE_WIN_SPEROLZ_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/sperolz.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/sperolz", "updated_at": "2026-10-16" }, { "family": "spesr", "category": "trojan", "sample_count": 38, "rule_names": [ "MALWARE_WIN_SPESR_T1_ARTIFACT", "MALWARE_WIN_SPESR_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/spesr.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/spesr", "updated_at": "2026-10-16" }, { "family": "sphinx", "category": "trojan", "sample_count": 2, "rule_names": [ "MALWARE_WIN_SPHINX_T1_ARTIFACT", "MALWARE_WIN_SPHINX_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/sphinx.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/sphinx", "updated_at": "2026-10-16" }, { "family": "spigot", "category": "adware", "sample_count": 1008, "rule_names": [ "MALWARE_WIN_SPIGOT_T1_ARTIFACT", "MALWARE_WIN_SPIGOT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/spigot.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/spigot", "updated_at": "2026-10-16" }, { "family": "spnr", "category": "ransomware", "sample_count": 7, "rule_names": [ "MALWARE_WIN_SPNR_T1_ARTIFACT", "MALWARE_WIN_SPNR_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/spnr.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/spnr", "updated_at": "2026-10-16" }, { "family": "spoofer", "category": "advanced_threat", "sample_count": 1, "rule_names": [ "MALWARE_WIN_SPOOFER_T1_ARTIFACT", "MALWARE_WIN_SPOOFER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/spoofer.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/spoofer", "updated_at": "2026-10-16" }, { "family": "spook", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_SPOOK_T1_ARTIFACT", "MALWARE_WIN_SPOOK_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/spook.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/spook", "updated_at": "2026-10-16" }, { "family": "spora", "category": "ransomware", "sample_count": 4, "rule_names": [ "MALWARE_WIN_SPORA_T1_ARTIFACT", "MALWARE_WIN_SPORA_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/spora.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/spora", "updated_at": "2026-10-16" }, { "family": "springtech", "category": "advanced_threat", "sample_count": 1, "rule_names": [ "MALWARE_WIN_SPRINGTECH_T1_ARTIFACT", "MALWARE_WIN_SPRINGTECH_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/springtech.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/springtech", "updated_at": "2026-10-16" }, { "family": "spyagent", "category": "advanced_threat", "sample_count": 3, "rule_names": [ "MALWARE_WIN_SPYAGENT_T1_ARTIFACT", "MALWARE_WIN_SPYAGENT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/spyagent.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/spyagent", "updated_at": "2026-10-16" }, { "family": "spybot", "category": "advanced_threat", "sample_count": 10, "rule_names": [ "MALWARE_WIN_SPYBOT_T1_ARTIFACT", "MALWARE_WIN_SPYBOT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/spybot.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/spybot", "updated_at": "2026-10-16" }, { "family": "spyboter", "category": "advanced_threat", "sample_count": 1, "rule_names": [ "MALWARE_WIN_SPYBOTER_T1_ARTIFACT", "MALWARE_WIN_SPYBOTER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/spyboter.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/spyboter", "updated_at": "2026-10-16" }, { "family": "spyeye", "category": "banking_trojan", "sample_count": 192, "rule_names": [ "MALWARE_WIN_SPYEYE_T1_ARTIFACT", "MALWARE_WIN_SPYEYE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/spyeye.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/spyeye", "updated_at": "2026-10-16" }, { "family": "spygate", "category": "rat", "sample_count": 127, "rule_names": [ "MALWARE_WIN_SPYGATE_T1_ARTIFACT", "MALWARE_WIN_SPYGATE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/spygate.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/spygate", "updated_at": "2026-10-16" }, { "family": "spynet", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_SPYNET_T1_ARTIFACT", "MALWARE_WIN_SPYNET_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/spynet.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/spynet", "updated_at": "2026-10-16" }, { "family": "spynomore", "category": "ransomware", "sample_count": 3, "rule_names": [ "MALWARE_WIN_SPYNOMORE_T1_ARTIFACT", "MALWARE_WIN_SPYNOMORE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/spynomore.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/spynomore", "updated_at": "2026-10-16" }, { "family": "spypro", "category": "trojan", "sample_count": 1, "rule_names": [ "MALWARE_WIN_SPYPRO_T1_ARTIFACT", "MALWARE_WIN_SPYPRO_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/spypro.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/spypro", "updated_at": "2026-10-16" }, { "family": "spyrecon", "category": "advanced_threat", "sample_count": 3, "rule_names": [ "MALWARE_WIN_SPYRECON_T1_ARTIFACT", "MALWARE_WIN_SPYRECON_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/spyrecon.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/spyrecon", "updated_at": "2026-10-16" }, { "family": "spyrix", "category": "advanced_threat", "sample_count": 1, "rule_names": [ "MALWARE_WIN_SPYRIX_T1_ARTIFACT", "MALWARE_WIN_SPYRIX_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/spyrix.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/spyrix", "updated_at": "2026-10-16" }, { "family": "spytech", "category": "advanced_threat", "sample_count": 1, "rule_names": [ "MALWARE_WIN_SPYTECH_T1_ARTIFACT", "MALWARE_WIN_SPYTECH_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/spytech.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/spytech", "updated_at": "2026-10-16" }, { "family": "spytector", "category": "infostealer", "sample_count": 0, "rule_names": [ "MALWARE_WIN_SPYTECTOR_T1_ARTIFACT", "MALWARE_WIN_SPYTECTOR_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/spytector.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/spytector", "updated_at": "2026-10-16" }, { "family": "spywork", "category": "advanced_threat", "sample_count": 1, "rule_names": [ "MALWARE_WIN_SPYWORK_T1_ARTIFACT", "MALWARE_WIN_SPYWORK_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/spywork.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/spywork", "updated_at": "2026-10-16" }, { "family": "sqlcrack", "category": "ransomware", "sample_count": 2, "rule_names": [ "MALWARE_WIN_SQLCRACK_T1_ARTIFACT", "MALWARE_WIN_SQLCRACK_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/sqlcrack.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/sqlcrack", "updated_at": "2026-10-16" }, { "family": "squarenet", "category": "ransomware", "sample_count": 7, "rule_names": [ "MALWARE_WIN_SQUARENET_T1_ARTIFACT", "MALWARE_WIN_SQUARENET_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/squarenet.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/squarenet", "updated_at": "2026-10-16" }, { "family": "ssebot", "category": "ransomware", "sample_count": 2, "rule_names": [ "MALWARE_WIN_SSEBOT_T1_ARTIFACT", "MALWARE_WIN_SSEBOT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/ssebot.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/ssebot", "updated_at": "2026-10-16" }, { "family": "ssprotect", "category": "advanced_threat", "sample_count": 1, "rule_names": [ "MALWARE_WIN_SSPROTECT_T1_ARTIFACT", "MALWARE_WIN_SSPROTECT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/ssprotect.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/ssprotect", "updated_at": "2026-10-16" }, { "family": "staem", "category": "trojan", "sample_count": 1, "rule_names": [ "MALWARE_WIN_STAEM_T1_ARTIFACT", "MALWARE_WIN_STAEM_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/staem.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/staem", "updated_at": "2026-10-16" }, { "family": "staget", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_STAGET_T1_ARTIFACT", "MALWARE_WIN_STAGET_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/staget.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/staget", "updated_at": "2026-10-16" }, { "family": "stagol", "category": "ransomware", "sample_count": 4, "rule_names": [ "MALWARE_WIN_STAGOL_T1_ARTIFACT", "MALWARE_WIN_STAGOL_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/stagol.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/stagol", "updated_at": "2026-10-16" }, { "family": "stalk", "category": "advanced_threat", "sample_count": 2, "rule_names": [ "MALWARE_WIN_STALK_T1_ARTIFACT", "MALWARE_WIN_STALK_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/stalk.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/stalk", "updated_at": "2026-10-16" }, { "family": "stampado", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_STAMPADO_T1_ARTIFACT", "MALWARE_WIN_STAMPADO_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/stampado.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/stampado", "updated_at": "2026-10-16" }, { "family": "stantinko", "category": "botnet", "sample_count": 168, "rule_names": [ "MALWARE_WIN_STANTINKO_T1_ARTIFACT", "MALWARE_WIN_STANTINKO_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/stantinko.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/stantinko", "updated_at": "2026-10-16" }, { "family": "startp", "category": "trojan", "sample_count": 1, "rule_names": [ "MALWARE_WIN_STARTP_T1_ARTIFACT", "MALWARE_WIN_STARTP_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/startp.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/startp", "updated_at": "2026-10-16" }, { "family": "startpa", "category": "ransomware", "sample_count": 2, "rule_names": [ "MALWARE_WIN_STARTPA_T1_ARTIFACT", "MALWARE_WIN_STARTPA_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/startpa.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/startpa", "updated_at": "2026-10-16" }, { "family": "startserv", "category": "ransomware", "sample_count": 4, "rule_names": [ "MALWARE_WIN_STARTSERV_T1_ARTIFACT", "MALWARE_WIN_STARTSERV_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/startserv.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/startserv", "updated_at": "2026-10-16" }, { "family": "startsurf", "category": "browser_hijacker", "sample_count": 6358, "rule_names": [ "MALWARE_WIN_STARTSURF_T1_ARTIFACT", "MALWARE_WIN_STARTSURF_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/startsurf.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/startsurf", "updated_at": "2026-10-16" }, { "family": "staser", "category": "trojan", "sample_count": 24, "rule_names": [ "MALWARE_WIN_STASER_T1_ARTIFACT", "MALWARE_WIN_STASER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/staser.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/staser", "updated_at": "2026-10-16" }, { "family": "steam", "category": "infostealer", "sample_count": 54, "rule_names": [ "MALWARE_WIN_STEAM_T1_ARTIFACT", "MALWARE_WIN_STEAM_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/steam.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/steam", "updated_at": "2026-10-16" }, { "family": "stegvob", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_STEGVOB_T1_ARTIFACT", "MALWARE_WIN_STEGVOB_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/stegvob.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/stegvob", "updated_at": "2026-10-16" }, { "family": "stercogs", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_STERCOGS_T1_ARTIFACT", "MALWARE_WIN_STERCOGS_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/stercogs.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/stercogs", "updated_at": "2026-10-16" }, { "family": "stimilik", "category": "ransomware", "sample_count": 11, "rule_names": [ "MALWARE_WIN_STIMILIK_T1_ARTIFACT", "MALWARE_WIN_STIMILIK_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/stimilik.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/stimilik", "updated_at": "2026-10-16" }, { "family": "stocde", "category": "ransomware", "sample_count": 5, "rule_names": [ "MALWARE_WIN_STOCDE_T1_ARTIFACT", "MALWARE_WIN_STOCDE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/stocde.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/stocde", "updated_at": "2026-10-16" }, { "family": "stop", "category": "ransomware", "sample_count": 8900, "rule_names": [ "MALWARE_WIN_STOP_T1_ARTIFACT", "MALWARE_WIN_STOP_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/stop.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/stop", "updated_at": "2026-10-16" }, { "family": "storm", "category": "botnet", "sample_count": 1, "rule_names": [ "MALWARE_WIN_STORM_T1_ARTIFACT", "MALWARE_WIN_STORM_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/storm.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/storm", "updated_at": "2026-10-16" }, { "family": "stormattack", "category": "trojan", "sample_count": 62, "rule_names": [ "MALWARE_WIN_STORMATTACK_T1_ARTIFACT", "MALWARE_WIN_STORMATTACK_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/stormattack.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/stormattack", "updated_at": "2026-10-16" }, { "family": "strat", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_STRAT_T1_ARTIFACT", "MALWARE_WIN_STRAT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/strat.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/strat", "updated_at": "2026-10-16" }, { "family": "stream_rat", "category": "trojan", "sample_count": 0, "rule_names": [ "MALWARE_WIN_STREAM_RAT_T1_ARTIFACT", "MALWARE_WIN_STREAM_RAT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/stream_rat.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/stream_rat", "updated_at": "2026-10-16" }, { "family": "streamer", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_STREAMER_T1_ARTIFACT", "MALWARE_WIN_STREAMER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/streamer.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/streamer", "updated_at": "2026-10-16" }, { "family": "streespyer", "category": "trojan", "sample_count": 1, "rule_names": [ "MALWARE_WIN_STREESPYER_T1_ARTIFACT", "MALWARE_WIN_STREESPYER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/streespyer.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/streespyer", "updated_at": "2026-10-16" }, { "family": "strictorcrtd", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_STRICTORCRTD_T1_ARTIFACT", "MALWARE_WIN_STRICTORCRTD_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/strictorcrtd.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/strictorcrtd", "updated_at": "2026-10-16" }, { "family": "strongpity", "category": "trojan", "sample_count": 5, "rule_names": [ "MALWARE_WIN_STRONGPITY_T1_ARTIFACT", "MALWARE_WIN_STRONGPITY_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/strongpity.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/strongpity", "updated_at": "2026-10-16" }, { "family": "stubrc", "category": "trojan_downloader", "sample_count": 56, "rule_names": [ "MALWARE_WIN_STUBRC_T1_ARTIFACT", "MALWARE_WIN_STUBRC_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/stubrc.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/stubrc", "updated_at": "2026-10-16" }, { "family": "stufffull", "category": "advanced_threat", "sample_count": 7, "rule_names": [ "MALWARE_WIN_STUFFFULL_T1_ARTIFACT", "MALWARE_WIN_STUFFFULL_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/stufffull.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/stufffull", "updated_at": "2026-10-16" }, { "family": "subroate", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_SUBROATE_T1_ARTIFACT", "MALWARE_WIN_SUBROATE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/subroate.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/subroate", "updated_at": "2026-10-16" }, { "family": "subseven", "category": "trojan", "sample_count": 0, "rule_names": [ "MALWARE_WIN_SUBSEVEN_T1_ARTIFACT", "MALWARE_WIN_SUBSEVEN_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/subseven.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/subseven", "updated_at": "2026-10-16" }, { "family": "subti", "category": "trojan_downloader", "sample_count": 35, "rule_names": [ "MALWARE_WIN_SUBTI_T1_ARTIFACT", "MALWARE_WIN_SUBTI_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/subti.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/subti", "updated_at": "2026-10-16" }, { "family": "sugar", "category": "ransomware", "sample_count": 80, "rule_names": [ "MALWARE_WIN_SUGAR_T1_ARTIFACT", "MALWARE_WIN_SUGAR_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/sugar.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/sugar", "updated_at": "2026-10-16" }, { "family": "suite", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_SUITE_T1_ARTIFACT", "MALWARE_WIN_SUITE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/suite.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/suite", "updated_at": "2026-10-16" }, { "family": "suixin", "category": "trojan", "sample_count": 1, "rule_names": [ "MALWARE_WIN_SUIXIN_T1_ARTIFACT", "MALWARE_WIN_SUIXIN_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/suixin.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/suixin", "updated_at": "2026-10-16" }, { "family": "suloc", "category": "ransomware", "sample_count": 3, "rule_names": [ "MALWARE_WIN_SULOC_T1_ARTIFACT", "MALWARE_WIN_SULOC_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/suloc.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/suloc", "updated_at": "2026-10-16" }, { "family": "sunnydigits", "category": "advanced_threat", "sample_count": 2, "rule_names": [ "MALWARE_WIN_SUNNYDIGITS_T1_ARTIFACT", "MALWARE_WIN_SUNNYDIGITS_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/sunnydigits.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/sunnydigits", "updated_at": "2026-10-16" }, { "family": "superspy", "category": "advanced_threat", "sample_count": 1, "rule_names": [ "MALWARE_WIN_SUPERSPY_T1_ARTIFACT", "MALWARE_WIN_SUPERSPY_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/superspy.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/superspy", "updated_at": "2026-10-16" }, { "family": "superthreat", "category": "advanced_threat", "sample_count": 2, "rule_names": [ "MALWARE_WIN_SUPERTHREAT_T1_ARTIFACT", "MALWARE_WIN_SUPERTHREAT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/superthreat.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/superthreat", "updated_at": "2026-10-16" }, { "family": "surveyer", "category": "advanced_threat", "sample_count": 8, "rule_names": [ "MALWARE_WIN_SURVEYER_T1_ARTIFACT", "MALWARE_WIN_SURVEYER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/surveyer.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/surveyer", "updated_at": "2026-10-16" }, { "family": "suviapen", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_SUVIAPEN_T1_ARTIFACT", "MALWARE_WIN_SUVIAPEN_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/suviapen.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/suviapen", "updated_at": "2026-10-16" }, { "family": "swisyn", "category": "trojan", "sample_count": 1036, "rule_names": [ "MALWARE_WIN_SWISYN_T1_ARTIFACT", "MALWARE_WIN_SWISYN_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/swisyn.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/swisyn", "updated_at": "2026-10-16" }, { "family": "swizzor", "category": "adware", "sample_count": 55, "rule_names": [ "MALWARE_WIN_SWIZZOR_T1_ARTIFACT", "MALWARE_WIN_SWIZZOR_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/swizzor.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/swizzor", "updated_at": "2026-10-16" }, { "family": "swog", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_SWOG_T1_ARTIFACT", "MALWARE_WIN_SWOG_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/swog.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/swog", "updated_at": "2026-10-16" }, { "family": "swotter", "category": "ransomware", "sample_count": 6, "rule_names": [ "MALWARE_WIN_SWOTTER_T1_ARTIFACT", "MALWARE_WIN_SWOTTER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/swotter.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/swotter", "updated_at": "2026-10-16" }, { "family": "swpatch", "category": "ransomware", "sample_count": 2, "rule_names": [ "MALWARE_WIN_SWPATCH_T1_ARTIFACT", "MALWARE_WIN_SWPATCH_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/swpatch.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/swpatch", "updated_at": "2026-10-16" }, { "family": "swrort", "category": "backdoor", "sample_count": 161, "rule_names": [ "MALWARE_WIN_SWRORT_T1_ARTIFACT", "MALWARE_WIN_SWRORT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/swrort.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/swrort", "updated_at": "2026-10-16" }, { "family": "syncopate", "category": "advanced_threat", "sample_count": 1, "rule_names": [ "MALWARE_WIN_SYNCOPATE_T1_ARTIFACT", "MALWARE_WIN_SYNCOPATE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/syncopate.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/syncopate", "updated_at": "2026-10-16" }, { "family": "synrat", "category": "trojan", "sample_count": 0, "rule_names": [ "MALWARE_WIN_SYNRAT_T1_ARTIFACT", "MALWARE_WIN_SYNRAT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/synrat.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/synrat", "updated_at": "2026-10-16" }, { "family": "syscon", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_SYSCON_T1_ARTIFACT", "MALWARE_WIN_SYSCON_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/syscon.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/syscon", "updated_at": "2026-10-16" }, { "family": "sysdrop", "category": "ransomware", "sample_count": 2, "rule_names": [ "MALWARE_WIN_SYSDROP_T1_ARTIFACT", "MALWARE_WIN_SYSDROP_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/sysdrop.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/sysdrop", "updated_at": "2026-10-16" }, { "family": "sysn", "category": "trojan", "sample_count": 99, "rule_names": [ "MALWARE_WIN_SYSN_T1_ARTIFACT", "MALWARE_WIN_SYSN_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/sysn.