T1027: Obfuscated Files or Information
Operational Executive Summary
T1027 (Obfuscated Files or Information) is classified under the Defense Evasion tactic within the MITRE ATT&CK framework. Tradecraft designed to avoid detection, analysis, and eradication throughout their operational lifecycle, including process injection, file obfuscation, and disabling defensive telemetry. In telemetry gathered across enterprise endpoints and the EMBER 2018 benchmark, this technique was weaponized across 928 distinct malware families, totaling over 57,405 validated samples.
Technical Anatomy & Adversary Tradecraft
Adversaries leverage Obfuscated Files or Information to accomplish operational objectives while minimizing anomalous forensic footprints. When executing Obfuscated Files or Information, malicious binaries commonly interact directly with low-level Windows APIs, kernel mode drivers, or native scripting interfaces to bypass traditional file-integrity monitors and static antivirus signatures.
In modern multi-stage campaigns, T1027 is frequently observed functioning as an intermediate bridge: initial access payloads (such as spearphishing loaders or exploit macros) execute Obfuscated Files or Information to establish in-memory execution or persistence before staging secondary ransomware or data-exfiltration implants.
Authoritative MITRE ATT&CK Reference: View official technique documentation, sub-techniques, and adversary groups at
https://attack.mitre.org/techniques/T1027/.
Detection Engineering & Threat Hunting
Detecting Obfuscated Files or Information requires telemetry correlation across endpoint detection and response (EDR) agents, Sysmon event streams, and security information event management (SIEM) pipelines:
- Process Creation & Lineage: Monitor parent-child process anomalies where unexpected parent binaries (e.g., Office executables, web browsers, or script hosts) spawn command shells or native Windows utilities.
- API Hooking & Behavioral Telemetry: EDR platforms should flag rapid calls to memory allocation, process injection, or registry manipulation APIs originating from unbacked executable memory regions.
- Network Anomaly Correlation: Cross-reference endpoint execution timestamps with external network socket establishment to identify anomalous beaconing or covert data staging.
SOC Containment & Hardening Guidance
To mitigate risks associated with T1027 (Obfuscated Files or Information) across production infrastructure, security teams should implement the following defensive controls:
- Attack Surface Reduction (ASR): Enforce strict application control policies (WDAC or AppLocker) to restrict execution to signed and verified corporate binaries.
- Least Privilege & Credential Hygiene: Restrict local administrative privileges to prevent adversaries from tampering with defensive agents or escalating privileges.
- Network Microsegmentation: Restrict lateral communication across endpoint VLANs to prevent wormable payloads from utilizing Obfuscated Files or Information across adjacent network segments.
Cataloged Malware Families Utilizing T1027 (928 Families)
The following malware families in the SystemHelpDesk catalog have been verified utilizing T1027 (Obfuscated Files or Information):
928 families
| Family | Category | Sample Count | Technical Summary |
|---|---|---|---|
| stop | Ransomware | 8,900 | STOP (universally recognized across consumer cybersecurity forums and threat feeds as STOP/Djvu) is the single most prevalent consumer ransomware family in cybe... |
| ursnif | Banking Trojan | 8,188 | Ursnif (also widely known by its underlying codebase names Gozi and ISFB) is one of the most enduring and technically sophisticated banking trojans and modular ... |
| lethic | Spam Bot | 4,879 | Lethic is a notorious, long-running spam-distribution botnet that first emerged in 2008. Designed specifically as an automated email transmission engine for Eas... |
| upatre | Downloader | 4,200 | Upatre is a notoriously lightweight, high-volume downloader first identified in mid-2013 that served as the initial spearhead for some of the most catastrophic ... |
| gandcrab | Ransomware | 2,992 | GandCrab is a landmark ransomware family that revolutionized the modern cyber extortion industry by pioneering and popularizing the Ransomware-as-a-Service (Raa... |
| gamarue | Loader | 2,789 | Gamarue (widely tracked by security vendors as Andromeda or Wauchos) is one of the most prolific and technically sophisticated modular botnet loaders in the his... |
| kovter | Trojan | 2,414 | Kovter is an extraordinarily evasive, polymorphic malware strain first detected in 2013. Initially engineered as a screen-locking police-impersonation ransomwar... |
| tinba | Banking Trojan | 1,531 | Trojan:Win32/Tinba (short for 'Tiny Banker', also cataloged by vendors as Zusy) is a landmark banking trojan famous for its remarkably micro-sized footprint—com... |
| fearless_lite | Spyware | 1,500 | Fearless Lite (tracked across antivirus engines as Trojan-Spy.Win32.FearlessLite and Spyware.FearlessLite) is a streamlined, low-footprint variant of the Fearle... |
| vobfus | Worm | 1,484 | Vobfus (also documented across antimalware products as Win32/Vobfus, Worm:Win32/Vobfus, and WORM_VOBFUS) is a pervasive Windows worm and trojan loader developed... |
| ulise | Trojan | 1,176 | Ulise (cataloged across global threat intelligence as Trojan-Downloader.Win32.Ulise, Trojan:Win32/Ulise, and Trojan.Ulise) is a sophisticated trojan downloader ... |
| pikabot | Loader | 850 | Pikabot is an evasive, modular malware loader that emerged in early 2023, widely recognized by threat intelligence analysts as one of the primary successors to ... |
| nymaim | Downloader | 756 | Nymaim is a sophisticated dual-stage malware downloader and loader first observed in 2013. Designed with extreme resilience, Nymaim specialized in evading secur... |
| yakes | Trojan | 751 | Trojan:Win32/Yakes (widely cataloged across antivirus telemetry as Trojan.Yakes or Win32/Yakes) is a prolific family of obfuscated trojan downloaders and multi-... |
| downloadhelper | Adware | 645 | DownloadHelper (cataloged across commercial antivirus telemetry as Adware:Win32/DownloadHelper, PUA.DownloadHelper, and Adware.Toolbar.DownloadHelper) is an int... |
| softcnapp | Adware | 520 | Softcnapp (tracked across endpoint security engines as PUA:Win32/Softcnapp, Adware:Win32/Softcnapp, and PUP.Optional.Softcnapp) is a rogue application manager, ... |
| kuaizip | Adware | 483 | KuaiZip (cataloged across antimalware engines as PUA:Win32/KuaiZip, Adware:Win32/KuaiZip, and PUP.Optional.KuaiZip, also known as KuaiYa) is a rogue compression... |
| agentb | Trojan | 449 | Agent.B (classified across commercial antivirus vendors as Trojan:Win32/Agent.B, Trojan-Downloader.Win32.Agent.b, and Backdoor.Agent.B) is a long-standing, prol... |
| neshta | File Infector | 443 | Neshta (cataloged across cybersecurity authorities as Virus:Win32/Neshta.A, Virus.Win32.Neshta, and Win32/Neshta) is one of the most prolific, long-standing, an... |
| skeeyah | Trojan | 440 | Trojan:Win32/Skeeyah is a widely encountered family of evasive trojan loaders and multi-stage droppers documented extensively in Microsoft Windows Defender tele... |
| loadmoney | Adware | 398 | LoadMoney (cataloged across cybersecurity vendors as Adware:Win32/LoadMoney, PUA:Win32/LoadMoney, and PUP.Optional.LoadMoney) is a Russian-origin pay-per-instal... |
| ponystealer | Infostealer | 374 | Trojan:Win32/PonyStealer (universally recognized in cyber threat intelligence as Pony or Fareit) is a foundational credential theft trojan and stage-one botnet ... |
| wdfload | Advanced Threat | 358 | Wdfload (cataloged across security software as Trojan:Win32/Wdfload, Rootkit:Win32/Wdfload, and Trojan.Wdfload) is an advanced Windows rootkit and kernel-mode s... |
| ganelp | Trojan | 348 | Ganelp (cataloged across security solutions as Trojan:Win32/Ganelp, Trojan-Spy.Win32.Ganelp, and PWS:Win32/Ganelp) is a specialized password-stealing trojan and... |
| sfone | Worm | 332 | Sfone (cataloged across security vendors as Worm:Win32/Sfone, Worm.Win32.SFONE.B, and Trojan:Win32/Sfone!pz) is a self-propagating Windows worm and trojan loade... |
| mintluks | Infostealer | 330 | Mintluks (tracked across security telemetry as PWS:MSIL/Mintluks, TrojanDownloader:Win32/Mintluks, and MSIL/Mintluks) is a specialized .NET-based information st... |
| driverpack | Pua | 326 | DriverPack (DriverPack Solution, recognized across endpoint security engines as PUA:Win32/DriverPack, Adware:Win32/DriverPack, and PUP.Optional.DriverPackSoluti... |
| expiro | File Infector | 305 | Expiro (classified across security vendors as Virus:Win32/Expiro, Virus:Win64/Expiro, and Xpiro) is one of the most sophisticated, long-lived polymorphic cross-... |
| dfay | Trojan | 300 | TrojanDropper:Win32/Dfay (widely cataloged across vendor telemetry as Trojan.Dfay or Win32/Dfay) is an evasive trojan dropper and memory injection loader engine... |
| yunsip | Infostealer | 280 | Yunsip (tracked across security vendor definitions as PWS:Win32/Yunsip, Trojan:Win32/Yunsip, and PWS:Win32/Yunsip.A) is an aggressive credential-stealing trojan... |
| xmrig | Cryptominer | 248 | XMRig (cataloged across antivirus vendors as Coinminer:Win32/XMRig, Trojan.XMRig, and Riskware.XMRig) is a high-performance open-source Monero (XMR) cryptocurre... |
| daws | Ransomware | 246 | TrojanDownloader:Win32/Daws (cataloged across security vendors as Trojan.Daws or Ransom.Daws) is a persistent Windows trojan downloader and stage-one ransomware... |
| jeefo | File Infector | 213 | Jeefo (also known as Hidrag, and cataloged in security vendor encyclopedias as Virus:Win32/Jeefo.A, PE_JEEFO.A, and Virus.Win32.Hidrag.a) is a classic parasitic... |
| pluto | Worm | 209 | Pluto (identified in security intelligence under signatures including Worm:Win32/Pluto, Trojan:Win32/Pluto, W32.Pluto, and Worm.Win32.Pluto) is a hybrid Windows... |
| pioneer | File Infector | 203 | Pioneer (identified across antivirus engines as Virus:Win32/Pioneer.A, Virus.Win32.Pioneer, and PE_PIONEER) is an advanced 32-bit Windows Portable Executable (P... |
| tinyloader | Downloader | 203 | TinyLoader (cataloged in antivirus telemetry as TrojanDownloader:Win32/TinyLoader, Trojan.TinyLoader, and Downloader.TinyLoader) is an ultra-compact first-stage... |
| dapato | Trojan | 197 | Dapato (cataloged across security vendors as Trojan:Win32/Dapato, Trojan-Dropper.Win32.Dapato, and TrojanDownloader:Win32/Dapato) is a prolific Windows malware ... |
| processhijack | Trojan | 187 | ProcessHijack (cataloged in threat telemetry as Trojan:Win32/ProcessHijack and Trojan:Win32/ProcessHijack.GTM!MTB) represents a family of sophisticated stealth ... |
| hworld | Worm | 166 | Hworld (cataloged across antivirus vendors and threat repositories as Worm:Win32/Hworld.A, W32/HWorld.A, WORM_HWORLD.A, and Backdoor:Win32/Hworld) is a historic... |
| bsymem | Ransomware | 144 | Trojan:Win32/Bsymem (cataloged across vendor telemetry as Trojan.Bsymem or Ransom.Bsymem) is a stealthy dual-stage remote access backdoor and enterprise ransomw... |
| kolabc | Worm | 143 | Worm:Win32/Kolabc (commonly identified across threat telemetry as Trojan.Kolabc, Worm.Win32.Kolab, or Win32/Kolabc) is a resilient, self-propagating Windows net... |
| nakoctb | Ransomware | 134 | Ransom:Win32/Nakoctb (frequently cataloged in security telemetry as naKocTb, Trojan:Win32/Nakoctb, or Trojan-Ransom.Win32.Nakoctb) is a notorious Windows screen... |
| autohk | Trojan | 120 | The "AutoHK" malware family refers to a broad category of malicious programs that utilize AutoHotkey (AHK), a legitimate and open-source scripting language desi... |
| bitmin | Coinminer | 112 | Bitmin (cataloged under Microsoft Defender designations including Trojan:Win32/Bitmin, Trojan:Win32/Bitman, and CoinMiner.Win32.Bitman) is an enduring family of... |
| umbra | Loader | 111 | Umbra (cataloged as Umbra Loader, Trojan:Win32/Umbra, and Backdoor:Win32/Umbra) is an underground modular HTTP botnet loader and malware distribution framework ... |
| wews | Exploit | 111 | Wews (recognized across threat telemetry signatures as Exploit:HTML/Wews, Exploit.HTML.Wews, and Trojan-Downloader.HTML.Wews) is a specialized class of maliciou... |
| fuerboos | Trojan | 110 | Fuerboos (cataloged by Microsoft Defender as Trojan:Win32/Fuerboos, Trojan:Win32/Fuerboos!cl, Trojan:Win32/Fuerboos!MTB, and TrojanDownloader:Win32/Fuerboos, wi... |
| explorerhijack | Trojan | 106 | ExplorerHijack (monitored under behavioral detection signatures including Behavior:Win32/ExplorerHijack, Trojan:Win32/ExplorerHijack, and HackTool:Win32/Explore... |
| llac | Trojan | 104 | Llac (cataloged across security telemetry as Trojan:Win32/Llac, Trojan.Win32.Llac, and Trojan:Win32/Llac.A) is a stealthy information-stealing trojan and survei... |
| tempedreve | Downloader | 104 | Tempedreve (cataloged across security research as TrojanDownloader:Win32/Tempedreve and Trojan:Win32/Tempedreve) is a dedicated multi-stage trojan downloader an... |
| nemesis | Bootkit | 103 | Nemesis (extensively analyzed by Mandiant and FireEye research teams, with its primary bootkit component dubbed BOOTRASH) is an advanced, targeted malware ecosy... |
| nisloder | Loader | 103 | Nisloder (cataloged under Microsoft Defender signatures as TrojanDownloader:Win32/Nisloder and Trojan:Win32/Nisloder) is a lightweight modular trojan downloader... |
| nymeria | Downloader | 102 | Nymeria (cataloged across security vendors as TrojanDownloader:Win32/Nymeria, Trojan.Nymeria, and Backdoor:Win32/Nymeria) is a modular Windows trojan downloader... |
| chir | Worm | 99 | Chir (extensively documented as Virus:Win32/Chir.B@mm, W32.Chir, and Runouce) is a historic, highly aggressive mass-mailing worm and polymorphic file infector f... |
| hesv | Trojan | 93 | Hesv (cataloged across security intelligence repositories under identifiers including Trojan:Win32/Hesv, Trojan.Win32.Hesv, and Trojan.MSIL.HESV) is a versatile... |
| dofoil | Downloader | 90 | Dofoil (universally tracked across threat intelligence communities and security vendors under aliases including SmokeLoader, Smoke Loader, and Trojan:Win32/Dofo... |
| cambot | Worm | 89 | CamBot (cataloged across security vendors as Worm:Win32/CamBot, Backdoor:Win32/CamBot, and Trojan:Win32/CamBot) is a hybrid Windows worm and remote access surve... |
| binder | Hacktool | 87 | Binder (cataloged across cybersecurity vendors under detections including HackTool:Win32/Binder, Trojan:Win32/Binder, and Win32/Binder) is a broad classificatio... |
| rubinurd | Downloader | 87 | Rubinurd (cataloged by threat intelligence researchers and security vendors under identifiers including Trojan:Win32/Rubinurd, TrojanDownloader.Rubinurd, and Wi... |
| cerbu | Backdoor | 84 | Cerbu (cataloged across security vendors under detections including Backdoor:Win32/Cerbu, Trojan:Win32/Cerbu, and Win32/Cerbu) is a covert Windows remote access... |
| delphi | Trojan | 82 | Delphi (cataloged across antivirus vendors under signatures including Win32/Delphi, Virus:Win32/Delphi, and Trojan:Win32/Delphi) represents a broad classificati... |
| elemental | Adware | 82 | Elemental (cataloged in antivirus telemetry under detections including PUP.Elemental, Trojan:Win32/Elemental, and Win32/Elemental) is an adware packaging framew... |
| buterat | Backdoor | 77 | ButeRAT (cataloged in threat research and security telemetry under signatures including Backdoor:Win32/ButeRAT, Backdoor.Win32.Buterat, and Trojan:Win32/ButeRAT... |
| bitrep | Trojan | 76 | Bitrep (cataloged in antivirus vendor databases under detections including Trojan:Win32/Bitrep, Trojan:Win32/Bitrep.A, and TrojanDownloader:Win32/Bitrep) is a W... |
| rozena | Backdoor | 75 | Rozena (cataloged across threat research publications and antimalware engines under detections including Backdoor:Win32/Rozena, Trojan.Win32.ROZENA, and Backdoo... |
| wecod | Trojan | 71 | Wecod (cataloged in antivirus vendor databases under detections including Trojan:Win32/Wecod, Trojan.Win32.Wecod, and Win32/Wecod) is a multi-functional Windows... |
| skorik | Trojan | 70 | Skorik (cataloged in threat research and antivirus vendor databases under detections including Trojan:Win32/Skorik and Trojan.Win32.Skorik) is a Windows trojan ... |
| mepaow | Trojan | 68 | Mepaow (cataloged in antivirus vendor databases and threat intelligence feeds under detections including Trojan:Win32/Mepaow, Worm.Win32.MEPAOW, and Trojan.Mepa... |
| genericrxdt | Ransomware | 67 | Trojan:Win32/Genericrxdt is a broad, generic heuristic detection utilized by antivirus engines (primarily Microsoft Defender) to flag executables exhibiting hig... |
| pynamer | Trojan | 67 | Pynamer (cataloged across security vendors and threat intelligence databases under signatures including Trojan:Win32/Pynamer, Trojan.Pynamer, and Trojan:Win32/P... |
| omaneat | Trojan | 66 | Omaneat (cataloged in threat research and antivirus vendor databases under detections including Trojan:Win32/Omaneat, Spyware:Win32/Omaneat!pz, and TrojanSpy:MS... |
| genericrxgp | Ransomware | 63 | Trojan:Win32/Genericrxgp is a broad, generic heuristic detection utilized by antivirus engines (primarily Microsoft Defender) to flag executables exhibiting hig... |
