T1105: Ingress Tool Transfer
Operational Executive Summary
T1105 (Ingress Tool Transfer) is classified under the Command and Control tactic within the MITRE ATT&CK framework. Communication channels and covert protocols utilized to maintain interactive control of compromised implants through legitimate web protocols, encrypted proxies, and DNS tunneling. In telemetry gathered across enterprise endpoints and the EMBER 2018 benchmark, this technique was weaponized across 1,358 distinct malware families, totaling over 167,005 validated samples.
Technical Anatomy & Adversary Tradecraft
Adversaries leverage Ingress Tool Transfer to accomplish operational objectives while minimizing anomalous forensic footprints. When executing Ingress Tool Transfer, malicious binaries commonly interact directly with low-level Windows APIs, kernel mode drivers, or native scripting interfaces to bypass traditional file-integrity monitors and static antivirus signatures.
In modern multi-stage campaigns, T1105 is frequently observed functioning as an intermediate bridge: initial access payloads (such as spearphishing loaders or exploit macros) execute Ingress Tool Transfer to establish in-memory execution or persistence before staging secondary ransomware or data-exfiltration implants.
Authoritative MITRE ATT&CK Reference: View official technique documentation, sub-techniques, and adversary groups at
https://attack.mitre.org/techniques/T1105/.
Detection Engineering & Threat Hunting
Detecting Ingress Tool Transfer requires telemetry correlation across endpoint detection and response (EDR) agents, Sysmon event streams, and security information event management (SIEM) pipelines:
- Process Creation & Lineage: Monitor parent-child process anomalies where unexpected parent binaries (e.g., Office executables, web browsers, or script hosts) spawn command shells or native Windows utilities.
- API Hooking & Behavioral Telemetry: EDR platforms should flag rapid calls to memory allocation, process injection, or registry manipulation APIs originating from unbacked executable memory regions.
- Network Anomaly Correlation: Cross-reference endpoint execution timestamps with external network socket establishment to identify anomalous beaconing or covert data staging.
SOC Containment & Hardening Guidance
To mitigate risks associated with T1105 (Ingress Tool Transfer) across production infrastructure, security teams should implement the following defensive controls:
- Attack Surface Reduction (ASR): Enforce strict application control policies (WDAC or AppLocker) to restrict execution to signed and verified corporate binaries.
- Least Privilege & Credential Hygiene: Restrict local administrative privileges to prevent adversaries from tampering with defensive agents or escalating privileges.
- Network Microsegmentation: Restrict lateral communication across endpoint VLANs to prevent wormable payloads from utilizing Ingress Tool Transfer across adjacent network segments.
Cataloged Malware Families Utilizing T1105 (1,358 Families)
The following malware families in the SystemHelpDesk catalog have been verified utilizing T1105 (Ingress Tool Transfer):
1,358 families
| Family | Category | Sample Count | Technical Summary |
|---|---|---|---|
| xtrat | Rat | 35,969 | Xtreme RAT (widely tracked as xtrat or xrat) is a feature-complete, commercial-grade remote access trojan that first surfaced in late 2010. Engineered originall... |
| installmonster | Pua | 16,691 | InstallMonster (documented across enterprise threat intelligence as Adware.InstallMonster, PUA:Win32/InstallMonster, and Trojan.InstallMonster) is an aggressive... |
| vtflooder | Pua Tool | 12,150 | VtFlooder (tracked across enterprise threat intelligence as Trojan:Win32/VtFlooder, Tool:Win32/VtFlooder, and Spammer:Win32/VtFlooder) is an automated cloud sub... |
| fareit | Infostealer | 10,955 | Fareit (widely recognized across the threat intelligence community as Pony or Pony Stealer) is one of the most influential and pervasive credential-harvesting i... |
| high | Generic Detection | 8,417 | <h3>Executive Summary</h3> The "High" classification is a generic risk severity indicator utilized by heuristic antivirus engines and threat intelligence platfo... |
| wapomi | Worm Banker | 5,191 | Wapomi (widely documented by antivirus laboratories as Virus.Wapomi or Otwycal) is a parasitic polymorphic PE file infector and worm that first surfaced in 2010... |
| dlguide | Pua | 4,733 | DownloadGuide (detected across commercial threat intelligence as PUA:Win32/DownloadGuide, Adware:Win32/DownloadGuide, and Win32/DownloadGuide.Bundler) is a dece... |
| upatre | Downloader | 4,200 | Upatre is a notoriously lightweight, high-volume downloader first identified in mid-2013 that served as the initial spearhead for some of the most catastrophic ... |
| cobaltstrike | Hacktool | 3,500 | Cobalt Strike (specifically its Beacon payload component) is the world's most ubiquitous commercial adversary simulation and post-exploitation framework. Origin... |
| filetour | Pua | 3,238 | FileTour (cataloged across threat telemetry as Trojan:Win32/Filetour, Adware.FileTour, and PUA:Win32/Filetour) is a dual-function software bundler and stealth c... |
| prepscram | Pua | 3,130 | SoftwareBundler:Win32/Prepscram (cataloged across security vendor telemetry as Trojan.Prepscram, Win32/Prepscram, or Bundler:Win32/Prepscram) is a prolific soft... |
| gamarue | Loader | 2,789 | Gamarue (widely tracked by security vendors as Andromeda or Wauchos) is one of the most prolific and technically sophisticated modular botnet loaders in the his... |
| gamehack | Pua Tool | 1,656 | GameHack (identified by enterprise antivirus detection engines as Tool:Win32/GameHack, Riskware:Win32/GameHack, and PUA.Win32.GameHack) is a broad classificatio... |
| gepys | Downloader | 1,587 | Trojan:Win32/Gepys (cataloged across security vendor telemetry as Trojan.Gepys, Downloader.Gepys, or Win32/Gepys) is an aggressive Windows trojan downloader and... |
| virut | File Infector | 1,578 | Virut (also tracked as Virux or W32/Virut) is one of the most destructive, technically complex, and resilient polymorphic file infectors and botnets in cybersec... |
| tinba | Banking Trojan | 1,531 | Trojan:Win32/Tinba (short for 'Tiny Banker', also cataloged by vendors as Zusy) is a landmark banking trojan famous for its remarkably micro-sized footprint—com... |
| flux | Backdoor | 1,500 | Flux (cataloged across antivirus solutions as Backdoor:Win32/Flux and Trojan.Win32.Flux) is a classic Delphi-authored remote access backdoor trojan first surfac... |
| hack_a_tack | Trojan | 1,500 | Hack a Tack (cataloged across antivirus vendors as Trojan:Win32/HackaTack, Backdoor.HackaTack, and Trojan.Hack-a-Tack) is a classic remote access trojan and bac... |
| hav_rat | Rat | 1,500 | Hav-RAT (cataloged across antivirus software as Backdoor:Win32/HavRAT, Trojan.Win32.HavRAT, and Backdoor.HavRat) is a classic Delphi-authored Remote Access Troj... |
| hue | Trojan | 1,500 | Hue (cataloged across security engines as Trojan:Win32/Hue, Backdoor:Win32/Hue, and Trojan.Win32.Hue) is a legacy Delphi-authored remote access backdoor trojan ... |
| infector_ng_2004 | Trojan | 1,500 | Infector NG 2004 (Infector Next Generation, cataloged across security telemetry as Trojan:Win32/InfectorNG2004, Virus:Win32/InfectorNG, and Trojan.Win32.Infecto... |
| vobfus | Worm | 1,484 | Vobfus (also documented across antimalware products as Win32/Vobfus, Worm:Win32/Vobfus, and WORM_VOBFUS) is a pervasive Windows worm and trojan loader developed... |
| agen | Trojan | 1,335 | Agen (classified in antivirus detection telemetry under designations including Trojan:Win32/Agen, Trojan.Win32.Agen, and Win32/Agen) is a multi-stage trojan eng... |
| wabot | Rat | 1,185 | Trojan:Win32/Wabot is a prolific modular botnet trojan and worm designed to compromise Windows endpoints and enlist them into large-scale zombie networks for co... |
| ulise | Trojan | 1,176 | Ulise (cataloged across global threat intelligence as Trojan-Downloader.Win32.Ulise, Trojan:Win32/Ulise, and Trojan.Ulise) is a sophisticated trojan downloader ... |
| ursu | Trojan | 1,168 | Trojan:Win32/Ursu (cataloged across security telemetry as Trojan.MSIL.URSU, Win32/Ursu, or Downloader.Ursu) is a persistent .NET-based trojan dropper and second... |
| moderate | Generic Detection | 1,146 | <h3>Executive Summary</h3> The "Moderate" classification is a generic risk indicator employed by security software and threat intelligence platforms to designat... |