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/sysn", "updated_at": "2026-10-16" }, { "family": "systemcare", "category": "advanced_threat", "sample_count": 6, "rule_names": [ "MALWARE_WIN_SYSTEMCARE_T1_ARTIFACT", "MALWARE_WIN_SYSTEMCARE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/systemcare.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/systemcare", "updated_at": "2026-10-16" }, { "family": "systemhealer", "category": "rogue", "sample_count": 28, "rule_names": [ "MALWARE_WIN_SYSTEMHEALER_T1_ARTIFACT", "MALWARE_WIN_SYSTEMHEALER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/systemhealer.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/systemhealer", "updated_at": "2026-10-16" }, { "family": "systemhijack", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_SYSTEMHIJACK_T1_ARTIFACT", "MALWARE_WIN_SYSTEMHIJACK_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/systemhijack.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/systemhijack", "updated_at": "2026-10-16" }, { "family": "systex", "category": "ransomware", "sample_count": 12, "rule_names": [ "MALWARE_WIN_SYSTEX_T1_ARTIFACT", "MALWARE_WIN_SYSTEX_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/systex.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/systex", "updated_at": "2026-10-16" }, { "family": "systimizer", "category": "advanced_threat", "sample_count": 1, "rule_names": [ "MALWARE_WIN_SYSTIMIZER_T1_ARTIFACT", "MALWARE_WIN_SYSTIMIZER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/systimizer.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/systimizer", "updated_at": "2026-10-16" }, { "family": "systweak", "category": "pua", "sample_count": 23, "rule_names": [ "MALWARE_WIN_SYSTWEAK_T1_ARTIFACT", "MALWARE_WIN_SYSTWEAK_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/systweak.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/systweak", "updated_at": "2026-10-16" }, { "family": "systweaker", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_SYSTWEAKER_T1_ARTIFACT", "MALWARE_WIN_SYSTWEAKER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/systweaker.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/systweaker", "updated_at": "2026-10-16" }, { "family": "sysupdate", "category": "ransomware", "sample_count": 4, "rule_names": [ "MALWARE_WIN_SYSUPDATE_T1_ARTIFACT", "MALWARE_WIN_SYSUPDATE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/sysupdate.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/sysupdate", "updated_at": "2026-10-16" }, { "family": "sytro", "category": "worm", "sample_count": 273, "rule_names": [ "MALWARE_WIN_SYTRO_T1_ARTIFACT", "MALWARE_WIN_SYTRO_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/sytro.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/sytro", "updated_at": "2026-10-16" }, { "family": "sz4aaw", "category": "trojan", "sample_count": 1, "rule_names": [ "MALWARE_WIN_SZ4AAW_T1_ARTIFACT", "MALWARE_WIN_SZ4AAW_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/sz4aaw.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/sz4aaw", "updated_at": "2026-10-16" }, { "family": "taily", "category": "ransomware", "sample_count": 7, "rule_names": [ "MALWARE_WIN_TAILY_T1_ARTIFACT", "MALWARE_WIN_TAILY_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/taily.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/taily", "updated_at": "2026-10-16" }, { "family": "tainp", "category": "ransomware", "sample_count": 7, "rule_names": [ "MALWARE_WIN_TAINP_T1_ARTIFACT", "MALWARE_WIN_TAINP_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/tainp.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/tainp", "updated_at": "2026-10-16" }, { "family": "takbum", "category": "ransomware", "sample_count": 3, "rule_names": [ "MALWARE_WIN_TAKBUM_T1_ARTIFACT", "MALWARE_WIN_TAKBUM_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/takbum.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/takbum", "updated_at": "2026-10-16" }, { "family": "talalpek", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_TALALPEK_T1_ARTIFACT", "MALWARE_WIN_TALALPEK_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/talalpek.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/talalpek", "updated_at": "2026-10-16" }, { "family": "talent", "category": "ransomware", "sample_count": 13, "rule_names": [ "MALWARE_WIN_TALENT_T1_ARTIFACT", "MALWARE_WIN_TALENT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/talent.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/talent", "updated_at": "2026-10-16" }, { "family": "talmad", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_TALMAD_T1_ARTIFACT", "MALWARE_WIN_TALMAD_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/talmad.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/talmad", "updated_at": "2026-10-16" }, { "family": "tanske", "category": "ransomware", "sample_count": 5, "rule_names": [ "MALWARE_WIN_TANSKE_T1_ARTIFACT", "MALWARE_WIN_TANSKE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/tanske.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/tanske", "updated_at": "2026-10-16" }, { "family": "tanspy", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_TANSPY_T1_ARTIFACT", "MALWARE_WIN_TANSPY_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/tanspy.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/tanspy", "updated_at": "2026-10-16" }, { "family": "taobao", "category": "advanced_threat", "sample_count": 1, "rule_names": [ "MALWARE_WIN_TAOBAO_T1_ARTIFACT", "MALWARE_WIN_TAOBAO_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/taobao.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/taobao", "updated_at": "2026-10-16" }, { "family": "taojinstar", "category": "advanced_threat", "sample_count": 1, "rule_names": [ "MALWARE_WIN_TAOJINSTAR_T1_ARTIFACT", "MALWARE_WIN_TAOJINSTAR_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/taojinstar.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/taojinstar", "updated_at": "2026-10-16" }, { "family": "taptrap", "category": "trojan", "sample_count": 1, "rule_names": [ "MALWARE_WIN_TAPTRAP_T1_ARTIFACT", "MALWARE_WIN_TAPTRAP_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/taptrap.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/taptrap", "updated_at": "2026-10-16" }, { "family": "tar4rkdi", "category": "ransomware", "sample_count": 5, "rule_names": [ "MALWARE_WIN_TAR4RKDI_T1_ARTIFACT", "MALWARE_WIN_TAR4RKDI_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/tar4rkdi.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/tar4rkdi", "updated_at": "2026-10-16" }, { "family": "taranis", "category": "trojan", "sample_count": 83, "rule_names": [ "MALWARE_WIN_TARANIS_T1_ARTIFACT", "MALWARE_WIN_TARANIS_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/taranis.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/taranis", "updated_at": "2026-10-16" }, { "family": "tarayt", "category": "ransomware", "sample_count": 4, "rule_names": [ "MALWARE_WIN_TARAYT_T1_ARTIFACT", "MALWARE_WIN_TARAYT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/tarayt.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/tarayt", "updated_at": "2026-10-16" }, { "family": "tarctox", "category": "ransomware", "sample_count": 3, "rule_names": [ "MALWARE_WIN_TARCTOX_T1_ARTIFACT", "MALWARE_WIN_TARCTOX_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/tarctox.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/tarctox", "updated_at": "2026-10-16" }, { "family": "tarifarch", "category": "ransomware", "sample_count": 2, "rule_names": [ "MALWARE_WIN_TARIFARCH_T1_ARTIFACT", "MALWARE_WIN_TARIFARCH_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/tarifarch.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/tarifarch", "updated_at": "2026-10-16" }, { "family": "tartober", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_TARTOBER_T1_ARTIFACT", "MALWARE_WIN_TARTOBER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/tartober.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/tartober", "updated_at": "2026-10-16" }, { "family": "tasker", "category": "trojan", "sample_count": 36, "rule_names": [ "MALWARE_WIN_TASKER_T1_ARTIFACT", "MALWARE_WIN_TASKER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/tasker.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/tasker", "updated_at": "2026-10-16" }, { "family": "taskkill", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_TASKKILL_T1_ARTIFACT", "MALWARE_WIN_TASKKILL_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/taskkill.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/taskkill", "updated_at": "2026-10-16" }, { "family": "taterf", "category": "advanced_threat", "sample_count": 3, "rule_names": [ "MALWARE_WIN_TATERF_T1_ARTIFACT", "MALWARE_WIN_TATERF_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/taterf.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/taterf", "updated_at": "2026-10-16" }, { "family": "taworm", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_TAWORM_T1_ARTIFACT", "MALWARE_WIN_TAWORM_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/taworm.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/taworm", "updated_at": "2026-10-16" }, { "family": "tbma", "category": "ransomware", "sample_count": 4, "rule_names": [ "MALWARE_WIN_TBMA_T1_ARTIFACT", "MALWARE_WIN_TBMA_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/tbma.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/tbma", "updated_at": "2026-10-16" }, { "family": "tcdrop", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_TCDROP_T1_ARTIFACT", "MALWARE_WIN_TCDROP_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/tcdrop.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/tcdrop", "updated_at": "2026-10-16" }, { "family": "tdss", "category": "rootkit", "sample_count": 35, "rule_names": [ "MALWARE_WIN_TDSS_T1_ARTIFACT", "MALWARE_WIN_TDSS_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/tdss.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/tdss", "updated_at": "2026-10-16" }, { "family": "teambot", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_TEAMBOT_T1_ARTIFACT", "MALWARE_WIN_TEAMBOT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/teambot.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/teambot", "updated_at": "2026-10-16" }, { "family": "teamspy", "category": "backdoor", "sample_count": 2, "rule_names": [ "MALWARE_WIN_TEAMSPY_T1_ARTIFACT", "MALWARE_WIN_TEAMSPY_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/teamspy.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/teamspy", "updated_at": "2026-10-16" }, { "family": "teamviewer", "category": "backdoor", "sample_count": 1, "rule_names": [ "MALWARE_WIN_TEAMVIEWER_T1_ARTIFACT", "MALWARE_WIN_TEAMVIEWER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/teamviewer.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/teamviewer", "updated_at": "2026-10-16" }, { "family": "tear", "category": "trojan", "sample_count": 1, "rule_names": [ "MALWARE_WIN_TEAR_T1_ARTIFACT", "MALWARE_WIN_TEAR_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/tear.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/tear", "updated_at": "2026-10-16" }, { "family": "techsnab", "category": "adware", "sample_count": 41, "rule_names": [ "MALWARE_WIN_TECHSNAB_T1_ARTIFACT", "MALWARE_WIN_TECHSNAB_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/techsnab.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/techsnab", "updated_at": "2026-10-16" }, { "family": "tedroo", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_TEDROO_T1_ARTIFACT", "MALWARE_WIN_TEDROO_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/tedroo.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/tedroo", "updated_at": "2026-10-16" }, { "family": "temcac", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_TEMCAC_T1_ARTIFACT", "MALWARE_WIN_TEMCAC_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/temcac.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/temcac", "updated_at": "2026-10-16" }, { "family": "temonde", "category": "adware", "sample_count": 197, "rule_names": [ "MALWARE_WIN_TEMONDE_T1_ARTIFACT", "MALWARE_WIN_TEMONDE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/temonde.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/temonde", "updated_at": "2026-10-16" }, { "family": "tempedreve", "category": "downloader", "sample_count": 104, "rule_names": [ "MALWARE_WIN_TEMPEDREVE_T1_ARTIFACT", "MALWARE_WIN_TEMPEDREVE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/tempedreve.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/tempedreve", "updated_at": "2026-10-16" }, { "family": "temr", "category": "ransomware", "sample_count": 3, "rule_names": [ "MALWARE_WIN_TEMR_T1_ARTIFACT", "MALWARE_WIN_TEMR_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/temr.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/temr", "updated_at": "2026-10-16" }, { "family": "tenavt", "category": "ransomware", "sample_count": 3, "rule_names": [ "MALWARE_WIN_TENAVT_T1_ARTIFACT", "MALWARE_WIN_TENAVT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/tenavt.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/tenavt", "updated_at": "2026-10-16" }, { "family": "tencent", "category": "advanced_threat", "sample_count": 3, "rule_names": [ "MALWARE_WIN_TENCENT_T1_ARTIFACT", "MALWARE_WIN_TENCENT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/tencent.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/tencent", "updated_at": "2026-10-16" }, { "family": "tenga", "category": "file_infector", "sample_count": 50, "rule_names": [ "MALWARE_WIN_TENGA_T1_ARTIFACT", "MALWARE_WIN_TENGA_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/tenga.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/tenga", "updated_at": "2026-10-16" }, { "family": "terabit_virus_maker", "category": "trojan", "sample_count": 0, "rule_names": [ "MALWARE_WIN_TERABIT_VIRUS_MAKER_T1_ARTIFACT", "MALWARE_WIN_TERABIT_VIRUS_MAKER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/terabit_virus_maker.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/terabit_virus_maker", "updated_at": "2026-10-16" }, { "family": "teramind", "category": "advanced_threat", "sample_count": 1, "rule_names": [ "MALWARE_WIN_TERAMIND_T1_ARTIFACT", "MALWARE_WIN_TERAMIND_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/teramind.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/teramind", "updated_at": "2026-10-16" }, { "family": "terkcop", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_TERKCOP_T1_ARTIFACT", "MALWARE_WIN_TERKCOP_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/terkcop.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/terkcop", "updated_at": "2026-10-16" }, { "family": "termite", "category": "trojan", "sample_count": 1, "rule_names": [ "MALWARE_WIN_TERMITE_T1_ARTIFACT", "MALWARE_WIN_TERMITE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/termite.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/termite", "updated_at": "2026-10-16" }, { "family": "tescrypt", "category": "ransomware", "sample_count": 39, "rule_names": [ "MALWARE_WIN_TESCRYPT_T1_ARTIFACT", "MALWARE_WIN_TESCRYPT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/tescrypt.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/tescrypt", "updated_at": "2026-10-16" }, { "family": "teslacrypt", "category": "ransomware", "sample_count": 9, "rule_names": [ "MALWARE_WIN_TESLACRYPT_T1_ARTIFACT", "MALWARE_WIN_TESLACRYPT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/teslacrypt.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/teslacrypt", "updated_at": "2026-10-16" }, { "family": "testfile", "category": "advanced_threat", "sample_count": 4, "rule_names": [ "MALWARE_WIN_TESTFILE_T1_ARTIFACT", "MALWARE_WIN_TESTFILE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/testfile.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/testfile", "updated_at": "2026-10-16" }, { "family": "tftpd", "category": "ransomware", "sample_count": 3, "rule_names": [ "MALWARE_WIN_TFTPD_T1_ARTIFACT", "MALWARE_WIN_TFTPD_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/tftpd.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/tftpd", "updated_at": "2026-10-16" }, { "family": "tgrandongc", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_TGRANDONGC_T1_ARTIFACT", "MALWARE_WIN_TGRANDONGC_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/tgrandongc.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/tgrandongc", "updated_at": "2026-10-16" }, { "family": "thanatos", "category": "ransomware", "sample_count": 3, "rule_names": [ "MALWARE_WIN_THANATOS_T1_ARTIFACT", "MALWARE_WIN_THANATOS_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/thanatos.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/thanatos", "updated_at": "2026-10-16" }, { "family": "therat", "category": "ransomware", "sample_count": 3, "rule_names": [ "MALWARE_WIN_THERAT_T1_ARTIFACT", "MALWARE_WIN_THERAT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/therat.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/therat", "updated_at": "2026-10-16" }, { "family": "thoper", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_THOPER_T1_ARTIFACT", "MALWARE_WIN_THOPER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/thoper.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/thoper", "updated_at": "2026-10-16" }, { "family": "tibia", "category": "advanced_threat", "sample_count": 3, "rule_names": [ "MALWARE_WIN_TIBIA_T1_ARTIFACT", "MALWARE_WIN_TIBIA_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/tibia.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/tibia", "updated_at": "2026-10-16" }, { "family": "tibs", "category": "trojan", "sample_count": 5, "rule_names": [ "MALWARE_WIN_TIBS_T1_ARTIFACT", "MALWARE_WIN_TIBS_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/tibs.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/tibs", "updated_at": "2026-10-16" }, { "family": "tibsystems", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_TIBSYSTEMS_T1_ARTIFACT", "MALWARE_WIN_TIBSYSTEMS_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/tibsystems.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/tibsystems", "updated_at": "2026-10-16" }, { "family": "tick", "category": "backdoor", "sample_count": 1, "rule_names": [ "MALWARE_WIN_TICK_T1_ARTIFACT", "MALWARE_WIN_TICK_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/tick.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/tick", "updated_at": "2026-10-16" }, { "family": "tierry", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_TIERRY_T1_ARTIFACT", "MALWARE_WIN_TIERRY_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/tierry.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/tierry", "updated_at": "2026-10-16" }, { "family": "tiggre", "category": "cryptominer", "sample_count": 1728, "rule_names": [ "MALWARE_WIN_TIGGRE_T1_ARTIFACT", "MALWARE_WIN_TIGGRE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/tiggre.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/tiggre", "updated_at": "2026-10-16" }, { "family": "tiklog", "category": "advanced_threat", "sample_count": 1, "rule_names": [ "MALWARE_WIN_TIKLOG_T1_ARTIFACT", "MALWARE_WIN_TIKLOG_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/tiklog.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/tiklog", "updated_at": "2026-10-16" }, { "family": "tikoog", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_TIKOOG_T1_ARTIFACT", "MALWARE_WIN_TIKOOG_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/tikoog.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/tikoog", "updated_at": "2026-10-16" }, { "family": "tilken", "category": "ransomware", "sample_count": 6, "rule_names": [ "MALWARE_WIN_TILKEN_T1_ARTIFACT", "MALWARE_WIN_TILKEN_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/tilken.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/tilken", "updated_at": "2026-10-16" }, { "family": "timesink", "category": "advanced_threat", "sample_count": 3, "rule_names": [ "MALWARE_WIN_TIMESINK_T1_ARTIFACT", "MALWARE_WIN_TIMESINK_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/timesink.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/timesink", "updated_at": "2026-10-16" }, { "family": "tinba", "category": "banking_trojan", "sample_count": 1531, "rule_names": [ "MALWARE_WIN_TINBA_T1_ARTIFACT", "MALWARE_WIN_TINBA_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/tinba.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/tinba", "updated_at": "2026-10-16" }, { "family": "tinclex", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_TINCLEX_T1_ARTIFACT", "MALWARE_WIN_TINCLEX_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/tinclex.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/tinclex", "updated_at": "2026-10-16" }, { "family": "tinukebot", "category": "trojan", "sample_count": 5, "rule_names": [ "MALWARE_WIN_TINUKEBOT_T1_ARTIFACT", "MALWARE_WIN_TINUKEBOT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/tinukebot.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/tinukebot", "updated_at": "2026-10-16" }, { "family": "tinydl", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_TINYDL_T1_ARTIFACT", "MALWARE_WIN_TINYDL_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/tinydl.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/tinydl", "updated_at": "2026-10-16" }, { "family": "tinyloader", "category": "downloader", "sample_count": 203, "rule_names": [ "MALWARE_WIN_TINYLOADER_T1_ARTIFACT", "MALWARE_WIN_TINYLOADER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/tinyloader.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/tinyloader", "updated_at": "2026-10-16" }, { "family": "tinynuke", "category": "banking_trojan", "sample_count": 19, "rule_names": [ "MALWARE_WIN_TINYNUKE_T1_ARTIFACT", "MALWARE_WIN_TINYNUKE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/tinynuke.