| vindor | Trojan | 63 | Vindor (cataloged across security vendors under detections including Trojan:Win32/Vindor, Trojan.Win32.Vindor, and Win32/Vindor) is a multi-stage Windows trojan... |
| asparnet | Trojan | 58 | Asparnet (cataloged across security vendors under detections including Trojan:Win32/Asparnet and Adware:Win32/Asparnet) is a persistent Windows adware and troja... |
| jimmy | Ransomware | 57 | Jimmy (tracked across incident response engagements and threat intelligence feeds under signatures including Ransom:Win32/Jimmy, Trojan-Ransom.Win32.Jimmy, and ... |
| shelma | Trojan | 57 | Shelma (cataloged across security vendors and threat intelligence databases under signatures including Trojan:Win32/Shelma, Trojan.Win32.Shelma, and Backdoor:Wi... |
| swizzor | Adware | 55 | Swizzor (cataloged across antivirus vendors under signatures including Adware:Win32/Swizzor, Trojan.Win32.Swizzor, and Win32/Swizzor) is one of the most prolifi... |
| warezov | Worm | 55 | Warezov (also widely tracked in security industry literature as Stration, Email-Worm.Win32.Warezov, and Worm:Win32/Warezov) is a landmark mass-mailing email wor... |
| murofet | Trojan | 53 | Murofet (cataloged across security vendors and threat intelligence databases under detections including Trojan:Win32/Murofet, TrojanDownloader:Win32/Murofet, an... |
| revetrat | Trojan | 50 | RevetRAT (cataloged across security vendors and threat intelligence databases under signatures including Backdoor:Win32/RevengeRAT, Trojan:Win32/RevetRAT, and M... |
| shakblades | Ransomware | 48 | Shakblades is a destructive Windows ransomware strain active since 2017. Propagated primarily through trojanized software activators, cracked utilities, and exp... |
| ruskill | Ransomware | 46 | Ruskill (cataloged across security vendors and threat intelligence databases under signatures including Ransom:Win32/Ruskill, Trojan-Ransom.Win32.Ruskill, and T... |
| mudrop | Trojan | 45 | Mudrop (cataloged across security vendors under signatures including Trojan-Dropper.Win32.Mudrop, Trojan:Win32/Mudrop, and Trojan.Mudrop) is a high-volume Windo... |
| vigorf | Trojan | 45 | Vigorf is a pervasive Windows trojan downloader and ransomware stager cataloged under Microsoft Defender signatures including Trojan:Win32/Vigorf.A. Infiltratin... |
| candiru | Spyware | 45 | Candiru (operating under corporate entities Saito Tech Ltd, Taveta Ltd, and Grindavik Solutions) is an Israeli commercial cyber-surveillance contractor speciali... |
| jaiko | Ransomware | 44 | Jaiko is an extortion ransomware and screen locker strain active since 2016. Delivered via weaponized email attachments and fake software installers, Jaiko exec... |
| elzob | Ransomware | 22 | Elzob (identified in security research telemetry as Ransom:Win32/Elzob, Trojan-Ransom.Win32.Elzob, and Win32/Elzob) is an aggressive Windows ransomware family a... |
| autoruns | Hacktool | 21 | AutoRuns (tracked in antimalware telemetry under signatures including HackTool:Win32/AutoRuns, VirTool:Win32/AutoRuns, and Trojan:Win32/AutoRuns) refers to weap... |
| sixxpack | Trojan | 21 | Sixxpack (classified across endpoint detection telemetry under designations including Trojan:Win32/Sixxpack, Trojan:Win32/Sixxpack.A, and VirTool:Win32/Sixxpack... |
| smokeloader | Loader | 21 | SmokeLoader (also cataloged in threat telemetry as Dofoil or Sharapov) is a veteran modular malware loader and botnet first commercialized in 2011 by an undergr... |
| jackservn | Trojan Downloader | 17 | Jackservn (classified in antimalware definitions under Trojan:Win32/Jackservn, TrojanDownloader:Win32/Jackservn, and Backdoor:Win32/Jackservn) is a stealthy mod... |
| birele | Ransomware | 16 | Birele (classified across commercial antivirus and EDR solutions under designations including Ransom:Win32/Birele, Trojan-Ransom.Win32.Birele, and Ransom.Birele... |
| cmy3u | Ransomware | 16 | Cmy3u (classified across security vendors as Ransom:Win32/Cmy3u, Trojan-Ransom.Win32.Cmy3u, and Win32/Cmy3u) is a targeted crypto-ransomware family engineered t... |
| cwqw | Ransomware | 16 | Cwqw (identified across antimalware research as Ransom:Win32/Cwqw, Trojan-Ransom.Win32.Cwqw, and Ransom.Cwqw) is an evasive corporate crypto-ransomware family d... |
| dico | Ransomware | 16 | Dico (classified across antimalware research as Ransom:Win32/Dico, Trojan-Ransom.Win32.Dico, and Ransom.Dico) is a high-impact corporate crypto-ransomware famil... |
| jottix | Ransomware | 16 | Jottix (classified across cybersecurity organizations as Ransom:Win32/Jottix, Trojan-Ransom.Win32.Jottix, and Win32/Jottix) is a targeted crypto-ransomware fami... |
| krserv | Ransomware | 16 | KRServ (classified across antimalware research as Ransom:Win32/KRServ, Trojan:Win32/KRServ, and Win32/KRServ) is a specialized ransomware and trojan service fam... |
| sixer | Ransomware | 16 | Sixer (classified in cybersecurity threat databases under designations including Ransom:Win32/Sixer, Trojan-Ransom.Win32.Sixer, and Win32/Sixer) is an evasive c... |
| vools | Ransomware | 16 | Vools (classified across antimalware research as Ransom:Win32/Vools, Trojan-Ransom.Win32.Vools, and Win32/Vools) is a high-speed corporate crypto-ransomware fam... |
| adject | Ransomware | 15 | Adject (classified across antivirus engines as Ransom:Win32/Adject, Trojan-Ransom.Win32.Adject, and Win32/Adject) is a targeted crypto-ransomware family designe... |
| betload | Ransomware | 15 | Betload (classified as Ransom:Win32/Betload, Trojan:Win32/Betload, and TrojanDownloader:Win32/Betload) is a hybrid trojan loader and ransomware payload observed... |
| blackv | Ransomware | 15 | BlackV (classified across threat intelligence feeds as Ransom:Win32/BlackV and Trojan-Ransom.Win32.BlackV) is an aggressive Windows crypto-ransomware family des... |
| generickdz | Ransomware | 15 | GenericKDZ (classified across endpoint antimalware engines under designations including Ransom:Win32/GenericKDZ, Trojan-Ransom.Win32.GenericKDZ, and Win32/Gener... |
| jaiks | Ransomware | 15 | Jaiks (classified in antimalware threat repositories as Ransom:Win32/Jaiks and Trojan-Ransom.Win32.Jaiks) is an evasive crypto-ransomware family designed to exe... |
| powzip | Ransomware | 15 | Powzip (classified in threat intelligence feeds as Ransom:Win32/Powzip and Trojan-Ransom.Win32.Powzip) is an unusual crypto-ransomware family that leverages Pow... |
| scriptkd | Ransomware | 15 | Scriptkd (classified as Ransom:Win32/Scriptkd and Trojan-Ransom.Win32.Scriptkd) is a script-based and multi-stage crypto-ransomware family combining Windows Scr... |
| umbald | Ransomware | 15 | Umbald (classified across antimalware research as Ransom:Win32/Umbald, Trojan-Ransom.Win32.Umbald, and Win32/Umbald) is an aggressive enterprise crypto-ransomwa... |
| vehidis | Ransomware | 15 | Vehidis (classified as Ransom:Win32/Vehidis and Trojan-Ransom.Win32.Vehidis) is a destructive crypto-ransomware family designed for rapid and wide-scale data ex... |
| yantai | Trojan Downloader | 15 | Yantai (classified in threat databases as TrojanDownloader:Win32/Yantai and Backdoor:Win32/Yantai) is a stealthy trojan downloader engineered to establish persi... |
| zvuzona | Ransomware | 15 | Zvuzona (classified as Ransom:Win32/Zvuzona across Microsoft Defender, Kaspersky, and Trend Micro) is a destructive crypto-ransomware family designed for rapid ... |
| blackhole | Exploit Kit | 14 | Blackhole (historically documented as Exploit:Win32/Blackhole and the Blackhole Exploit Kit / BHEK) was the single most dominant commercial exploit kit in the c... |
| chopper | Backdoor | 14 | Chopper (widely tracked across cybersecurity research, CISA advisories, and EDR platforms as China Chopper, Backdoor:Win32/Chopper, and Trojan:ASP/Chopper) is a... |
| genericrxdz | Ransomware | 14 | GenericRXDZ (classified across commercial antivirus engines under designations including Ransom:Win32/GenericRXDZ and Trojan-Ransom.Win32.GenericRXDZ) is an eva... |
| geral | Ransomware | 14 | Geral (classified across antimalware research as Ransom:Win32/Geral, Trojan-Ransom.Win32.Geral, and Win32/Geral) is an aggressive Windows crypto-ransomware fami... |
| xpaj | File Infector | 14 | Xpaj (historically documented as Virus:Win32/Xpaj, W32/Xpaj, and Trojan.Xpaj) is a sophisticated polymorphic parasitic file infector and click-fraud botnet fami... |
| kirts | Ransomware | 13 | Kirts (classified across antimalware research as Ransom:Win32/Kirts and Trojan-Ransom.Win32.Kirts) is a targeted crypto-ransomware family designed to execute de... |
| kraddare | Ransomware | 13 | Kraddare (classified as Ransom:Win32/Kraddare across Microsoft Defender, Kaspersky, and Trend Micro) is an enterprise crypto-ransomware family designed for rapi... |
| macri | Ransomware | 13 | Macri (classified in threat databases as Ransom:Win32/Macri and Trojan-Ransom.Win32.Macri) is a targeted corporate crypto-ransomware family that encrypts files ... |
| reset | Ransomware | 13 | Reset (classified across antivirus engines as Ransom:Win32/Reset and Trojan-Ransom.Win32.Reset) is an aggressive corporate crypto-ransomware family designed to ... |
| talent | Ransomware | 13 | Talent (classified in threat databases as Ransom:Win32/Talent and Trojan-Ransom.Win32.Talent) is an evasive crypto-ransomware family designed for rapid and wide... |
| zboter | Trojan | 13 | Trojan:Win32/Zboter is a generic heuristic detection typically associated with the downloader or initial staging components of the infamous ZeuS (Zbot) banking ... |
| centrumloader | Trojan Downloader | 12 | Centrumloader (classified in antivirus detection telemetry under designations including TrojanDownloader:Win32/Centrumloader, TrojanDownloader.Win32.Centrumload... |
| csrb | Ransomware | 12 | Trojan:Win32/Csrb is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware, ... |
| fasong | Ransomware | 12 | Trojan:Win32/Fasong is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| gendal | Ransomware | 12 | Trojan:Win32/Gendal is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| redosdru | Ransomware | 12 | Trojan:Win32/Redosdru is a persistent, stealthy trojan and backdoor designed to breach endpoint defenses, establish a long-term foothold, and securely deliver s... |
| systex | Ransomware | 12 | Trojan:Win32/Systex is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| bluteal | Ransomware | 11 | Bluteal (classified in antivirus detection telemetry under designations including Ransom:Win32/Bluteal, Ransom.Win32.Bluteal, and Win32/Bluteal) is a crypto-ran... |
| cloxer | Ransomware | 11 | Trojan:Win32/Cloxer is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| exploder | Ransomware | 11 | Trojan:Win32/Exploder is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwa... |
| jord | Ransomware | 11 | Trojan:Win32/Jord is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware, ... |
| koutodoor | Backdoor | 11 | Backdoor:Win32/Koutodoor is a persistent, stealthy backdoor designed to breach endpoint defenses, establish a long-term foothold, and allow remote threat actors... |
| locky | Ransomware | 11 | Locky is one of the most prolific, damaging, and aggressively distributed ransomware strains in cyber history, first emerging in February 2016. Associated with ... |
| midia | Ransomware | 11 | Virus:Win32/Midia is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware, ... |
| paph | Ransomware | 11 | Trojan:Win32/Paph is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware, ... |
| polypatch | Trojan | 11 | Virus:Win32/Polypatch is a highly aggressive polymorphic file infector. Unlike modern trojans that simply drop a malicious payload, Polypatch actively seeks out... |
| ranos | Ransomware | 11 | Trojan:Win32/Ranos is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware,... |
| refroso | Ransomware | 11 | Trojan:Win32/Refroso is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwar... |
| stimilik | Ransomware | 11 | Trojan:Win32/Stimilik is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwa... |
| ubibila | Ransomware | 11 | Trojan:Win32/Ubibila is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwar... |
| vitro | Trojan | 11 | Virus:Win32/Vitro (frequently associated with the **Virut** malware family) is a highly aggressive, classic polymorphic file infector. Unlike modern trojans tha... |
| zzinfor | Ransomware | 11 | Trojan:Win32/Zzinfor is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwar... |
| bandit | Ransomware | 10 | Bandit (classified in antivirus detection telemetry under designations including Ransom:Win32/Bandit, Ransom.Win32.Bandit, and Win32/Bandit) is a crypto-ransomw... |
| codiby | Ransomware | 10 | Trojan:Win32/Codiby is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| cryptolocker | Ransomware | 10 | CryptoLocker is the historic archetype of modern asymmetric ransomware, first discovered in September 2013. Engineered and operated under the criminal syndicate... |
| hilevel | Ransomware | 10 | Trojan:Win32/Hilevel is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwar... |
| jaike | Ransomware | 10 | Trojan:Win32/Jaike is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware,... |
| jintor | Ransomware | 10 | Trojan:Win32/Jintor is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| nagoot | Ransomware | 10 | Trojan:Win32/Nagoot is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| redyms | Ransomware | 10 | Trojan:Win32/Redyms (also known as the **Redyms Botnet**) is a significant malware family whose primary objective is large-scale, automated click fraud and sear... |
| sisbot | Ransomware | 10 | Trojan:Win32/Sisbot is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| tovus | Ransomware | 10 | Trojan:Win32/Tovus is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware,... |
| vopak | Ransomware | 10 | Trojan:Win32/Vopak is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware,... |
| buzy | Ransomware | 9 | Buzy (classified in antivirus detection telemetry under designations including Ransom:Win32/Buzy, Ransom.Win32.Buzy, and Win32/Buzy) is a crypto-ransomware desi... |
| cossta | Ransomware | 9 | Trojan:Win32/Cossta is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| delbar | Ransomware | 9 | Trojan:Win32/Delbar is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| dervec | Ransomware | 9 | Trojan:Win32/Dervec is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| hiru | Ransomware | 9 | Trojan:Win32/Hiru is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware, ... |
| ksdler | Ransomware | 9 | TrojanDownloader:Win32/Ksdler is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ... |
| lebag | Ransomware | 9 | Trojan:Win32/Lebag is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware,... |
| lunam | Ransomware | 9 | Trojan:Win32/Lunam is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware,... |
| miancha | Ransomware | 9 | Trojan:Win32/Miancha is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwar... |
| microjoin | Ransomware | 9 | HackTool:Win32/Microjoin (or generic **File Joiner** / **Binder** heuristics) refers to a class of utilities used to secretly combine two or more distinct files... |
| mwpm | Ransomware | 9 | Trojan:Win32/Mwpm is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware, ... |
| ranapama | Ransomware | 9 | Trojan:Win32/Ranapama is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwa... |
| snobar | Ransomware | 9 | Trojan:Win32/Snobar is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| wirzemro | Ransomware | 9 | Trojan:Win32/Wirzemro is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwa... |
| yoddos | Trojan | 9 | Trojan:Win32/Yoddos (also known as the **Yoddos Botnet**) is a significant malware family specifically engineered to compromise endpoints and recruit them into ... |
| blueh | Ransomware | 8 | Blueh (classified in antivirus detection telemetry under designations including Ransom:Win32/Blueh, Ransom.Win32.Blueh, and Win32/Blueh) is a crypto-ransomware ... |
| brresmon | Ransomware | 8 | Brresmon (classified in antivirus detection telemetry under designations including Ransom:Win32/Brresmon, Ransom.Win32.Brresmon, and Win32/Brresmon) is a crypto... |
| citeary | Ransomware | 8 | Trojan:Win32/Citeary is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwar... |
| cnopa | Ransomware | 8 | Trojan:Win32/Cnopa is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware,... |
| dalexis | Ransomware | 8 | Trojan:Win32/Dalexis is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwar... |
| enistery | Ransomware | 8 | Trojan:Win32/Enistery is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwa... |
| lydra | Ransomware | 8 | Trojan:Win32/Lydra is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware,... |
| montp | Ransomware | 8 | Trojan:Win32/Montp is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware,... |
| neos | Ransomware | 8 | Trojan:Win32/Neos is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware, ... |
| orbus | Ransomware | 8 | Trojan:Win32/Orbus is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware,... |
| puwaders | Ransomware | 8 | Trojan:Win32/Puwaders is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwa... |
| resur | Ransomware | 8 | Trojan:Win32/Resur is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware,... |