| icloader | Pua | 1,145 | ICLoader (identified across vendor detection engines as PUA:Win32/ICLoader, Trojan:Win32/ICLoader, and PUP.Optional.InstallCore) is an aggressive software bundl... |
| scar | Trojan | 984 | Trojan:Win32/Scar (cataloged across security telemetry as Trojan.Win32.Scar, Win32/Scar, or Downloader.Scar) is an obfuscated Windows trojan downloader and spyw... |
| dinwod | File Infector | 973 | Dinwod (classified by Microsoft Defender and Trend Micro as Trojan:Win32/Dinwod, TrojanDropper:Win32/Dinwod, and Trojan.Win32.DINWOD.B) is an evasive trojan dro... |
| shipup | Adware | 896 | ShipUp (tracked across threat intelligence feeds as Adware:Win32/ShipUp, Trojan.Win32.ShipUp, and Win32/Shipup) is a deceptive adware engine and background payl... |
| lamer | Worm | 894 | Worm:Win32/Lamer is a dual-threat propagation worm and trojan downloader that emerged in the mid-2000s, designed to infiltrate Windows networks and establish a ... |
| pikabot | Loader | 850 | Pikabot is an evasive, modular malware loader that emerged in early 2023, widely recognized by threat intelligence analysts as one of the primary successors to ... |
| yakes | Trojan | 751 | Trojan:Win32/Yakes (widely cataloged across antivirus telemetry as Trojan.Yakes or Win32/Yakes) is a prolific family of obfuscated trojan downloaders and multi-... |
| mira | Worm | 729 | Trojan:Win32/Mira (also tracked across vendor signatures as Worm:Win32/Mira, distinct from the Linux IoT botnet Mirai) is a prolific Windows mass-mailing worm a... |
| soft32dl | Pua | 715 | Soft32 Downloader (classified across threat intelligence feeds as PUA:Win32/Soft32Downloader, Adware:Win32/Soft32, and PUP.Optional.Soft32) is a deceptive softw... |
| nitol | Ddos Bot | 694 | Nitol (cataloged across global cybersecurity threat intelligence as DDoS:Win32/Nitol, Trojan:Win32/Nitol, and Backdoor.Win32.Nitol) is a notorious Distributed D... |
| urelas | Infostealer | 666 | Trojan:Win32/Urelas is a specialized information stealer and credential extraction trojan engineered to harvest authentication credentials, session cookies, and... |
| hematite | Trojan | 616 | Hematite (tracked across threat intelligence feeds as Win.Virus.Hematite, Trojan.Hematite, and Trojan:Win32/Hematite!rfn) is a dual-capability Windows file infe... |
| occamy | Trojan | 589 | Trojan:Win32/Occamy.C (widely cataloged across Microsoft Defender and endpoint telemetry as Trojan:Win32/Occamy or Win32/Occamy) is a high-severity, multi-stage... |
| agentb | Trojan | 449 | Agent.B (classified across commercial antivirus vendors as Trojan:Win32/Agent.B, Trojan-Downloader.Win32.Agent.b, and Backdoor.Agent.B) is a long-standing, prol... |
| skeeyah | Trojan | 440 | Trojan:Win32/Skeeyah is a widely encountered family of evasive trojan loaders and multi-stage droppers documented extensively in Microsoft Windows Defender tele... |
| fsysna | Trojan | 427 | Trojan:Win32/Fsysna (documented across vendor telemetry as Trojan.Win32.Fsysna, Win32/Fsysna, or Trojan.Win32.FSYSNA) is a sophisticated multi-stage trojan load... |
| ausiv | Trojan | 422 | Ausiv (cataloged across security vendors as Trojan:Win32/Ausiv, Worm:Win32/Ausiv, and Trojan.Win32.Ausiv) is a hybrid Windows trojan and worm framework that eme... |
| ekstak | Trojan | 421 | Ekstak (cataloged across security software as Trojan.Win32.Ekstak, Trojan:Win32/Ekstak, and Worm:Win32/Ekstak) is a covert Windows backdoor trojan and spyware f... |
| berbew | Infostealer | 407 | Trojan:Win32/Berbew (widely known in antivirus telemetry as Padodor) is a historic banking trojan and multi-purpose infostealer discovered in 2004 that pioneere... |
| maener | Cryptominer | 387 | Maener (cataloged by security vendors as Trojan:Win32/Maener, Trojan.Win32.Maener, Worm:Win32/Maener, and Bindmaener) is a persistent cryptocurrency mining troj... |
| lolbot | Worm | 374 | Worm:Win32/Lolbot is a notorious worm and remote access trojan that achieved massive global distribution by hijacking instant messaging platforms—including Skyp... |
| ponystealer | Infostealer | 374 | Trojan:Win32/PonyStealer (universally recognized in cyber threat intelligence as Pony or Fareit) is a foundational credential theft trojan and stage-one botnet ... |
| ircbot | Rat | 348 | Backdoor:Win32/Ircbot is a foundational lineage of remote access trojans and botnet agents that utilize Internet Relay Chat (IRC) protocol channels for decentra... |
| midie | Trojan | 341 | Midie (cataloged across security software as Trojan:Win32/Midie, Trojan.Win32.Midie, and Backdoor:Win32/Midie) is a modular Windows trojan and backdoor loader t... |
| zdengo | Adware | 333 | Zdengo (frequently classified by security solutions as Adware.Zdengo, Trojan:Win32/Zdengo, Zdengo.A, and PUA:Win32/Zdengo) is a persistent adware installer, cli... |
| sfone | Worm | 332 | Sfone (cataloged across security vendors as Worm:Win32/Sfone, Worm.Win32.SFONE.B, and Trojan:Win32/Sfone!pz) is a self-propagating Windows worm and trojan loade... |
| snojan | Trojan | 324 | Snojan (cataloged across security research authorities as Trojan.Win32.SNOJAN.A, Trojan:Win32/Snojan, and Backdoor:Win32/Snojan) is a persistent backdoor trojan... |
| mikey | Adware | 314 | Mikey (cataloged across security software as PUA.Win32.Mikey.AA, Trojan:Win32/Mikey, and PUA:Win32/Mikey!MTB) is a pervasive Potentially Unwanted Application (P... |
| nanobot | Rat | 306 | Backdoor:Win32/Nanobot is a modular, lightweight Remote Access Trojan (RAT) and stage-two loader engineered with an extremely compact on-disk footprint (typical... |
| dfay | Trojan | 300 | TrojanDropper:Win32/Dfay (widely cataloged across vendor telemetry as Trojan.Dfay or Win32/Dfay) is an evasive trojan dropper and memory injection loader engine... |
| regsup | Trojan | 296 | Regsup (cataloged across security vendors as Trojan:Win32/Regsup, PUA:Win32/Regsup, and Trojan.Win32.Regsup) is a Windows trojan downloader and potentially unwa... |
| winwrapper | Pua Tool | 296 | WinWrapper (cataloged by major antimalware vendors as PUA:Win32/WinWrapper, Adware.Win32.WinWrapper, and Trojan.Win32.WinWrapper) is a commercial pay-per-instal... |
| dlhelper | Downloader | 290 | Dlhelper (classified in antimalware telemetry as SoftwareBundler:Win32/Dlhelper and PUA:Win32/DLHelper) is a deceptive software bundler and secondary downloader... |
| banload | Downloader | 288 | Banload (cataloged across security software as TrojanDownloader:Win32/Banload, Trojan-Downloader.Win32.Banload, and Win32/Banload) is a notorious family of troj... |
| ludbaruma | Worm | 283 | Ludbaruma (identified across antivirus products as Worm:Win32/Ludbaruma.A, Worm:Win32/Ludbaruma!pz, and TrojanDropper:Win32/Ludbaruma) is an aggressive Windows ... |
| sytro | Worm | 273 | Sytro (cataloged in antivirus encyclopedias as Worm:Win32/Sytro, P2P-Worm.Win32.Sytro, and Trojan:Win32/Sytro) is a peer-to-peer (P2P) network worm and download... |
| eorezo | Adware | 271 | EoRezo (cataloged across antimalware products as Adware:Win32/EoRezo, PUA:Win32/EORezo, and Adware.EoRezo) is a pervasive French adware platform and software bu... |
| daws | Ransomware | 246 | TrojanDownloader:Win32/Daws (cataloged across security vendors as Trojan.Daws or Ransom.Daws) is a persistent Windows trojan downloader and stage-one ransomware... |
| gamemodding | Pua | 244 | GameModding (cataloged in threat telemetry under signatures such as HackTool:Win32/GameModding!pz, PUA:Win32/GameModding, and Riskware.GameModding) designates a... |
| browserio | Adware | 243 | Browserio (identified across antimalware engines as PUA:Win32/Browserio and Adware.Browserio) is an aggressive browser hijacker and adware program operating on ... |
| amonetize | Downloader | 242 | Amonetize (cataloged in antimalware telemetry as PUA:Win32/Amonetize, SoftwareBundler:Win32/Amonetize, and Adware.Amonetize) is a commercial pay-per-install (PP... |
| mywebsearch | Adware | 223 | MyWebSearch (cataloged across security software as Adware:Win32/MyWebSearch, Adware.MyWebSearch, and MyWebSearch Toolbar) is one of the most widely distributed ... |
| reconyc | Downloader | 222 | Reconyc (cataloged across security software as Trojan:Win32/Reconyc, Trojan.Win32.Reconyc, and Trojan.Reconyc) is a heavily obfuscated Windows trojan dropper an... |
| johnnie | Trojan | 221 | Johnnie (tracked in threat databases as Trojan:Win32/Johnnie, HackTool:Win32/Johnnie, and Worm:Win32/Johnnie) is a Windows trojan, reconnaissance hacktool, and ... |
| kolab | Worm | 219 | Kolab (cataloged across security vendors as Worm:Win32/Kolab, Net-Worm.Win32.Kolab, WORM_KOLABC, and W32/Kolab) is a prolific Windows network worm and backdoor ... |