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/tinynuke", "updated_at": "2026-10-16" }, { "family": "tinypos", "category": "advanced_threat", "sample_count": 2, "rule_names": [ "MALWARE_WIN_TINYPOS_T1_ARTIFACT", "MALWARE_WIN_TINYPOS_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/tinypos.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/tinypos", "updated_at": "2026-10-16" }, { "family": "tipp", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_TIPP_T1_ARTIFACT", "MALWARE_WIN_TIPP_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/tipp.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/tipp", "updated_at": "2026-10-16" }, { "family": "tirrip", "category": "ransomware", "sample_count": 2, "rule_names": [ "MALWARE_WIN_TIRRIP_T1_ARTIFACT", "MALWARE_WIN_TIRRIP_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/tirrip.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/tirrip", "updated_at": "2026-10-16" }, { "family": "titirez", "category": "ransomware", "sample_count": 4, "rule_names": [ "MALWARE_WIN_TITIREZ_T1_ARTIFACT", "MALWARE_WIN_TITIREZ_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/titirez.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/titirez", "updated_at": "2026-10-16" }, { "family": "tivmonk", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_TIVMONK_T1_ARTIFACT", "MALWARE_WIN_TIVMONK_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/tivmonk.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/tivmonk", "updated_at": "2026-10-16" }, { "family": "tmgfayxalbaj", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_TMGFAYXALBAJ_T1_ARTIFACT", "MALWARE_WIN_TMGFAYXALBAJ_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/tmgfayxalbaj.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/tmgfayxalbaj", "updated_at": "2026-10-16" }, { "family": "tnega", "category": "ransomware", "sample_count": 2, "rule_names": [ "MALWARE_WIN_TNEGA_T1_ARTIFACT", "MALWARE_WIN_TNEGA_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/tnega.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/tnega", "updated_at": "2026-10-16" }, { "family": "toauta", "category": "ransomware", "sample_count": 2, "rule_names": [ "MALWARE_WIN_TOAUTA_T1_ARTIFACT", "MALWARE_WIN_TOAUTA_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/toauta.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/toauta", "updated_at": "2026-10-16" }, { "family": "tobor", "category": "trojan", "sample_count": 1, "rule_names": [ "MALWARE_WIN_TOBOR_T1_ARTIFACT", "MALWARE_WIN_TOBOR_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/tobor.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/tobor", "updated_at": "2026-10-16" }, { "family": "tofsee", "category": "spam_bot", "sample_count": 264, "rule_names": [ "MALWARE_WIN_TOFSEE_T1_ARTIFACT", "MALWARE_WIN_TOFSEE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/tofsee.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/tofsee", "updated_at": "2026-10-16" }, { "family": "toga", "category": "ransomware", "sample_count": 6, "rule_names": [ "MALWARE_WIN_TOGA_T1_ARTIFACT", "MALWARE_WIN_TOGA_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/toga.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/toga", "updated_at": "2026-10-16" }, { "family": "togapy", "category": "ransomware", "sample_count": 2, "rule_names": [ "MALWARE_WIN_TOGAPY_T1_ARTIFACT", "MALWARE_WIN_TOGAPY_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/togapy.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/togapy", "updated_at": "2026-10-16" }, { "family": "toggle", "category": "adware", "sample_count": 20, "rule_names": [ "MALWARE_WIN_TOGGLE_T1_ARTIFACT", "MALWARE_WIN_TOGGLE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/toggle.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/toggle", "updated_at": "2026-10-16" }, { "family": "tomegun", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_TOMEGUN_T1_ARTIFACT", "MALWARE_WIN_TOMEGUN_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/tomegun.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/tomegun", "updated_at": "2026-10-16" }, { "family": "tongji", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_TONGJI_T1_ARTIFACT", "MALWARE_WIN_TONGJI_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/tongji.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/tongji", "updated_at": "2026-10-16" }, { "family": "tonmye", "category": "ransomware", "sample_count": 21, "rule_names": [ "MALWARE_WIN_TONMYE_T1_ARTIFACT", "MALWARE_WIN_TONMYE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/tonmye.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/tonmye", "updated_at": "2026-10-16" }, { "family": "toptoo", "category": "ransomware", "sample_count": 2, "rule_names": [ "MALWARE_WIN_TOPTOO_T1_ARTIFACT", "MALWARE_WIN_TOPTOO_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/toptoo.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/toptoo", "updated_at": "2026-10-16" }, { "family": "toptools", "category": "advanced_threat", "sample_count": 6, "rule_names": [ "MALWARE_WIN_TOPTOOLS_T1_ARTIFACT", "MALWARE_WIN_TOPTOOLS_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/toptools.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/toptools", "updated_at": "2026-10-16" }, { "family": "tordev", "category": "botnet", "sample_count": 32, "rule_names": [ "MALWARE_WIN_TORDEV_T1_ARTIFACT", "MALWARE_WIN_TORDEV_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/tordev.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/tordev", "updated_at": "2026-10-16" }, { "family": "torjok", "category": "ransomware", "sample_count": 3, "rule_names": [ "MALWARE_WIN_TORJOK_T1_ARTIFACT", "MALWARE_WIN_TORJOK_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/torjok.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/torjok", "updated_at": "2026-10-16" }, { "family": "torntv", "category": "advanced_threat", "sample_count": 6, "rule_names": [ "MALWARE_WIN_TORNTV_T1_ARTIFACT", "MALWARE_WIN_TORNTV_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/torntv.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/torntv", "updated_at": "2026-10-16" }, { "family": "torr", "category": "ransomware", "sample_count": 2, "rule_names": [ "MALWARE_WIN_TORR_T1_ARTIFACT", "MALWARE_WIN_TORR_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/torr.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/torr", "updated_at": "2026-10-16" }, { "family": "torrenteasy", "category": "advanced_threat", "sample_count": 2, "rule_names": [ "MALWARE_WIN_TORRENTEASY_T1_ARTIFACT", "MALWARE_WIN_TORRENTEASY_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/torrenteasy.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/torrenteasy", "updated_at": "2026-10-16" }, { "family": "tosthin", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_TOSTHIN_T1_ARTIFACT", "MALWARE_WIN_TOSTHIN_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/tosthin.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/tosthin", "updated_at": "2026-10-16" }, { "family": "totbrick", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_TOTBRICK_T1_ARTIFACT", "MALWARE_WIN_TOTBRICK_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/totbrick.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/totbrick", "updated_at": "2026-10-16" }, { "family": "tougle", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_TOUGLE_T1_ARTIFACT", "MALWARE_WIN_TOUGLE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/tougle.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/tougle", "updated_at": "2026-10-16" }, { "family": "tovicrypt", "category": "ransomware", "sample_count": 3, "rule_names": [ "MALWARE_WIN_TOVICRYPT_T1_ARTIFACT", "MALWARE_WIN_TOVICRYPT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/tovicrypt.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/tovicrypt", "updated_at": "2026-10-16" }, { "family": "tovus", "category": "ransomware", "sample_count": 10, "rule_names": [ "MALWARE_WIN_TOVUS_T1_ARTIFACT", "MALWARE_WIN_TOVUS_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/tovus.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/tovus", "updated_at": "2026-10-16" }, { "family": "tpyn", "category": "trojan", "sample_count": 52, "rule_names": [ "MALWARE_WIN_TPYN_T1_ARTIFACT", "MALWARE_WIN_TPYN_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/tpyn.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/tpyn", "updated_at": "2026-10-16" }, { "family": "trabin", "category": "ransomware", "sample_count": 2, "rule_names": [ "MALWARE_WIN_TRABIN_T1_ARTIFACT", "MALWARE_WIN_TRABIN_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/trabin.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/trabin", "updated_at": "2026-10-16" }, { "family": "tracur", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_TRACUR_T1_ARTIFACT", "MALWARE_WIN_TRACUR_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/tracur.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/tracur", "updated_at": "2026-10-16" }, { "family": "trafog", "category": "ransomware", "sample_count": 2, "rule_names": [ "MALWARE_WIN_TRAFOG_T1_ARTIFACT", "MALWARE_WIN_TRAFOG_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/trafog.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/trafog", "updated_at": "2026-10-16" }, { "family": "trainer", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_TRAINER_T1_ARTIFACT", "MALWARE_WIN_TRAINER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/trainer.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/trainer", "updated_at": "2026-10-16" }, { "family": "transmit", "category": "trojan", "sample_count": 1, "rule_names": [ "MALWARE_WIN_TRANSMIT_T1_ARTIFACT", "MALWARE_WIN_TRANSMIT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/transmit.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/transmit", "updated_at": "2026-10-16" }, { "family": "trash", "category": "trojan", "sample_count": 11, "rule_names": [ "MALWARE_WIN_TRASH_T1_ARTIFACT", "MALWARE_WIN_TRASH_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/trash.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/trash", "updated_at": "2026-10-16" }, { "family": "travnet", "category": "trojan", "sample_count": 1, "rule_names": [ "MALWARE_WIN_TRAVNET_T1_ARTIFACT", "MALWARE_WIN_TRAVNET_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/travnet.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/travnet", "updated_at": "2026-10-16" }, { "family": "trialkiller", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_TRIALKILLER_T1_ARTIFACT", "MALWARE_WIN_TRIALKILLER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/trialkiller.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/trialkiller", "updated_at": "2026-10-16" }, { "family": "trick", "category": "ransomware", "sample_count": 10, "rule_names": [ "MALWARE_WIN_TRICK_T1_ARTIFACT", "MALWARE_WIN_TRICK_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/trick.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/trick", "updated_at": "2026-10-16" }, { "family": "trickbot", "category": "trojan", "sample_count": 466, "rule_names": [ "MALWARE_WIN_TRICKBOT_T1_ARTIFACT", "MALWARE_WIN_TRICKBOT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/trickbot.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/trickbot", "updated_at": "2026-10-16" }, { "family": "trickster", "category": "banking_trojan", "sample_count": 93, "rule_names": [ "MALWARE_WIN_TRICKSTER_T1_ARTIFACT", "MALWARE_WIN_TRICKSTER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/trickster.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/trickster", "updated_at": "2026-10-16" }, { "family": "trilon", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_TRILON_T1_ARTIFACT", "MALWARE_WIN_TRILON_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/trilon.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/trilon", "updated_at": "2026-10-16" }, { "family": "trioris", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_TRIORIS_T1_ARTIFACT", "MALWARE_WIN_TRIORIS_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/trioris.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/trioris", "updated_at": "2026-10-16" }, { "family": "triusor", "category": "trojan", "sample_count": 1429, "rule_names": [ "MALWARE_WIN_TRIUSOR_T1_ARTIFACT", "MALWARE_WIN_TRIUSOR_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/triusor.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/triusor", "updated_at": "2026-10-16" }, { "family": "trjgen", "category": "trojan", "sample_count": 3, "rule_names": [ "MALWARE_WIN_TRJGEN_T1_ARTIFACT", "MALWARE_WIN_TRJGEN_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/trjgen.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/trjgen", "updated_at": "2026-10-16" }, { "family": "trojanbanker", "category": "ransomware", "sample_count": 2, "rule_names": [ "MALWARE_WIN_TROJANBANKER_T1_ARTIFACT", "MALWARE_WIN_TROJANBANKER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/trojanbanker.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/trojanbanker", "updated_at": "2026-10-16" }, { "family": "trojna", "category": "trojan", "sample_count": 0, "rule_names": [ "MALWARE_WIN_TROJNA_T1_ARTIFACT", "MALWARE_WIN_TROJNA_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/trojna.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/trojna", "updated_at": "2026-10-16" }, { "family": "troldesh", "category": "ransomware", "sample_count": 14, "rule_names": [ "MALWARE_WIN_TROLDESH_T1_ARTIFACT", "MALWARE_WIN_TROLDESH_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/troldesh.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/troldesh", "updated_at": "2026-10-16" }, { "family": "tron", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_TRON_T1_ARTIFACT", "MALWARE_WIN_TRON_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/tron.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/tron", "updated_at": "2026-10-16" }, { "family": "troxa", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_TROXA_T1_ARTIFACT", "MALWARE_WIN_TROXA_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/troxa.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/troxa", "updated_at": "2026-10-16" }, { "family": "trpctrooper", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_TRPCTROOPER_T1_ARTIFACT", "MALWARE_WIN_TRPCTROOPER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/trpctrooper.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/trpctrooper", "updated_at": "2026-10-16" }, { "family": "truew", "category": "ransomware", "sample_count": 19, "rule_names": [ "MALWARE_WIN_TRUEW_T1_ARTIFACT", "MALWARE_WIN_TRUEW_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/truew.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/truew", "updated_at": "2026-10-16" }, { "family": "trymedia", "category": "adware", "sample_count": 25, "rule_names": [ "MALWARE_WIN_TRYMEDIA_T1_ARTIFACT", "MALWARE_WIN_TRYMEDIA_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/trymedia.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/trymedia", "updated_at": "2026-10-16" }, { "family": "tsingsoft", "category": "advanced_threat", "sample_count": 4, "rule_names": [ "MALWARE_WIN_TSINGSOFT_T1_ARTIFACT", "MALWARE_WIN_TSINGSOFT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/tsingsoft.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/tsingsoft", "updated_at": "2026-10-16" }, { "family": "tsklnk", "category": "trojan", "sample_count": 4, "rule_names": [ "MALWARE_WIN_TSKLNK_T1_ARTIFACT", "MALWARE_WIN_TSKLNK_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/tsklnk.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/tsklnk", "updated_at": "2026-10-16" }, { "family": "tspy", "category": "trojan", "sample_count": 22, "rule_names": [ "MALWARE_WIN_TSPY_T1_ARTIFACT", "MALWARE_WIN_TSPY_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/tspy.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/tspy", "updated_at": "2026-10-16" }, { "family": "tufik", "category": "ransomware", "sample_count": 28, "rule_names": [ "MALWARE_WIN_TUFIK_T1_ARTIFACT", "MALWARE_WIN_TUFIK_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/tufik.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/tufik", "updated_at": "2026-10-16" }, { "family": "tukrina", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_TUKRINA_T1_ARTIFACT", "MALWARE_WIN_TUKRINA_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/tukrina.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/tukrina", "updated_at": "2026-10-16" }, { "family": "tulong", "category": "ransomware", "sample_count": 2, "rule_names": [ "MALWARE_WIN_TULONG_T1_ARTIFACT", "MALWARE_WIN_TULONG_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/tulong.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/tulong", "updated_at": "2026-10-16" }, { "family": "turkojan", "category": "rat", "sample_count": 13, "rule_names": [ "MALWARE_WIN_TURKOJAN_T1_ARTIFACT", "MALWARE_WIN_TURKOJAN_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/turkojan.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/turkojan", "updated_at": "2026-10-16" }, { "family": "turla", "category": "advanced_threat", "sample_count": 35, "rule_names": [ "MALWARE_WIN_TURLA_T1_ARTIFACT", "MALWARE_WIN_TURLA_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/turla.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/turla", "updated_at": "2026-10-16" }, { "family": "tuscas", "category": "adware", "sample_count": 44, "rule_names": [ "MALWARE_WIN_TUSCAS_T1_ARTIFACT", "MALWARE_WIN_TUSCAS_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/tuscas.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/tuscas", "updated_at": "2026-10-16" }, { "family": "tvido", "category": "ransomware", "sample_count": 2, "rule_names": [ "MALWARE_WIN_TVIDO_T1_ARTIFACT", "MALWARE_WIN_TVIDO_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/tvido.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/tvido", "updated_at": "2026-10-16" }, { "family": "tweakbit", "category": "rogueware", "sample_count": 117, "rule_names": [ "MALWARE_WIN_TWEAKBIT_T1_ARTIFACT", "MALWARE_WIN_TWEAKBIT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/tweakbit.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/tweakbit", "updated_at": "2026-10-16" }, { "family": "tweakbitdu", "category": "pua", "sample_count": 38, "rule_names": [ "MALWARE_WIN_TWEAKBITDU_T1_ARTIFACT", "MALWARE_WIN_TWEAKBITDU_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/tweakbitdu.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/tweakbitdu", "updated_at": "2026-10-16" }, { "family": "tyhos", "category": "ransomware", "sample_count": 3, "rule_names": [ "MALWARE_WIN_TYHOS_T1_ARTIFACT", "MALWARE_WIN_TYHOS_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/tyhos.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/tyhos", "updated_at": "2026-10-16" }, { "family": "typic", "category": "ransomware", "sample_count": 2, "rule_names": [ "MALWARE_WIN_TYPIC_T1_ARTIFACT", "MALWARE_WIN_TYPIC_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/typic.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/typic", "updated_at": "2026-10-16" }, { "family": "tyuimoi", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_TYUIMOI_T1_ARTIFACT", "MALWARE_WIN_TYUIMOI_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/tyuimoi.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/tyuimoi", "updated_at": "2026-10-16" }, { "family": "tzabf", "category": "ransomware", "sample_count": 2, "rule_names": [ "MALWARE_WIN_TZABF_T1_ARTIFACT", "MALWARE_WIN_TZABF_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/tzabf.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/tzabf", "updated_at": "2026-10-16" }, { "family": "u8taskservice", "category": "advanced_threat", "sample_count": 2, "rule_names": [ "MALWARE_WIN_U8TASKSERVICE_T1_ARTIFACT", "MALWARE_WIN_U8TASKSERVICE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/u8taskservice.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/u8taskservice", "updated_at": "2026-10-16" }, { "family": "uacme", "category": "ransomware", "sample_count": 5, "rule_names": [ "MALWARE_WIN_UACME_T1_ARTIFACT", "MALWARE_WIN_UACME_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/uacme.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/uacme", "updated_at": "2026-10-16" }, { "family": "ubar", "category": "advanced_threat", "sample_count": 12, "rule_names": [ "MALWARE_WIN_UBAR_T1_ARTIFACT", "MALWARE_WIN_UBAR_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/ubar.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/ubar", "updated_at": "2026-10-16" }, { "family": "ubibila", "category": "ransomware", "sample_count": 11, "rule_names": [ "MALWARE_WIN_UBIBILA_T1_ARTIFACT", "MALWARE_WIN_UBIBILA_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/ubibila.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/ubibila", "updated_at": "2026-10-16" }, { "family": "ubot", "category": "trojan", "sample_count": 8, "rule_names": [ "MALWARE_WIN_UBOT_T1_ARTIFACT", "MALWARE_WIN_UBOT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/ubot.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/ubot", "updated_at": "2026-10-16" }, { "family": "udpos", "category": "trojan", "sample_count": 2, "rule_names": [ "MALWARE_WIN_UDPOS_T1_ARTIFACT", "MALWARE_WIN_UDPOS_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/udpos.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/udpos", "updated_at": "2026-10-16" }, { "family": "udslee", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_UDSLEE_T1_ARTIFACT", "MALWARE_WIN_UDSLEE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/udslee.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/udslee", "updated_at": "2026-10-16" }, { "family": "ufraie", "category": "ransomware", "sample_count": 2, "rule_names": [ "MALWARE_WIN_UFRAIE_T1_ARTIFACT", "MALWARE_WIN_UFRAIE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/ufraie.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/ufraie", "updated_at": "2026-10-16" }, { "family": "uiwao0sam", "category": "trojan", "sample_count": 1, "rule_names": [ "MALWARE_WIN_UIWAO0SAM_T1_ARTIFACT", "MALWARE_WIN_UIWAO0SAM_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/uiwao0sam.