| virtu | Trojan | 8 | Virus:Win32/Virtu (often associated with the **Virut** family) is a highly destructive, polymorphic file infector and botnet agent. Unlike modern trojans that s... |
| wenper | Ransomware | 8 | Trojan:Win32/Wenper is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| wyhymyz | Ransomware | 8 | Trojan:Win32/Wyhymyz is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwar... |
| adkdllwrapper | Trojan | 7 | Adkdllwrapper (classified in antivirus detection telemetry under designations including Trojan:Win32/Adkdllwrapper, Trojan.Win32.Adkdllwrapper, and Win32/Adkdll... |
| comrerop | Ransomware | 7 | Trojan:Win32/Comrerop is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwa... |
| corrempa | Ransomware | 7 | Trojan:Win32/Corrempa is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwa... |
| dishigy | Ransomware | 7 | Trojan:Win32/Dishigy is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwar... |
| dorv | Ransomware | 7 | Trojan:Win32/Dorv is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware, ... |
| erbon | Ransomware | 7 | Trojan:Win32/Erbon is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware,... |
| genericrxda | Ransomware | 7 | Trojan:Win32/Genericrxda is a generic, heuristic-based detection name used by Microsoft Defender and other AV engines to classify a wide variety of persistent, ... |
| gippers | Ransomware | 7 | Trojan:Win32/Gippers is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwar... |
| hermes | Ransomware | 7 | Ransom:Win32/Hermes is a targeted, destructive ransomware strain first observed in early 2017 across Russian cybercrime underground forums. In October 2017, Her... |
| klone | Ransomware | 7 | Trojan:Win32/Klone is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware,... |
| lolojan | Ransomware | 7 | Trojan:Win32/Lolojan is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwar... |
| loskad | Ransomware | 7 | Trojan:Win32/Loskad is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| mago | Ransomware | 7 | Trojan:Win32/Mago is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware, ... |
| molock | Ransomware | 7 | Trojan:Win32/Molock is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| moonlight | Ransomware | 7 | Trojan:Win32/Moonlight is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomw... |
| noonlight | Ransomware | 7 | Trojan:Win32/Noonlight is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomw... |
| nrww | Ransomware | 7 | Trojan:Win32/Nrww is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware, ... |
| nsanti | Ransomware | 7 | Trojan:Win32/Nsanti is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| pepm | Ransomware | 7 | Trojan:Win32/Pepm is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware, ... |
| resdro | Ransomware | 7 | Trojan:Win32/Resdro is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| spnr | Ransomware | 7 | Trojan:Win32/Spnr is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware, ... |
| taily | Ransomware | 7 | Trojan:Win32/Taily is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware,... |
| tainp | Ransomware | 7 | Trojan:Win32/Tainp is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware,... |
| upkm | Ransomware | 7 | Trojan:Win32/Upkm is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware, ... |
| vbcryptent | Trojan | 7 | Trojan:Win32/Vbcryptent is a generic heuristic detection utilized by security vendors to classify a wide variety of malicious payloads (trojans, stealers, worms... |
| vemptik | Ransomware | 7 | Trojan:Win32/Vemptik is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwar... |
| vibem | Ransomware | 7 | Trojan:Win32/Vibem is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware,... |
| zmem | Ransomware | 7 | Trojan:Win32/Zmem is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware, ... |
| zumanek | Ransomware | 7 | Trojan:Win32/Zumanek is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwar... |
| bicololo | Ransomware | 6 | Bicololo (classified in antivirus detection telemetry under designations including Ransom:Win32/Bicololo, Ransom.Win32.Bicololo, and Win32/Bicololo) is a crypto... |
| bulta | Ransomware | 6 | Bulta (classified in antivirus detection telemetry under designations including Ransom:Win32/Bulta, Ransom.Win32.Bulta, and Win32/Bulta) is a crypto-ransomware ... |
| cekar | Ransomware | 6 | Cekar (classified in antivirus detection telemetry under designations including Ransom:Win32/Cekar, Ransom.Win32.Cekar, and Win32/Cekar) is a crypto-ransomware ... |
| chepro | Ransomware | 6 | Trojan:Win32/Chepro is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| cjishu | Ransomware | 6 | Trojan:Win32/Cjishu is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| creprote | Ransomware | 6 | Trojan:Win32/Creprote is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwa... |
| delfidelfi | Trojan | 6 | Trojan:Win32/Delfidelfi is a generic heuristic detection used by antivirus engines to classify a wide variety of malware that has been written or heavily packed... |
| delikle | Ransomware | 6 | Trojan:Win32/Delikle is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwar... |
| detroie | Ransomware | 6 | Trojan:Win32/Detroie is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwar... |
| dotnet | Ransomware | 6 | Trojan:MSIL/Dotnet (or Generic.DotNet) is a broad, generic heuristic detection utilized by antivirus engines to flag highly suspicious or demonstrably malicious... |
| dotto | Ransomware | 6 | Trojan:Win32/Dotto is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware,... |
| duphead | Ransomware | 6 | Trojan:Win32/Duphead is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwar... |
| ekidoa | Ransomware | 6 | Trojan:Win32/Ekidoa is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| epack | Ransomware | 6 | Trojan:Win32/Epack is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware,... |
| fbtaken | Ransomware | 6 | Trojan:Win32/Fbtaken is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwar... |
| firstinj | Ransomware | 6 | Trojan:Win32/Firstinj is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwa... |
| genericgb | Ransomware | 6 | Trojan:Win32/Genericgb is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomw... |
| hiloti | Ransomware | 6 | Trojan:Win32/Hiloti is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| huhk | Ransomware | 6 | Trojan:Win32/Huhk is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware, ... |
| hype | Ransomware | 6 | Trojan:Win32/Hype is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware, ... |
| idsohtu | Ransomware | 6 | Trojan:Win32/Idsohtu is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwar... |
| jumpta | Ransomware | 6 | Trojan:Win32/Jumpta is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| leivion | Ransomware | 6 | Trojan:Win32/Leivion is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwar... |
| nilage | Ransomware | 6 | Trojan:Win32/Nilage is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| orsam | Ransomware | 6 | Trojan:Win32/Orsam is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware,... |
| pavica | Ransomware | 6 | Trojan:Win32/Pavica is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| peals | Ransomware | 6 | Trojan:Win32/Peals is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware,... |
| psloader | Ransomware | 6 | Trojan:Win32/Psloader is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwa... |
| rastarby | Ransomware | 6 | Trojan:Win32/Rastarby is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwa... |
| recex | Ransomware | 6 | Trojan:Win32/Recex is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware,... |
| samca | Ransomware | 6 | Trojan:Win32/Samca is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware,... |
| sinresby | Ransomware | 6 | Trojan:Win32/Sinresby is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwa... |
| smee | Ransomware | 6 | Trojan:Win32/Smee is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware, ... |
| swotter | Ransomware | 6 | Trojan:Win32/Swotter is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwar... |
| tilken | Ransomware | 6 | Trojan:Win32/Tilken is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| toga | Ransomware | 6 | Trojan:Win32/Toga is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware, ... |
| venik | Ransomware | 6 | Trojan:Win32/Venik is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware,... |
| vidro | Ransomware | 6 | Trojan:Win32/Vidro is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware,... |
| xpyn | Ransomware | 6 | Trojan:Win32/Xpyn is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware, ... |
| zygug | Ransomware | 6 | Trojan:Win32/Zygug is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware,... |
| agentwdcr | Ransomware | 5 | Agentwdcr (classified in antivirus detection telemetry under designations including Ransom:Win32/Agentwdcr, Ransom.Win32.Agentwdcr, and Win32/Agentwdcr) is a cr... |
| autoitscript | Trojan | 5 | Autoitscript (classified in antivirus detection telemetry under designations including Trojan:Win32/Autoitscript, Trojan.Win32.Autoitscript, and Win32/Autoitscr... |
| baserch | Ransomware | 5 | Baserch (classified in antivirus detection telemetry under designations including Ransom:Win32/Baserch, Ransom.Win32.Baserch, and Win32/Baserch) is a crypto-ran... |
| bero | Ransomware | 5 | Bero (classified in antivirus detection telemetry under designations including Ransom:Win32/Bero, Ransom.Win32.Bero, and Win32/Bero) is a crypto-ransomware desi... |
| chifrax | Ransomware | 5 | Trojan:Win32/Chifrax is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwar... |
| conjar | Ransomware | 5 | Trojan:Win32/Conjar is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| cslz | Ransomware | 5 | Trojan:Win32/Cslz is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware, ... |
| cyfin | Ransomware | 5 | Trojan:Win32/Cyfin is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware,... |
| cyn | File Infector | 5 | Cyn (cataloged across classical antivirus telemetry as Virus:DOS/Cyn and Virus:Win32/Cyn) is an early parasitic file infector originally engineered for MS-DOS e... |
| dadobra | Ransomware | 5 | Trojan:Win32/Dadobra is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwar... |
| dodiw | Ransomware | 5 | Trojan:Win32/Dodiw is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware,... |
| dominator | Ransomware | 5 | Trojan:Win32/Dominator is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomw... |
| downer | Ransomware | 5 | TrojanDownloader:Win32/Downer (or Generic Downloader) is a broad heuristic classification for malicious software whose primary purpose is to securely bypass loc... |
| enestedel | Ransomware | 5 | Trojan:Win32/Enestedel is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomw... |
| fakeie | Ransomware | 5 | Trojan:Win32/Fakeie is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| fbsi | Ransomware | 5 | Trojan:Win32/Fbsi is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware, ... |
| fraudster | Ransomware | 5 | Trojan:Win32/Fraudster is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomw... |
| genericrxcl | Ransomware | 5 | Trojan:Win32/Genericrxcl is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ranso... |
| gojdue | Ransomware | 5 | Trojan:Win32/Gojdue is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| haperlock | Ransomware | 5 | Trojan:Win32/Haperlock is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomw... |
| inegery | Ransomware | 5 | Trojan:Win32/Inegery is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwar... |
| jyuqet | Ransomware | 5 | Trojan:Win32/Jyuqet is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| kasinst | Ransomware | 5 | Trojan:Win32/Kasinst is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwar... |
| laban | Ransomware | 5 | Trojan:Win32/Laban is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware,... |
| mdrop | Ransomware | 5 | TrojanDropper:Win32/Mdrop (or Generic Dropper) is a broad heuristic classification for malicious software whose sole purpose is to securely bypass local antivir... |
| mensa | Ransomware | 5 | Trojan:Win32/Mensa is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware,... |
| mufanom | Ransomware | 5 | Trojan:Win32/Mufanom is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwar... |
| naprat | Ransomware | 5 | Trojan:Win32/Naprat is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| necne | Ransomware | 5 | Trojan:Win32/Necne is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware,... |
| perkiler | Ransomware | 5 | Trojan:Win32/Perkiler is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwa... |
| pintu | Ransomware | 5 | Trojan:Win32/Pintu is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware,... |
| pres | Ransomware | 5 | Trojan:Win32/Pres is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware, ... |
| remoh | Ransomware | 5 | Trojan:Win32/Remoh is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware,... |
| ruco | Ransomware | 5 | Trojan:Win32/Ruco is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware, ... |
| sahat | Ransomware | 5 | Trojan:Win32/Sahat is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware,... |
| skillis | Ransomware | 5 | Trojan:Win32/Skillis is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwar... |
| smearpasse | Ransomware | 5 | Trojan:Win32/Smearpasse is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransom... |
| stocde | Ransomware | 5 | Trojan:Win32/Stocde is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| tanske | Ransomware | 5 | Trojan:Win32/Tanske is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| tar4rkdi | Ransomware | 5 | Trojan:Win32/Tar4rkdi is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwa... |
| ukpa | Ransomware | 5 | Trojan:Win32/Ukpa is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware, ... |
| vapsup | Ransomware | 5 | Trojan:Win32/Vapsup is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| wigon | Ransomware | 5 | Trojan:Win32/Wigon is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware,... |
| wintrim | Trojan | 5 | Trojan:Win32/Wintrim is a persistent, stealthy trojan often functioning as an adware clicker or a backdoor designed to breach endpoint defenses and securely del... |
| 000c | Ransomware | 4 | 000C (classified in antivirus detection telemetry under designations including Ransom:Win32/000C, Ransom.Win32.000C, and Win32/000C) is a crypto-ransomware desi... |
| blakamba | Ransomware | 4 | Blakamba (classified in antivirus detection telemetry under designations including Ransom:Win32/Blakamba, Ransom.Win32.Blakamba, and Win32/Blakamba) is a crypto... |
| boht | Ransomware | 4 | Boht (classified in antivirus detection telemetry under designations including Ransom:Win32/Boht, Ransom.Win32.Boht, and Win32/Boht) is a crypto-ransomware desi... |
| canbis | Ransomware | 4 | Canbis (classified in antivirus detection telemetry under designations including Ransom:Win32/Canbis, Ransom.Win32.Canbis, and Win32/Canbis) is a crypto-ransomw... |
| denes | Ransomware | 4 | Trojan:Win32/Denes is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware,... |
| dubfot | Ransomware | 4 | Trojan:Win32/Dubfot is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| dycler | Ransomware | 4 | Trojan:Win32/Dycler is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| eggnog | Ransomware | 4 | Trojan:Win32/Eggnog is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| emelent | Ransomware | 4 | Trojan:Win32/Emelent is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwar... |
| emogen | Ransomware | 4 | Trojan:Win32/Emogen is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| eqtonex | Ransomware | 4 | Trojan:Win32/Eqtonex is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwar... |
| fakeime | Ransomware | 4 | Trojan:Win32/Fakeime is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwar... |
| fesber | Ransomware | 4 | Trojan:Win32/Fesber is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| floder | Ransomware | 4 | Trojan:Win32/Floder is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| fwwy | Ransomware | 4 | Trojan:Win32/Fwwy is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware, ... |
| gamup | Ransomware | 4 | Trojan:Win32/Gamup is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware,... |
| genericrxdr | Ransomware | 4 | Trojan:Win32/Genericrxdr is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ranso... |
| hvom | Ransomware | 4 | Trojan:Win32/Hvom is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware, ... |
| inservice | Ransomware | 4 | Trojan:Win32/Inservice is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomw... |
| irplan | Ransomware | 4 | Trojan:Win32/Irplan is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| kapucen | Ransomware | 4 | Trojan:Win32/Kapucen is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwar... |
| kelios | Ransomware | 4 | Trojan:Win32/Kelios is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| kriskynote | Ransomware | 4 | Trojan:Win32/Kriskynote is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransom... |
| listicka | Ransomware | 4 | Trojan:Win32/Listicka is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwa... |