| pluto | Worm | 209 | Pluto (identified in security intelligence under signatures including Worm:Win32/Pluto, Trojan:Win32/Pluto, W32.Pluto, and Worm.Win32.Pluto) is a hybrid Windows... |
| drolnux | Worm | 205 | Drolnux (tracked in antivirus telemetry as Worm:Win32/Drolnux, Worm:Win32/Drolnux.A, and W32/Drolnux) is a network-aware computer worm and backdoor trojan that ... |
| laqma | Trojan | 204 | Laqma (cataloged across security vendors as TrojanSpy:Win32/Laqma.B, VirTool:WinNT/Laqma.C, and Trojan:Win32/Laqma) is an evasive Windows trojan-spy and rootkit... |
| tinyloader | Downloader | 203 | TinyLoader (cataloged in antivirus telemetry as TrojanDownloader:Win32/TinyLoader, Trojan.TinyLoader, and Downloader.TinyLoader) is an ultra-compact first-stage... |
| barys | Infostealer | 200 | Barys (cataloged in threat telemetry under signatures including Trojan:Win32/Barys, Trojan:PowerShell/Barys, and HEUR:Trojan-Spy.MSIL.Stealer) is a modular Wind... |
| dapato | Trojan | 197 | Dapato (cataloged across security vendors as Trojan:Win32/Dapato, Trojan-Dropper.Win32.Dapato, and TrojanDownloader:Win32/Dapato) is a prolific Windows malware ... |
| qjwmonkey | Adware | 190 | Qjwmonkey (cataloged across security vendors under classifications such as PUAAdvertising:Win32/Qjwmonkey, Adware:Win32/Qjwmonkey.A!MSR, and PUA.Qjwmonkey) is a... |
| viking | File Infector | 175 | Viking (cataloged across security vendors as Virus:Win32/Viking, Worm.Win32.Viking, and PE_VIKING) is an infamous and highly destructive hybrid file-infecting v... |
| neoreklami | Adware | 170 | Neoreklami (cataloged by security vendors under detections including Adware:Win32/Neoreklami, Adware.Neoreklami, and Program:Win32/Neoreklami) is an aggressive ... |
| pykspa | Worm | 169 | Pykspa (cataloged across threat intelligence as W32/Pykspa, Worm:Win32/Pykspa, and the Skype Worm Pykspa) is an information-stealing worm that first emerged in ... |
| rodecap | Trojan | 165 | Rodecap (cataloged by security vendors as Trojan:Win32/Rodecap.A, Trojan.Win32.Rodecap, TrojanDownloader:Win32/Rodecap, and Adware:Win64/Redcap) is an infamous ... |
| wizrem | Trojan | 162 | Wizrem (cataloged across security vendors as SoftwareBundler:MSIL/Wizrem, TrojanDownloader:Win32/Wizrem, and Trojan:Win32/Wizrem) is a modular payload downloade... |
| vittaliaent | Adware | 158 | Vittaliaent (cataloged by security vendors under detections including Adware:Win32/Vittaliaent, Program:Win32/Vittalia, PUA:Win32/Vittalia, and AdWare.Win32.Vit... |
| beebone | Worm | 151 | Beebone (widely cataloged across security vendors as the W32.Worm.Beebone or AAEH family) is a highly aggressive, polymorphic downloader worm first identified i... |
| dlsponsor | Adware | 151 | DownloadSponsor (cataloged across security vendors under designations including PUADlManager:Win32/DownloadSponsor, Adware:Win32/DownloadSponsor, and Program:Wi... |
| firseria | Adware | 149 | Firseria (cataloged across security vendor detection feeds as Adware:Win32/Firseria, Program:Win32/Firseria, PUA:Win32/Firseria, and PUA.Win32.Firseria.AC) is a... |
| gofot | Trojan | 147 | Gofot (cataloged across security vendors under signatures including TrojanDownloader:Win32/Gofot, Trojan:Win32/Gofot.A, and Trojan.Win32.Gofot) is a stealthy mo... |
| indiloadz | Adware | 146 | Indiloadz (cataloged across security vendor detections as Adware:Win32/Indiloadz, PUA:Win32/Indiloadz, and Trojan:Win32/Indiloadz) is an invasive software downl... |
| kolabc | Worm | 143 | Worm:Win32/Kolabc (commonly identified across threat telemetry as Trojan.Kolabc, Worm.Win32.Kolab, or Win32/Kolabc) is a resilient, self-propagating Windows net... |
| socks | Trojan | 143 | Trojan:Win32/Socks (frequently cataloged in security telemetry as TrojanProxy.Win32.Socks, Backdoor.Win32.Socks, or Win32/SocksProxy) is a stealthy proxy relay ... |
| salgorea | Backdoor | 135 | Salgorea (cataloged across advanced threat intelligence reports as Backdoor.Win32.Salgorea, BadCake, and Trojan:Win32/Salgorea) is a sophisticated targeted cybe... |
| nakoctb | Ransomware | 134 | Ransom:Win32/Nakoctb (frequently cataloged in security telemetry as naKocTb, Trojan:Win32/Nakoctb, or Trojan-Ransom.Win32.Nakoctb) is a notorious Windows screen... |
| softpulse | Adware | 121 | Softpulse (cataloged by security vendors as Adware:Win32/Softpulse, PUA:Win32/SoftPuls, PUA.Win32.SoftPulse.AD, and ADW_PULSOFT.SM) is an intrusive adware and s... |
| autohk | Trojan | 120 | The "AutoHK" malware family refers to a broad category of malicious programs that utilize AutoHotkey (AHK), a legitimate and open-source scripting language desi... |
| rebhip | Rat | 120 | Worm:Win32/Rebhip is a stealthy dual-threat worm and keylogging trojan discovered in 2011 that proliferates via removable USB drives and unsecured local network... |
| csdimonetize | Adware | 118 | Csdimonetize (cataloged across security vendors as Adware:Win32/Csdimonetize, Adware.Csdimonetize, and PUA:Win32/Csdimonetize) is an aggressive software bundler... |
| wakme | Trojan | 116 | Wakme (cataloged across security vendors as TrojanDownloader:Win32/Wakme, TROJ_WAKME.A, and Trojan:Win32/Wakme) is a modular trojan downloader and initial acces... |
| phorpiex | Botnet | 115 | Phorpiex (also cataloged across the cybersecurity industry as Trik, Worm:Win32/Phorpiex, Trojan:Win32/Phorpiex, and Worm.Win32.Trik) is an infamous, multi-funct... |
| bitmin | Coinminer | 112 | Bitmin (cataloged under Microsoft Defender designations including Trojan:Win32/Bitmin, Trojan:Win32/Bitman, and CoinMiner.Win32.Bitman) is an enduring family of... |
| umbra | Loader | 111 | Umbra (cataloged as Umbra Loader, Trojan:Win32/Umbra, and Backdoor:Win32/Umbra) is an underground modular HTTP botnet loader and malware distribution framework ... |
| unwaders | Adware | 111 | Unwaders (identified by Microsoft Defender as Adware:Win32/Unwaders, PUA:Win32/Unwaders, and Misleading:Win32/Unwaders) is a deceptive adware monetization frame... |
| wews | Exploit | 111 | Wews (recognized across threat telemetry signatures as Exploit:HTML/Wews, Exploit.HTML.Wews, and Trojan-Downloader.HTML.Wews) is a specialized class of maliciou... |
| fuerboos | Trojan | 110 | Fuerboos (cataloged by Microsoft Defender as Trojan:Win32/Fuerboos, Trojan:Win32/Fuerboos!cl, Trojan:Win32/Fuerboos!MTB, and TrojanDownloader:Win32/Fuerboos, wi... |
| ngrbot | Worm | 110 | NGRBot (extensively documented as Dorkbot, Worm:Win32/Dorkbot, Worm.Win32.Ngrbot, and W32.IRCBot.NG) is an infamous, multi-functional Windows botnet and self-pr... |
| opencandy | Adware | 110 | OpenCandy (cataloged by Microsoft Defender as Adware:Win32/OpenCandy and PUA:Win32/CandyOpen) is a historic, commercial adware monetization framework and Potent... |
| guildma | Banking Trojan | 109 | Guildma (also tracked by cybersecurity researchers as Astaroth, Trojan:Win32/Guildma, and Trojan-Banker.Win32.Guildma) is a highly sophisticated, multi-stage mo... |
| fusioncore | Adware | 104 | Fusioncore (cataloged by Microsoft Defender as Adware:Win32/FusionCore, PUA:Win32/FusionCore, and SoftwareBundler:Win32/FusionCore) is a pervasive commercial so... |
| llac | Trojan | 104 | Llac (cataloged across security telemetry as Trojan:Win32/Llac, Trojan.Win32.Llac, and Trojan:Win32/Llac.A) is a stealthy information-stealing trojan and survei... |
| tempedreve | Downloader | 104 | Tempedreve (cataloged across security research as TrojanDownloader:Win32/Tempedreve and Trojan:Win32/Tempedreve) is a dedicated multi-stage trojan downloader an... |
| nemesis | Bootkit | 103 | Nemesis (extensively analyzed by Mandiant and FireEye research teams, with its primary bootkit component dubbed BOOTRASH) is an advanced, targeted malware ecosy... |
| nisloder | Loader | 103 | Nisloder (cataloged under Microsoft Defender signatures as TrojanDownloader:Win32/Nisloder and Trojan:Win32/Nisloder) is a lightweight modular trojan downloader... |
| nymeria | Downloader | 102 | Nymeria (cataloged across security vendors as TrojanDownloader:Win32/Nymeria, Trojan.Nymeria, and Backdoor:Win32/Nymeria) is a modular Windows trojan downloader... |
| chir | Worm | 99 | Chir (extensively documented as Virus:Win32/Chir.B@mm, W32.Chir, and Runouce) is a historic, highly aggressive mass-mailing worm and polymorphic file infector f... |
| powp | Adware | 99 | Powp (identified across antimalware engines as Adware:Win32/Powp, Trojan:Win32/Powp, and PUA:Win32/Powp) is an aggressive adware monetization framework and soft... |
| sysn | Trojan | 99 | Sysn (cataloged across security intelligence as Trojan:Win32/Sysn, Trojan.Win32.Sysna, and Swisyn) is a resilient family of Delphi-based Windows trojans and pay... |