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/uiwao0sam", "updated_at": "2026-10-16" }, { "family": "uiwaowr6xsaje", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_UIWAOWR6XSAJE_T1_ARTIFACT", "MALWARE_WIN_UIWAOWR6XSAJE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/uiwaowr6xsaje.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/uiwaowr6xsaje", "updated_at": "2026-10-16" }, { "family": "uk_splitter", "category": "trojan", "sample_count": 0, "rule_names": [ "MALWARE_WIN_UK_SPLITTER_T1_ARTIFACT", "MALWARE_WIN_UK_SPLITTER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/uk_splitter.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/uk_splitter", "updated_at": "2026-10-16" }, { "family": "ukpa", "category": "ransomware", "sample_count": 5, "rule_names": [ "MALWARE_WIN_UKPA_T1_ARTIFACT", "MALWARE_WIN_UKPA_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/ukpa.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/ukpa", "updated_at": "2026-10-16" }, { "family": "ulise", "category": "trojan", "sample_count": 1176, "rule_names": [ "MALWARE_WIN_ULISE_T1_ARTIFACT", "MALWARE_WIN_ULISE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/ulise.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/ulise", "updated_at": "2026-10-16" }, { "family": "uloader", "category": "ransomware", "sample_count": 2, "rule_names": [ "MALWARE_WIN_ULOADER_T1_ARTIFACT", "MALWARE_WIN_ULOADER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/uloader.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/uloader", "updated_at": "2026-10-16" }, { "family": "ulpm", "category": "adware", "sample_count": 55, "rule_names": [ "MALWARE_WIN_ULPM_T1_ARTIFACT", "MALWARE_WIN_ULPM_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/ulpm.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/ulpm", "updated_at": "2026-10-16" }, { "family": "ultrasurf", "category": "advanced_threat", "sample_count": 7, "rule_names": [ "MALWARE_WIN_ULTRASURF_T1_ARTIFACT", "MALWARE_WIN_ULTRASURF_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/ultrasurf.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/ultrasurf", "updated_at": "2026-10-16" }, { "family": "ulysses", "category": "trojan", "sample_count": 0, "rule_names": [ "MALWARE_WIN_ULYSSES_T1_ARTIFACT", "MALWARE_WIN_ULYSSES_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/ulysses.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/ulysses", "updated_at": "2026-10-16" }, { "family": "umbald", "category": "ransomware", "sample_count": 15, "rule_names": [ "MALWARE_WIN_UMBALD_T1_ARTIFACT", "MALWARE_WIN_UMBALD_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/umbald.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/umbald", "updated_at": "2026-10-16" }, { "family": "umbra", "category": "loader", "sample_count": 111, "rule_names": [ "MALWARE_WIN_UMBRA_T1_ARTIFACT", "MALWARE_WIN_UMBRA_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/umbra.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/umbra", "updated_at": "2026-10-16" }, { "family": "umgfxgkazyg", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_UMGFXGKAZYG_T1_ARTIFACT", "MALWARE_WIN_UMGFXGKAZYG_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/umgfxgkazyg.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/umgfxgkazyg", "updated_at": "2026-10-16" }, { "family": "umqabaxnjogc", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_UMQABAXNJOGC_T1_ARTIFACT", "MALWARE_WIN_UMQABAXNJOGC_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/umqabaxnjogc.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/umqabaxnjogc", "updated_at": "2026-10-16" }, { "family": "uniblue", "category": "pua", "sample_count": 74, "rule_names": [ "MALWARE_WIN_UNIBLUE_T1_ARTIFACT", "MALWARE_WIN_UNIBLUE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/uniblue.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/uniblue", "updated_at": "2026-10-16" }, { "family": "unigo", "category": "advanced_threat", "sample_count": 1, "rule_names": [ "MALWARE_WIN_UNIGO_T1_ARTIFACT", "MALWARE_WIN_UNIGO_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/unigo.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/unigo", "updated_at": "2026-10-16" }, { "family": "universal1337", "category": "infostealer", "sample_count": 0, "rule_names": [ "MALWARE_WIN_UNIVERSAL1337_T1_ARTIFACT", "MALWARE_WIN_UNIVERSAL1337_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/universal1337.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/universal1337", "updated_at": "2026-10-16" }, { "family": "unpacked", "category": "ransomware", "sample_count": 3, "rule_names": [ "MALWARE_WIN_UNPACKED_T1_ARTIFACT", "MALWARE_WIN_UNPACKED_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/unpacked.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/unpacked", "updated_at": "2026-10-16" }, { "family": "unruy", "category": "click_fraud", "sample_count": 1267, "rule_names": [ "MALWARE_WIN_UNRUY_T1_ARTIFACT", "MALWARE_WIN_UNRUY_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/unruy.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/unruy", "updated_at": "2026-10-16" }, { "family": "unwaders", "category": "adware", "sample_count": 111, "rule_names": [ "MALWARE_WIN_UNWADERS_T1_ARTIFACT", "MALWARE_WIN_UNWADERS_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/unwaders.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/unwaders", "updated_at": "2026-10-16" }, { "family": "upackdam", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_UPACKDAM_T1_ARTIFACT", "MALWARE_WIN_UPACKDAM_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/upackdam.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/upackdam", "updated_at": "2026-10-16" }, { "family": "upadter", "category": "ransomware", "sample_count": 4, "rule_names": [ "MALWARE_WIN_UPADTER_T1_ARTIFACT", "MALWARE_WIN_UPADTER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/upadter.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/upadter", "updated_at": "2026-10-16" }, { "family": "upantix", "category": "trojan_downloader", "sample_count": 31, "rule_names": [ "MALWARE_WIN_UPANTIX_T1_ARTIFACT", "MALWARE_WIN_UPANTIX_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/upantix.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/upantix", "updated_at": "2026-10-16" }, { "family": "upatre", "category": "downloader", "sample_count": 4200, "rule_names": [ "MALWARE_WIN_UPATRE_T1_ARTIFACT", "MALWARE_WIN_UPATRE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/upatre.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/upatre", "updated_at": "2026-10-16" }, { "family": "updater", "category": "ransomware", "sample_count": 11, "rule_names": [ "MALWARE_WIN_UPDATER_T1_ARTIFACT", "MALWARE_WIN_UPDATER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/updater.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/updater", "updated_at": "2026-10-16" }, { "family": "updatestar", "category": "advanced_threat", "sample_count": 2, "rule_names": [ "MALWARE_WIN_UPDATESTAR_T1_ARTIFACT", "MALWARE_WIN_UPDATESTAR_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/updatestar.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/updatestar", "updated_at": "2026-10-16" }, { "family": "upkm", "category": "ransomware", "sample_count": 7, "rule_names": [ "MALWARE_WIN_UPKM_T1_ARTIFACT", "MALWARE_WIN_UPKM_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/upkm.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/upkm", "updated_at": "2026-10-16" }, { "family": "uploader", "category": "trojan", "sample_count": 1, "rule_names": [ "MALWARE_WIN_UPLOADER_T1_ARTIFACT", "MALWARE_WIN_UPLOADER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/uploader.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/uploader", "updated_at": "2026-10-16" }, { "family": "uptodown", "category": "advanced_threat", "sample_count": 3, "rule_names": [ "MALWARE_WIN_UPTODOWN_T1_ARTIFACT", "MALWARE_WIN_UPTODOWN_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/uptodown.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/uptodown", "updated_at": "2026-10-16" }, { "family": "urausy", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_URAUSY_T1_ARTIFACT", "MALWARE_WIN_URAUSY_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/urausy.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/urausy", "updated_at": "2026-10-16" }, { "family": "urcs", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_URCS_T1_ARTIFACT", "MALWARE_WIN_URCS_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/urcs.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/urcs", "updated_at": "2026-10-16" }, { "family": "urelas", "category": "infostealer", "sample_count": 666, "rule_names": [ "MALWARE_WIN_URELAS_T1_ARTIFACT", "MALWARE_WIN_URELAS_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/urelas.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/urelas", "updated_at": "2026-10-16" }, { "family": "ursnif", "category": "banking_trojan", "sample_count": 8188, "rule_names": [ "MALWARE_WIN_URSNIF_T1_ARTIFACT", "MALWARE_WIN_URSNIF_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/ursnif.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/ursnif", "updated_at": "2026-10-16" }, { "family": "ursnifdropper", "category": "trojan", "sample_count": 1, "rule_names": [ "MALWARE_WIN_URSNIFDROPPER_T1_ARTIFACT", "MALWARE_WIN_URSNIFDROPPER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/ursnifdropper.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/ursnifdropper", "updated_at": "2026-10-16" }, { "family": "ursu", "category": "trojan", "sample_count": 1168, "rule_names": [ "MALWARE_WIN_URSU_T1_ARTIFACT", "MALWARE_WIN_URSU_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/ursu.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/ursu", "updated_at": "2026-10-16" }, { "family": "ursumdt", "category": "ransomware", "sample_count": 3, "rule_names": [ "MALWARE_WIN_URSUMDT_T1_ARTIFACT", "MALWARE_WIN_URSUMDT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/ursumdt.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/ursumdt", "updated_at": "2026-10-16" }, { "family": "uruasy", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_URUASY_T1_ARTIFACT", "MALWARE_WIN_URUASY_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/uruasy.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/uruasy", "updated_at": "2026-10-16" }, { "family": "usteal", "category": "infostealer", "sample_count": 28, "rule_names": [ "MALWARE_WIN_USTEAL_T1_ARTIFACT", "MALWARE_WIN_USTEAL_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/usteal.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/usteal", "updated_at": "2026-10-16" }, { "family": "utoti", "category": "ransomware", "sample_count": 2, "rule_names": [ "MALWARE_WIN_UTOTI_T1_ARTIFACT", "MALWARE_WIN_UTOTI_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/utoti.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/utoti", "updated_at": "2026-10-16" }, { "family": "uwamson", "category": "ransomware", "sample_count": 3, "rule_names": [ "MALWARE_WIN_UWAMSON_T1_ARTIFACT", "MALWARE_WIN_UWAMSON_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/uwamson.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/uwamson", "updated_at": "2026-10-16" }, { "family": "uztub", "category": "ransomware", "sample_count": 3, "rule_names": [ "MALWARE_WIN_UZTUB_T1_ARTIFACT", "MALWARE_WIN_UZTUB_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/uztub.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/uztub", "updated_at": "2026-10-16" }, { "family": "uztuby", "category": "ransomware", "sample_count": 3, "rule_names": [ "MALWARE_WIN_UZTUBY_T1_ARTIFACT", "MALWARE_WIN_UZTUBY_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/uztuby.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/uztuby", "updated_at": "2026-10-16" }, { "family": "vabushky", "category": "ransomware", "sample_count": 32, "rule_names": [ "MALWARE_WIN_VABUSHKY_T1_ARTIFACT", "MALWARE_WIN_VABUSHKY_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/vabushky.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/vabushky", "updated_at": "2026-10-16" }, { "family": "vakcune", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_VAKCUNE_T1_ARTIFACT", "MALWARE_WIN_VAKCUNE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/vakcune.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/vakcune", "updated_at": "2026-10-16" }, { "family": "vake", "category": "ransomware", "sample_count": 2, "rule_names": [ "MALWARE_WIN_VAKE_T1_ARTIFACT", "MALWARE_WIN_VAKE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/vake.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/vake", "updated_at": "2026-10-16" }, { "family": "valcaryx", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_VALCARYX_T1_ARTIFACT", "MALWARE_WIN_VALCARYX_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/valcaryx.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/valcaryx", "updated_at": "2026-10-16" }, { "family": "vampire", "category": "trojan", "sample_count": 0, "rule_names": [ "MALWARE_WIN_VAMPIRE_T1_ARTIFACT", "MALWARE_WIN_VAMPIRE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/vampire.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/vampire", "updated_at": "2026-10-16" }, { "family": "vanbot", "category": "trojan", "sample_count": 3, "rule_names": [ "MALWARE_WIN_VANBOT_T1_ARTIFACT", "MALWARE_WIN_VANBOT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/vanbot.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/vanbot", "updated_at": "2026-10-16" }, { "family": "vanilloader", "category": "ransomware", "sample_count": 6, "rule_names": [ "MALWARE_WIN_VANILLOADER_T1_ARTIFACT", "MALWARE_WIN_VANILLOADER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/vanilloader.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/vanilloader", "updated_at": "2026-10-16" }, { "family": "vapsup", "category": "ransomware", "sample_count": 5, "rule_names": [ "MALWARE_WIN_VAPSUP_T1_ARTIFACT", "MALWARE_WIN_VAPSUP_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/vapsup.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/vapsup", "updated_at": "2026-10-16" }, { "family": "vawtrak", "category": "banking_trojan", "sample_count": 50, "rule_names": [ "MALWARE_WIN_VAWTRAK_T1_ARTIFACT", "MALWARE_WIN_VAWTRAK_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/vawtrak.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/vawtrak", "updated_at": "2026-10-16" }, { "family": "vbcheman", "category": "ransomware", "sample_count": 2, "rule_names": [ "MALWARE_WIN_VBCHEMAN_T1_ARTIFACT", "MALWARE_WIN_VBCHEMAN_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/vbcheman.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/vbcheman", "updated_at": "2026-10-16" }, { "family": "vbclone", "category": "trojan", "sample_count": 601, "rule_names": [ "MALWARE_WIN_VBCLONE_T1_ARTIFACT", "MALWARE_WIN_VBCLONE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/vbclone.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/vbclone", "updated_at": "2026-10-16" }, { "family": "vbcode", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_VBCODE_T1_ARTIFACT", "MALWARE_WIN_VBCODE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/vbcode.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/vbcode", "updated_at": "2026-10-16" }, { "family": "vbcryptent", "category": "trojan", "sample_count": 7, "rule_names": [ "MALWARE_WIN_VBCRYPTENT_T1_ARTIFACT", "MALWARE_WIN_VBCRYPTENT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/vbcryptent.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/vbcryptent", "updated_at": "2026-10-16" }, { "family": "vbcryptor", "category": "ransomware", "sample_count": 3, "rule_names": [ "MALWARE_WIN_VBCRYPTOR_T1_ARTIFACT", "MALWARE_WIN_VBCRYPTOR_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/vbcryptor.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/vbcryptor", "updated_at": "2026-10-16" }, { "family": "vbdrop", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_VBDROP_T1_ARTIFACT", "MALWARE_WIN_VBDROP_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/vbdrop.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/vbdrop", "updated_at": "2026-10-16" }, { "family": "vbinder", "category": "trojan", "sample_count": 5, "rule_names": [ "MALWARE_WIN_VBINDER_T1_ARTIFACT", "MALWARE_WIN_VBINDER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/vbinder.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/vbinder", "updated_at": "2026-10-16" }, { "family": "vbkeylog", "category": "advanced_threat", "sample_count": 1, "rule_names": [ "MALWARE_WIN_VBKEYLOG_T1_ARTIFACT", "MALWARE_WIN_VBKEYLOG_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/vbkeylog.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/vbkeylog", "updated_at": "2026-10-16" }, { "family": "vbklog", "category": "ransomware", "sample_count": 3, "rule_names": [ "MALWARE_WIN_VBKLOG_T1_ARTIFACT", "MALWARE_WIN_VBKLOG_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/vbklog.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/vbklog", "updated_at": "2026-10-16" }, { "family": "vbkryjetor", "category": "packer", "sample_count": 551, "rule_names": [ "MALWARE_WIN_VBKRYJETOR_T1_ARTIFACT", "MALWARE_WIN_VBKRYJETOR_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/vbkryjetor.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/vbkryjetor", "updated_at": "2026-10-16" }, { "family": "vbmod", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_VBMOD_T1_ARTIFACT", "MALWARE_WIN_VBMOD_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/vbmod.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/vbmod", "updated_at": "2026-10-16" }, { "family": "vbs_worm_generator", "category": "worm", "sample_count": 0, "rule_names": [ "MALWARE_WIN_VBS_WORM_GENERATOR_T1_ARTIFACT", "MALWARE_WIN_VBS_WORM_GENERATOR_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/vbs_worm_generator.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/vbs_worm_generator", "updated_at": "2026-10-16" }, { "family": "vedpoz", "category": "ransomware", "sample_count": 2, "rule_names": [ "MALWARE_WIN_VEDPOZ_T1_ARTIFACT", "MALWARE_WIN_VEDPOZ_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/vedpoz.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/vedpoz", "updated_at": "2026-10-16" }, { "family": "vehidis", "category": "ransomware", "sample_count": 15, "rule_names": [ "MALWARE_WIN_VEHIDIS_T1_ARTIFACT", "MALWARE_WIN_VEHIDIS_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/vehidis.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/vehidis", "updated_at": "2026-10-16" }, { "family": "veil", "category": "virtool", "sample_count": 19, "rule_names": [ "MALWARE_WIN_VEIL_T1_ARTIFACT", "MALWARE_WIN_VEIL_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/veil.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/veil", "updated_at": "2026-10-16" }, { "family": "veilev", "category": "ransomware", "sample_count": 3, "rule_names": [ "MALWARE_WIN_VEILEV_T1_ARTIFACT", "MALWARE_WIN_VEILEV_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/veilev.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/veilev", "updated_at": "2026-10-16" }, { "family": "vemply", "category": "ransomware", "sample_count": 26, "rule_names": [ "MALWARE_WIN_VEMPLY_T1_ARTIFACT", "MALWARE_WIN_VEMPLY_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/vemply.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/vemply", "updated_at": "2026-10-16" }, { "family": "vemptik", "category": "ransomware", "sample_count": 7, "rule_names": [ "MALWARE_WIN_VEMPTIK_T1_ARTIFACT", "MALWARE_WIN_VEMPTIK_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/vemptik.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/vemptik", "updated_at": "2026-10-16" }, { "family": "venik", "category": "ransomware", "sample_count": 6, "rule_names": [ "MALWARE_WIN_VENIK_T1_ARTIFACT", "MALWARE_WIN_VENIK_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/venik.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/venik", "updated_at": "2026-10-16" }, { "family": "verecno", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_VERECNO_T1_ARTIFACT", "MALWARE_WIN_VERECNO_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/verecno.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/verecno", "updated_at": "2026-10-16" }, { "family": "veriato", "category": "advanced_threat", "sample_count": 6, "rule_names": [ "MALWARE_WIN_VERIATO_T1_ARTIFACT", "MALWARE_WIN_VERIATO_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/veriato.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/veriato", "updated_at": "2026-10-16" }, { "family": "verti", "category": "advanced_threat", "sample_count": 2, "rule_names": [ "MALWARE_WIN_VERTI_T1_ARTIFACT", "MALWARE_WIN_VERTI_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/verti.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/verti", "updated_at": "2026-10-16" }, { "family": "vesenlosow", "category": "trojan", "sample_count": 1, "rule_names": [ "MALWARE_WIN_VESENLOSOW_T1_ARTIFACT", "MALWARE_WIN_VESENLOSOW_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/vesenlosow.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/vesenlosow", "updated_at": "2026-10-16" }, { "family": "vibem", "category": "ransomware", "sample_count": 7, "rule_names": [ "MALWARE_WIN_VIBEM_T1_ARTIFACT", "MALWARE_WIN_VIBEM_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/vibem.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/vibem", "updated_at": "2026-10-16" }, { "family": "vidar", "category": "infostealer", "sample_count": 1, "rule_names": [ "MALWARE_WIN_VIDAR_T1_ARTIFACT", "MALWARE_WIN_VIDAR_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/vidar.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/vidar", "updated_at": "2026-10-16" }, { "family": "vidarstealer", "category": "advanced_threat", "sample_count": 1, "rule_names": [ "MALWARE_WIN_VIDARSTEALER_T1_ARTIFACT", "MALWARE_WIN_VIDARSTEALER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/vidarstealer.