| mahato | Ransomware | 4 | Trojan:Win32/Mahato is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| marocan | Ransomware | 4 | Trojan:Win32/Marocan is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwar... |
| mazben | Ransomware | 4 | Trojan:Win32/Mazben is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| mkar | Ransomware | 4 | Trojan:Win32/Mkar is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware, ... |
| morphex | Ransomware | 4 | Trojan:Win32/Morphex is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwar... |
| patpoopy | Ransomware | 4 | Trojan:Win32/Patpoopy is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwa... |
| perseus | Ransomware | 4 | Trojan:Win32/Perseus is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwar... |
| polip | Trojan | 4 | Virus:Win32/Polip is an extremely complex, highly sophisticated **polymorphic file infector**. Unlike standard trojans that simply drop a malicious payload, Pol... |
| prosti | Ransomware | 4 | Trojan:Win32/Prosti is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| pwsime | Ransomware | 4 | PWS:Win32/Pwsime is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware, b... |
| qqten | Ransomware | 4 | Trojan:Win32/Qqten is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware,... |
| rabased | Ransomware | 4 | Trojan:Win32/Rabased is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwar... |
| scribble | Ransomware | 4 | TrojanDownloader:O97M/Scribble (or similar macro-based droppers) represents a prevalent technique for initial access: the weaponization of Microsoft Office docu... |
| shaosmine | Ransomware | 4 | Trojan:Win32/Shaosmine is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomw... |
| stagol | Ransomware | 4 | Trojan:Win32/Stagol is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| startserv | Ransomware | 4 | Trojan:Win32/Startserv is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomw... |
| tarayt | Ransomware | 4 | Trojan:Win32/Tarayt is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| tbma | Ransomware | 4 | Trojan:Win32/Tbma is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware, ... |
| titirez | Ransomware | 4 | Trojan:Win32/Titirez is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwar... |
| weiduan | Ransomware | 4 | Trojan:Win32/Weiduan is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwar... |
| werly | Ransomware | 4 | Trojan:Win32/Werly is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware,... |
| xiazai | Ransomware | 4 | TrojanDownloader:Win32/Xiazai is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ... |
| xylauncher | Ransomware | 4 | TrojanDownloader:Win32/Xylauncher is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads l... |
| yakbeex | Ransomware | 4 | Trojan:Win32/Yakbeex is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwar... |
| zard | Ransomware | 4 | Trojan:Win32/Zard is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware, ... |
| zesibund | Ransomware | 4 | Trojan:Win32/Zesibund is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwa... |
| admoke | Ransomware | 3 | Admoke (classified in antivirus detection telemetry under designations including Ransom:Win32/Admoke, Ransom.Win32.Admoke, and Win32/Admoke) is a crypto-ransomw... |
| aotoit | Ransomware | 3 | Aotoit (classified in antivirus detection telemetry under designations including Ransom:Win32/Aotoit, Ransom.Win32.Aotoit, and Win32/Aotoit) is a crypto-ransomw... |
| bandios | Ransomware | 3 | Bandios (classified in antivirus detection telemetry under designations including Ransom:Win32/Bandios, Ransom.Win32.Bandios, and Win32/Bandios) is a crypto-ran... |
| banz | Ransomware | 3 | Banz (classified in antivirus detection telemetry under designations including Ransom:Win32/Banz, Ransom.Win32.Banz, and Win32/Banz) is a crypto-ransomware desi... |
| basine | Ransomware | 3 | Basine (classified in antivirus detection telemetry under designations including Ransom:Win32/Basine, Ransom.Win32.Basine, and Win32/Basine) is a crypto-ransomw... |
| batlauncher | Ransomware | 3 | Batlauncher (classified in antivirus detection telemetry under designations including Ransom:Win32/Batlauncher, Ransom.Win32.Batlauncher, and Win32/Batlauncher)... |
| beaugrit | Ransomware | 3 | Beaugrit (classified in antivirus detection telemetry under designations including Ransom:Win32/Beaugrit, Ransom.Win32.Beaugrit, and Win32/Beaugrit) is a crypto... |
| belonard | Ransomware | 3 | Belonard (classified in antivirus detection telemetry under designations including Ransom:Win32/Belonard, Ransom.Win32.Belonard, and Win32/Belonard) is a crypto... |
| blacked | Ransomware | 3 | Blacked (classified in antivirus detection telemetry under designations including Ransom:Win32/Blacked, Ransom.Win32.Blacked, and Win32/Blacked) is a crypto-ran... |
| blubot | Ransomware | 3 | Blubot (classified in antivirus detection telemetry under designations including Ransom:Win32/Blubot, Ransom.Win32.Blubot, and Win32/Blubot) is a crypto-ransomw... |
| boaxxe | Ransomware | 3 | Boaxxe (classified in antivirus detection telemetry under designations including Ransom:Win32/Boaxxe, Ransom.Win32.Boaxxe, and Win32/Boaxxe) is a crypto-ransomw... |
| cgmu | Ransomware | 3 | Trojan:Win32/Cgmu is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware, ... |
| comei | Ransomware | 3 | Trojan:Win32/Comei is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware,... |
| coolmirage | Ransomware | 3 | Trojan:Win32/Coolmirage is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransom... |
| crastic | Ransomware | 3 | Trojan:Win32/Crastic is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwar... |
| crcf | Ransomware | 3 | Trojan:Win32/Crcf is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware, ... |
| ctqc | Ransomware | 3 | Trojan:Win32/Ctqc is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware, ... |
| deshacop | Ransomware | 3 | Trojan:Win32/Deshacop is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwa... |
| diss | Ransomware | 3 | Trojan:Win32/Diss is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware, ... |
| dunco | Ransomware | 3 | Trojan:Win32/Dunco is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware,... |
| dyamar | Ransomware | 3 | Trojan:Win32/Dyamar is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| enosch | Ransomware | 3 | Trojan:Win32/Enosch is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| eroyee | Ransomware | 3 | Trojan:Win32/Eroyee is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| exdek | Ransomware | 3 | Trojan:Win32/Exdek is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware,... |
| exeaqtor | Ransomware | 3 | Trojan:Win32/Exeaqtor is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwa... |
| ezoons | Ransomware | 3 | Trojan:Win32/Ezoons is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| fadok | Ransomware | 3 | Trojan:Win32/Fadok is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware,... |
| fourthrem | Ransomware | 3 | Trojan:Win32/Fourthrem is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomw... |
| gasti | Ransomware | 3 | Trojan:Win32/Gasti is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware,... |
| genericrxaa | Ransomware | 3 | Trojan:Win32/Genericrxaa is not a specific malware family, but rather a **Generic Heuristic Detection**. It indicates that an antivirus engine (often Microsoft ... |
| genericrxaq | Ransomware | 3 | Trojan:Win32/Genericrxaq is not a specific malware family, but rather a **Generic Heuristic Detection**. It indicates that an antivirus engine (often Microsoft ... |
| genericrxbg | Trojan | 3 | Trojan:Win32/Genericrxbg is not a specific malware family, but rather a **Generic Heuristic Detection** (short for 'Trojan Generic'). It indicates that an antiv... |
| genericrxce | Trojan | 3 | Trojan:Win32/Genericrxce is not a specific malware family, but rather a **Generic Heuristic Detection** (short for 'Trojan Generic'). It indicates that an antiv... |
| genericrxgm | Ransomware | 3 | Trojan:Win32/Genericrxgm is not a specific, named malware family, but rather a **Generic Heuristic Detection** (often flagged by McAfee or Microsoft Defender). ... |
| ghoul | Ransomware | 3 | Trojan:Win32/Ghoul is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware,... |
| glox | Ransomware | 3 | Trojan:Win32/Glox is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware, ... |
| goabeny | Ransomware | 3 | Trojan:Win32/Goabeny is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwar... |
| gottle | Ransomware | 3 | Trojan:Win32/Gottle is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| higuniel | Ransomware | 3 | Trojan:Win32/Higuniel is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwa... |
| hlubea | Ransomware | 3 | Trojan:Win32/Hlubea is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| horst | Ransomware | 3 | Trojan:Win32/Horst is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware,... |
| ilomo | Ransomware | 3 | Trojan:Win32/Ilomo is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware,... |
| jobaka | Ransomware | 3 | Trojan:Win32/Jobaka is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| joiner | Ransomware | 3 | Trojan:Win32/Joiner (also known as a File Binder or Wrapper) is not a specific malware payload, but rather a **Malware Creation and Delivery Tool**. It is a uti... |
| koal | Ransomware | 3 | Trojan:Win32/Koal is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware, ... |
| konus | Ransomware | 3 | Trojan:Win32/Konus is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware,... |
| koobcafe | Ransomware | 3 | Trojan:Win32/Koobcafe is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwa... |
| krunchy | Ransomware | 3 | Trojan:Win32/Krunchy is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwar... |
| lapka | Ransomware | 3 | Trojan:Win32/Lapka is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware,... |
| lenwadu | Ransomware | 3 | Trojan:Win32/Lenwadu is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwar... |
| liev | Ransomware | 3 | Trojan:Win32/Liev is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware, ... |
| lipler | Ransomware | 3 | Trojan:Win32/Lipler is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| lodbak | Ransomware | 3 | Trojan:Win32/Lodbak is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| luder | Ransomware | 3 | Trojan:Win32/Luder is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware,... |
| macoute | Ransomware | 3 | Trojan:Win32/Macoute is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwar... |
| maesorn | Ransomware | 3 | Trojan:Win32/Maesorn is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwar... |
| mdeclass | Ransomware | 3 | Trojan:Win32/Mdeclass is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwa... |
| mlwr | Trojan | 3 | Trojan:Win32/Mlwr is not a specific malware family, but rather a **Generic Heuristic Detection** (short for 'Malware'). It indicates that an antivirus engine (o... |
| mutant | Ransomware | 3 | Trojan:Win32/Mutant is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| mycop | Ransomware | 3 | Trojan:Win32/Mycop is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware,... |
| myxah | Ransomware | 3 | Trojan:Win32/Myxah is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware,... |
| nystprac | Ransomware | 3 | Trojan:Win32/Nystprac is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwa... |
| octopus | Ransomware | 3 | Trojan:Win32/Octopus is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwar... |
| opesup | Ransomware | 3 | Trojan:Win32/Opesup is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| palibu | Ransomware | 3 | Trojan:Win32/Palibu is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| passma | Ransomware | 3 | Trojan:Win32/Passma is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| petun | Ransomware | 3 | Trojan:Win32/Petun is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware,... |
| povertel | Ransomware | 3 | Trojan:Win32/Povertel is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwa... |
| powerless | Ransomware | 3 | Trojan:Win32/Powerless is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomw... |
| pshell | Ransomware | 3 | Trojan:PowerShell/Pshell is not a specific malware family, but a highly critical **Generic Heuristic Detection** focused entirely on the malicious abuse of the ... |
| pstinb | Ransomware | 3 | Trojan:Win32/Pstinb is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| purgen | Ransomware | 3 | Trojan:Win32/Purgen is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| qqfarmer | Ransomware | 3 | Trojan:Win32/Qqfarmer is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwa... |
| randrew | Ransomware | 3 | Trojan:Win32/Randrew is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwar... |
| redlonam | Ransomware | 3 | Trojan:Win32/Redlonam is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwa... |
| rifdoor | Ransomware | 3 | Trojan:Win32/Rifdoor is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwar... |
| rising | Ransomware | 3 | Trojan:Win32/Rising is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| ruandmel | Ransomware | 3 | Trojan:Win32/Ruandmel is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwa... |
| rukometa | Ransomware | 3 | Trojan:Win32/Rukometa is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwa... |
| sasquor | Ransomware | 3 | Trojan:Win32/Sasquor is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwar... |
| sbdbat2exe | Advanced Threat | 3 | HackTool:Win32/Sbdbat2exe (Bat2Exe) is not a malware family in the traditional sense; it is a **Malware Creation Tool / Wrapper**. It is a utility designed to c... |
| scano | Ransomware | 3 | Trojan:Win32/Scano is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware,... |
| sdld | Ransomware | 3 | Trojan:Win32/Sdld is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware, ... |
| shepher | Ransomware | 3 | Trojan:Win32/Shepher is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwar... |
| smalo | Ransomware | 3 | Trojan:Win32/Smalo is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware,... |
| sperolz | Ransomware | 3 | Trojan:Win32/Sperolz is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwar... |
| suloc | Ransomware | 3 | Trojan:Win32/Suloc is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware,... |
| takbum | Ransomware | 3 | Trojan:Win32/Takbum is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| tarctox | Ransomware | 3 | Trojan:Win32/Tarctox is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwar... |
| temr | Ransomware | 3 | Trojan:Win32/Temr is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware, ... |
| tenavt | Ransomware | 3 | Trojan:Win32/Tenavt is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| therat | Ransomware | 3 | Trojan:Win32/Therat is a persistent, stealthy Remote Access Trojan (RAT) designed to breach endpoint defenses and securely deliver secondary, high-severity payl... |
| torjok | Ransomware | 3 | Trojan:Win32/Torjok is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| trjgen | Trojan | 3 | Trojan:Win32/Trjgen is not a specific malware family, but rather a **Generic Heuristic Detection** (short for 'Trojan Generic'). It indicates that an antivirus ... |
| tyhos | Ransomware | 3 | Trojan:Win32/Tyhos is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware,... |
| ursumdt | Ransomware | 3 | Trojan:Win32/Ursumdt is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwar... |
| uwamson | Ransomware | 3 | Trojan:Win32/Uwamson is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwar... |
| uztub | Ransomware | 3 | Trojan:Win32/Uztub is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware,... |
| uztuby | Ransomware | 3 | Trojan:Win32/Uztuby is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| veilev | Ransomware | 3 | Trojan:Win32/Veilev is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| vkont | Ransomware | 3 | Trojan:Win32/Vkont is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware,... |
| vucha | Ransomware | 3 | Trojan:Win32/Vucha is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware,... |
| xorala | Ransomware | 3 | Trojan:Win32/Xorala is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| xyligan | Ransomware | 3 | Trojan:Win32/Xyligan is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwar... |
| 5hex | Ransomware | 2 | 5Hex (classified in antivirus detection telemetry under designations including Ransom:Win32/5Hex, Ransom.Win32.5Hex, and Win32/5Hex) is a crypto-ransomware desi... |
| agentus | Ransomware | 2 | Agentus (classified in antivirus detection telemetry under designations including Ransom:Win32/Agentus, Ransom.Win32.Agentus, and Win32/Agentus) is a crypto-ran... |
| alphaeon | Ransomware | 2 | Alphaeon (classified in antivirus detection telemetry under designations including Ransom:Win32/Alphaeon, Ransom.Win32.Alphaeon, and Win32/Alphaeon) is a crypto... |
| alreay | Ransomware | 2 | Alreay (classified in antivirus detection telemetry under designations including Ransom:Win32/Alreay, Ransom.Win32.Alreay, and Win32/Alreay) is a crypto-ransomw... |
| aque | Ransomware | 2 | Aque (classified in antivirus detection telemetry under designations including Ransom:Win32/Aque, Ransom.Win32.Aque, and Win32/Aque) is a crypto-ransomware desi... |