| adaebook | Adware | 98 | AdaEbook (detected across security vendors as Adware:Win32/AdaEbook, PUA:Win32/AdaEbook, and Trojan:Win32/AdaEbook) is a deceptive software bundling framework a... |
| convertad | Adware | 96 | ConvertAd (classified by security vendors as Adware:Win32/ConvertAd, PUA:Win32/ConvertAd, and Win32/ConvertAd) is an aggressive adware program and browser monet... |
| remoteadmin | Hacktool | 95 | RemoteAdmin (cataloged across security vendors under detections including RiskWare:Win32/RemoteAdmin, HackTool:Win32/RemoteAdmin, and Win32/RemoteAdmin) is a ge... |
| skypespam | Worm | 95 | SkypeSpam (cataloged across antivirus vendors under signatures including Worm:Win32/SkypeSpam, Trojan:Win32/SkypeSpam, Worm:Win32/Pykspa, and Trojan.SkypeSpam) ... |
| hesv | Trojan | 93 | Hesv (cataloged across security intelligence repositories under identifiers including Trojan:Win32/Hesv, Trojan.Win32.Hesv, and Trojan.MSIL.HESV) is a versatile... |
| trickster | Banking Trojan | 93 | Trickster (widely known across threat intelligence and cybersecurity communities under vendor detections including Trojan:Win32/Trickster, Trojan-Banker.Win32.T... |
| cutwail | Botnet | 92 | Cutwail (frequently referenced in conjunction with its rootkit and downloader component Pushdo, or Pandex) is one of the longest-running and highest-volume spam... |
| dofoil | Downloader | 90 | Dofoil (universally tracked across threat intelligence communities and security vendors under aliases including SmokeLoader, Smoke Loader, and Trojan:Win32/Dofo... |
| yobrowser | Adware | 90 | YoBrowser (identified in security telemetry under detections including PUA:Win32/YoBrowser, Trojan:Win32/YoBrowser, and Adware:Win32/YoBrowser) is a deceptive w... |
| cambot | Worm | 89 | CamBot (cataloged across security vendors as Worm:Win32/CamBot, Backdoor:Win32/CamBot, and Trojan:Win32/CamBot) is a hybrid Windows worm and remote access surve... |
| rubinurd | Downloader | 87 | Rubinurd (cataloged by threat intelligence researchers and security vendors under identifiers including Trojan:Win32/Rubinurd, TrojanDownloader.Rubinurd, and Wi... |
| chindo | Worm | 85 | Chindo (cataloged in security vendor threat telemetry under signatures including Worm:Win32/Chindo, Trojan:Win32/Chindo, and Worm:Win32/Chindo.SQ!MTB) is a hybr... |
| cerbu | Backdoor | 84 | Cerbu (cataloged across security vendors under detections including Backdoor:Win32/Cerbu, Trojan:Win32/Cerbu, and Win32/Cerbu) is a covert Windows remote access... |
| youxun | Adware | 84 | Youxun (cataloged by security vendors as Adware:Win32/Youxun, PUA:Win32/Youxun, and Win32/Youxun) is an aggressive software monetization platform and smart down... |
| taranis | Trojan | 83 | Taranis (cataloged by security software vendors under signatures including Trojan:Win32/Taranis, TR/Taranis, and Win32/Taranis) is a multi-stage Windows trojan ... |
| elemental | Adware | 82 | Elemental (cataloged in antivirus telemetry under detections including PUP.Elemental, Trojan:Win32/Elemental, and Win32/Elemental) is an adware packaging framew... |
| buterat | Backdoor | 77 | ButeRAT (cataloged in threat research and security telemetry under signatures including Backdoor:Win32/ButeRAT, Backdoor.Win32.Buterat, and Trojan:Win32/ButeRAT... |
| bitrep | Trojan | 76 | Bitrep (cataloged in antivirus vendor databases under detections including Trojan:Win32/Bitrep, Trojan:Win32/Bitrep.A, and TrojanDownloader:Win32/Bitrep) is a W... |
| shodi | Backdoor | 76 | Shodi (cataloged across security vendors under detections including Backdoor:Win32/Shodi, Trojan:Win32/Shodi, and BackDoor.Shohdi) is a classic Windows remote a... |
| dovs | Trojan | 75 | Dovs (cataloged in antivirus vendor databases under detections including Trojan:Win32/Dovs, TrojanDownloader:Win32/Dovs, and Win32/Dovs) is a stealthy Windows t... |
| rozena | Backdoor | 75 | Rozena (cataloged across threat research publications and antimalware engines under detections including Backdoor:Win32/Rozena, Trojan.Win32.ROZENA, and Backdoo... |
| bloored | Trojan | 74 | Bloored (cataloged in antivirus vendor databases under detections including Trojan:Win32/Bloored, Trojan.Bloored, and Trojan.Win32.Bloored) is a generic Windows... |
| browsefox | Adware | 73 | BrowseFox (cataloged across security vendors under detections including Adware:Win32/BrowseFox, PUA:Win32/Browsefox, and PUP.Optional.BrowseFox) is an aggressiv... |
| wecod | Trojan | 71 | Wecod (cataloged in antivirus vendor databases under detections including Trojan:Win32/Wecod, Trojan.Win32.Wecod, and Win32/Wecod) is a multi-functional Windows... |
| skorik | Trojan | 70 | Skorik (cataloged in threat research and antivirus vendor databases under detections including Trojan:Win32/Skorik and Trojan.Win32.Skorik) is a Windows trojan ... |
| appset | Pua | 69 | Appset (cataloged across security vendors under detections including PUA:Win32/Appset, Trojan:Win32/Appset, and Program:Win32/Appset) is a persistent adware ins... |
| jacard | Trojan | 69 | Jacard (cataloged in threat research and antivirus vendor databases under detections including Trojan:Win32/Jacard, Trojan.Jacard, and W32/Jacard) is a sophisti... |
| mepaow | Trojan | 68 | Mepaow (cataloged in antivirus vendor databases and threat intelligence feeds under detections including Trojan:Win32/Mepaow, Worm.Win32.MEPAOW, and Trojan.Mepa... |
| cloudscout | Advanced Threat | 67 | CloudScout (cataloged by cybersecurity research labs under designations including Trojan:Win32/CloudScout and Backdoor.CloudScout) is a sophisticated, modular p... |
| genericrxdt | Ransomware | 67 | Trojan:Win32/Genericrxdt is a broad, generic heuristic detection utilized by antivirus engines (primarily Microsoft Defender) to flag executables exhibiting hig... |
| mogoogwi | Worm | 66 | Mogoogwi (cataloged across antivirus vendors under signatures including Worm:Win32/Mogoogwi, Worm:Win32/Mogoogwi.A, and Trojan:MSIL/Mogoogwi.A) is an aggressive... |
| omaneat | Trojan | 66 | Omaneat (cataloged in threat research and antivirus vendor databases under detections including Trojan:Win32/Omaneat, Spyware:Win32/Omaneat!pz, and TrojanSpy:MS... |
| genericrxgp | Ransomware | 63 | Trojan:Win32/Genericrxgp is a broad, generic heuristic detection utilized by antivirus engines (primarily Microsoft Defender) to flag executables exhibiting hig... |
| vindor | Trojan | 63 | Vindor (cataloged across security vendors under detections including Trojan:Win32/Vindor, Trojan.Win32.Vindor, and Win32/Vindor) is a multi-stage Windows trojan... |
| downloadadmin | Pua | 61 | DownloadAdmin (cataloged across antivirus vendors under detections including PUA:Win32/DownloadAdmin and Program:Win32/DownloadAdmin) is a deceptive software do... |
| 4shared | Pua | 60 | 4Shared (cataloged in antivirus vendor databases under detections including PUA:Win32/4Shared and Program:Win32/4Shared) represents bundled desktop client insta... |
| bifrose | Backdoor | 59 | Bifrose (widely known across cybersecurity history as Bifrost, Backdoor:Win32/Bifrose, and Backdoor.Bifrost) is a landmark, enduring Remote Access Trojan (RAT) ... |
| asparnet | Trojan | 58 | Asparnet (cataloged across security vendors under detections including Trojan:Win32/Asparnet and Adware:Win32/Asparnet) is a persistent Windows adware and troja... |
| jimmy | Ransomware | 57 | Jimmy (tracked across incident response engagements and threat intelligence feeds under signatures including Ransom:Win32/Jimmy, Trojan-Ransom.Win32.Jimmy, and ... |
| scarab | Ransomware | 57 | Scarab (cataloged across security vendors and threat intelligence databases under signatures including Ransom:Win32/Scarab, Trojan-Ransom.Win32.Scarab, and Rans... |
| shelma | Trojan | 57 | Shelma (cataloged across security vendors and threat intelligence databases under signatures including Trojan:Win32/Shelma, Trojan.Win32.Shelma, and Backdoor:Wi... |
| swizzor | Adware | 55 | Swizzor (cataloged across antivirus vendors under signatures including Adware:Win32/Swizzor, Trojan.Win32.Swizzor, and Win32/Swizzor) is one of the most prolifi... |
| warezov | Worm | 55 | Warezov (also widely tracked in security industry literature as Stration, Email-Worm.Win32.Warezov, and Worm:Win32/Warezov) is a landmark mass-mailing email wor... |
| gator | Adware | 54 | Gator (developed by The Gator Corporation, later rebranded as Claria Corporation, and cataloged across security databases as Adware:Win32/Gator, GAIN, and Spywa... |