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/vidarstealer", "updated_at": "2026-10-16" }, { "family": "viddyhd", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_VIDDYHD_T1_ARTIFACT", "MALWARE_WIN_VIDDYHD_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/viddyhd.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/viddyhd", "updated_at": "2026-10-16" }, { "family": "vidro", "category": "ransomware", "sample_count": 6, "rule_names": [ "MALWARE_WIN_VIDRO_T1_ARTIFACT", "MALWARE_WIN_VIDRO_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/vidro.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/vidro", "updated_at": "2026-10-16" }, { "family": "vigorf", "category": "trojan", "sample_count": 45, "rule_names": [ "MALWARE_WIN_VIGORF_T1_ARTIFACT", "MALWARE_WIN_VIGORF_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/vigorf.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/vigorf", "updated_at": "2026-10-16" }, { "family": "vigram", "category": "advanced_threat", "sample_count": 2, "rule_names": [ "MALWARE_WIN_VIGRAM_T1_ARTIFACT", "MALWARE_WIN_VIGRAM_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/vigram.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/vigram", "updated_at": "2026-10-16" }, { "family": "viking", "category": "file_infector", "sample_count": 175, "rule_names": [ "MALWARE_WIN_VIKING_T1_ARTIFACT", "MALWARE_WIN_VIKING_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/viking.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/viking", "updated_at": "2026-10-16" }, { "family": "vilsel", "category": "trojan", "sample_count": 74, "rule_names": [ "MALWARE_WIN_VILSEL_T1_ARTIFACT", "MALWARE_WIN_VILSEL_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/vilsel.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/vilsel", "updated_at": "2026-10-16" }, { "family": "vimditator", "category": "advanced_threat", "sample_count": 12, "rule_names": [ "MALWARE_WIN_VIMDITATOR_T1_ARTIFACT", "MALWARE_WIN_VIMDITATOR_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/vimditator.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/vimditator", "updated_at": "2026-10-16" }, { "family": "vindor", "category": "trojan", "sample_count": 63, "rule_names": [ "MALWARE_WIN_VINDOR_T1_ARTIFACT", "MALWARE_WIN_VINDOR_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/vindor.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/vindor", "updated_at": "2026-10-16" }, { "family": "virgilio", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_VIRGILIO_T1_ARTIFACT", "MALWARE_WIN_VIRGILIO_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/virgilio.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/virgilio", "updated_at": "2026-10-16" }, { "family": "virledi", "category": "trojan", "sample_count": 7, "rule_names": [ "MALWARE_WIN_VIRLEDI_T1_ARTIFACT", "MALWARE_WIN_VIRLEDI_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/virledi.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/virledi", "updated_at": "2026-10-16" }, { "family": "virlock", "category": "ransomware_file_infector", "sample_count": 3132, "rule_names": [ "MALWARE_WIN_VIRLOCK_T1_ARTIFACT", "MALWARE_WIN_VIRLOCK_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/virlock.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/virlock", "updated_at": "2026-10-16" }, { "family": "virtu", "category": "trojan", "sample_count": 8, "rule_names": [ "MALWARE_WIN_VIRTU_T1_ARTIFACT", "MALWARE_WIN_VIRTU_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/virtu.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/virtu", "updated_at": "2026-10-16" }, { "family": "virtum", "category": "ransomware", "sample_count": 2, "rule_names": [ "MALWARE_WIN_VIRTUM_T1_ARTIFACT", "MALWARE_WIN_VIRTUM_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/virtum.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/virtum", "updated_at": "2026-10-16" }, { "family": "virtumod", "category": "ransomware", "sample_count": 2, "rule_names": [ "MALWARE_WIN_VIRTUMOD_T1_ARTIFACT", "MALWARE_WIN_VIRTUMOD_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/virtumod.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/virtumod", "updated_at": "2026-10-16" }, { "family": "virtumonde", "category": "trojan", "sample_count": 2, "rule_names": [ "MALWARE_WIN_VIRTUMONDE_T1_ARTIFACT", "MALWARE_WIN_VIRTUMONDE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/virtumonde.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/virtumonde", "updated_at": "2026-10-16" }, { "family": "viruscure", "category": "ransomware", "sample_count": 2, "rule_names": [ "MALWARE_WIN_VIRUSCURE_T1_ARTIFACT", "MALWARE_WIN_VIRUSCURE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/viruscure.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/viruscure", "updated_at": "2026-10-16" }, { "family": "virut", "category": "file_infector", "sample_count": 1578, "rule_names": [ "MALWARE_WIN_VIRUT_T1_ARTIFACT", "MALWARE_WIN_VIRUT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/virut.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/virut", "updated_at": "2026-10-16" }, { "family": "visicom", "category": "advanced_threat", "sample_count": 7, "rule_names": [ "MALWARE_WIN_VISICOM_T1_ARTIFACT", "MALWARE_WIN_VISICOM_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/visicom.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/visicom", "updated_at": "2026-10-16" }, { "family": "vitro", "category": "trojan", "sample_count": 11, "rule_names": [ "MALWARE_WIN_VITRO_T1_ARTIFACT", "MALWARE_WIN_VITRO_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/vitro.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/vitro", "updated_at": "2026-10-16" }, { "family": "vitruvian", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_VITRUVIAN_T1_ARTIFACT", "MALWARE_WIN_VITRUVIAN_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/vitruvian.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/vitruvian", "updated_at": "2026-10-16" }, { "family": "vittalia", "category": "pua", "sample_count": 2965, "rule_names": [ "MALWARE_WIN_VITTALIA_T1_ARTIFACT", "MALWARE_WIN_VITTALIA_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/vittalia.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/vittalia", "updated_at": "2026-10-16" }, { "family": "vittaliaent", "category": "adware", "sample_count": 158, "rule_names": [ "MALWARE_WIN_VITTALIAENT_T1_ARTIFACT", "MALWARE_WIN_VITTALIAENT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/vittaliaent.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/vittaliaent", "updated_at": "2026-10-16" }, { "family": "vixenpanda", "category": "backdoor", "sample_count": 1, "rule_names": [ "MALWARE_WIN_VIXENPANDA_T1_ARTIFACT", "MALWARE_WIN_VIXENPANDA_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/vixenpanda.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/vixenpanda", "updated_at": "2026-10-16" }, { "family": "vixup", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_VIXUP_T1_ARTIFACT", "MALWARE_WIN_VIXUP_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/vixup.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/vixup", "updated_at": "2026-10-16" }, { "family": "vjworm", "category": "backdoor", "sample_count": 2, "rule_names": [ "MALWARE_WIN_VJWORM_T1_ARTIFACT", "MALWARE_WIN_VJWORM_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/vjworm.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/vjworm", "updated_at": "2026-10-16" }, { "family": "vkbase", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_VKBASE_T1_ARTIFACT", "MALWARE_WIN_VKBASE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/vkbase.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/vkbase", "updated_at": "2026-10-16" }, { "family": "vkdj", "category": "ransomware", "sample_count": 2, "rule_names": [ "MALWARE_WIN_VKDJ_T1_ARTIFACT", "MALWARE_WIN_VKDJ_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/vkdj.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/vkdj", "updated_at": "2026-10-16" }, { "family": "vkhost", "category": "trojan", "sample_count": 2, "rule_names": [ "MALWARE_WIN_VKHOST_T1_ARTIFACT", "MALWARE_WIN_VKHOST_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/vkhost.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/vkhost", "updated_at": "2026-10-16" }, { "family": "vkont", "category": "ransomware", "sample_count": 3, "rule_names": [ "MALWARE_WIN_VKONT_T1_ARTIFACT", "MALWARE_WIN_VKONT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/vkont.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/vkont", "updated_at": "2026-10-16" }, { "family": "vkontaktedj", "category": "adware", "sample_count": 15, "rule_names": [ "MALWARE_WIN_VKONTAKTEDJ_T1_ARTIFACT", "MALWARE_WIN_VKONTAKTEDJ_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/vkontaktedj.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/vkontaktedj", "updated_at": "2026-10-16" }, { "family": "vmjfbex4hpjj", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_VMJFBEX4HPJJ_T1_ARTIFACT", "MALWARE_WIN_VMJFBEX4HPJJ_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/vmjfbex4hpjj.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/vmjfbex4hpjj", "updated_at": "2026-10-16" }, { "family": "vmpbad", "category": "ransomware", "sample_count": 14, "rule_names": [ "MALWARE_WIN_VMPBAD_T1_ARTIFACT", "MALWARE_WIN_VMPBAD_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/vmpbad.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/vmpbad", "updated_at": "2026-10-16" }, { "family": "vmprotbad", "category": "trojan", "sample_count": 87, "rule_names": [ "MALWARE_WIN_VMPROTBAD_T1_ARTIFACT", "MALWARE_WIN_VMPROTBAD_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/vmprotbad.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/vmprotbad", "updated_at": "2026-10-16" }, { "family": "vobfus", "category": "worm", "sample_count": 1484, "rule_names": [ "MALWARE_WIN_VOBFUS_T1_ARTIFACT", "MALWARE_WIN_VOBFUS_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/vobfus.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/vobfus", "updated_at": "2026-10-16" }, { "family": "volt", "category": "trojan", "sample_count": 30, "rule_names": [ "MALWARE_WIN_VOLT_T1_ARTIFACT", "MALWARE_WIN_VOLT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/volt.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/volt", "updated_at": "2026-10-16" }, { "family": "vonteera", "category": "advanced_threat", "sample_count": 3, "rule_names": [ "MALWARE_WIN_VONTEERA_T1_ARTIFACT", "MALWARE_WIN_VONTEERA_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/vonteera.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/vonteera", "updated_at": "2026-10-16" }, { "family": "vools", "category": "ransomware", "sample_count": 16, "rule_names": [ "MALWARE_WIN_VOOLS_T1_ARTIFACT", "MALWARE_WIN_VOOLS_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/vools.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/vools", "updated_at": "2026-10-16" }, { "family": "vopackage", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_VOPACKAGE_T1_ARTIFACT", "MALWARE_WIN_VOPACKAGE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/vopackage.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/vopackage", "updated_at": "2026-10-16" }, { "family": "vopak", "category": "ransomware", "sample_count": 10, "rule_names": [ "MALWARE_WIN_VOPAK_T1_ARTIFACT", "MALWARE_WIN_VOPAK_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/vopak.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/vopak", "updated_at": "2026-10-16" }, { "family": "vortex", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_VORTEX_T1_ARTIFACT", "MALWARE_WIN_VORTEX_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/vortex.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/vortex", "updated_at": "2026-10-16" }, { "family": "vosteran", "category": "advanced_threat", "sample_count": 8, "rule_names": [ "MALWARE_WIN_VOSTERAN_T1_ARTIFACT", "MALWARE_WIN_VOSTERAN_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/vosteran.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/vosteran", "updated_at": "2026-10-16" }, { "family": "votchsys", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_VOTCHSYS_T1_ARTIFACT", "MALWARE_WIN_VOTCHSYS_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/votchsys.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/votchsys", "updated_at": "2026-10-16" }, { "family": "vprotect", "category": "advanced_threat", "sample_count": 2, "rule_names": [ "MALWARE_WIN_VPROTECT_T1_ARTIFACT", "MALWARE_WIN_VPROTECT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/vprotect.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/vprotect", "updated_at": "2026-10-16" }, { "family": "vrbrothers", "category": "advanced_threat", "sample_count": 11, "rule_names": [ "MALWARE_WIN_VRBROTHERS_T1_ARTIFACT", "MALWARE_WIN_VRBROTHERS_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/vrbrothers.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/vrbrothers", "updated_at": "2026-10-16" }, { "family": "vstoolbar", "category": "trojan", "sample_count": 1, "rule_names": [ "MALWARE_WIN_VSTOOLBAR_T1_ARTIFACT", "MALWARE_WIN_VSTOOLBAR_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/vstoolbar.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/vstoolbar", "updated_at": "2026-10-16" }, { "family": "vtflooder", "category": "pua_tool", "sample_count": 12150, "rule_names": [ "MALWARE_WIN_VTFLOODER_T1_ARTIFACT", "MALWARE_WIN_VTFLOODER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/vtflooder.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/vtflooder", "updated_at": "2026-10-16" }, { "family": "vtub", "category": "advanced_threat", "sample_count": 1, "rule_names": [ "MALWARE_WIN_VTUB_T1_ARTIFACT", "MALWARE_WIN_VTUB_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/vtub.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/vtub", "updated_at": "2026-10-16" }, { "family": "vucha", "category": "ransomware", "sample_count": 3, "rule_names": [ "MALWARE_WIN_VUCHA_T1_ARTIFACT", "MALWARE_WIN_VUCHA_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/vucha.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/vucha", "updated_at": "2026-10-16" }, { "family": "vundo", "category": "trojan", "sample_count": 70, "rule_names": [ "MALWARE_WIN_VUNDO_T1_ARTIFACT", "MALWARE_WIN_VUNDO_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/vundo.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/vundo", "updated_at": "2026-10-16" }, { "family": "vxidl", "category": "advanced_threat", "sample_count": 1, "rule_names": [ "MALWARE_WIN_VXIDL_T1_ARTIFACT", "MALWARE_WIN_VXIDL_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/vxidl.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/vxidl", "updated_at": "2026-10-16" }, { "family": "vz2au4dpceii", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_VZ2AU4DPCEII_T1_ARTIFACT", "MALWARE_WIN_VZ2AU4DPCEII_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/vz2au4dpceii.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/vz2au4dpceii", "updated_at": "2026-10-16" }, { "family": "w10tweak", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_W10TWEAK_T1_ARTIFACT", "MALWARE_WIN_W10TWEAK_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/w10tweak.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/w10tweak", "updated_at": "2026-10-16" }, { "family": "wabot", "category": "rat", "sample_count": 1185, "rule_names": [ "MALWARE_WIN_WABOT_T1_ARTIFACT", "MALWARE_WIN_WABOT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/wabot.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/wabot", "updated_at": "2026-10-16" }, { "family": "wadhrama", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_WADHRAMA_T1_ARTIFACT", "MALWARE_WIN_WADHRAMA_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/wadhrama.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/wadhrama", "updated_at": "2026-10-16" }, { "family": "wajam", "category": "adware", "sample_count": 131, "rule_names": [ "MALWARE_WIN_WAJAM_T1_ARTIFACT", "MALWARE_WIN_WAJAM_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/wajam.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/wajam", "updated_at": "2026-10-16" }, { "family": "wakme", "category": "trojan", "sample_count": 116, "rule_names": [ "MALWARE_WIN_WAKME_T1_ARTIFACT", "MALWARE_WIN_WAKME_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/wakme.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/wakme", "updated_at": "2026-10-16" }, { "family": "waldek", "category": "trojan", "sample_count": 65, "rule_names": [ "MALWARE_WIN_WALDEK_T1_ARTIFACT", "MALWARE_WIN_WALDEK_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/waldek.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/waldek", "updated_at": "2026-10-16" }, { "family": "walerlop", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_WALERLOP_T1_ARTIFACT", "MALWARE_WIN_WALERLOP_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/walerlop.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/walerlop", "updated_at": "2026-10-16" }, { "family": "wannacry", "category": "ransomware_worm", "sample_count": 4876, "rule_names": [ "MALWARE_WIN_WANNACRY_T1_ARTIFACT", "MALWARE_WIN_WANNACRY_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/wannacry.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/wannacry", "updated_at": "2026-10-16" }, { "family": "wansrog", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_WANSROG_T1_ARTIFACT", "MALWARE_WIN_WANSROG_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/wansrog.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/wansrog", "updated_at": "2026-10-16" }, { "family": "wapomi", "category": "worm_banker", "sample_count": 5191, "rule_names": [ "MALWARE_WIN_WAPOMI_T1_ARTIFACT", "MALWARE_WIN_WAPOMI_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/wapomi.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/wapomi", "updated_at": "2026-10-16" }, { "family": "warezov", "category": "worm", "sample_count": 55, "rule_names": [ "MALWARE_WIN_WAREZOV_T1_ARTIFACT", "MALWARE_WIN_WAREZOV_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/warezov.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/warezov", "updated_at": "2026-10-16" }, { "family": "wavipeg", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_WAVIPEG_T1_ARTIFACT", "MALWARE_WIN_WAVIPEG_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/wavipeg.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/wavipeg", "updated_at": "2026-10-16" }, { "family": "wdfload", "category": "advanced_threat", "sample_count": 358, "rule_names": [ "MALWARE_WIN_WDFLOAD_T1_ARTIFACT", "MALWARE_WIN_WDFLOAD_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/wdfload.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/wdfload", "updated_at": "2026-10-16" }, { "family": "wdjiange", "category": "ransomware", "sample_count": 20, "rule_names": [ "MALWARE_WIN_WDJIANGE_T1_ARTIFACT", "MALWARE_WIN_WDJIANGE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/wdjiange.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/wdjiange", "updated_at": "2026-10-16" }, { "family": "webalta", "category": "adware", "sample_count": 34, "rule_names": [ "MALWARE_WIN_WEBALTA_T1_ARTIFACT", "MALWARE_WIN_WEBALTA_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/webalta.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/webalta", "updated_at": "2026-10-16" }, { "family": "webaltatoolbar", "category": "advanced_threat", "sample_count": 1, "rule_names": [ "MALWARE_WIN_WEBALTATOOLBAR_T1_ARTIFACT", "MALWARE_WIN_WEBALTATOOLBAR_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/webaltatoolbar.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/webaltatoolbar", "updated_at": "2026-10-16" }, { "family": "webbrowserpassview", "category": "trojan", "sample_count": 1, "rule_names": [ "MALWARE_WIN_WEBBROWSERPASSVIEW_T1_ARTIFACT", "MALWARE_WIN_WEBBROWSERPASSVIEW_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/webbrowserpassview.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/webbrowserpassview", "updated_at": "2026-10-16" }, { "family": "webcompanion", "category": "advanced_threat", "sample_count": 13, "rule_names": [ "MALWARE_WIN_WEBCOMPANION_T1_ARTIFACT", "MALWARE_WIN_WEBCOMPANION_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/webcompanion.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/webcompanion", "updated_at": "2026-10-16" }, { "family": "webdevaz", "category": "trojan", "sample_count": 2, "rule_names": [ "MALWARE_WIN_WEBDEVAZ_T1_ARTIFACT", "MALWARE_WIN_WEBDEVAZ_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/webdevaz.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/webdevaz", "updated_at": "2026-10-16" }, { "family": "webdial", "category": "advanced_threat", "sample_count": 1, "rule_names": [ "MALWARE_WIN_WEBDIAL_T1_ARTIFACT", "MALWARE_WIN_WEBDIAL_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/webdial.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/webdial", "updated_at": "2026-10-16" }, { "family": "webdialer", "category": "advanced_threat", "sample_count": 2, "rule_names": [ "MALWARE_WIN_WEBDIALER_T1_ARTIFACT", "MALWARE_WIN_WEBDIALER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/webdialer.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/webdialer", "updated_at": "2026-10-16" }, { "family": "webdiscover", "category": "advanced_threat", "sample_count": 3, "rule_names": [ "MALWARE_WIN_WEBDISCOVER_T1_ARTIFACT", "MALWARE_WIN_WEBDISCOVER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/webdiscover.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/webdiscover", "updated_at": "2026-10-16" }, { "family": "webdown", "category": "ransomware", "sample_count": 12, "rule_names": [ "MALWARE_WIN_WEBDOWN_T1_ARTIFACT", "MALWARE_WIN_WEBDOWN_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/webdown.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/webdown", "updated_at": "2026-10-16" }, { "family": "webhat", "category": "ransomware", "sample_count": 2, "rule_names": [ "MALWARE_WIN_WEBHAT_T1_ARTIFACT", "MALWARE_WIN_WEBHAT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/webhat.