| arhost | Ransomware | 2 | Arhost (classified in antivirus detection telemetry under designations including Ransom:Win32/Arhost, Ransom.Win32.Arhost, and Win32/Arhost) is a crypto-ransomw... |
| bagsu | Ransomware | 2 | Bagsu (classified in antivirus detection telemetry under designations including Ransom:Win32/Bagsu, Ransom.Win32.Bagsu, and Win32/Bagsu) is a crypto-ransomware ... |
| banspy | Infostealer | 2 | Banspy (classified in antivirus detection telemetry under designations including PWS:Win32/Banspy, PWS.Win32.Banspy, and Win32/Banspy) is a dedicated informatio... |
| bccrypt | Ransomware | 2 | Bccrypt (classified in antivirus detection telemetry under designations including Ransom:Win32/Bccrypt, Ransom.Win32.Bccrypt, and Win32/Bccrypt) is a crypto-ran... |
| begseabug | Ransomware | 2 | Begseabug (classified in antivirus detection telemetry under designations including Ransom:Win32/Begseabug, Ransom.Win32.Begseabug, and Win32/Begseabug) is a cr... |
| bluewushu | Ransomware | 2 | Bluewushu (classified in antivirus detection telemetry under designations including Ransom:Win32/Bluewushu, Ransom.Win32.Bluewushu, and Win32/Bluewushu) is a cr... |
| boopcel | Ransomware | 2 | Boopcel (classified in antivirus detection telemetry under designations including Ransom:Win32/Boopcel, Ransom.Win32.Boopcel, and Win32/Boopcel) is a crypto-ran... |
| bruhorn | Ransomware | 2 | Bruhorn (classified in antivirus detection telemetry under designations including Ransom:Win32/Bruhorn, Ransom.Win32.Bruhorn, and Win32/Bruhorn) is a crypto-ran... |
| bustem | Ransomware | 2 | Bustem (classified in antivirus detection telemetry under designations including Ransom:Win32/Bustem, Ransom.Win32.Bustem, and Win32/Bustem) is a crypto-ransomw... |
| bybz | Ransomware | 2 | Bybz (classified in antivirus detection telemetry under designations including Ransom:Win32/Bybz, Ransom.Win32.Bybz, and Win32/Bybz) is a crypto-ransomware desi... |
| cakl | Ransomware | 2 | Cakl (classified in antivirus detection telemetry under designations including Ransom:Win32/Cakl, Ransom.Win32.Cakl, and Win32/Cakl) is a crypto-ransomware desi... |
| capredeam | Ransomware | 2 | Capredeam (classified in antivirus detection telemetry under designations including Ransom:Win32/Capredeam, Ransom.Win32.Capredeam, and Win32/Capredeam) is a cr... |
| cdvq | Ransomware | 2 | Cdvq (classified in antivirus detection telemetry under designations including Ransom:Win32/Cdvq, Ransom.Win32.Cdvq, and Win32/Cdvq) is a crypto-ransomware desi... |
| ceckno | Ransomware | 2 | Ceckno (classified in antivirus detection telemetry under designations including Ransom:Win32/Ceckno, Ransom.Win32.Ceckno, and Win32/Ceckno) is a crypto-ransomw... |
| chekafev | Ransomware | 2 | Trojan:Win32/Chekafev is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwa... |
| chistudi | Ransomware | 2 | Trojan:Win32/Chistudi is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwa... |
| chupik | Ransomware | 2 | Trojan:Win32/Chupik is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| cloverplus | Ransomware | 2 | Trojan:Win32/Cloverplus is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransom... |
| coantor | Ransomware | 2 | Trojan:Win32/Coantor is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwar... |
| cobra | Ransomware | 2 | Trojan:Win32/Cobra is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware,... |
| codewall | Ransomware | 2 | Trojan:Win32/Codewall is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwa... |
| comisproc | Ransomware | 2 | Trojan:Win32/Comisproc is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomw... |
| cordis | Ransomware | 2 | Trojan:Win32/Cordis is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| crime | Ransomware | 2 | Trojan:Win32/Crime is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware,... |
| crisisht | Ransomware | 2 | Trojan:Win32/Crisisht is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwa... |
| cryptoload | Ransomware | 2 | TrojanDownloader:Win32/Cryptoload is a specialized, highly obfuscated trojan component whose sole purpose is to establish initial access, bypass endpoint securi... |
| dacic | Ransomware | 2 | Trojan:Win32/Dacic is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware,... |
| darkneuron | Ransomware | 2 | Trojan:Win32/Darkneuron is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransom... |
| davobevix | Ransomware | 2 | Trojan:Win32/Davobevix is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomw... |
| dazi | Ransomware | 2 | Trojan:Win32/Dazi is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware, ... |
| deliric | Ransomware | 2 | Trojan:Win32/Deliric is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwar... |
| delpem | Ransomware | 2 | Trojan:Win32/Delpem is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| desurou | Ransomware | 2 | Trojan:Win32/Desurou is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwar... |
| detplock | Ransomware | 2 | Trojan:Win32/Detplock is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwa... |
| downloaderb | Ransomware | 2 | Trojan:Win32/Downloaderb is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ranso... |
| droma | Ransomware | 2 | Trojan:Win32/Droma is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware,... |
| ekisoli | Ransomware | 2 | Trojan:Win32/Ekisoli is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwar... |
| eszjuxuan | Ransomware | 2 | Trojan:Win32/Eszjuxuan is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomw... |
| etap | Ransomware | 2 | Trojan:Win32/Etap is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware, ... |
| facemoi | Ransomware | 2 | Trojan:Win32/Facemoi is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwar... |
| famvt | Ransomware | 2 | Trojan:Win32/Famvt is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware,... |
| fasem | Ransomware | 2 | Trojan:Win32/Fasem is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware,... |
| fdoh | Ransomware | 2 | Trojan:Win32/Fdoh is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware, ... |
| fearso | Ransomware | 2 | Trojan:Win32/Fearso is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| gena | Ransomware | 2 | Trojan:Win32/Gena is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware, ... |
| genasep | Ransomware | 2 | Trojan:Win32/Genasep is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwar... |
| genericrxaz | Ransomware | 2 | Malware:Win32/Genericrxaz is a highly generic heuristic detection name used as a 'catch-all' bucket by various antivirus engines. It does not represent a specif... |
| genericrxbx | Ransomware | 2 | Malware:Win32/Genericrxbx is a highly generic heuristic detection name used as a 'catch-all' bucket by various antivirus engines. It does not represent a specif... |
| genericrxca | Ransomware | 2 | Trojan:Win32/Genericrxca is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ranso... |
| genericrxdc | Ransomware | 2 | Malware:Win32/Genericrxdc is a highly generic heuristic detection name used as a 'catch-all' bucket by various antivirus engines. It does not represent a specif... |
| genericrxdm | Ransomware | 2 | Trojan:Win32/Genericrxdm is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ranso... |
| genericrxeq | Ransomware | 2 | Trojan:Win32/Genericrxeq is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ranso... |
| genericrxfq | Ransomware | 2 | Trojan:Win32/Genericrxfq is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ranso... |
| genericrxft | Ransomware | 2 | Trojan:Win32/Genericrxft is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ranso... |
| genericrxfv | Ransomware | 2 | Trojan:Win32/Genericrxfv is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ranso... |
| genericrxgj | Ransomware | 2 | Trojan:Win32/Genericrxgj is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ranso... |
| generictka | Trojan | 2 | Behavior:Win32/Generictka is a broad **Heuristic Detection** used by antivirus engines to flag files that exhibit highly suspicious, malware-like behaviors, eve... |
| genx | Ransomware | 2 | Trojan:Win32/Genx is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware, ... |
| gojdu | Ransomware | 2 | Trojan:Win32/Gojdu is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware,... |
| goppel | Ransomware | 2 | Trojan:Win32/Goppel is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| hallaj | Ransomware | 2 | Trojan:Win32/Hallaj is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| harnig | Ransomware | 2 | Trojan:Win32/Harnig is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| hbov | Ransomware | 2 | Trojan:Win32/Hbov is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware, ... |
| homles | Ransomware | 2 | Trojan:Win32/Homles is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| hostwack | Ransomware | 2 | Trojan:Win32/Hostwack is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwa... |
| hpgen | Ransomware | 2 | Trojan:Win32/Hpgen is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware,... |
| hrup | Ransomware | 2 | Trojan:Win32/Hrup is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware, ... |
| isnev | Ransomware | 2 | Trojan:Win32/Isnev is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware,... |
| isof | Ransomware | 2 | Trojan:Win32/Isof is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware, ... |
| itva | Ransomware | 2 | Trojan:Win32/Itva is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware, ... |
| jbomi | Ransomware | 2 | Trojan:Win32/Jbomi is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware,... |
| jyfi | Ransomware | 2 | Trojan:Win32/Jyfi is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware, ... |
| kate | Ransomware | 2 | Trojan:Win32/Kate is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware, ... |
| kovloer | Ransomware | 2 | Trojan:Win32/Kovloer is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwar... |
| krolol | Ransomware | 2 | Trojan:Win32/Krolol is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| leymo | Ransomware | 2 | Trojan:Win32/Leymo is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware,... |
| lightsee | Ransomware | 2 | Trojan:Win32/Lightsee is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwa... |
| ljoiner | Ransomware | 2 | HackTool:Win32/Ljoiner is a heuristic detection for utilities known as 'File Binders' or 'Joiners'. These are specialized tools used by malware authors to combi... |
| lojulox | Ransomware | 2 | Trojan:Win32/Lojulox is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwar... |
| ludicrouz | Ransomware | 2 | Trojan:Win32/Ludicrouz is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomw... |
| malushka | Ransomware | 2 | Trojan:Win32/Malushka is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwa... |
| malwares | Ransomware | 2 | Malware:Win32/Malwares is a highly generic heuristic detection name used as a 'catch-all' bucket by various antivirus engines. It does not represent a specific ... |
| manbat | Ransomware | 2 | Trojan:Win32/Manbat is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| mantana | Ransomware | 2 | Trojan:Win32/Mantana is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwar... |
| matsnu | Ransomware | 2 | Trojan:Win32/Matsnu is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| mimilove | Ransomware | 2 | Trojan:Win32/Mimilove is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwa... |
| minggy | Ransomware | 2 | Trojan:Win32/Minggy is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| moljec | Ransomware | 2 | Trojan:Win32/Moljec is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| mresmon | Ransomware | 2 | Trojan:Win32/Mresmon is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwar... |
| msposer | Ransomware | 2 | Trojan:Win32/Msposer is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwar... |
| murlo | Ransomware | 2 | Trojan:Win32/Murlo is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware,... |
| narcha | Ransomware | 2 | Trojan:Win32/Narcha is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| nebuler | Ransomware | 2 | Trojan:Win32/Nebuler is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwar... |
| nosok | Ransomware | 2 | Trojan:Win32/Nosok is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware,... |
| nscauth | Ransomware | 2 | Trojan:Win32/Nscauth is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwar... |
| offend | Ransomware | 2 | Trojan:Win32/Offend is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| olala | Ransomware | 2 | Trojan:Win32/Olala is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware,... |
| oligo | Ransomware | 2 | Trojan:Win32/Oligo is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware,... |
| outbreak | Ransomware | 2 | Trojan:Win32/Outbreak is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwa... |
| pacex | Ransomware | 2 | Trojan:Win32/Pacex is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware,... |
| perkesh | Ransomware | 2 | Trojan:Win32/Perkesh is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwar... |
| pfoenic | Ransomware | 2 | Trojan:Win32/Pfoenic is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwar... |
| pieshua | Ransomware | 2 | Trojan:Win32/Pieshua is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwar... |
| piker | Ransomware | 2 | Trojan:Win32/Piker is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware,... |
| pincher | Ransomware | 2 | Trojan:Win32/Pincher is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwar... |
| pjtbinder | Ransomware | 2 | HackTool:Win32/Pjtbinder is a heuristic detection for a specific family of 'File Binders' or 'Joiners'. These are specialized utilities utilized by malware auth... |
| plimrost | Ransomware | 2 | Trojan:Win32/Plimrost is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwa... |
| pophot | Ransomware | 2 | Trojan:Win32/Pophot is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| pramro | Ransomware | 2 | Trojan:Win32/Pramro is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| psyokym | Ransomware | 2 | Trojan:Win32/Psyokym is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwar... |
| quchispy | Ransomware | 2 | Trojan:Win32/Quchispy is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwa... |
| rapkill | Ransomware | 2 | Trojan:Win32/Rapkill is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwar... |
| refpron | Ransomware | 2 | Trojan:Win32/Refpron is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwar... |
| remas | Ransomware | 2 | Trojan:Win32/Remas is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware,... |
| renaz | Ransomware | 2 | Trojan:Win32/Renaz is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware,... |
| rifbu | Ransomware | 2 | Trojan:Win32/Rifbu is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware,... |
| rofin | Ransomware | 2 | Trojan:Win32/Rofin is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware,... |
| ruby | Ransomware | 2 | Trojan:Win32/Ruby is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware, ... |
| ructo | Ransomware | 2 | Trojan:Win32/Ructo is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware,... |
| rukoma | Ransomware | 2 | Trojan:Win32/Rukoma is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| ryzerlo | Ransomware | 2 | Trojan:Win32/Ryzerlo is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwar... |
| selltim | Ransomware | 2 | Trojan:Win32/Selltim is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwar... |
| seodec | Ransomware | 2 | Trojan:Win32/Seodec is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| sheldor | Ransomware | 2 | Trojan:Win32/Sheldor is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwar... |
| shrejh | Ransomware | 2 | Trojan:Win32/Shrejh is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| shufab | Ransomware | 2 | Trojan:Win32/Shufab is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| silcon | Ransomware | 2 | Trojan:Win32/Silcon is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| slipafext | Ransomware | 2 | Trojan:Win32/Slipafext is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomw... |
| snoload | Ransomware | 2 | TrojanDownloader:Win32/Snoload is a stealthy, first-stage downloader designed specifically to establish a foothold on a compromised system and securely retrieve... |
| sorcurat | Ransomware | 2 | Trojan:Win32/Sorcurat is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwa... |
| soul | Ransomware | 2 | Trojan:Win32/Soul is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware, ... |
| ssebot | Ransomware | 2 | Trojan:Win32/Ssebot is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| sysdrop | Ransomware | 2 | Trojan:Win32/Sysdrop is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwar... |
| tarifarch | Ransomware | 2 | Trojan:Win32/Tarifarch is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomw... |
| tirrip | Ransomware | 2 | Trojan:Win32/Tirrip is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| tnega | Ransomware | 2 | Trojan:Win32/Tnega is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware,... |
| toauta | Ransomware | 2 | Trojan:Win32/Toauta is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| togapy | Ransomware | 2 | Trojan:Win32/Togapy is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| torr | Ransomware | 2 | Trojan:Win32/Torr is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware, ... |