| kuaiba | Adware | 53 | Kuaiba (cataloged across antivirus vendors under signatures including Adware:Win32/Kuaiba, PUA:Win32/Kuaiba, and Program:Win32/Kuaiba) is a deceptive game distr... |
| multiplug | Adware | 53 | MultiPlug (cataloged across security vendors and threat intelligence databases under signatures including Adware:Win32/MultiPlug, PUA:Win32/MultiPlug, and Progr... |
| murofet | Trojan | 53 | Murofet (cataloged across security vendors and threat intelligence databases under detections including Trojan:Win32/Murofet, TrojanDownloader:Win32/Murofet, an... |
| revetrat | Trojan | 50 | RevetRAT (cataloged across security vendors and threat intelligence databases under signatures including Backdoor:Win32/RevengeRAT, Trojan:Win32/RevetRAT, and M... |
| tenga | File Infector | 50 | Tenga (cataloged across antivirus vendors under signatures including Virus:Win32/Tenga, Win32/Tenga.A, and Virus.Win32.Gat.a) is a landmark polymorphic file inf... |
| bunitu | Trojan | 49 | Bunitu (cataloged across security intelligence feeds under signatures including Trojan:Win32/Bunitu, Trojan.Win32.Bunitu, and Trojan.Bunitu) is a persistent pro... |
| shakblades | Ransomware | 48 | Shakblades is a destructive Windows ransomware strain active since 2017. Propagated primarily through trojanized software activators, cracked utilities, and exp... |
| hotbar | Adware | 47 | Hotbar (cataloged across security vendors and threat intelligence databases under signatures including Adware:Win32/Hotbar, PUA:Win32/Hotbar, and Toolbar.Hotbar... |
| lmir | Infostealer | 47 | Lmir (cataloged across security vendors under signatures including PWS:Win32/Lmir, Trojan-PSW.Win32.Lmir, and Win32/Lmir) is a historic and highly prolific fami... |
| ruskill | Ransomware | 46 | Ruskill (cataloged across security vendors and threat intelligence databases under signatures including Ransom:Win32/Ruskill, Trojan-Ransom.Win32.Ruskill, and T... |
| vigorf | Trojan | 45 | Vigorf is a pervasive Windows trojan downloader and ransomware stager cataloged under Microsoft Defender signatures including Trojan:Win32/Vigorf.A. Infiltratin... |
| winsecsrv | Trojan | 45 | WinSecSrv (Windows Security Service Trojan) is a stealthy backdoor and trojan downloader active since 2012 that deliberately masquerades as a legitimate Windows... |
| jaiko | Ransomware | 44 | Jaiko is an extortion ransomware and screen locker strain active since 2016. Delivered via weaponized email attachments and fake software installers, Jaiko exec... |
| mekotio | Banking Trojan | 44 | Mekotio (cataloged across security vendors and threat intelligence databases under signatures including Trojan-Banker:Win32/Mekotio, Trojan.Win32.Mekotio, and M... |
| genericrxdw | Ransomware | 26 | Trojan:Win32/Genericrxdw is a broad heuristic classification applied to generic, malicious executables that exhibit recognizable Trojan-like behaviors, such as ... |
| pliskal | Trojan | 23 | Pliskal (tracked across enterprise antivirus research telemetry under designations including Trojan:Win32/Pliskal, Trojan:Win32/Pliskal.A, and TrojanDownloader:... |
| garrun | Trojan | 21 | Garrun (identified in security research telemetry as Trojan:Win32/Garrun, Trojan:Win32/Garrun.A, and Backdoor:Win32/Garrun) is an evasive Windows trojan backdoo... |
| sixxpack | Trojan | 21 | Sixxpack (classified across endpoint detection telemetry under designations including Trojan:Win32/Sixxpack, Trojan:Win32/Sixxpack.A, and VirTool:Win32/Sixxpack... |
| dexel | Trojan | 20 | Dexel (identified across antivirus research telemetry as Trojan:Win32/Dexel, TrojanDownloader:Win32/Dexel, and Backdoor:Win32/Dexel) is an evasive Windows troja... |
| immirat | Rat | 17 | Immirat (classified across cybersecurity vendors as Trojan:Win32/Immirat, Backdoor:Win32/Immirat, and Trojan.Generic.Immirat) is a sophisticated remote access t... |
| jackservn | Trojan Downloader | 17 | Jackservn (classified in antimalware definitions under Trojan:Win32/Jackservn, TrojanDownloader:Win32/Jackservn, and Backdoor:Win32/Jackservn) is a stealthy mod... |
| multidropper | Trojan Dropper | 17 | MultiDropper (tracked across industry threat intelligence platforms as TrojanDropper:Win32/MultiDropper, Dropper.Win32.Multi, and Trojan.MultiDropper) is an int... |
| birele | Ransomware | 16 | Birele (classified across commercial antivirus and EDR solutions under designations including Ransom:Win32/Birele, Trojan-Ransom.Win32.Birele, and Ransom.Birele... |
| cmy3u | Ransomware | 16 | Cmy3u (classified across security vendors as Ransom:Win32/Cmy3u, Trojan-Ransom.Win32.Cmy3u, and Win32/Cmy3u) is a targeted crypto-ransomware family engineered t... |
| cwqw | Ransomware | 16 | Cwqw (identified across antimalware research as Ransom:Win32/Cwqw, Trojan-Ransom.Win32.Cwqw, and Ransom.Cwqw) is an evasive corporate crypto-ransomware family d... |
| dico | Ransomware | 16 | Dico (classified across antimalware research as Ransom:Win32/Dico, Trojan-Ransom.Win32.Dico, and Ransom.Dico) is a high-impact corporate crypto-ransomware famil... |
| jottix | Ransomware | 16 | Jottix (classified across cybersecurity organizations as Ransom:Win32/Jottix, Trojan-Ransom.Win32.Jottix, and Win32/Jottix) is a targeted crypto-ransomware fami... |
| krserv | Ransomware | 16 | KRServ (classified across antimalware research as Ransom:Win32/KRServ, Trojan:Win32/KRServ, and Win32/KRServ) is a specialized ransomware and trojan service fam... |
| sixer | Ransomware | 16 | Sixer (classified in cybersecurity threat databases under designations including Ransom:Win32/Sixer, Trojan-Ransom.Win32.Sixer, and Win32/Sixer) is an evasive c... |
| vools | Ransomware | 16 | Vools (classified across antimalware research as Ransom:Win32/Vools, Trojan-Ransom.Win32.Vools, and Win32/Vools) is a high-speed corporate crypto-ransomware fam... |
| adject | Ransomware | 15 | Adject (classified across antivirus engines as Ransom:Win32/Adject, Trojan-Ransom.Win32.Adject, and Win32/Adject) is a targeted crypto-ransomware family designe... |
| betload | Ransomware | 15 | Betload (classified as Ransom:Win32/Betload, Trojan:Win32/Betload, and TrojanDownloader:Win32/Betload) is a hybrid trojan loader and ransomware payload observed... |
| blackv | Ransomware | 15 | BlackV (classified across threat intelligence feeds as Ransom:Win32/BlackV and Trojan-Ransom.Win32.BlackV) is an aggressive Windows crypto-ransomware family des... |
| generickdz | Ransomware | 15 | GenericKDZ (classified across endpoint antimalware engines under designations including Ransom:Win32/GenericKDZ, Trojan-Ransom.Win32.GenericKDZ, and Win32/Gener... |
| gotango | Browser Modifier | 15 | GoTango (classified as BrowserModifier:Win32/GoTango and Adware:Win32/GoTango across Microsoft Defender, Malwarebytes, and Trend Micro) is an aggressive browser... |
| jaiks | Ransomware | 15 | Jaiks (classified in antimalware threat repositories as Ransom:Win32/Jaiks and Trojan-Ransom.Win32.Jaiks) is an evasive crypto-ransomware family designed to exe... |
| lovgate | Worm | 15 | Lovgate (historically documented across cybersecurity research as Worm:Win32/Lovgate, Email-Worm.Win32.Lovgate, and Backdoor:Win32/Lovgate) is a landmark mass-m... |
| papras | Infostealer | 15 | Papras (classified across cybersecurity vendors as Trojan:Win32/Papras, PWS:Win32/Papras, and Trojan-PSW.Win32.Papras) is a modular password stealer and banking... |
| powzip | Ransomware | 15 | Powzip (classified in threat intelligence feeds as Ransom:Win32/Powzip and Trojan-Ransom.Win32.Powzip) is an unusual crypto-ransomware family that leverages Pow... |
| scriptkd | Ransomware | 15 | Scriptkd (classified as Ransom:Win32/Scriptkd and Trojan-Ransom.Win32.Scriptkd) is a script-based and multi-stage crypto-ransomware family combining Windows Scr... |
| umbald | Ransomware | 15 | Umbald (classified across antimalware research as Ransom:Win32/Umbald, Trojan-Ransom.Win32.Umbald, and Win32/Umbald) is an aggressive enterprise crypto-ransomwa... |
| vehidis | Ransomware | 15 | Vehidis (classified as Ransom:Win32/Vehidis and Trojan-Ransom.Win32.Vehidis) is a destructive crypto-ransomware family designed for rapid and wide-scale data ex... |
| wsgame | Infostealer | 15 | WSGame (classified as Trojan:Win32/WSGame and Trojan-GameThief.Win32.WSGame across Microsoft Defender, Kaspersky, and Trend Micro) is a dedicated gaming credent... |
| yantai | Trojan Downloader | 15 | Yantai (classified in threat databases as TrojanDownloader:Win32/Yantai and Backdoor:Win32/Yantai) is a stealthy trojan downloader engineered to establish persi... |
| zlob | Trojan | 15 | Zlob (historically one of the most prolific malware families in cybersecurity history, classified across antivirus engines as Trojan:Win32/Zlob, Trojan.Zlob, an... |