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/webhat", "updated_at": "2026-10-16" }, { "family": "webisida", "category": "advanced_threat", "sample_count": 1, "rule_names": [ "MALWARE_WIN_WEBISIDA_T1_ARTIFACT", "MALWARE_WIN_WEBISIDA_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/webisida.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/webisida", "updated_at": "2026-10-16" }, { "family": "webprefix", "category": "advanced_threat", "sample_count": 3, "rule_names": [ "MALWARE_WIN_WEBPREFIX_T1_ARTIFACT", "MALWARE_WIN_WEBPREFIX_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/webprefix.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/webprefix", "updated_at": "2026-10-16" }, { "family": "websearch", "category": "adware", "sample_count": 26, "rule_names": [ "MALWARE_WIN_WEBSEARCH_T1_ARTIFACT", "MALWARE_WIN_WEBSEARCH_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/websearch.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/websearch", "updated_at": "2026-10-16" }, { "family": "webwatcher", "category": "spyware", "sample_count": 16, "rule_names": [ "MALWARE_WIN_WEBWATCHER_T1_ARTIFACT", "MALWARE_WIN_WEBWATCHER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/webwatcher.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/webwatcher", "updated_at": "2026-10-16" }, { "family": "wecod", "category": "trojan", "sample_count": 71, "rule_names": [ "MALWARE_WIN_WECOD_T1_ARTIFACT", "MALWARE_WIN_WECOD_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/wecod.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/wecod", "updated_at": "2026-10-16" }, { "family": "weenloc", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_WEENLOC_T1_ARTIFACT", "MALWARE_WIN_WEENLOC_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/weenloc.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/weenloc", "updated_at": "2026-10-16" }, { "family": "weiduan", "category": "ransomware", "sample_count": 4, "rule_names": [ "MALWARE_WIN_WEIDUAN_T1_ARTIFACT", "MALWARE_WIN_WEIDUAN_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/weiduan.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/weiduan", "updated_at": "2026-10-16" }, { "family": "wellmess", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_WELLMESS_T1_ARTIFACT", "MALWARE_WIN_WELLMESS_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/wellmess.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/wellmess", "updated_at": "2026-10-16" }, { "family": "wemosis", "category": "ransomware", "sample_count": 2, "rule_names": [ "MALWARE_WIN_WEMOSIS_T1_ARTIFACT", "MALWARE_WIN_WEMOSIS_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/wemosis.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/wemosis", "updated_at": "2026-10-16" }, { "family": "wenper", "category": "ransomware", "sample_count": 8, "rule_names": [ "MALWARE_WIN_WENPER_T1_ARTIFACT", "MALWARE_WIN_WENPER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/wenper.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/wenper", "updated_at": "2026-10-16" }, { "family": "werly", "category": "ransomware", "sample_count": 4, "rule_names": [ "MALWARE_WIN_WERLY_T1_ARTIFACT", "MALWARE_WIN_WERLY_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/werly.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/werly", "updated_at": "2026-10-16" }, { "family": "werpoapt", "category": "backdoor", "sample_count": 1, "rule_names": [ "MALWARE_WIN_WERPOAPT_T1_ARTIFACT", "MALWARE_WIN_WERPOAPT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/werpoapt.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/werpoapt", "updated_at": "2026-10-16" }, { "family": "wews", "category": "exploit", "sample_count": 111, "rule_names": [ "MALWARE_WIN_WEWS_T1_ARTIFACT", "MALWARE_WIN_WEWS_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/wews.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/wews", "updated_at": "2026-10-16" }, { "family": "wfpdisabler", "category": "trojan", "sample_count": 1, "rule_names": [ "MALWARE_WIN_WFPDISABLER_T1_ARTIFACT", "MALWARE_WIN_WFPDISABLER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/wfpdisabler.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/wfpdisabler", "updated_at": "2026-10-16" }, { "family": "wgapatch", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_WGAPATCH_T1_ARTIFACT", "MALWARE_WIN_WGAPATCH_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/wgapatch.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/wgapatch", "updated_at": "2026-10-16" }, { "family": "whenu", "category": "advanced_threat", "sample_count": 1, "rule_names": [ "MALWARE_WIN_WHENU_T1_ARTIFACT", "MALWARE_WIN_WHENU_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/whenu.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/whenu", "updated_at": "2026-10-16" }, { "family": "whimoo", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_WHIMOO_T1_ARTIFACT", "MALWARE_WIN_WHIMOO_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/whimoo.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/whimoo", "updated_at": "2026-10-16" }, { "family": "whiteclick", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_WHITECLICK_T1_ARTIFACT", "MALWARE_WIN_WHITECLICK_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/whiteclick.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/whiteclick", "updated_at": "2026-10-16" }, { "family": "whiteice", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_WHITEICE_T1_ARTIFACT", "MALWARE_WIN_WHITEICE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/whiteice.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/whiteice", "updated_at": "2026-10-16" }, { "family": "wi0abyrjybki", "category": "trojan", "sample_count": 1, "rule_names": [ "MALWARE_WIN_WI0ABYRJYBKI_T1_ARTIFACT", "MALWARE_WIN_WI0ABYRJYBKI_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/wi0abyrjybki.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/wi0abyrjybki", "updated_at": "2026-10-16" }, { "family": "widdit", "category": "advanced_threat", "sample_count": 4, "rule_names": [ "MALWARE_WIN_WIDDIT_T1_ARTIFACT", "MALWARE_WIN_WIDDIT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/widdit.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/widdit", "updated_at": "2026-10-16" }, { "family": "widgi", "category": "advanced_threat", "sample_count": 13, "rule_names": [ "MALWARE_WIN_WIDGI_T1_ARTIFACT", "MALWARE_WIN_WIDGI_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/widgi.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/widgi", "updated_at": "2026-10-16" }, { "family": "wigon", "category": "ransomware", "sample_count": 5, "rule_names": [ "MALWARE_WIN_WIGON_T1_ARTIFACT", "MALWARE_WIN_WIGON_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/wigon.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/wigon", "updated_at": "2026-10-16" }, { "family": "wiliky", "category": "ransomware", "sample_count": 2, "rule_names": [ "MALWARE_WIN_WILIKY_T1_ARTIFACT", "MALWARE_WIN_WILIKY_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/wiliky.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/wiliky", "updated_at": "2026-10-16" }, { "family": "winactivator", "category": "pua_tool", "sample_count": 409, "rule_names": [ "MALWARE_WIN_WINACTIVATOR_T1_ARTIFACT", "MALWARE_WIN_WINACTIVATOR_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/winactivator.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/winactivator", "updated_at": "2026-10-16" }, { "family": "windang", "category": "trojan", "sample_count": 1, "rule_names": [ "MALWARE_WIN_WINDANG_T1_ARTIFACT", "MALWARE_WIN_WINDANG_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/windang.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/windang", "updated_at": "2026-10-16" }, { "family": "windapp", "category": "ransomware", "sample_count": 2, "rule_names": [ "MALWARE_WIN_WINDAPP_T1_ARTIFACT", "MALWARE_WIN_WINDAPP_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/windapp.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/windapp", "updated_at": "2026-10-16" }, { "family": "winemm", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_WINEMM_T1_ARTIFACT", "MALWARE_WIN_WINEMM_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/winemm.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/winemm", "updated_at": "2026-10-16" }, { "family": "winevar", "category": "trojan", "sample_count": 5, "rule_names": [ "MALWARE_WIN_WINEVAR_T1_ARTIFACT", "MALWARE_WIN_WINEVAR_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/winevar.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/winevar", "updated_at": "2026-10-16" }, { "family": "winexe", "category": "advanced_threat", "sample_count": 2, "rule_names": [ "MALWARE_WIN_WINEXE_T1_ARTIFACT", "MALWARE_WIN_WINEXE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/winexe.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/winexe", "updated_at": "2026-10-16" }, { "family": "winexec", "category": "ransomware", "sample_count": 2, "rule_names": [ "MALWARE_WIN_WINEXEC_T1_ARTIFACT", "MALWARE_WIN_WINEXEC_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/winexec.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/winexec", "updated_at": "2026-10-16" }, { "family": "winiga", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_WINIGA_T1_ARTIFACT", "MALWARE_WIN_WINIGA_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/winiga.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/winiga", "updated_at": "2026-10-16" }, { "family": "winload", "category": "ransomware", "sample_count": 2, "rule_names": [ "MALWARE_WIN_WINLOAD_T1_ARTIFACT", "MALWARE_WIN_WINLOAD_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/winload.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/winload", "updated_at": "2026-10-16" }, { "family": "winloadsda", "category": "trojan_downloader", "sample_count": 14, "rule_names": [ "MALWARE_WIN_WINLOADSDA_T1_ARTIFACT", "MALWARE_WIN_WINLOADSDA_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/winloadsda.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/winloadsda", "updated_at": "2026-10-16" }, { "family": "winlock", "category": "ransomware", "sample_count": 20, "rule_names": [ "MALWARE_WIN_WINLOCK_T1_ARTIFACT", "MALWARE_WIN_WINLOCK_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/winlock.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/winlock", "updated_at": "2026-10-16" }, { "family": "winner", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_WINNER_T1_ARTIFACT", "MALWARE_WIN_WINNER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/winner.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/winner", "updated_at": "2026-10-16" }, { "family": "winnti", "category": "backdoor", "sample_count": 2, "rule_names": [ "MALWARE_WIN_WINNTI_T1_ARTIFACT", "MALWARE_WIN_WINNTI_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/winnti.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/winnti", "updated_at": "2026-10-16" }, { "family": "winreg", "category": "trojan", "sample_count": 8, "rule_names": [ "MALWARE_WIN_WINREG_T1_ARTIFACT", "MALWARE_WIN_WINREG_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/winreg.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/winreg", "updated_at": "2026-10-16" }, { "family": "winsecsrv", "category": "trojan", "sample_count": 45, "rule_names": [ "MALWARE_WIN_WINSECSRV_T1_ARTIFACT", "MALWARE_WIN_WINSECSRV_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/winsecsrv.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/winsecsrv", "updated_at": "2026-10-16" }, { "family": "winshell", "category": "trojan", "sample_count": 1, "rule_names": [ "MALWARE_WIN_WINSHELL_T1_ARTIFACT", "MALWARE_WIN_WINSHELL_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/winshell.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/winshell", "updated_at": "2026-10-16" }, { "family": "winshow", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_WINSHOW_T1_ARTIFACT", "MALWARE_WIN_WINSHOW_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/winshow.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/winshow", "updated_at": "2026-10-16" }, { "family": "winspeedup", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_WINSPEEDUP_T1_ARTIFACT", "MALWARE_WIN_WINSPEEDUP_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/winspeedup.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/winspeedup", "updated_at": "2026-10-16" }, { "family": "winspy", "category": "advanced_threat", "sample_count": 5, "rule_names": [ "MALWARE_WIN_WINSPY_T1_ARTIFACT", "MALWARE_WIN_WINSPY_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/winspy.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/winspy", "updated_at": "2026-10-16" }, { "family": "wintaskad", "category": "advanced_threat", "sample_count": 1, "rule_names": [ "MALWARE_WIN_WINTASKAD_T1_ARTIFACT", "MALWARE_WIN_WINTASKAD_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/wintaskad.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/wintaskad", "updated_at": "2026-10-16" }, { "family": "wintrim", "category": "trojan", "sample_count": 5, "rule_names": [ "MALWARE_WIN_WINTRIM_T1_ARTIFACT", "MALWARE_WIN_WINTRIM_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/wintrim.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/wintrim", "updated_at": "2026-10-16" }, { "family": "winvnc", "category": "backdoor", "sample_count": 8, "rule_names": [ "MALWARE_WIN_WINVNC_T1_ARTIFACT", "MALWARE_WIN_WINVNC_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/winvnc.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/winvnc", "updated_at": "2026-10-16" }, { "family": "winwebsec", "category": "rogueware", "sample_count": 17, "rule_names": [ "MALWARE_WIN_WINWEBSEC_T1_ARTIFACT", "MALWARE_WIN_WINWEBSEC_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/winwebsec.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/winwebsec", "updated_at": "2026-10-16" }, { "family": "winwrapper", "category": "pua_tool", "sample_count": 296, "rule_names": [ "MALWARE_WIN_WINWRAPPER_T1_ARTIFACT", "MALWARE_WIN_WINWRAPPER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/winwrapper.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/winwrapper", "updated_at": "2026-10-16" }, { "family": "wirelessnetview", "category": "trojan", "sample_count": 1, "rule_names": [ "MALWARE_WIN_WIRELESSNETVIEW_T1_ARTIFACT", "MALWARE_WIN_WIRELESSNETVIEW_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/wirelessnetview.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/wirelessnetview", "updated_at": "2026-10-16" }, { "family": "wirzemro", "category": "ransomware", "sample_count": 9, "rule_names": [ "MALWARE_WIN_WIRZEMRO_T1_ARTIFACT", "MALWARE_WIN_WIRZEMRO_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/wirzemro.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/wirzemro", "updated_at": "2026-10-16" }, { "family": "wisbipuf", "category": "trojan", "sample_count": 1, "rule_names": [ "MALWARE_WIN_WISBIPUF_T1_ARTIFACT", "MALWARE_WIN_WISBIPUF_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/wisbipuf.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/wisbipuf", "updated_at": "2026-10-16" }, { "family": "wisesystemmechanic", "category": "advanced_threat", "sample_count": 1, "rule_names": [ "MALWARE_WIN_WISESYSTEMMECHANIC_T1_ARTIFACT", "MALWARE_WIN_WISESYSTEMMECHANIC_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/wisesystemmechanic.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/wisesystemmechanic", "updated_at": "2026-10-16" }, { "family": "wizrem", "category": "trojan", "sample_count": 162, "rule_names": [ "MALWARE_WIN_WIZREM_T1_ARTIFACT", "MALWARE_WIN_WIZREM_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/wizrem.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/wizrem", "updated_at": "2026-10-16" }, { "family": "wizzmonetize", "category": "adware", "sample_count": 515, "rule_names": [ "MALWARE_WIN_WIZZMONETIZE_T1_ARTIFACT", "MALWARE_WIN_WIZZMONETIZE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/wizzmonetize.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/wizzmonetize", "updated_at": "2026-10-16" }, { "family": "wlock", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_WLOCK_T1_ARTIFACT", "MALWARE_WIN_WLOCK_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/wlock.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/wlock", "updated_at": "2026-10-16" }, { "family": "wmfap", "category": "advanced_threat", "sample_count": 1, "rule_names": [ "MALWARE_WIN_WMFAP_T1_ARTIFACT", "MALWARE_WIN_WMFAP_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/wmfap.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/wmfap", "updated_at": "2026-10-16" }, { "family": "wmqarhe5p8fbt", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_WMQARHE5P8FBT_T1_ARTIFACT", "MALWARE_WIN_WMQARHE5P8FBT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/wmqarhe5p8fbt.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/wmqarhe5p8fbt", "updated_at": "2026-10-16" }, { "family": "wombat", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_WOMBAT_T1_ARTIFACT", "MALWARE_WIN_WOMBAT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/wombat.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/wombat", "updated_at": "2026-10-16" }, { "family": "woool", "category": "trojan", "sample_count": 3, "rule_names": [ "MALWARE_WIN_WOOOL_T1_ARTIFACT", "MALWARE_WIN_WOOOL_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/woool.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/woool", "updated_at": "2026-10-16" }, { "family": "wootbot", "category": "advanced_threat", "sample_count": 2, "rule_names": [ "MALWARE_WIN_WOOTBOT_T1_ARTIFACT", "MALWARE_WIN_WOOTBOT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/wootbot.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/wootbot", "updated_at": "2026-10-16" }, { "family": "woozlist", "category": "browser_modifier", "sample_count": 14, "rule_names": [ "MALWARE_WIN_WOOZLIST_T1_ARTIFACT", "MALWARE_WIN_WOOZLIST_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/woozlist.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/woozlist", "updated_at": "2026-10-16" }, { "family": "woripecs", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_WORIPECS_T1_ARTIFACT", "MALWARE_WIN_WORIPECS_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/woripecs.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/woripecs", "updated_at": "2026-10-16" }, { "family": "wowlik", "category": "adware", "sample_count": 39, "rule_names": [ "MALWARE_WIN_WOWLIK_T1_ARTIFACT", "MALWARE_WIN_WOWLIK_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/wowlik.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/wowlik", "updated_at": "2026-10-16" }, { "family": "wpakill", "category": "advanced_threat", "sample_count": 2, "rule_names": [ "MALWARE_WIN_WPAKILL_T1_ARTIFACT", "MALWARE_WIN_WPAKILL_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/wpakill.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/wpakill", "updated_at": "2026-10-16" }, { "family": "wpepro", "category": "advanced_threat", "sample_count": 3, "rule_names": [ "MALWARE_WIN_WPEPRO_T1_ARTIFACT", "MALWARE_WIN_WPEPRO_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/wpepro.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/wpepro", "updated_at": "2026-10-16" }, { "family": "wrar", "category": "trojan", "sample_count": 1, "rule_names": [ "MALWARE_WIN_WRAR_T1_ARTIFACT", "MALWARE_WIN_WRAR_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/wrar.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/wrar", "updated_at": "2026-10-16" }, { "family": "wraut", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_WRAUT_T1_ARTIFACT", "MALWARE_WIN_WRAUT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/wraut.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/wraut", "updated_at": "2026-10-16" }, { "family": "writos", "category": "ransomware", "sample_count": 2, "rule_names": [ "MALWARE_WIN_WRITOS_T1_ARTIFACT", "MALWARE_WIN_WRITOS_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/writos.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/writos", "updated_at": "2026-10-16" }, { "family": "wronginf", "category": "rogue_antivirus", "sample_count": 99, "rule_names": [ "MALWARE_WIN_WRONGINF_T1_ARTIFACT", "MALWARE_WIN_WRONGINF_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/wronginf.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/wronginf", "updated_at": "2026-10-16" }, { "family": "wsgame", "category": "infostealer", "sample_count": 15, "rule_names": [ "MALWARE_WIN_WSGAME_T1_ARTIFACT", "MALWARE_WIN_WSGAME_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/wsgame.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/wsgame", "updated_at": "2026-10-16" }, { "family": "wswhacker", "category": "trojan", "sample_count": 1, "rule_names": [ "MALWARE_WIN_WSWHACKER_T1_ARTIFACT", "MALWARE_WIN_WSWHACKER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/wswhacker.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/wswhacker", "updated_at": "2026-10-16" }, { "family": "wuca", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_WUCA_T1_ARTIFACT", "MALWARE_WIN_WUCA_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/wuca.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/wuca", "updated_at": "2026-10-16" }, { "family": "wuji", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_WUJI_T1_ARTIFACT", "MALWARE_WIN_WUJI_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/wuji.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/wuji", "updated_at": "2026-10-16" }, { "family": "wyhymyz", "category": "ransomware", "sample_count": 8, "rule_names": [ "MALWARE_WIN_WYHYMYZ_T1_ARTIFACT", "MALWARE_WIN_WYHYMYZ_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/wyhymyz.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/wyhymyz", "updated_at": "2026-10-16" }, { "family": "xanfpezes", "category": "ransomware", "sample_count": 2, "rule_names": [ "MALWARE_WIN_XANFPEZES_T1_ARTIFACT", "MALWARE_WIN_XANFPEZES_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/xanfpezes.