| trabin | Ransomware | 2 | Trojan:Win32/Trabin is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| trafog | Ransomware | 2 | Trojan:Win32/Trafog is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| tulong | Ransomware | 2 | Trojan:Win32/Tulong is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| tvido | Ransomware | 2 | Trojan:Win32/Tvido is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware,... |
| typic | Ransomware | 2 | Trojan:Win32/Typic is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware,... |
| tzabf | Ransomware | 2 | Trojan:Win32/Tzabf is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware,... |
| ufraie | Ransomware | 2 | Trojan:Win32/Ufraie is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| uloader | Ransomware | 2 | Trojan:Win32/Uloader is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwar... |
| utoti | Ransomware | 2 | Trojan:Win32/Utoti is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware,... |
| vake | Ransomware | 2 | Trojan:Win32/Vake is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware, ... |
| vbcheman | Ransomware | 2 | Trojan:Win32/Vbcheman is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwa... |
| vedpoz | Ransomware | 2 | Trojan:Win32/Vedpoz is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| virtum | Ransomware | 2 | Trojan:Win32/Virtum is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| virtumod | Ransomware | 2 | Trojan:Win32/Virtumod is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwa... |
| vkdj | Ransomware | 2 | Trojan:Win32/Vkdj is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware, ... |
| webhat | Ransomware | 2 | Trojan:Win32/Webhat is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| wemosis | Ransomware | 2 | Trojan:Win32/Wemosis is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwar... |
| wiliky | Ransomware | 2 | Trojan:Win32/Wiliky is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| windapp | Ransomware | 2 | Trojan:Win32/Windapp is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwar... |
| writos | Ransomware | 2 | Trojan:Win32/Writos is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| xanfpezes | Ransomware | 2 | Trojan:Win32/Xanfpezes is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomw... |
| xdisccorp | Ransomware | 2 | Trojan:Win32/Xdisccorp is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomw... |
| xiaoba | Ransomware | 2 | Trojan:Win32/Xiaoba is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| xiquitir | Ransomware | 2 | Trojan:Win32/Xiquitir is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwa... |
| xkit | Ransomware | 2 | Exploit:Win32/Xkit is a heuristic detection applied to network traffic, web pages, or payloads associated with Exploit Kits (EKs). Exploit Kits (like RIG, Angle... |
| xpun | Ransomware | 2 | Trojan:Win32/Xpun is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware, ... |
| xxyheo | Ransomware | 2 | Trojan:Win32/Xxyheo is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| yabinder | Ransomware | 2 | HackTool:Win32/Yabinder is a utility program used maliciously by threat actors to combine (or 'bind') multiple executable files into a single, seamless executab... |
| yobdam | Ransomware | 2 | Trojan:Win32/Yobdam is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| zapinit | Ransomware | 2 | Trojan:Win32/Zapinit is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwar... |
| zeleffo | Ransomware | 2 | Trojan:Win32/Zeleffo is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwar... |
| zjaisino | Ransomware | 2 | Trojan:Win32/Zjaisino is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwa... |
| 0y0auaszpblb | Ransomware | 1 | 0Y0Auaszpblb (classified in antivirus detection telemetry under designations including Ransom:Win32/0Y0Auaszpblb, Ransom.Win32.0Y0Auaszpblb, and Win32/0Y0Auaszp... |
| 0y1a48lx2yib | Ransomware | 1 | 0Y1A48Lx2Yib (classified in antivirus detection telemetry under designations including Ransom:Win32/0Y1A48Lx2Yib, Ransom.Win32.0Y1A48Lx2Yib, and Win32/0Y1A48Lx2... |
| 1fb728f | Ransomware | 1 | 1Fb728F (classified in antivirus detection telemetry under designations including Ransom:Win32/1Fb728F, Ransom.Win32.1Fb728F, and Win32/1Fb728F) is a crypto-ran... |
| 27d3e5bc | Ransomware | 1 | 27D3E5Bc (classified in antivirus detection telemetry under designations including Ransom:Win32/27D3E5Bc, Ransom.Win32.27D3E5Bc, and Win32/27D3E5Bc) is a crypto... |
| 5z0ba4mkpih | Ransomware | 1 | 5Z0Ba4Mkpih (classified in antivirus detection telemetry under designations including Ransom:Win32/5Z0Ba4Mkpih, Ransom.Win32.5Z0Ba4Mkpih, and Win32/5Z0Ba4Mkpih)... |
| 6b47672c | Trojan | 1 | 6B47672C (classified in antivirus detection telemetry under designations including Trojan:Win32/6B47672C, Trojan.Win32.6B47672C, and Win32/6B47672C) is a multi-... |
| a8p9eklc | Trojan | 1 | A8P9Eklc (classified in antivirus detection telemetry under designations including Trojan:Win32/A8P9Eklc, Trojan.Win32.A8P9Eklc, and Win32/A8P9Eklc) is a multi-... |
| adcrypterlib | Ransomware | 1 | Adcrypterlib (classified in antivirus detection telemetry under designations including Ransom:Win32/Adcrypterlib, Ransom.Win32.Adcrypterlib, and Win32/Adcrypter... |
| agile | Ransomware | 1 | Agile (classified in antivirus detection telemetry under designations including Ransom:Win32/Agile, Ransom.Win32.Agile, and Win32/Agile) is a crypto-ransomware ... |
| akely | Ransomware | 1 | Akely (classified in antivirus detection telemetry under designations including Ransom:Win32/Akely, Ransom.Win32.Akely, and Win32/Akely) is a crypto-ransomware ... |
| alyak | Trojan | 1 | Alyak (classified in antivirus detection telemetry under designations including Trojan:Win32/Alyak, Trojan.Win32.Alyak, and Win32/Alyak) is a multi-stage trojan... |
| amgfaohk2uf | Ransomware | 1 | Amgfaohk2Uf (classified in antivirus detection telemetry under designations including Ransom:Win32/Amgfaohk2Uf, Ransom.Win32.Amgfaohk2Uf, and Win32/Amgfaohk2Uf)... |
| amgfvjgvdoaan | Ransomware | 1 | Amgfvjgvdoaan (classified in antivirus detection telemetry under designations including Ransom:Win32/Amgfvjgvdoaan, Ransom.Win32.Amgfvjgvdoaan, and Win32/Amgfvj... |
| atom | Ransomware | 1 | Atom (classified in antivirus detection telemetry under designations including Ransom:Win32/Atom, Ransom.Win32.Atom, and Win32/Atom) is a crypto-ransomware desi... |
| axbn | Ransomware | 1 | Axbn (classified in antivirus detection telemetry under designations including Ransom:Win32/Axbn, Ransom.Win32.Axbn, and Win32/Axbn) is a crypto-ransomware desi... |
| azero | Ransomware | 1 | Azero (classified in antivirus detection telemetry under designations including Ransom:Win32/Azero, Ransom.Win32.Azero, and Win32/Azero) is a crypto-ransomware ... |
| badjoke | Ransomware | 1 | Badjoke (classified in antivirus detection telemetry under designations including Ransom:Win32/Badjoke, Ransom.Win32.Badjoke, and Win32/Badjoke) is a crypto-ran... |
| bagif | Ransomware | 1 | Bagif (classified in antivirus detection telemetry under designations including Ransom:Win32/Bagif, Ransom.Win32.Bagif, and Win32/Bagif) is a crypto-ransomware ... |
| baryumka | Ransomware | 1 | Baryumka (classified in antivirus detection telemetry under designations including Ransom:Win32/Baryumka, Ransom.Win32.Baryumka, and Win32/Baryumka) is a crypto... |
| be3auestydmi | Trojan | 1 | Be3Auestydmi (classified in antivirus detection telemetry under designations including Trojan:Win32/Be3Auestydmi, Trojan.Win32.Be3Auestydmi, and Win32/Be3Auesty... |
| betkrypt | Ransomware | 1 | Betkrypt (classified in antivirus detection telemetry under designations including Ransom:Win32/Betkrypt, Ransom.Win32.Betkrypt, and Win32/Betkrypt) is a crypto... |
| blacoleref | Ransomware | 1 | Blacoleref (classified in antivirus detection telemetry under designations including Ransom:Win32/Blacoleref, Ransom.Win32.Blacoleref, and Win32/Blacoleref) is ... |
| blind | Ransomware | 1 | Blind (classified in antivirus detection telemetry under designations including Ransom:Win32/Blind, Ransom.Win32.Blind, and Win32/Blind) is a crypto-ransomware ... |
| blokrypt | Ransomware | 1 | Blokrypt (classified in antivirus detection telemetry under designations including Ransom:Win32/Blokrypt, Ransom.Win32.Blokrypt, and Win32/Blokrypt) is a crypto... |
| blueeagle | Ransomware | 1 | Blueeagle (classified in antivirus detection telemetry under designations including Ransom:Win32/Blueeagle, Ransom.Win32.Blueeagle, and Win32/Blueeagle) is a cr... |
| bmkfxasqf6ki | Trojan | 1 | Bmkfxasqf6Ki (classified in antivirus detection telemetry under designations including Trojan:Win32/Bmkfxasqf6Ki, Trojan.Win32.Bmkfxasqf6Ki, and Win32/Bmkfxasqf... |
| bnuaaewgb2fb | Ransomware | 1 | Bnuaaewgb2Fb (classified in antivirus detection telemetry under designations including Ransom:Win32/Bnuaaewgb2Fb, Ransom.Win32.Bnuaaewgb2Fb, and Win32/Bnuaaewgb... |
| bredavi | Ransomware | 1 | Bredavi (classified in antivirus detection telemetry under designations including Ransom:Win32/Bredavi, Ransom.Win32.Bredavi, and Win32/Bredavi) is a crypto-ran... |
| broduplo | Ransomware | 1 | Broduplo (classified in antivirus detection telemetry under designations including Ransom:Win32/Broduplo, Ransom.Win32.Broduplo, and Win32/Broduplo) is a crypto... |
| bsdownloader | Trojan Downloader | 1 | Bsdownloader (classified in antivirus detection telemetry under designations including TrojanDownloader:Win32/Bsdownloader, TrojanDownloader.Win32.Bsdownloader,... |
| busky | Ransomware | 1 | Busky (classified in antivirus detection telemetry under designations including Ransom:Win32/Busky, Ransom.Win32.Busky, and Win32/Busky) is a crypto-ransomware ... |
| bwod | Ransomware | 1 | Bwod (classified in antivirus detection telemetry under designations including Ransom:Win32/Bwod, Ransom.Win32.Bwod, and Win32/Bwod) is a crypto-ransomware desi... |
| caae34dd | Ransomware | 1 | Caae34Dd (classified in antivirus detection telemetry under designations including Ransom:Win32/Caae34Dd, Ransom.Win32.Caae34Dd, and Win32/Caae34Dd) is a crypto... |
| cafecup | Ransomware | 1 | Cafecup (classified in antivirus detection telemetry under designations including Ransom:Win32/Cafecup, Ransom.Win32.Cafecup, and Win32/Cafecup) is a crypto-ran... |
| cardtool | Trojan | 1 | Cardtool (classified in antivirus detection telemetry under designations including Trojan:Win32/Cardtool, Trojan.Win32.Cardtool, and Win32/Cardtool) is a multi-... |
| cbot | Ransomware | 1 | Cbot (classified in antivirus detection telemetry under designations including Ransom:Win32/Cbot, Ransom.Win32.Cbot, and Win32/Cbot) is a crypto-ransomware desi... |
| cebot | Ransomware | 1 | Cebot (classified in antivirus detection telemetry under designations including Ransom:Win32/Cebot, Ransom.Win32.Cebot, and Win32/Cebot) is a crypto-ransomware ... |
| chepdu | Ransomware | 1 | Trojan:Win32/Chepdu is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| ciyaamgnrsg | Ransomware | 1 | Trojan:Win32/Ciyaamgnrsg (or similar auto-generated alphanumeric strings) represents the antivirus industry's response to highly polymorphic malware or Domain G... |
| cleaman | Ransomware | 1 | Trojan:Win32/Cleaman is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwar... |
| clhf | Ransomware | 1 | TrojanDownloader:Win32/Clhf is a specialized trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads. Unlike a backdo... |
| clipspy | Advanced Threat | 1 | <h3>Executive Summary</h3> ClipSpy is a utility designed to monitor, inspect, and log the contents of the Windows system clipboard. While it can be utilized leg... |
| cmgfaeflb9e | Ransomware | 1 | <h3>Executive Summary</h3> CMGFAEFLB9E is an automated, signature-based detection name used by security engines to identify a highly obfuscated, randomly genera... |
| code | Ransomware | 1 | Trojan:Win32/Code (or Exploit:JS/Code, Script:VBS/Code) is a generic classification denoting the detection of malicious scripting or raw exploit code, rather th... |
| cosratu | Ransomware | 1 | Trojan:Win32/Cosratu is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwar... |
| crifi | Ransomware | 1 | Trojan:Win32/Crifi is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware,... |
| crispit | Ransomware | 1 | Trojan:Win32/Crispit is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwar... |
| cryptowall | Ransomware | 1 | CryptoWall is a family of file-encrypting ransomware analyzed by the Dell SecureWorks Counter Threat Unit (CTU). First analyzed in late February 2014 but distri... |
| csom | Ransomware | 1 | Trojan:Win32/Csom is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware, ... |
| cypress | Ransomware | 1 | Trojan:Win32/Cypress is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwar... |
| dalbot | Ransomware | 1 | Trojan:Win32/Dalbot is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| datper | Ransomware | 1 | Trojan:Win32/Datper is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| defmid | Ransomware | 1 | Trojan:Win32/Defmid is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| delphinjector | Ransomware | 1 | Trojan:Win32/Delphinjector is a generic classification for malware or specialized droppers written in Delphi whose primary function is Process Injection (`T1055... |
| doqv | Ransomware | 1 | Trojan:Win32/Doqv is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware, ... |
| drefir | Ransomware | 1 | Trojan:Win32/Drefir is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| drooptroop | Trojan | 1 | <h3>Executive Summary</h3> Drooptroop is a highly specialized Dropper and Loader tool, frequently associated with Advanced Persistent Threat (APT) groups. Unlik... |
| drowor | Ransomware | 1 | Trojan:Win32/Drowor is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| dupate | Ransomware | 1 | Trojan:Win32/Dupate is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| e13044af | Ransomware | 1 | <h3>Executive Summary</h3> E13044af is a heuristic detection name, typically representing a partial hash (like MD5 or SHA-256) assigned to a highly obfuscated o... |
| e2f3f4d | Ransomware | 1 | <h3>Executive Summary</h3> "e2f3f4d" (and similar purely hexadecimal strings) represents a strict, static hash-based detection signature utilized by antivirus e... |
| eb149b | Ransomware | 1 | <h3>Executive Summary</h3> "Eb149b" is a generic detection identifier utilized by heuristic antivirus engines and endpoint protection platforms (EPP). It does n... |
| ei0frdaui | Ransomware | 1 | Trojan:Win32/Ei0frdaui (or similar auto-generated strings) represents the antivirus industry's response to highly polymorphic malware or Domain Generation Algor... |
| eicardemo | Advanced Threat | 1 | <h3>Executive Summary</h3> EICAR Demo (or the EICAR Standard Anti-Virus Test File) is **NOT MALWARE**. It is a safe, standardized, and internationally recognize... |
| emgfamt7gjgi | Trojan | 1 | <h3>Executive Summary</h3> "Emgfamt7gjgi" is a machine-generated detection signature utilized by advanced heuristic antivirus engines. It does not identify a sp... |
| emmfaeuirscb | Ransomware | 1 | Trojan:Win32/Emmfaeuirscb (or similar auto-generated strings) represents the antivirus industry's response to highly polymorphic malware or Domain Generation Al... |
| esprot | Ransomware | 1 | Trojan:Win32/Esprot is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| estapa | Ransomware | 1 | Trojan:Win32/Estapa is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| evillocker | Ransomware | 1 | <h3>Executive Summary</h3> EvilLocker is a highly destructive Ransomware family designed to extort financial payment from victims by encrypting their critical d... |
| excrevie | Ransomware | 1 | Trojan:Win32/Excrevie is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwa... |
| familykeylogger | Advanced Threat | 1 | <h3>Executive Summary</h3> FamilyKeylogger is a commercial surveillance application, often marketed to parents for monitoring children, but widely classified by... |
| farsistall | Ransomware | 1 | Trojan:Win32/Farsistall is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransom... |
| fastpc | Ransomware | 1 | <h3>Executive Summary</h3> FastPC (often branded under various iterations of "Fast PC Optimizer" or "PC Speedup") is a prevalent example of Rogue Security Softw... |
| fayu | Ransomware | 1 | Trojan:Win32/Fayu is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware, ... |
| fcb569f | Trojan | 1 | <h3>Executive Summary</h3> "Fcb569f" (or similar alphanumeric strings like Trojan.Fcb569f) is a machine-generated detection signature utilized by advanced heuri... |
| fgarb | Ransomware | 1 | Trojan:Win32/Fgarb is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware,... |
| figyek | Ransomware | 1 | Trojan:Win32/Figyek is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| filoskeed | Ransomware | 1 | Trojan:Win32/Filoskeed is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomw... |
| flinject | Ransomware | 1 | <h3>Executive Summary</h3> FLInject (often flagged as Trojan.Inject or Injector.FLInject) is a specific, malicious utility designed solely to perform code injec... |