| zvuzona | Ransomware | 15 | Zvuzona (classified as Ransom:Win32/Zvuzona across Microsoft Defender, Kaspersky, and Trend Micro) is a destructive crypto-ransomware family designed for rapid ... |
| attack | Hacktool | 14 | Attack (classified across antimalware research as Trojan:Win32/Attack and HackTool:Win32/Attack) is a modular post-exploitation attack framework and lateral mov... |
| blackhole | Exploit Kit | 14 | Blackhole (historically documented as Exploit:Win32/Blackhole and the Blackhole Exploit Kit / BHEK) was the single most dominant commercial exploit kit in the c... |
| dnscleaner | Pua | 14 | DNSCleaner (classified across security vendors as PUA:Win32/DNSCleaner and Rogue:Win32/DNSCleaner) is a scareware system optimizer and Potentially Unwanted Appl... |
| genericrxdz | Ransomware | 14 | GenericRXDZ (classified across commercial antivirus engines under designations including Ransom:Win32/GenericRXDZ and Trojan-Ransom.Win32.GenericRXDZ) is an eva... |
| geral | Ransomware | 14 | Geral (classified across antimalware research as Ransom:Win32/Geral, Trojan-Ransom.Win32.Geral, and Win32/Geral) is an aggressive Windows crypto-ransomware fami... |
| installermonetizer | Adware | 14 | InstallerMonetizer (classified across cybersecurity vendors as Adware:Win32/InstallerMonetizer and PUA:Win32/InstallerMonetizer) is a software monetizing pay-pe... |
| mofksys | Worm | 14 | Mofksys (classified as Worm:Win32/Mofksys across Microsoft Defender, Sophos, and Kaspersky) is an evasive network and removable drive worm targeting Windows sys... |
| openinstall | Adware | 14 | OpenInstall (classified across security vendors as Adware:Win32/OpenInstall and PUA:Win32/OpenInstall) is an aggressive software bundler and adware delivery pla... |
| screenconnect | Hacktool | 14 | ScreenConnect (ConnectWise ScreenConnect, classified across security telemetry as Tool:Win32/ScreenConnect and RemoteAccess:Win32/ScreenConnect) is a legitimate... |
| troldesh | Ransomware | 14 | Troldesh (widely tracked across the intelligence community as Shade or Encrypter.JPHP) is a notorious Russian-speaking ransomware family first active in late 20... |
| winloadsda | Trojan Downloader | 14 | WinloadSDA (classified across security vendors as TrojanDownloader:Win32/WinloadSDA and Trojan:Win32/WinloadSDA) is an evasive trojan downloader and stager that... |
| woozlist | Browser Modifier | 14 | WoozList (classified as BrowserModifier:Win32/WoozList and Adware:Win32/WoozList across Microsoft Defender, Malwarebytes, and Trend Micro) is a persistent adwar... |
| aauto | Trojan | 13 | AAuto (classified across antimalware research as Trojan:Win32/AAuto and TrojanDownloader:Win32/AAuto) is an automation-scripting loader trojan compiled using th... |
| appscience | Adware | 13 | AppScience (classified across security vendors as Adware:Win32/AppScience and PUA:Win32/AppScience) is an intrusive adware and telemetry collection software fra... |
| gorgon | Apt | 13 | Gorgon (tracked in threat intelligence as The Gorgon Group, Backdoor:Win32/Gorgon, and Trojan:Win32/Gorgon) is a cyber espionage and targeted crimeware toolset ... |
| installbrain | Adware | 13 | InstallBrain (classified across cybersecurity vendors as Adware:Win32/InstallBrain and PUA:Win32/InstallBrain) is an aggressive pay-per-install software bundler... |
| kirts | Ransomware | 13 | Kirts (classified across antimalware research as Ransom:Win32/Kirts and Trojan-Ransom.Win32.Kirts) is a targeted crypto-ransomware family designed to execute de... |
| kraddare | Ransomware | 13 | Kraddare (classified as Ransom:Win32/Kraddare across Microsoft Defender, Kaspersky, and Trend Micro) is an enterprise crypto-ransomware family designed for rapi... |
| macri | Ransomware | 13 | Macri (classified in threat databases as Ransom:Win32/Macri and Trojan-Ransom.Win32.Macri) is a targeted corporate crypto-ransomware family that encrypts files ... |
| opendownloadmanager | Adware | 13 | OpenDownloadManager (classified across endpoint security engines as PUA:Win32/OpenDownloadManager and Adware:Win32/OpenDownloadManager) is a Potentially Unwante... |
| pirminay | Infostealer | 13 | Pirminay (classified across security vendors as Trojan:Win32/Pirminay and PWS:Win32/Pirminay) is an information-stealing trojan designed to covertly harvest sys... |
| reset | Ransomware | 13 | Reset (classified across antivirus engines as Ransom:Win32/Reset and Trojan-Ransom.Win32.Reset) is an aggressive corporate crypto-ransomware family designed to ... |
| talent | Ransomware | 13 | Talent (classified in threat databases as Ransom:Win32/Talent and Trojan-Ransom.Win32.Talent) is an evasive crypto-ransomware family designed for rapid and wide... |
| widgi | Advanced Threat | 13 | Adware:Win32/Widgi (often associated with the Widgi Toolbar) is a deceptive adware framework and Potentially Unwanted Program (PUA) that silently infiltrates en... |
| zboter | Trojan | 13 | Trojan:Win32/Zboter is a generic heuristic detection typically associated with the downloader or initial staging components of the infamous ZeuS (Zbot) banking ... |
| 3proxy | Trojan | 12 | 3Proxy (classified in antivirus detection telemetry under designations including Trojan:Win32/3Proxy, Trojan.Win32.3Proxy, and Win32/3Proxy) is a multi-stage tr... |
| addlyrics | Trojan | 12 | Addlyrics (classified in antivirus detection telemetry under designations including Trojan:Win32/Addlyrics, Trojan.Win32.Addlyrics, and Win32/Addlyrics) is a mu... |
| banpak | Trojan | 12 | Banpak (classified in antivirus detection telemetry under designations including Trojan:Win32/Banpak, Trojan.Win32.Banpak, and Win32/Banpak) is a multi-stage tr... |
| centrumloader | Trojan Downloader | 12 | Centrumloader (classified in antivirus detection telemetry under designations including TrojanDownloader:Win32/Centrumloader, TrojanDownloader.Win32.Centrumload... |
| csrb | Ransomware | 12 | Trojan:Win32/Csrb is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware, ... |
| eyooun | Advanced Threat | 12 | Adware:Win32/Eyooun is a deceptive adware framework and Potentially Unwanted Program (PUA) that silently infiltrates endpoints, typically bundled with freeware,... |
| fasong | Ransomware | 12 | Trojan:Win32/Fasong is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| gendal | Ransomware | 12 | Trojan:Win32/Gendal is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| mapsgory | Advanced Threat | 12 | Adware:Win32/Mapsgory is a deceptive adware framework and Potentially Unwanted Program (PUA) that silently infiltrates endpoints, typically bundled with freewar... |
| quant | Ransomware | 12 | TrojanDownloader:Win32/Quant (commonly known as **Quant Loader**) is a highly successful, commercially available malware downloader. Heavily advertised and sold... |
| redosdru | Ransomware | 12 | Trojan:Win32/Redosdru is a persistent, stealthy trojan and backdoor designed to breach endpoint defenses, establish a long-term foothold, and securely deliver s... |
| systex | Ransomware | 12 | Trojan:Win32/Systex is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| ubar | Advanced Threat | 12 | Adware:Win32/Ubar is a deceptive adware framework and Potentially Unwanted Program (PUA) that silently infiltrates endpoints, typically bundled with freeware (e... |
| vimditator | Advanced Threat | 12 | Adware:Win32/Vimditator is a deceptive adware framework and Potentially Unwanted Program (PUA) that silently infiltrates endpoints, typically bundled with freew... |
| webdown | Ransomware | 12 | TrojanDownloader:Win32/Webdown is a generic heuristic detection used by antivirus engines to identify malicious scripts or small executable stubs whose sole pur... |
| bluteal | Ransomware | 11 | Bluteal (classified in antivirus detection telemetry under designations including Ransom:Win32/Bluteal, Ransom.Win32.Bluteal, and Win32/Bluteal) is a crypto-ran... |
| cloxer | Ransomware | 11 | Trojan:Win32/Cloxer is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| exploder | Ransomware | 11 | Trojan:Win32/Exploder is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwa... |
| gendwnurl | Ransomware | 11 | TrojanDownloader:Win32/Gendwnurl is a generic heuristic detection used by antivirus engines to identify malicious scripts or small executable stubs whose sole p... |
| genericrxea | Ransomware | 11 | Trojan:Win32/Genericrxea is a generic, heuristic detection name used by endpoint security solutions (specifically Windows Defender) to identify files exhibiting... |