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/xanfpezes", "updated_at": "2026-10-16" }, { "family": "xcomp", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_XCOMP_T1_ARTIFACT", "MALWARE_WIN_XCOMP_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/xcomp.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/xcomp", "updated_at": "2026-10-16" }, { "family": "xdata", "category": "ransomware", "sample_count": 4, "rule_names": [ "MALWARE_WIN_XDATA_T1_ARTIFACT", "MALWARE_WIN_XDATA_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/xdata.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/xdata", "updated_at": "2026-10-16" }, { "family": "xdisccorp", "category": "ransomware", "sample_count": 2, "rule_names": [ "MALWARE_WIN_XDISCCORP_T1_ARTIFACT", "MALWARE_WIN_XDISCCORP_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/xdisccorp.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/xdisccorp", "updated_at": "2026-10-16" }, { "family": "xetapp", "category": "adware", "sample_count": 27, "rule_names": [ "MALWARE_WIN_XETAPP_T1_ARTIFACT", "MALWARE_WIN_XETAPP_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/xetapp.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/xetapp", "updated_at": "2026-10-16" }, { "family": "xiaoba", "category": "ransomware", "sample_count": 2, "rule_names": [ "MALWARE_WIN_XIAOBA_T1_ARTIFACT", "MALWARE_WIN_XIAOBA_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/xiaoba.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/xiaoba", "updated_at": "2026-10-16" }, { "family": "xiaobaminer", "category": "trojan", "sample_count": 1, "rule_names": [ "MALWARE_WIN_XIAOBAMINER_T1_ARTIFACT", "MALWARE_WIN_XIAOBAMINER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/xiaobaminer.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/xiaobaminer", "updated_at": "2026-10-16" }, { "family": "xiaoxiong", "category": "advanced_threat", "sample_count": 2, "rule_names": [ "MALWARE_WIN_XIAOXIONG_T1_ARTIFACT", "MALWARE_WIN_XIAOXIONG_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/xiaoxiong.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/xiaoxiong", "updated_at": "2026-10-16" }, { "family": "xiazai", "category": "ransomware", "sample_count": 4, "rule_names": [ "MALWARE_WIN_XIAZAI_T1_ARTIFACT", "MALWARE_WIN_XIAZAI_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/xiazai.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/xiazai", "updated_at": "2026-10-16" }, { "family": "xiclog", "category": "backdoor", "sample_count": 44, "rule_names": [ "MALWARE_WIN_XICLOG_T1_ARTIFACT", "MALWARE_WIN_XICLOG_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/xiclog.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/xiclog", "updated_at": "2026-10-16" }, { "family": "xihet", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_XIHET_T1_ARTIFACT", "MALWARE_WIN_XIHET_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/xihet.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/xihet", "updated_at": "2026-10-16" }, { "family": "xiquitir", "category": "ransomware", "sample_count": 2, "rule_names": [ "MALWARE_WIN_XIQUITIR_T1_ARTIFACT", "MALWARE_WIN_XIQUITIR_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/xiquitir.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/xiquitir", "updated_at": "2026-10-16" }, { "family": "xizfawwyz0ab", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_XIZFAWWYZ0AB_T1_ARTIFACT", "MALWARE_WIN_XIZFAWWYZ0AB_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/xizfawwyz0ab.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/xizfawwyz0ab", "updated_at": "2026-10-16" }, { "family": "xkit", "category": "ransomware", "sample_count": 2, "rule_names": [ "MALWARE_WIN_XKIT_T1_ARTIFACT", "MALWARE_WIN_XKIT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/xkit.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/xkit", "updated_at": "2026-10-16" }, { "family": "xmgfa0ysjgki", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_XMGFA0YSJGKI_T1_ARTIFACT", "MALWARE_WIN_XMGFA0YSJGKI_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/xmgfa0ysjgki.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/xmgfa0ysjgki", "updated_at": "2026-10-16" }, { "family": "xmgfbs8lpqoib", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_XMGFBS8LPQOIB_T1_ARTIFACT", "MALWARE_WIN_XMGFBS8LPQOIB_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/xmgfbs8lpqoib.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/xmgfbs8lpqoib", "updated_at": "2026-10-16" }, { "family": "xmrig", "category": "cryptominer", "sample_count": 248, "rule_names": [ "MALWARE_WIN_XMRIG_T1_ARTIFACT", "MALWARE_WIN_XMRIG_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/xmrig.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/xmrig", "updated_at": "2026-10-16" }, { "family": "xmrigminer", "category": "advanced_threat", "sample_count": 2, "rule_names": [ "MALWARE_WIN_XMRIGMINER_T1_ARTIFACT", "MALWARE_WIN_XMRIGMINER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/xmrigminer.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/xmrigminer", "updated_at": "2026-10-16" }, { "family": "xmrminer", "category": "trojan", "sample_count": 1, "rule_names": [ "MALWARE_WIN_XMRMINER_T1_ARTIFACT", "MALWARE_WIN_XMRMINER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/xmrminer.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/xmrminer", "updated_at": "2026-10-16" }, { "family": "xnhmeb", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_XNHMEB_T1_ARTIFACT", "MALWARE_WIN_XNHMEB_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/xnhmeb.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/xnhmeb", "updated_at": "2026-10-16" }, { "family": "xorala", "category": "ransomware", "sample_count": 3, "rule_names": [ "MALWARE_WIN_XORALA_T1_ARTIFACT", "MALWARE_WIN_XORALA_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/xorala.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/xorala", "updated_at": "2026-10-16" }, { "family": "xorer", "category": "worm", "sample_count": 25, "rule_names": [ "MALWARE_WIN_XORER_T1_ARTIFACT", "MALWARE_WIN_XORER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/xorer.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/xorer", "updated_at": "2026-10-16" }, { "family": "xorist", "category": "ransomware", "sample_count": 15, "rule_names": [ "MALWARE_WIN_XORIST_T1_ARTIFACT", "MALWARE_WIN_XORIST_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/xorist.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/xorist", "updated_at": "2026-10-16" }, { "family": "xorpix", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_XORPIX_T1_ARTIFACT", "MALWARE_WIN_XORPIX_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/xorpix.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/xorpix", "updated_at": "2026-10-16" }, { "family": "xpaj", "category": "file_infector", "sample_count": 14, "rule_names": [ "MALWARE_WIN_XPAJ_T1_ARTIFACT", "MALWARE_WIN_XPAJ_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/xpaj.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/xpaj", "updated_at": "2026-10-16" }, { "family": "xpun", "category": "ransomware", "sample_count": 2, "rule_names": [ "MALWARE_WIN_XPUN_T1_ARTIFACT", "MALWARE_WIN_XPUN_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/xpun.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/xpun", "updated_at": "2026-10-16" }, { "family": "xpyn", "category": "ransomware", "sample_count": 6, "rule_names": [ "MALWARE_WIN_XPYN_T1_ARTIFACT", "MALWARE_WIN_XPYN_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/xpyn.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/xpyn", "updated_at": "2026-10-16" }, { "family": "xrat", "category": "trojan", "sample_count": 4, "rule_names": [ "MALWARE_WIN_XRAT_T1_ARTIFACT", "MALWARE_WIN_XRAT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/xrat.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/xrat", "updated_at": "2026-10-16" }, { "family": "xscan", "category": "advanced_threat", "sample_count": 1, "rule_names": [ "MALWARE_WIN_XSCAN_T1_ARTIFACT", "MALWARE_WIN_XSCAN_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/xscan.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/xscan", "updated_at": "2026-10-16" }, { "family": "xtrat", "category": "rat", "sample_count": 35969, "rule_names": [ "MALWARE_WIN_XTRAT_T1_ARTIFACT", "MALWARE_WIN_XTRAT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/xtrat.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/xtrat", "updated_at": "2026-10-16" }, { "family": "xundlldl", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_XUNDLLDL_T1_ARTIFACT", "MALWARE_WIN_XUNDLLDL_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/xundlldl.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/xundlldl", "updated_at": "2026-10-16" }, { "family": "xunleihd", "category": "advanced_threat", "sample_count": 2, "rule_names": [ "MALWARE_WIN_XUNLEIHD_T1_ARTIFACT", "MALWARE_WIN_XUNLEIHD_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/xunleihd.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/xunleihd", "updated_at": "2026-10-16" }, { "family": "xxybsq", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_XXYBSQ_T1_ARTIFACT", "MALWARE_WIN_XXYBSQ_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/xxybsq.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/xxybsq", "updated_at": "2026-10-16" }, { "family": "xxybss", "category": "trojan", "sample_count": 1, "rule_names": [ "MALWARE_WIN_XXYBSS_T1_ARTIFACT", "MALWARE_WIN_XXYBSS_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/xxybss.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/xxybss", "updated_at": "2026-10-16" }, { "family": "xxybtw", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_XXYBTW_T1_ARTIFACT", "MALWARE_WIN_XXYBTW_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/xxybtw.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/xxybtw", "updated_at": "2026-10-16" }, { "family": "xxybuj", "category": "trojan", "sample_count": 1, "rule_names": [ "MALWARE_WIN_XXYBUJ_T1_ARTIFACT", "MALWARE_WIN_XXYBUJ_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/xxybuj.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/xxybuj", "updated_at": "2026-10-16" }, { "family": "xxybvi", "category": "trojan", "sample_count": 1, "rule_names": [ "MALWARE_WIN_XXYBVI_T1_ARTIFACT", "MALWARE_WIN_XXYBVI_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/xxybvi.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/xxybvi", "updated_at": "2026-10-16" }, { "family": "xxybwe", "category": "trojan", "sample_count": 1, "rule_names": [ "MALWARE_WIN_XXYBWE_T1_ARTIFACT", "MALWARE_WIN_XXYBWE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/xxybwe.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/xxybwe", "updated_at": "2026-10-16" }, { "family": "xxybyu", "category": "trojan", "sample_count": 1, "rule_names": [ "MALWARE_WIN_XXYBYU_T1_ARTIFACT", "MALWARE_WIN_XXYBYU_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/xxybyu.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/xxybyu", "updated_at": "2026-10-16" }, { "family": "xxybzx", "category": "trojan", "sample_count": 1, "rule_names": [ "MALWARE_WIN_XXYBZX_T1_ARTIFACT", "MALWARE_WIN_XXYBZX_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/xxybzx.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/xxybzx", "updated_at": "2026-10-16" }, { "family": "xxycbl", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_XXYCBL_T1_ARTIFACT", "MALWARE_WIN_XXYCBL_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/xxycbl.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/xxycbl", "updated_at": "2026-10-16" }, { "family": "xxycdl", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_XXYCDL_T1_ARTIFACT", "MALWARE_WIN_XXYCDL_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/xxycdl.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/xxycdl", "updated_at": "2026-10-16" }, { "family": "xxycec", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_XXYCEC_T1_ARTIFACT", "MALWARE_WIN_XXYCEC_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/xxycec.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/xxycec", "updated_at": "2026-10-16" }, { "family": "xxycff", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_XXYCFF_T1_ARTIFACT", "MALWARE_WIN_XXYCFF_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/xxycff.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/xxycff", "updated_at": "2026-10-16" }, { "family": "xxychs", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_XXYCHS_T1_ARTIFACT", "MALWARE_WIN_XXYCHS_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/xxychs.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/xxychs", "updated_at": "2026-10-16" }, { "family": "xxyeut", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_XXYEUT_T1_ARTIFACT", "MALWARE_WIN_XXYEUT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/xxyeut.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/xxyeut", "updated_at": "2026-10-16" }, { "family": "xxyfhz", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_XXYFHZ_T1_ARTIFACT", "MALWARE_WIN_XXYFHZ_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/xxyfhz.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/xxyfhz", "updated_at": "2026-10-16" }, { "family": "xxyheo", "category": "ransomware", "sample_count": 2, "rule_names": [ "MALWARE_WIN_XXYHEO_T1_ARTIFACT", "MALWARE_WIN_XXYHEO_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/xxyheo.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/xxyheo", "updated_at": "2026-10-16" }, { "family": "xylauncher", "category": "ransomware", "sample_count": 4, "rule_names": [ "MALWARE_WIN_XYLAUNCHER_T1_ARTIFACT", "MALWARE_WIN_XYLAUNCHER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/xylauncher.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/xylauncher", "updated_at": "2026-10-16" }, { "family": "xyligan", "category": "ransomware", "sample_count": 3, "rule_names": [ "MALWARE_WIN_XYLIGAN_T1_ARTIFACT", "MALWARE_WIN_XYLIGAN_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/xyligan.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/xyligan", "updated_at": "2026-10-16" }, { "family": "xyntservice", "category": "advanced_threat", "sample_count": 1, "rule_names": [ "MALWARE_WIN_XYNTSERVICE_T1_ARTIFACT", "MALWARE_WIN_XYNTSERVICE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/xyntservice.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/xyntservice", "updated_at": "2026-10-16" }, { "family": "y3k_rat", "category": "trojan", "sample_count": 0, "rule_names": [ "MALWARE_WIN_Y3K_RAT_T1_ARTIFACT", "MALWARE_WIN_Y3K_RAT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/y3k_rat.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/y3k_rat", "updated_at": "2026-10-16" }, { "family": "yabinder", "category": "ransomware", "sample_count": 2, "rule_names": [ "MALWARE_WIN_YABINDER_T1_ARTIFACT", "MALWARE_WIN_YABINDER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/yabinder.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/yabinder", "updated_at": "2026-10-16" }, { "family": "yahlover", "category": "advanced_threat", "sample_count": 7, "rule_names": [ "MALWARE_WIN_YAHLOVER_T1_ARTIFACT", "MALWARE_WIN_YAHLOVER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/yahlover.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/yahlover", "updated_at": "2026-10-16" }, { "family": "yahoopass", "category": "trojan", "sample_count": 2, "rule_names": [ "MALWARE_WIN_YAHOOPASS_T1_ARTIFACT", "MALWARE_WIN_YAHOOPASS_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/yahoopass.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/yahoopass", "updated_at": "2026-10-16" }, { "family": "yakbeex", "category": "ransomware", "sample_count": 4, "rule_names": [ "MALWARE_WIN_YAKBEEX_T1_ARTIFACT", "MALWARE_WIN_YAKBEEX_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/yakbeex.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/yakbeex", "updated_at": "2026-10-16" }, { "family": "yakes", "category": "trojan", "sample_count": 751, "rule_names": [ "MALWARE_WIN_YAKES_T1_ARTIFACT", "MALWARE_WIN_YAKES_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/yakes.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/yakes", "updated_at": "2026-10-16" }, { "family": "yantai", "category": "trojan_downloader", "sample_count": 15, "rule_names": [ "MALWARE_WIN_YANTAI_T1_ARTIFACT", "MALWARE_WIN_YANTAI_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/yantai.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/yantai", "updated_at": "2026-10-16" }, { "family": "yelloader", "category": "trojan_downloader", "sample_count": 30, "rule_names": [ "MALWARE_WIN_YELLOADER_T1_ARTIFACT", "MALWARE_WIN_YELLOADER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/yelloader.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/yelloader", "updated_at": "2026-10-16" }, { "family": "yiwanzhushou", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_YIWANZHUSHOU_T1_ARTIFACT", "MALWARE_WIN_YIWANZHUSHOU_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/yiwanzhushou.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/yiwanzhushou", "updated_at": "2026-10-16" }, { "family": "ymkfawdgfnmi", "category": "trojan", "sample_count": 1, "rule_names": [ "MALWARE_WIN_YMKFAWDGFNMI_T1_ARTIFACT", "MALWARE_WIN_YMKFAWDGFNMI_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/ymkfawdgfnmi.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/ymkfawdgfnmi", "updated_at": "2026-10-16" }, { "family": "yobdam", "category": "ransomware", "sample_count": 2, "rule_names": [ "MALWARE_WIN_YOBDAM_T1_ARTIFACT", "MALWARE_WIN_YOBDAM_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/yobdam.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/yobdam", "updated_at": "2026-10-16" }, { "family": "yobrowser", "category": "adware", "sample_count": 90, "rule_names": [ "MALWARE_WIN_YOBROWSER_T1_ARTIFACT", "MALWARE_WIN_YOBROWSER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/yobrowser.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/yobrowser", "updated_at": "2026-10-16" }, { "family": "yoddos", "category": "trojan", "sample_count": 9, "rule_names": [ "MALWARE_WIN_YODDOS_T1_ARTIFACT", "MALWARE_WIN_YODDOS_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/yoddos.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/yoddos", "updated_at": "2026-10-16" }, { "family": "yolov", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_YOLOV_T1_ARTIFACT", "MALWARE_WIN_YOLOV_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/yolov.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/yolov", "updated_at": "2026-10-16" }, { "family": "younglotus", "category": "backdoor", "sample_count": 1, "rule_names": [ "MALWARE_WIN_YOUNGLOTUS_T1_ARTIFACT", "MALWARE_WIN_YOUNGLOTUS_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/younglotus.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/younglotus", "updated_at": "2026-10-16" }, { "family": "youtubedownloaderguru", "category": "trojan", "sample_count": 1, "rule_names": [ "MALWARE_WIN_YOUTUBEDOWNLOADERGURU_T1_ARTIFACT", "MALWARE_WIN_YOUTUBEDOWNLOADERGURU_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/youtubedownloaderguru.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/youtubedownloaderguru", "updated_at": "2026-10-16" }, { "family": "youxun", "category": "adware", "sample_count": 84, "rule_names": [ "MALWARE_WIN_YOUXUN_T1_ARTIFACT", "MALWARE_WIN_YOUXUN_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/youxun.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/youxun", "updated_at": "2026-10-16" }, { "family": "ytddownloader", "category": "pua", "sample_count": 23, "rule_names": [ "MALWARE_WIN_YTDDOWNLOADER_T1_ARTIFACT", "MALWARE_WIN_YTDDOWNLOADER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/ytddownloader.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/ytddownloader", "updated_at": "2026-10-16" }, { "family": "ytdownloader", "category": "advanced_threat", "sample_count": 8, "rule_names": [ "MALWARE_WIN_YTDOWNLOADER_T1_ARTIFACT", "MALWARE_WIN_YTDOWNLOADER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/ytdownloader.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/ytdownloader", "updated_at": "2026-10-16" }, { "family": "yuner", "category": "file_infector", "sample_count": 32, "rule_names": [ "MALWARE_WIN_YUNER_T1_ARTIFACT", "MALWARE_WIN_YUNER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/yuner.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/yuner", "updated_at": "2026-10-16" }, { "family": "yunsip", "category": "infostealer", "sample_count": 280, "rule_names": [ "MALWARE_WIN_YUNSIP_T1_ARTIFACT", "MALWARE_WIN_YUNSIP_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/yunsip.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/yunsip", "updated_at": "2026-10-16" }, { "family": "yuri", "category": "trojan", "sample_count": 1, "rule_names": [ "MALWARE_WIN_YURI_T1_ARTIFACT", "MALWARE_WIN_YURI_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/yuri.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/yuri", "updated_at": "2026-10-16" }, { "family": "yy0aueeqipni", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_YY0AUEEQIPNI_T1_ARTIFACT", "MALWARE_WIN_YY0AUEEQIPNI_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/yy0aueeqipni.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/yy0aueeqipni", "updated_at": "2026-10-16" }, { "family": "yywaa08jovdg", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_YYWAA08JOVDG_T1_ARTIFACT", "MALWARE_WIN_YYWAA08JOVDG_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/yywaa08jovdg.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/yywaa08jovdg", "updated_at": "2026-10-16" }, { "family": "z_dem0n", "category": "trojan", "sample_count": 0, "rule_names": [ "MALWARE_WIN_Z_DEM0N_T1_ARTIFACT", "MALWARE_WIN_Z_DEM0N_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/z_dem0n.