| flowershop | Ransomware | 1 | Trojan:Win32/Flowershop is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransom... |
| flusihoc | Ransomware | 1 | Trojan:Win32/Flusihoc is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwa... |
| flystudi | Ransomware | 1 | Trojan:Win32/Flystudi is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwa... |
| fnwabyxmbkm | Ransomware | 1 | Trojan:Win32/Fnwabyxmbkm (or similar auto-generated strings) represents the antivirus industry's response to highly polymorphic malware or Domain Generation Alg... |
| forbot | Ransomware | 1 | Trojan:Win32/Forbot is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| foxhiex | Ransomware | 1 | Trojan:Win32/Foxhiex is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwar... |
| fz4aaueo2jhi | Ransomware | 1 | Trojan:Win32/Fz4aaueo2jhi (or similar auto-generated strings) represents the antivirus industry's response to highly polymorphic malware or Domain Generation Al... |
| gemius | Advanced Threat | 1 | <h3>Executive Summary</h3> Gemius is a prominent web analytics and audience measurement technology. While technically a legitimate commercial service used by we... |
| genericrxaf | Ransomware | 1 | Trojan:Win32/Genericrxaf is a generic, heuristic detection string utilized by antivirus engines (like Microsoft Defender) to flag a file that exhibits highly su... |
| genericrxal | Ransomware | 1 | Trojan:Win32/Genericrxal is a generic, heuristic detection string utilized by antivirus engines (like Microsoft Defender) to flag a file that exhibits highly su... |
| genericrxam | Ransomware | 1 | Trojan:Win32/Genericrxam is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ranso... |
| genericrxbm | Ransomware | 1 | Trojan:Win32/Genericrxbm is a generic, heuristic detection string utilized by antivirus engines (like Microsoft Defender) to flag a file that exhibits highly su... |
| genericrxbp | Ransomware | 1 | <h3>Executive Summary</h3> "Genericrxbp" is an automated, heuristic detection identifier utilized by endpoint protection platforms (EPP) to flag highly suspicio... |
| genericrxbw | Ransomware | 1 | Trojan:Win32/Genericrxbw is a generic, heuristic detection string utilized by antivirus engines (like Microsoft Defender) to flag a file that exhibits highly su... |
| genericrxch | Ransomware | 1 | <h3>Executive Summary</h3> "GenericRxch" (often displayed as Generic.Rxch or Trojan.GenericRxch) is a broad, machine-generated heuristic detection signature uti... |
| genericrxci | Ransomware | 1 | Trojan:Win32/Genericrxci is a generic, heuristic detection string utilized by antivirus engines (like Microsoft Defender) to flag a file that exhibits highly su... |
| genericrxck | Ransomware | 1 | Trojan:Win32/Genericrxck is a generic, heuristic detection string utilized by antivirus engines (like Microsoft Defender) to flag a file that exhibits highly su... |
| genericrxcp | Ransomware | 1 | Trojan:Win32/Genericrxcp is a generic, heuristic detection string utilized by antivirus engines (like Microsoft Defender) to flag a file that exhibits highly su... |
| genericrxcs | Ransomware | 1 | <h3>Executive Summary</h3> "GenericRxcs" (often displayed as Trojan.GenericRxcs or Heur.GenericRxcs) is a broad, machine-generated heuristic detection signature... |
| genericrxcw | Ransomware | 1 | Trojan:Win32/Genericrxcw is a generic, heuristic detection string utilized by antivirus engines (like Microsoft Defender) to flag a file that exhibits highly su... |
| genericrxcy | Ransomware | 1 | Trojan:Win32/Genericrxcy is a generic, heuristic detection string utilized by antivirus engines (like Microsoft Defender) to flag a file that exhibits highly su... |
| genericrxde | Ransomware | 1 | Trojan:Win32/Genericrxde is a generic, heuristic detection string utilized by antivirus engines (like Microsoft Defender) to flag a file that exhibits highly su... |
| genericrxdf | Ransomware | 1 | Trojan:Win32/Genericrxdf is a generic, heuristic detection string utilized by antivirus engines (like Microsoft Defender) to flag a file that exhibits highly su... |
| genericrxdi | Ransomware | 1 | <h3>Executive Summary</h3> "Genericrxdi" is an automated, heuristic detection identifier utilized by endpoint protection platforms (EPP) to flag highly suspicio... |
| genericrxdx | Ransomware | 1 | Trojan:Win32/Genericrxdx is a generic, heuristic detection string utilized by antivirus engines (like Microsoft Defender) to flag a file that exhibits highly su... |
| genericrxeb | Ransomware | 1 | Trojan:Win32/Genericrxeb is a generic, heuristic detection string utilized by antivirus engines (like Microsoft Defender) to flag a file that exhibits highly su... |
| genericrxed | Ransomware | 1 | <h3>Executive Summary</h3> "Genericrxed" is an automated, heuristic detection identifier utilized by endpoint protection platforms (EPP) to flag highly suspicio... |
| genericrxeh | Ransomware | 1 | <h3>Executive Summary</h3> "Genericrxeh" is an automated, heuristic detection identifier utilized by endpoint protection platforms (EPP) to flag highly suspicio... |
| genericrxex | Ransomware | 1 | <h3>Executive Summary</h3> "Genericrxex" is not a distinct malware family but a generic heuristic identifier utilized by various antivirus and endpoint protecti... |
| genericrxfe | Ransomware | 1 | Trojan:Win32/Genericrxfe is a generic, heuristic detection string utilized by antivirus engines (like Microsoft Defender) to flag a file that exhibits highly su... |
| genericrxfh | Ransomware | 1 | <h3>Executive Summary</h3> "Genericrxfh" is an automated, heuristic detection identifier utilized by endpoint protection platforms (EPP) to flag highly suspicio... |
| genericrxfo | Ransomware | 1 | Trojan:Win32/Genericrxfo is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ranso... |
| genericrxfp | Ransomware | 1 | <h3>Executive Summary</h3> "Genericrxfp" is an automated, heuristic detection identifier utilized by endpoint protection platforms (EPP) to flag highly suspicio... |
| genericrxfs | Ransomware | 1 | <h3>Executive Summary</h3> "Genericrxfs" is an automated, heuristic detection identifier utilized by endpoint protection platforms (EPP) to flag highly suspicio... |
| genericrxfu | Ransomware | 1 | <h3>Executive Summary</h3> "Genericrxfu" is an automated, heuristic detection identifier utilized by endpoint protection platforms (EPP) to flag highly suspicio... |
| genericrxgq | Ransomware | 1 | <h3>Executive Summary</h3> "GenericRxgq" (often displayed as Trojan.GenericRxgq or Heur.GenericRxgq) is a broad, machine-generated heuristic detection signature... |
| genericrxgr | Ransomware | 1 | <h3>Executive Summary</h3> "GenericRxgr" (often displayed as Generic.Rxgr or Trojan.GenericRxgr) is a broad, machine-generated heuristic detection signature uti... |
| gentromal | Ransomware | 1 | <h3>Executive Summary</h3> Gentromal (often displayed as Trojan.Gentromal or Generic.Gentromal) is a broad, machine-generated heuristic detection signature util... |
| goodpic | Ransomware | 1 | Trojan:Win32/Goodpic is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwar... |
| graybird | Ransomware | 1 | Trojan:Win32/Graybird is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwa... |
| hamaetot | Ransomware | 1 | Trojan:Win32/Hamaetot is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwa... |
| happy | Ransomware | 1 | Trojan:Win32/Happy is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware,... |
| hc4cakjs5bhi | Ransomware | 1 | Trojan:Win32/Hc4cakjs5bhi (or similar auto-generated strings) represents the antivirus industry's response to highly polymorphic malware or Domain Generation Al... |
| headache | Ransomware | 1 | Trojan:Win32/Headache is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwa... |
| hexloader | Ransomware | 1 | Trojan:Win32/Hexloader is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomw... |
| hexzone | Ransomware | 1 | Trojan:Win32/Hexzone is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwar... |
| hkautoit | Trojan | 1 | Trojan:Win32/Hkautoit denotes a malicious payload that has been compiled using AutoIt, a legitimate Windows scripting language designed for automating UI tasks.... |
| hkmain | Ransomware | 1 | Trojan:Win32/Hkmain is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| hokobot | Ransomware | 1 | Trojan:Win32/Hokobot is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwar... |
| ident | Ransomware | 1 | Trojan:Win32/Ident is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware,... |
| imqaaem1agai | Trojan | 1 | <h3>Executive Summary</h3> "Imqaaem1agai" is a machine-generated detection signature utilized by advanced heuristic antivirus engines. It does not identify a sp... |
| indigorose | Trojan | 1 | <h3>Executive Summary</h3> "IndigoRose" refers to detections associated with AutoPlay Media Studio (and related products) developed by Indigo Rose Software. Thi... |
| inexsmar | Trojan | 1 | <h3>Executive Summary</h3> Inexsmar is a highly customized downloader Trojan primarily known for its role in delivering the Darkhotel APT (Advanced Persistent T... |
| jakyllhyde | Ransomware | 1 | <h3>Executive Summary</h3> JakyllHyde (a portmanteau of Jekyll and Hyde) is a highly evasive, two-faced malware family known for its polymorphic characteristics... |
| jatif | Ransomware | 1 | Trojan:Win32/Jatif is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware,... |
| jhee | Ransomware | 1 | Trojan:Win32/Jhee is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware, ... |
| jnkfasgyvyo | Ransomware | 1 | Trojan:Win32/Jnkfasgyvyo (or similar auto-generated strings) represents the antivirus industry's response to highly polymorphic malware or Domain Generation Alg... |
| jo0br8hglsii | Ransomware | 1 | Trojan:Win32/Jo0br8hglsii (or similar auto-generated strings) represents the antivirus industry's response to highly polymorphic malware or Domain Generation Al... |
| jscriptwrap | Ransomware | 1 | <h3>Executive Summary</h3> JScriptWrap is not a specific malware family, but rather a detection signature for a specific malicious obfuscation and evasion techn... |
| juntador | Trojan | 1 | <h3>Executive Summary</h3> Juntador is not a traditional standalone malware family, but rather a specific classification for a "Binder" or "Joiner" utility. The... |
| karius | Ransomware | 1 | Trojan:Win32/Karius is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| kazus | Ransomware | 1 | Trojan:Win32/Kazus is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware,... |
| keyboarddisable | Ransomware | 1 | <h3>Executive Summary</h3> "KeyboardDisable" is not a fully-featured malware family, but rather a specific, malicious payload component or behavioral symptom of... |
| keydownload | Ransomware | 1 | <h3>Executive Summary</h3> Keydownload is a classification for a specific category of Trojan Downloaders. Unlike highly sophisticated backdoors, Keydownload mal... |
| killall | Ransomware | 1 | <h3>Executive Summary</h3> KillAll is a classification for malicious scripts, utilities, or "HackTools" specifically designed to aggressively terminate running ... |
| killnotes | Ransomware | 1 | Trojan:Win32/Killnotes is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomw... |
| krament | Ransomware | 1 | Trojan:Win32/Krament is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwar... |
| krdr | Ransomware | 1 | Trojan:Win32/Krdr is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware, ... |
| kryptstarter | Ransomware | 1 | <h3>Executive Summary</h3> Kryptstarter (often referred to as Kryptik or Kryptik.Starter) is a generic classification for a malicious downloader or initial acce... |
| kykymber | Ransomware | 1 | Trojan:Win32/Kykymber is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwa... |
| kz4aamkfbloj | Ransomware | 1 | <h3>Executive Summary</h3> KZ4AAMKFBLOJ is an automated, signature-based detection name used by security engines to identify a highly obfuscated, randomly gener... |
| ledruppi | Ransomware | 1 | Trojan:Win32/Ledruppi is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwa... |
| leopard | Ransomware | 1 | Trojan:Win32/Leopard is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwar... |
| lightmoon | Ransomware | 1 | Trojan:Win32/Lightmoon is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomw... |
| liimpact | Ransomware | 1 | Trojan:Win32/Liimpact is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwa... |
| lmkfrhivlcfba | Trojan | 1 | <h3>Executive Summary</h3> "Lmkfrhivlcfba" is a machine-generated detection signature utilized by advanced heuristic antivirus engines. It does not identify a s... |
| lpt8mkfbyfsjgnkb | Ransomware | 1 | <h3>Executive Summary</h3> LPT8MKFBYFSJGNKB is an automated, signature-based detection name used by security engines to identify a highly obfuscated, randomly g... |
| luna | Ransomware | 1 | Trojan:Win32/Luna is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware, ... |
| lyckriks | Ransomware | 1 | Trojan:Win32/Lyckriks is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwa... |
| machaer | Ransomware | 1 | Trojan:Win32/Machaer is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwar... |
| magnat | Ransomware | 1 | Trojan:Win32/Magnat is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| magni | Ransomware | 1 | Trojan:Win32/Magni is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware,... |
| malmaker | Ransomware | 1 | <h3>Executive Summary</h3> "Malmaker" (often flagged as HackTool.Malmaker or Riskware.MalwareBuilder) is not a specific malware family, but a detection classifi... |
| mamianune | Ransomware | 1 | Trojan:Win32/Mamianune is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomw... |
| meinhudong | Ransomware | 1 | Trojan:Win32/Meinhudong is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransom... |
| mezzo | Ransomware | 1 | Trojan:Win32/Mezzo is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware,... |
| mi0ax8mhb4ji | Ransomware | 1 | <h3>Executive Summary</h3> MI0AX8MHB4JI is an automated, signature-based detection name used by security engines to identify a highly obfuscated, randomly gener... |
| mirkov | Ransomware | 1 | Trojan:Win32/Mirkov is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| mmsfrmqm16ci | Ransomware | 1 | Trojan:Win32/Mmsfrmqm16ci (or similar auto-generated strings) represents the antivirus industry's response to highly polymorphic malware or Domain Generation Al... |
| mofin | Ransomware | 1 | Trojan:Win32/Mofin is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware,... |
| molebox | Advanced Threat | 1 | <h3>Executive Summary</h3> Molebox is a dual-use technology. Originally developed as a legitimate commercial software virtualization and packing utility (design... |
| mosu | Ransomware | 1 | Trojan:Win32/Mosu is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware, ... |
| mrdec | Ransomware | 1 | Trojan:Win32/Mrdec is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware,... |
| multijoiner | Trojan | 1 | <h3>Executive Summary</h3> MultiJoiner is a specialized "HackTool" and utility program designed specifically for malicious file bundling. Also known as a "binde... |
| multim | Ransomware | 1 | Trojan:Win32/Multim is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| mutuodo | Ransomware | 1 | Trojan:Win32/Mutuodo is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwar... |
| nabasa | Ransomware | 1 | Trojan:Win32/Nabasa is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| naco | Ransomware | 1 | Trojan:Win32/Naco is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware, ... |
| nadrac | Ransomware | 1 | Trojan:Win32/Nadrac is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| nbcont | Ransomware | 1 | Trojan:Win32/Nbcont is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| nemucod | Ransomware | 1 | TrojanDownloader:JS/Nemucod (or VBS/Nemucod) is one of the most prolific and historically significant malware downloaders. Primarily distributed via massive spa... |
| netinject | Ransomware | 1 | Trojan:Win32/Netinject is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomw... |
| newheur | Ransomware | 1 | <h3>Executive Summary</h3> "NewHeur" (often displayed as Generic.NewHeur or Trojan.NewHeur) is a broad, machine-generated heuristic detection signature utilized... |
| ngvck | Ransomware | 1 | Trojan:Win32/Ngvck is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware,... |
| niwaa8lfbrj | Ransomware | 1 | <h3>Executive Summary</h3> Niwaa8lfbrj is a heuristic detection name assigned to a highly obfuscated Trojan variant. The randomly generated alphanumeric name st... |
| nmkfxmdtnmoi | Trojan | 1 | <h3>Executive Summary</h3> "Nmkfxmdtnmoi" is a machine-generated detection signature utilized by advanced heuristic antivirus engines. It does not identify a sp... |
| obfusransom | Ransomware | 1 | Ransomware:Win32/Obfusransom is a highly critical, heuristic detection string utilized by antivirus engines (specifically Microsoft Defender) to flag a file tha... |
| ocna | Ransomware | 1 | Trojan:Win32/Ocna is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware, ... |
| offtoup | Ransomware | 1 | Trojan:Win32/Offtoup is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwar... |
| omyaamfbexii | Ransomware | 1 | <h3>Executive Summary</h3> "Omyaamfbexii" is a generic detection identifier rather than a distinct, named malware family. It is typically generated automaticall... |