| genericrxeg | Ransomware | 11 | Trojan:Win32/Genericrxeg is a generic, heuristic detection name used by endpoint security solutions (specifically Windows Defender) to identify files exhibiting... |
| jord | Ransomware | 11 | Trojan:Win32/Jord is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware, ... |
| menti | Advanced Threat | 11 | Adware:Win32/Menti is a deceptive adware framework and Potentially Unwanted Program (PUA) that silently infiltrates endpoints, typically bundled with freeware, ... |
| midia | Ransomware | 11 | Virus:Win32/Midia is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware, ... |
| multidl | Trojan | 11 | TrojanDownloader:Win32/Multidl is a generic heuristic detection used by antivirus engines to identify malicious stagers whose primary function is to establish a... |
| paph | Ransomware | 11 | Trojan:Win32/Paph is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware, ... |
| ranos | Ransomware | 11 | Trojan:Win32/Ranos is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware,... |
| refroso | Ransomware | 11 | Trojan:Win32/Refroso is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwar... |
| smartapps | Advanced Threat | 11 | Adware:Win32/Smartapps is a widespread Potentially Unwanted Program (PUA) and adware bundler framework. It is designed to act as an aggressive installer wrapper... |
| stimilik | Ransomware | 11 | Trojan:Win32/Stimilik is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwa... |
| ubibila | Ransomware | 11 | Trojan:Win32/Ubibila is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwar... |
| updater | Ransomware | 11 | PUA:Win32/Updater is a generic classification used by security vendors to identify Potentially Unwanted Programs (PUAs) and greyware that masquerade as legitima... |
| vrbrothers | Advanced Threat | 11 | Adware:Win32/Vrbrothers is a deceptive adware framework and Potentially Unwanted Program (PUA) that silently infiltrates endpoints, typically bundled with freew... |
| zebrocy | Trojan | 11 | Trojan:Win32/Zebrocy (also known as Sednit or associated with Sofacy) is a highly customized, multi-language malware toolset used almost exclusively by **APT28 ... |
| zzinfor | Ransomware | 11 | Trojan:Win32/Zzinfor is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwar... |
| adgazelle | Trojan | 10 | Adgazelle (classified in antivirus detection telemetry under designations including Trojan:Win32/Adgazelle, Trojan.Win32.Adgazelle, and Win32/Adgazelle) is a mu... |
| bandit | Ransomware | 10 | Bandit (classified in antivirus detection telemetry under designations including Ransom:Win32/Bandit, Ransom.Win32.Bandit, and Win32/Bandit) is a crypto-ransomw... |
| codiby | Ransomware | 10 | Trojan:Win32/Codiby is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| dlboost | Advanced Threat | 10 | PUA:Win32/Dlboost (Download Boosters/Managers) represents a category of Potentially Unwanted Programs (PUAs) and adware that masquerade as utilities designed to... |
| hilevel | Ransomware | 10 | Trojan:Win32/Hilevel is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwar... |
| idlekms | Ransomware | 10 | HackTool:Win32/Idlekms (and similar tools like KMSPico or AutoKMS) is a software utility designed explicitly for software piracy. It is used to illegally activa... |
| jaike | Ransomware | 10 | Trojan:Win32/Jaike is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware,... |
| jintor | Ransomware | 10 | Trojan:Win32/Jintor is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| nagoot | Ransomware | 10 | Trojan:Win32/Nagoot is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| pony | Infostealer | 10 | Pony (cataloged across cybersecurity authorities as Fareit, Siplog, Trojan:Win32/Fareit, and PWS:Win32/Fareit) is one of the most prolific commodity information... |
| redyms | Ransomware | 10 | Trojan:Win32/Redyms (also known as the **Redyms Botnet**) is a significant malware family whose primary objective is large-scale, automated click fraud and sear... |
| sisbot | Ransomware | 10 | Trojan:Win32/Sisbot is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| tovus | Ransomware | 10 | Trojan:Win32/Tovus is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware,... |
| trick | Ransomware | 10 | Trojan:Win32/Trick (universally known as **Trickbot**) is one of the most successful, devastating, and modular malware families in history. Originally emerging ... |
| vopak | Ransomware | 10 | Trojan:Win32/Vopak is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware,... |
| antavmu | Ransomware | 9 | Antavmu (classified in antivirus detection telemetry under designations including Ransom:Win32/Antavmu, Ransom.Win32.Antavmu, and Win32/Antavmu) is a crypto-ran... |
| buzy | Ransomware | 9 | Buzy (classified in antivirus detection telemetry under designations including Ransom:Win32/Buzy, Ransom.Win32.Buzy, and Win32/Buzy) is a crypto-ransomware desi... |
| cossta | Ransomware | 9 | Trojan:Win32/Cossta is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| delbar | Ransomware | 9 | Trojan:Win32/Delbar is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| dervec | Ransomware | 9 | Trojan:Win32/Dervec is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| hiru | Ransomware | 9 | Trojan:Win32/Hiru is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware, ... |
| ksdler | Ransomware | 9 | TrojanDownloader:Win32/Ksdler is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ... |
| lebag | Ransomware | 9 | Trojan:Win32/Lebag is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware,... |
| loader | Ransomware | 9 | Trojan:Win32/Loader (or generic **Loader / Downloader** heuristics) represents the foundational building block of the modern cybercrime ecosystem. A Loader is a... |
| lunam | Ransomware | 9 | Trojan:Win32/Lunam is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware,... |
| miancha | Ransomware | 9 | Trojan:Win32/Miancha is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwar... |
| mwpm | Ransomware | 9 | Trojan:Win32/Mwpm is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware, ... |
| netpass | Trojan | 9 | HackTool:Win32/Netpass is a heuristic detection applied to the legitimate NirSoft utility 'Network Password Recovery' (`netpass.exe`), as well as modified varia... |
| ranapama | Ransomware | 9 | Trojan:Win32/Ranapama is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwa... |
| snobar | Ransomware | 9 | Trojan:Win32/Snobar is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| wirzemro | Ransomware | 9 | Trojan:Win32/Wirzemro is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwa... |
| blueh | Ransomware | 8 | Blueh (classified in antivirus detection telemetry under designations including Ransom:Win32/Blueh, Ransom.Win32.Blueh, and Win32/Blueh) is a crypto-ransomware ... |
| brresmon | Ransomware | 8 | Brresmon (classified in antivirus detection telemetry under designations including Ransom:Win32/Brresmon, Ransom.Win32.Brresmon, and Win32/Brresmon) is a crypto... |
| citeary | Ransomware | 8 | Trojan:Win32/Citeary is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwar... |
| cnopa | Ransomware | 8 | Trojan:Win32/Cnopa is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware,... |
| dalexis | Ransomware | 8 | Trojan:Win32/Dalexis is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwar... |
| enistery | Ransomware | 8 | Trojan:Win32/Enistery is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwa... |
| lydra | Ransomware | 8 | Trojan:Win32/Lydra is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware,... |
| montp | Ransomware | 8 | Trojan:Win32/Montp is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware,... |
| neos | Ransomware | 8 | Trojan:Win32/Neos is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware, ... |
| orbus | Ransomware | 8 | Trojan:Win32/Orbus is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware,... |
| puwaders | Ransomware | 8 | Trojan:Win32/Puwaders is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwa... |
| resur | Ransomware | 8 | Trojan:Win32/Resur is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware,... |
| simda | Botnet | 8 | Simda is a versatile, highly evasive modular botnet and credential-theft trojan first detected in 2009. Engineered with aggressive anti-analysis routines, sandb... |
| wenper | Ransomware | 8 | Trojan:Win32/Wenper is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| wyhymyz | Ransomware | 8 | Trojan:Win32/Wyhymyz is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwar... |