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/z_dem0n", "updated_at": "2026-10-16" }, { "family": "za0au42rofm", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_ZA0AU42ROFM_T1_ARTIFACT", "MALWARE_WIN_ZA0AU42ROFM_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/za0au42rofm.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/za0au42rofm", "updated_at": "2026-10-16" }, { "family": "zacinlo", "category": "advanced_threat", "sample_count": 1, "rule_names": [ "MALWARE_WIN_ZACINLO_T1_ARTIFACT", "MALWARE_WIN_ZACINLO_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/zacinlo.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/zacinlo", "updated_at": "2026-10-16" }, { "family": "zacom", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_ZACOM_T1_ARTIFACT", "MALWARE_WIN_ZACOM_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/zacom.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/zacom", "updated_at": "2026-10-16" }, { "family": "zafi", "category": "advanced_threat", "sample_count": 5, "rule_names": [ "MALWARE_WIN_ZAFI_T1_ARTIFACT", "MALWARE_WIN_ZAFI_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/zafi.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/zafi", "updated_at": "2026-10-16" }, { "family": "zamg", "category": "trojan", "sample_count": 527, "rule_names": [ "MALWARE_WIN_ZAMG_T1_ARTIFACT", "MALWARE_WIN_ZAMG_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/zamg.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/zamg", "updated_at": "2026-10-16" }, { "family": "zanoza", "category": "trojan", "sample_count": 1, "rule_names": [ "MALWARE_WIN_ZANOZA_T1_ARTIFACT", "MALWARE_WIN_ZANOZA_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/zanoza.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/zanoza", "updated_at": "2026-10-16" }, { "family": "zapchast", "category": "infostealer", "sample_count": 32, "rule_names": [ "MALWARE_WIN_ZAPCHAST_T1_ARTIFACT", "MALWARE_WIN_ZAPCHAST_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/zapchast.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/zapchast", "updated_at": "2026-10-16" }, { "family": "zapinit", "category": "ransomware", "sample_count": 2, "rule_names": [ "MALWARE_WIN_ZAPINIT_T1_ARTIFACT", "MALWARE_WIN_ZAPINIT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/zapinit.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/zapinit", "updated_at": "2026-10-16" }, { "family": "zard", "category": "ransomware", "sample_count": 4, "rule_names": [ "MALWARE_WIN_ZARD_T1_ARTIFACT", "MALWARE_WIN_ZARD_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/zard.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/zard", "updated_at": "2026-10-16" }, { "family": "zaxar", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_ZAXAR_T1_ARTIFACT", "MALWARE_WIN_ZAXAR_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/zaxar.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/zaxar", "updated_at": "2026-10-16" }, { "family": "zbiw", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_ZBIW_T1_ARTIFACT", "MALWARE_WIN_ZBIW_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/zbiw.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/zbiw", "updated_at": "2026-10-16" }, { "family": "zbot", "category": "banking_trojan", "sample_count": 24075, "rule_names": [ "MALWARE_WIN_ZBOT_T1_ARTIFACT", "MALWARE_WIN_ZBOT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/zbot.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/zbot", "updated_at": "2026-10-16" }, { "family": "zboter", "category": "trojan", "sample_count": 13, "rule_names": [ "MALWARE_WIN_ZBOTER_T1_ARTIFACT", "MALWARE_WIN_ZBOTER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/zboter.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/zboter", "updated_at": "2026-10-16" }, { "family": "zdengo", "category": "adware", "sample_count": 333, "rule_names": [ "MALWARE_WIN_ZDENGO_T1_ARTIFACT", "MALWARE_WIN_ZDENGO_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/zdengo.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/zdengo", "updated_at": "2026-10-16" }, { "family": "zdowbot", "category": "trojan", "sample_count": 1, "rule_names": [ "MALWARE_WIN_ZDOWBOT_T1_ARTIFACT", "MALWARE_WIN_ZDOWBOT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/zdowbot.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/zdowbot", "updated_at": "2026-10-16" }, { "family": "zebrocy", "category": "trojan", "sample_count": 11, "rule_names": [ "MALWARE_WIN_ZEBROCY_T1_ARTIFACT", "MALWARE_WIN_ZEBROCY_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/zebrocy.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/zebrocy", "updated_at": "2026-10-16" }, { "family": "zegost", "category": "rat", "sample_count": 441, "rule_names": [ "MALWARE_WIN_ZEGOST_T1_ARTIFACT", "MALWARE_WIN_ZEGOST_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/zegost.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/zegost", "updated_at": "2026-10-16" }, { "family": "zeleffo", "category": "ransomware", "sample_count": 2, "rule_names": [ "MALWARE_WIN_ZELEFFO_T1_ARTIFACT", "MALWARE_WIN_ZELEFFO_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/zeleffo.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/zeleffo", "updated_at": "2026-10-16" }, { "family": "zenfly", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_ZENFLY_T1_ARTIFACT", "MALWARE_WIN_ZENFLY_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/zenfly.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/zenfly", "updated_at": "2026-10-16" }, { "family": "zenosearch", "category": "advanced_threat", "sample_count": 1, "rule_names": [ "MALWARE_WIN_ZENOSEARCH_T1_ARTIFACT", "MALWARE_WIN_ZENOSEARCH_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/zenosearch.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/zenosearch", "updated_at": "2026-10-16" }, { "family": "zenpak", "category": "ransomware", "sample_count": 27, "rule_names": [ "MALWARE_WIN_ZENPAK_T1_ARTIFACT", "MALWARE_WIN_ZENPAK_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/zenpak.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/zenpak", "updated_at": "2026-10-16" }, { "family": "zepfod", "category": "trojan", "sample_count": 46, "rule_names": [ "MALWARE_WIN_ZEPFOD_T1_ARTIFACT", "MALWARE_WIN_ZEPFOD_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/zepfod.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/zepfod", "updated_at": "2026-10-16" }, { "family": "zepto", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_ZEPTO_T1_ARTIFACT", "MALWARE_WIN_ZEPTO_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/zepto.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/zepto", "updated_at": "2026-10-16" }, { "family": "zerber", "category": "ransomware", "sample_count": 13, "rule_names": [ "MALWARE_WIN_ZERBER_T1_ARTIFACT", "MALWARE_WIN_ZERBER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/zerber.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/zerber", "updated_at": "2026-10-16" }, { "family": "zero", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_ZERO_T1_ARTIFACT", "MALWARE_WIN_ZERO_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/zero.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/zero", "updated_at": "2026-10-16" }, { "family": "zeroaccess", "category": "rootkit", "sample_count": 28, "rule_names": [ "MALWARE_WIN_ZEROACCESS_T1_ARTIFACT", "MALWARE_WIN_ZEROACCESS_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/zeroaccess.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/zeroaccess", "updated_at": "2026-10-16" }, { "family": "zesibund", "category": "ransomware", "sample_count": 4, "rule_names": [ "MALWARE_WIN_ZESIBUND_T1_ARTIFACT", "MALWARE_WIN_ZESIBUND_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/zesibund.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/zesibund", "updated_at": "2026-10-16" }, { "family": "zeusvm", "category": "banking_trojan", "sample_count": 1, "rule_names": [ "MALWARE_WIN_ZEUSVM_T1_ARTIFACT", "MALWARE_WIN_ZEUSVM_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/zeusvm.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/zeusvm", "updated_at": "2026-10-16" }, { "family": "zilix", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_ZILIX_T1_ARTIFACT", "MALWARE_WIN_ZILIX_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/zilix.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/zilix", "updated_at": "2026-10-16" }, { "family": "zippyloader", "category": "trojan_downloader", "sample_count": 40, "rule_names": [ "MALWARE_WIN_ZIPPYLOADER_T1_ARTIFACT", "MALWARE_WIN_ZIPPYLOADER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/zippyloader.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/zippyloader", "updated_at": "2026-10-16" }, { "family": "zjaisino", "category": "ransomware", "sample_count": 2, "rule_names": [ "MALWARE_WIN_ZJAISINO_T1_ARTIFACT", "MALWARE_WIN_ZJAISINO_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/zjaisino.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/zjaisino", "updated_at": "2026-10-16" }, { "family": "zjek", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_ZJEK_T1_ARTIFACT", "MALWARE_WIN_ZJEK_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/zjek.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/zjek", "updated_at": "2026-10-16" }, { "family": "zlob", "category": "trojan", "sample_count": 15, "rule_names": [ "MALWARE_WIN_ZLOB_T1_ARTIFACT", "MALWARE_WIN_ZLOB_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/zlob.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/zlob", "updated_at": "2026-10-16" }, { "family": "zloyfly", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_ZLOYFLY_T1_ARTIFACT", "MALWARE_WIN_ZLOYFLY_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/zloyfly.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/zloyfly", "updated_at": "2026-10-16" }, { "family": "zmem", "category": "ransomware", "sample_count": 7, "rule_names": [ "MALWARE_WIN_ZMEM_T1_ARTIFACT", "MALWARE_WIN_ZMEM_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/zmem.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/zmem", "updated_at": "2026-10-16" }, { "family": "zoldon", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_ZOLDON_T1_ARTIFACT", "MALWARE_WIN_ZOLDON_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/zoldon.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/zoldon", "updated_at": "2026-10-16" }, { "family": "zombam", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_ZOMBAM_T1_ARTIFACT", "MALWARE_WIN_ZOMBAM_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/zombam.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/zombam", "updated_at": "2026-10-16" }, { "family": "zombieboy", "category": "ransomware", "sample_count": 2, "rule_names": [ "MALWARE_WIN_ZOMBIEBOY_T1_ARTIFACT", "MALWARE_WIN_ZOMBIEBOY_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/zombieboy.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/zombieboy", "updated_at": "2026-10-16" }, { "family": "zombierat", "category": "trojan", "sample_count": 0, "rule_names": [ "MALWARE_WIN_ZOMBIERAT_T1_ARTIFACT", "MALWARE_WIN_ZOMBIERAT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/zombierat.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/zombierat", "updated_at": "2026-10-16" }, { "family": "zonebac", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_ZONEBAC_T1_ARTIFACT", "MALWARE_WIN_ZONEBAC_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/zonebac.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/zonebac", "updated_at": "2026-10-16" }, { "family": "zonidel", "category": "ransomware", "sample_count": 19, "rule_names": [ "MALWARE_WIN_ZONIDEL_T1_ARTIFACT", "MALWARE_WIN_ZONIDEL_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/zonidel.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/zonidel", "updated_at": "2026-10-16" }, { "family": "zonobindi", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_ZONOBINDI_T1_ARTIFACT", "MALWARE_WIN_ZONOBINDI_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/zonobindi.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/zonobindi", "updated_at": "2026-10-16" }, { "family": "zorex", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_ZOREX_T1_ARTIFACT", "MALWARE_WIN_ZOREX_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/zorex.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/zorex", "updated_at": "2026-10-16" }, { "family": "zpevdo", "category": "trojan", "sample_count": 1303, "rule_names": [ "MALWARE_WIN_ZPEVDO_T1_ARTIFACT", "MALWARE_WIN_ZPEVDO_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/zpevdo.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/zpevdo", "updated_at": "2026-10-16" }, { "family": "zs0bbeypkrh", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_ZS0BBEYPKRH_T1_ARTIFACT", "MALWARE_WIN_ZS0BBEYPKRH_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/zs0bbeypkrh.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/zs0bbeypkrh", "updated_at": "2026-10-16" }, { "family": "zudochka", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_ZUDOCHKA_T1_ARTIFACT", "MALWARE_WIN_ZUDOCHKA_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/zudochka.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/zudochka", "updated_at": "2026-10-16" }, { "family": "zugo", "category": "advanced_threat", "sample_count": 2, "rule_names": [ "MALWARE_WIN_ZUGO_T1_ARTIFACT", "MALWARE_WIN_ZUGO_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/zugo.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/zugo", "updated_at": "2026-10-16" }, { "family": "zumanek", "category": "ransomware", "sample_count": 7, "rule_names": [ "MALWARE_WIN_ZUMANEK_T1_ARTIFACT", "MALWARE_WIN_ZUMANEK_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/zumanek.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/zumanek", "updated_at": "2026-10-16" }, { "family": "zurgop", "category": "trojan", "sample_count": 31, "rule_names": [ "MALWARE_WIN_ZURGOP_T1_ARTIFACT", "MALWARE_WIN_ZURGOP_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/zurgop.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/zurgop", "updated_at": "2026-10-16" }, { "family": "zusy", "category": "banking_trojan", "sample_count": 14120, "rule_names": [ "MALWARE_WIN_ZUSY_T1_ARTIFACT", "MALWARE_WIN_ZUSY_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/zusy.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/zusy", "updated_at": "2026-10-16" }, { "family": "zvrek", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_ZVREK_T1_ARTIFACT", "MALWARE_WIN_ZVREK_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/zvrek.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/zvrek", "updated_at": "2026-10-16" }, { "family": "zvuzona", "category": "ransomware", "sample_count": 15, "rule_names": [ "MALWARE_WIN_ZVUZONA_T1_ARTIFACT", "MALWARE_WIN_ZVUZONA_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/zvuzona.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/zvuzona", "updated_at": "2026-10-16" }, { "family": "zwangi", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_ZWANGI_T1_ARTIFACT", "MALWARE_WIN_ZWANGI_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/zwangi.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/zwangi", "updated_at": "2026-10-16" }, { "family": "zxor", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_ZXOR_T1_ARTIFACT", "MALWARE_WIN_ZXOR_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/zxor.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/zxor", "updated_at": "2026-10-16" }, { "family": "zxrloader", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_ZXRLOADER_T1_ARTIFACT", "MALWARE_WIN_ZXRLOADER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/zxrloader.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/zxrloader", "updated_at": "2026-10-16" }, { "family": "zxshell", "category": "backdoor", "sample_count": 3, "rule_names": [ "MALWARE_WIN_ZXSHELL_T1_ARTIFACT", "MALWARE_WIN_ZXSHELL_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/zxshell.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/zxshell", "updated_at": "2026-10-16" }, { "family": "zy0baazvyqni", "category": "ransomware", "sample_count": 1, "rule_names": [ "MALWARE_WIN_ZY0BAAZVYQNI_T1_ARTIFACT", "MALWARE_WIN_ZY0BAAZVYQNI_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/zy0baazvyqni.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/zy0baazvyqni", "updated_at": "2026-10-16" }, { "family": "zygug", "category": "ransomware", "sample_count": 6, "rule_names": [ "MALWARE_WIN_ZYGUG_T1_ARTIFACT", "MALWARE_WIN_ZYGUG_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/zygug.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/zygug", "updated_at": "2026-10-16" }, { "family": "zylom", "category": "adware", "sample_count": 19, "rule_names": [ "MALWARE_WIN_ZYLOM_T1_ARTIFACT", "MALWARE_WIN_ZYLOM_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/zylom.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/zylom", "updated_at": "2026-10-16" }, { "family": "zzinfor", "category": "ransomware", "sample_count": 11, "rule_names": [ "MALWARE_WIN_ZZINFOR_T1_ARTIFACT", "MALWARE_WIN_ZZINFOR_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/zzinfor.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/zzinfor", "updated_at": "2026-10-16" }, { "family": "redline", "category": "infostealer", "sample_count": 120, "rule_names": [ "MALWARE_WIN_REDLINE_T1_ARTIFACT", "MALWARE_WIN_REDLINE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/redline.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/redline", "updated_at": "2026-10-16" }, { "family": "lumma", "category": "infostealer", "sample_count": 85, "rule_names": [ "MALWARE_WIN_LUMMA_T1_ARTIFACT", "MALWARE_WIN_LUMMA_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/lumma.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/lumma", "updated_at": "2026-10-16" }, { "family": "asyncrat", "category": "rat", "sample_count": 95, "rule_names": [ "MALWARE_WIN_ASYNCRAT_T1_ARTIFACT", "MALWARE_WIN_ASYNCRAT_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/asyncrat.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/asyncrat", "updated_at": "2026-10-16" }, { "family": "stealc", "category": "infostealer", "sample_count": 45, "rule_names": [ "MALWARE_WIN_STEALC_T1_ARTIFACT", "MALWARE_WIN_STEALC_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/stealc.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/stealc", "updated_at": "2026-10-16" }, { "family": "bumblebee", "category": "loader", "sample_count": 35, "rule_names": [ "MALWARE_WIN_BUMBLEBEE_T1_ARTIFACT", "MALWARE_WIN_BUMBLEBEE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/bumblebee.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/bumblebee", "updated_at": "2026-10-16" }, { "family": "conti", "category": "ransomware", "sample_count": 180, "rule_names": [ "MALWARE_WIN_CONTI_T1_ARTIFACT", "MALWARE_WIN_CONTI_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/conti.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/conti", "updated_at": "2026-10-16" }, { "family": "revil", "category": "ransomware", "sample_count": 160, "rule_names": [ "MALWARE_WIN_REVIL_T1_ARTIFACT", "MALWARE_WIN_REVIL_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/revil.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/revil", "updated_at": "2026-10-16" }, { "family": "darkside", "category": "ransomware", "sample_count": 75, "rule_names": [ "MALWARE_WIN_DARKSIDE_T1_ARTIFACT", "MALWARE_WIN_DARKSIDE_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/darkside.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/darkside", "updated_at": "2026-10-16" }, { "family": "clop", "category": "ransomware", "sample_count": 140, "rule_names": [ "MALWARE_WIN_CLOP_T1_ARTIFACT", "MALWARE_WIN_CLOP_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/clop.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/clop", "updated_at": "2026-10-16" }, { "family": "stuxnet", "category": "advanced_threat", "sample_count": 15, "rule_names": [ "MALWARE_WIN_STUXNET_T1_ARTIFACT", "MALWARE_WIN_STUXNET_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/stuxnet.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/stuxnet", "updated_at": "2026-10-16" }, { "family": "pegasus", "category": "spyware", "sample_count": 10, "rule_names": [ "MALWARE_WIN_PEGASUS_T1_ARTIFACT", "MALWARE_WIN_PEGASUS_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/pegasus.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/pegasus", "updated_at": "2026-10-16" }, { "family": "raccoon", "category": "infostealer", "sample_count": 110, "rule_names": [ "MALWARE_WIN_RACCOON_T1_ARTIFACT", "MALWARE_WIN_RACCOON_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/raccoon.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/raccoon", "updated_at": "2026-10-16" }, { "family": "bazarloader", "category": "loader", "sample_count": 80, "rule_names": [ "MALWARE_WIN_BAZARLOADER_T1_ARTIFACT", "MALWARE_WIN_BAZARLOADER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/bazarloader.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/bazarloader", "updated_at": "2026-10-16" }, { "family": "sasser", "category": "worm", "sample_count": 25, "rule_names": [ "MALWARE_WIN_SASSER_T1_ARTIFACT", "MALWARE_WIN_SASSER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/sasser.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/sasser", "updated_at": "2026-10-16" }, { "family": "blaster", "category": "worm", "sample_count": 30, "rule_names": [ "MALWARE_WIN_BLASTER_T1_ARTIFACT", "MALWARE_WIN_BLASTER_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/blaster.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/blaster", "updated_at": "2026-10-16" }, { "family": "candiru", "category": "spyware", "sample_count": 45, "rule_names": [ "MALWARE_WIN_CANDIRU_T1_ARTIFACT", "MALWARE_WIN_CANDIRU_T3_ATTRIBUTION" ], "download_url": "https://malware-families-catalog.systemhelpdesk.com/api/yara/rules/candiru.yar", "web_url": "https://malware-families-catalog.systemhelpdesk.com/families/candiru", "updated_at": "2026-10-16" } ] }