| onkfa0sahzhg | Ransomware | 1 | <h3>Executive Summary</h3> Onkfa0sahzhg is a heuristic detection name assigned to a highly obfuscated Trojan variant. The randomly generated alphanumeric name s... |
| otezinu | Ransomware | 1 | Trojan:Win32/Otezinu is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwar... |
| ou0bsubcbkhb | Trojan | 1 | <h3>Executive Summary</h3> "Ou0bsubcbkhb" is a machine-generated detection signature utilized by advanced heuristic antivirus engines. It does not identify a sp... |
| oztar | Ransomware | 1 | Trojan:Win32/Oztar is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware,... |
| pandview | Ransomware | 1 | Trojan:Win32/Pandview is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwa... |
| pantera | Ransomware | 1 | Trojan:Win32/Pantera is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwar... |
| pckdflystudio | Ransomware | 1 | <h3>Executive Summary</h3> Pckdflystudio is a heuristic detection name indicating that an executable file has been compressed or obfuscated using FlyStudio, a k... |
| pdxbbkgat9ci | Ransomware | 1 | <h3>Executive Summary</h3> Pdxbbkgat9ci is a heuristic detection name assigned to a highly obfuscated Trojan variant. The randomly generated alphanumeric name s... |
| pgpsnippet | Ransomware | 1 | Trojan:Win32/Pgpsnippet is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransom... |
| pizchao | Ransomware | 1 | Trojan:Win32/Pizchao is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwar... |
| pjzab0jsupjb | Trojan | 1 | <h3>Executive Summary</h3> "Pjzab0jsupjb" is a machine-generated detection signature utilized by advanced heuristic antivirus engines. It does not identify a sp... |
| ploprolo | Ransomware | 1 | Trojan:Win32/Ploprolo is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwa... |
| possiblemalware | Trojan | 1 | Behavior:Win32/Possiblemalware (or similar generic descriptors) is a heuristic detection used by antivirus engines. It means the security software flagged a fil... |
| primawega | Ransomware | 1 | Trojan:Win32/Primawega is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomw... |
| proxygate | Advanced Threat | 1 | <h3>Executive Summary</h3> ProxyGate is an application typically classified as Riskware or a Potentially Unwanted Program (PUP) by enterprise security environme... |
| pswdump | Advanced Threat | 1 | <h3>Executive Summary</h3> PSWDump is a malicious HackTool and credential dumper specifically designed to extract Windows NT LAN Manager (NTLM) password hashes ... |
| pushel | Ransomware | 1 | Trojan:Win32/Pushel is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| putabmow | Ransomware | 1 | Trojan:Win32/Putabmow is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwa... |
| pyinstaller | Ransomware | 1 | <h3>Executive Summary</h3> PyInstaller is not malware. It is a highly popular, legitimate, open-source utility used by developers to bundle Python scripts and t... |
| qmlfrt0j91kid | Ransomware | 1 | Trojan:Win32/Qmlfrt0j91kid (or similar auto-generated strings) represents the antivirus industry's response to highly polymorphic malware or Domain Generation A... |
| qmuabwpoobbg | Ransomware | 1 | <h3>Executive Summary</h3> Qmuabwpoobbg is a heuristic detection name assigned to a highly obfuscated Trojan variant. The randomly generated alphanumeric name s... |
| qqfarmassist | Advanced Threat | 1 | <h3>Executive Summary</h3> QQFarmAssist is classified as a Potentially Unwanted Program (PUP) and a riskware tool. Originally designed as an automated assistant... |
| qqmima | Ransomware | 1 | Trojan:Win32/Qqmima is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| quervar | Ransomware | 1 | Trojan:Win32/Quervar is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwar... |
| quireap | Ransomware | 1 | Trojan:Win32/Quireap is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwar... |
| ransim | Ransomware | 1 | <h3>Executive Summary</h3> RanSim (Ransomware Simulator) is technically a benign security testing tool designed by KnowBe4 to simulate ransomware behavior on en... |
| rarmal | Ransomware | 1 | Trojan:Win32/Rarmal is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| rastabaf | Ransomware | 1 | Trojan:Win32/Rastabaf is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwa... |
| ravs | Ransomware | 1 | Trojan:Win32/Ravs is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware, ... |
| redneck | Ransomware | 1 | Trojan:Win32/Redneck is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwar... |
| regub | Ransomware | 1 | Trojan:Win32/Regub is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware,... |
| rietspoof | Ransomware | 1 | <h3>Executive Summary</h3> Rietspoof is a highly sophisticated, multi-stage Trojan Downloader that emerged in early 2019. Unlike "smash-and-grab" malware, Riets... |
| rimic | Ransomware | 1 | Trojan:Win32/Rimic is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware,... |
| rmkef9zs0zhi | Ransomware | 1 | Trojan:Win32/Rmkef9zs0zhi (or similar auto-generated strings) represents the antivirus industry's response to highly polymorphic malware or Domain Generation Al... |
| rmkefbclnjpi | Ransomware | 1 | Trojan:Win32/Rmkefbclnjpi (or similar auto-generated strings) represents the antivirus industry's response to highly polymorphic malware or Domain Generation Al... |
| roboinstall | Advanced Threat | 1 | <h3>Executive Summary</h3> RoboInstall is an aggressive software bundler and Potentially Unwanted Program (PUP) installer. It is designed to maximize affiliate ... |
| rogan | Ransomware | 1 | Trojan:Win32/Rogan is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware,... |
| rubat | Ransomware | 1 | Trojan:Win32/Rubat is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware,... |
| ruho | Ransomware | 1 | Trojan:Win32/Ruho is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware, ... |
| rupttass | Ransomware | 1 | Trojan:Win32/Rupttass is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwa... |
| rz0a4oaeuqdi | Ransomware | 1 | Trojan:Win32/Rz0a4oaeuqdi (or similar auto-generated strings) represents the antivirus industry's response to highly polymorphic malware or Domain Generation Al... |
| rzwaagpbkfii | Ransomware | 1 | Trojan:Win32/Rzwaagpbkfii (or similar auto-generated strings) represents the antivirus industry's response to highly polymorphic malware or Domain Generation Al... |
| sadenav | Ransomware | 1 | Trojan:Win32/Sadenav is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwar... |
| sagonaire | Ransomware | 1 | Trojan:Win32/Sagonaire is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomw... |
| scramupx | Advanced Threat | 1 | <h3>Executive Summary</h3> ScramUPX is a highly specialized malware packing and obfuscation utility. It is designed to take an executable file that has already ... |
| shaskooth | Ransomware | 1 | Trojan:Win32/Shaskooth is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomw... |
| silentinstall | Advanced Threat | 1 | <h3>Executive Summary</h3> "SilentInstall" (often flagged generically as Adware.SilentInstall or PUP.Installer) refers to a class of Potentially Unwanted Progra... |
| simple | Ransomware | 1 | Trojan:Win32/Simple is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| sipia | Ransomware | 1 | Trojan:Win32/Sipia is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware,... |
| sixmuch | Ransomware | 1 | Trojan:Win32/Sixmuch is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwar... |
| sminager | Ransomware | 1 | Trojan:Win32/Sminager is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwa... |
| smuatemisagi | Ransomware | 1 | Trojan:Win32/Smuatemisagi is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like rans... |
| snorm | Ransomware | 1 | Trojan:Win32/Snorm is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware,... |
| stercogs | Ransomware | 1 | Trojan:Win32/Stercogs is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwa... |
| strictorcrtd | Ransomware | 1 | Trojan:Win32/Strictorcrtd is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like rans... |
| suite | Ransomware | 1 | Trojan:Win32/Suite is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware,... |
| syscon | Ransomware | 1 | Trojan:Win32/Syscon is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| sz4aaw | Trojan | 1 | <h3>Executive Summary</h3> "Sz4aaw" is a machine-generated detection signature utilized by advanced heuristic antivirus engines. It does not identify a specific... |
| temcac | Ransomware | 1 | Trojan:Win32/Temcac is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| terkcop | Ransomware | 1 | Trojan:Win32/Terkcop is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwar... |
| thoper | Ransomware | 1 | Trojan:Win32/Thoper is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| tipp | Ransomware | 1 | Trojan:Win32/Tipp is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware, ... |
| tmgfayxalbaj | Ransomware | 1 | <h3>Executive Summary</h3> TMGFAYXALBAJ is an automated, signature-based detection name used by security engines to identify a highly obfuscated, randomly gener... |
| tougle | Ransomware | 1 | Trojan:Win32/Tougle is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| trialkiller | Ransomware | 1 | <h3>Executive Summary</h3> TrialKiller (also known as a "Crack," "Keygen," or "Patcher") is classified as a HackTool. Its primary, stated purpose is software pi... |
| trpctrooper | Ransomware | 1 | Trojan:Win32/Trpctrooper is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ranso... |
| upackdam | Ransomware | 1 | <h3>Executive Summary</h3> Upackdam (or Upack) is a classification for a specific, aggressive executable packer/compressor used almost exclusively by malware de... |
| valcaryx | Ransomware | 1 | Trojan:Win32/Valcaryx is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwa... |
| vbmod | Ransomware | 1 | <h3>Executive Summary</h3> VBMod is a generic detection identifier utilized by security vendors to classify a wide variety of trojans, worms, and malicious down... |
| verecno | Ransomware | 1 | Trojan:Win32/Verecno is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwar... |
| vesenlosow | Trojan | 1 | <h3>Executive Summary</h3> "Vesenlosow" is a machine-generated detection signature utilized by advanced heuristic antivirus engines. It does not identify a spec... |
| vopackage | Ransomware | 1 | Trojan:Win32/Vopackage is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomw... |
| vz2au4dpceii | Ransomware | 1 | Trojan:Win32/Vz2au4dpceii (or similar auto-generated strings) represents the antivirus industry's response to highly polymorphic malware or Domain Generation Al... |
| webdial | Advanced Threat | 1 | <h3>Executive Summary</h3> Webdial is a classic example of legacy malware classified as a "Dialer." Highly prevalent during the era of dial-up internet access, ... |
| webisida | Advanced Threat | 1 | <h3>Executive Summary</h3> Webisida is an automated web surfing and traffic exchange application widely classified by enterprise security vendors as Riskware, a... |
| weenloc | Ransomware | 1 | Trojan:Win32/Weenloc is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwar... |
| winemm | Ransomware | 1 | TrojanDownloader:Win32/Winemm is a specialized trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads. Unlike a back... |
| winner | Ransomware | 1 | Trojan:Win32/Winner is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| wisbipuf | Trojan | 1 | <h3>Executive Summary</h3> "Wisbipuf" is a machine-generated detection signature utilized by advanced heuristic antivirus engines. It does not identify a specif... |
| wombat | Ransomware | 1 | Trojan:Win32/Wombat is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| wraut | Ransomware | 1 | Trojan:Win32/Wraut is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware,... |
| wuca | Ransomware | 1 | Trojan:Win32/Wuca is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware, ... |
| wuji | Ransomware | 1 | Trojan:Win32/Wuji is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware, ... |
| xihet | Ransomware | 1 | Trojan:Win32/Xihet is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware,... |
| xmgfa0ysjgki | Ransomware | 1 | Trojan:Win32/Xmgfa0ysjgki (or similar auto-generated strings) represents the antivirus industry's response to highly polymorphic malware or Domain Generation Al... |
| xmgfbs8lpqoib | Ransomware | 1 | <h3>Executive Summary</h3> XMGFBS8LPQOIB is an automated, signature-based detection name used by security engines to identify a highly obfuscated, randomly gene... |
| xorpix | Ransomware | 1 | Trojan:Win32/Xorpix is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| xxybsq | Ransomware | 1 | <h3>Executive Summary</h3> "Xxybsq" represents a generic threat identifier generated by heuristic analysis engines within endpoint protection platforms (EPP). I... |
| xxybss | Trojan | 1 | <h3>Executive Summary</h3> "Xxybss" is a machine-generated detection signature utilized by advanced heuristic antivirus engines. It does not identify a specific... |
| xxybtw | Ransomware | 1 | <h3>Executive Summary</h3> "Xxybtw" is a generic detection identifier utilized by heuristic antivirus engines and endpoint protection platforms (EPP). It is not... |
| xxybuj | Trojan | 1 | <h3>Executive Summary</h3> "Xxybuj" is a machine-generated detection signature utilized by advanced heuristic antivirus engines. It does not identify a specific... |
| xxybvi | Trojan | 1 | <h3>Executive Summary</h3> "Xxybvi" is a machine-generated detection signature utilized by advanced heuristic antivirus engines. It does not identify a specific... |
| xxybwe | Trojan | 1 | <h3>Executive Summary</h3> "Xxybwe" is a machine-generated detection signature utilized by advanced heuristic antivirus engines. It does not identify a specific... |
| xxybzx | Trojan | 1 | <h3>Executive Summary</h3> "Xxybzx" is a machine-generated detection signature utilized by advanced heuristic antivirus engines. It does not identify a specific... |
| xxycbl | Ransomware | 1 | <h3>Executive Summary</h3> "Xxycbl" represents a generic threat identifier generated by heuristic analysis engines within endpoint protection platforms (EPP). I... |
| xxycdl | Ransomware | 1 | <h3>Executive Summary</h3> "Xxycdl" is a generic detection identifier utilized by heuristic antivirus engines and endpoint protection platforms (EPP). It does n... |
| xxycec | Ransomware | 1 | <h3>Executive Summary</h3> "Xxycec" represents a generic threat identifier generated by heuristic analysis engines within endpoint protection platforms (EPP). I... |
| xxycff | Ransomware | 1 | <h3>Executive Summary</h3> "Xxycff" represents a generic threat identifier generated by heuristic analysis engines within endpoint protection platforms (EPP). I... |
| xxychs | Ransomware | 1 | <h3>Executive Summary</h3> "Xxychs" represents a generic threat identifier generated by heuristic analysis engines within endpoint protection platforms (EPP). I... |
| ymkfawdgfnmi | Trojan | 1 | <h3>Executive Summary</h3> "Ymkfawdgfnmi" is a machine-generated detection signature utilized by advanced heuristic antivirus engines. It does not identify a sp... |
| younglotus | Backdoor | 1 | <h3>Executive Summary</h3> YoungLotus is a highly sophisticated Backdoor and espionage tool historically associated with targeted Advanced Persistent Threat (AP... |
| yy0aueeqipni | Ransomware | 1 | Trojan:Win32/Yy0aueeqipni (or similar auto-generated strings) represents the antivirus industry's response to highly polymorphic malware or Domain Generation Al... |
| yywaa08jovdg | Ransomware | 1 | Trojan:Win32/Yywaa08jovdg (or similar auto-generated strings) represents the antivirus industry's response to highly polymorphic malware or Domain Generation Al... |
| zacom | Ransomware | 1 | Trojan:Win32/Zacom is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware,... |
| zbiw | Ransomware | 1 | Trojan:Win32/Zbiw is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware, ... |
| zloyfly | Ransomware | 1 | Trojan:Win32/Zloyfly is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwar... |
| zombam | Ransomware | 1 | Trojan:Win32/Zombam is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| zorex | Ransomware | 1 | Trojan:Win32/Zorex is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware,... |
| zs0bbeypkrh | Ransomware | 1 | Trojan:Win32/Zs0bbeypkrh (or similar auto-generated strings) represents the antivirus industry's response to highly polymorphic malware or Domain Generation Alg... |
| zxrloader | Ransomware | 1 | TrojanDownloader:Win32/Zxrloader is a specialized trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads. Unlike a b... |
| jps_virus_maker | Tool | Sampled | JPS Virus Maker (cataloged across security software as HackTool:Win32/JPSVirusMaker, Tool:Win32/JPS, and Constructor.Win32.JPS) is a classical GUI-based virus c... |
| terabit_virus_maker | Trojan | Sampled | Terabit Virus Maker (abbreviated as TVM and identified in security definitions as HackTool.Win32.Terabit) is an automated malware generation kit and script viru... |
| vbs_worm_generator | Worm | Sampled | VBS Worm Generator (widely known as VBSWG and documented in security records as Worm.VBSWG or VBS Worm Generator by [K]Alamar) is an infamous malware constructi... |