| adinstaller | Trojan | 7 | Adinstaller (classified in antivirus detection telemetry under designations including Trojan:Win32/Adinstaller, Trojan.Win32.Adinstaller, and Win32/Adinstaller)... |
| comrerop | Ransomware | 7 | Trojan:Win32/Comrerop is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwa... |
| corrempa | Ransomware | 7 | Trojan:Win32/Corrempa is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwa... |
| dishigy | Ransomware | 7 | Trojan:Win32/Dishigy is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwar... |
| dorv | Ransomware | 7 | Trojan:Win32/Dorv is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware, ... |
| erbon | Ransomware | 7 | Trojan:Win32/Erbon is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware,... |
| fareitvb | Trojan | 7 | PWS:Win32/Fareitvb is a specific variant of the infamous **Fareit** (also known as **Pony**) infostealer family, notable for being rewritten or wrapped in Visua... |
| genericrxda | Ransomware | 7 | Trojan:Win32/Genericrxda is a generic, heuristic-based detection name used by Microsoft Defender and other AV engines to classify a wide variety of persistent, ... |
| gippers | Ransomware | 7 | Trojan:Win32/Gippers is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwar... |
| installpack | Advanced Threat | 7 | Adware:Win32/Installpack is a generic classification for highly aggressive Software Bundlers and Pay-Per-Install (PPI) monetizers. These are the engines that dr... |
| klone | Ransomware | 7 | Trojan:Win32/Klone is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware,... |
| lolojan | Ransomware | 7 | Trojan:Win32/Lolojan is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwar... |
| loskad | Ransomware | 7 | Trojan:Win32/Loskad is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| mago | Ransomware | 7 | Trojan:Win32/Mago is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware, ... |
| molock | Ransomware | 7 | Trojan:Win32/Molock is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| moonlight | Ransomware | 7 | Trojan:Win32/Moonlight is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomw... |
| noonlight | Ransomware | 7 | Trojan:Win32/Noonlight is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomw... |
| nrww | Ransomware | 7 | Trojan:Win32/Nrww is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware, ... |
| nsanti | Ransomware | 7 | Trojan:Win32/Nsanti is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| passview | Advanced Threat | 7 | HackTool:Win32/Passview (or generic **NirSoft Password Recovery Abuse** heuristics) refers to the detection of legitimate, powerful system administration utilit... |
| pepm | Ransomware | 7 | Trojan:Win32/Pepm is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware, ... |
| resdro | Ransomware | 7 | Trojan:Win32/Resdro is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| spnr | Ransomware | 7 | Trojan:Win32/Spnr is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware, ... |
| squarenet | Ransomware | 7 | Backdoor:Win32/Squarenet is a highly sophisticated botnet agent known for its resilience and its primary role as a 'pay-per-install' (PPI) delivery mechanism, d... |
| taily | Ransomware | 7 | Trojan:Win32/Taily is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware,... |
| tainp | Ransomware | 7 | Trojan:Win32/Tainp is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware,... |
| upkm | Ransomware | 7 | Trojan:Win32/Upkm is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware, ... |
| vemptik | Ransomware | 7 | Trojan:Win32/Vemptik is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwar... |
| vibem | Ransomware | 7 | Trojan:Win32/Vibem is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware,... |
| zmem | Ransomware | 7 | Trojan:Win32/Zmem is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware, ... |
| zumanek | Ransomware | 7 | Trojan:Win32/Zumanek is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwar... |
| bicololo | Ransomware | 6 | Bicololo (classified in antivirus detection telemetry under designations including Ransom:Win32/Bicololo, Ransom.Win32.Bicololo, and Win32/Bicololo) is a crypto... |
| bulta | Ransomware | 6 | Bulta (classified in antivirus detection telemetry under designations including Ransom:Win32/Bulta, Ransom.Win32.Bulta, and Win32/Bulta) is a crypto-ransomware ... |
| cekar | Ransomware | 6 | Cekar (classified in antivirus detection telemetry under designations including Ransom:Win32/Cekar, Ransom.Win32.Cekar, and Win32/Cekar) is a crypto-ransomware ... |
| chepro | Ransomware | 6 | Trojan:Win32/Chepro is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| cjishu | Ransomware | 6 | Trojan:Win32/Cjishu is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| creprote | Ransomware | 6 | Trojan:Win32/Creprote is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwa... |
| delikle | Ransomware | 6 | Trojan:Win32/Delikle is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwar... |
| detroie | Ransomware | 6 | Trojan:Win32/Detroie is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwar... |
| dotto | Ransomware | 6 | Trojan:Win32/Dotto is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware,... |
| duphead | Ransomware | 6 | Trojan:Win32/Duphead is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwar... |
| ekidoa | Ransomware | 6 | Trojan:Win32/Ekidoa is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| epack | Ransomware | 6 | Trojan:Win32/Epack is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware,... |
| fbtaken | Ransomware | 6 | Trojan:Win32/Fbtaken is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwar... |
| firstinj | Ransomware | 6 | Trojan:Win32/Firstinj is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwa... |
| genericgb | Ransomware | 6 | Trojan:Win32/Genericgb is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomw... |
| hiloti | Ransomware | 6 | Trojan:Win32/Hiloti is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| huhk | Ransomware | 6 | Trojan:Win32/Huhk is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware, ... |
| hype | Ransomware | 6 | Trojan:Win32/Hype is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware, ... |
| idsohtu | Ransomware | 6 | Trojan:Win32/Idsohtu is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwar... |
| installiq | Advanced Threat | 6 | Adware:Win32/Installiq is a massive, commercial Pay-Per-Install (PPI) bundler framework, functioning similarly to Installmonetizer. It is essentially an aggress... |
| installmonetizer | Advanced Threat | 6 | Adware:Win32/Installmonetizer is a massive, commercial Pay-Per-Install (PPI) bundler framework. It is not a single piece of adware, but rather the distribution ... |
| jumpta | Ransomware | 6 | Trojan:Win32/Jumpta is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| lazagne | Advanced Threat | 6 | HackTool:Win32/Lazagne is an open-source, highly versatile **Credential Dumper** and password recovery utility available on GitHub. While designed for legitimat... |
| leivion | Ransomware | 6 | Trojan:Win32/Leivion is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwar... |
| netcat | Advanced Threat | 6 | HackTool:Win32/Netcat (often abbreviated as `nc` or `ncat`) is a classic example of a **'Dual-Use' or 'Living off the Land' (LotL)** utility. Netcat is a comman... |
| nilage | Ransomware | 6 | Trojan:Win32/Nilage is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| orsam | Ransomware | 6 | Trojan:Win32/Orsam is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware,... |
| pavica | Ransomware | 6 | Trojan:Win32/Pavica is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| peals | Ransomware | 6 | Trojan:Win32/Peals is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware,... |
| psloader | Ransomware | 6 | Trojan:Win32/Psloader is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwa... |
| rastarby | Ransomware | 6 | Trojan:Win32/Rastarby is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwa... |
| recex | Ransomware | 6 | Trojan:Win32/Recex is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware,... |
| samca | Ransomware | 6 | Trojan:Win32/Samca is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware,... |
| sciagnij | Advanced Threat | 6 | Adware:Win32/Sciagnij is a Potentially Unwanted Program (PUA) and adware downloader. It typically masquerades as a legitimate download manager or file sharing u... |
| sinresby | Ransomware | 6 | Trojan:Win32/Sinresby is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwa... |
| smee | Ransomware | 6 | Trojan:Win32/Smee is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware, ... |
| swotter | Ransomware | 6 | Trojan:Win32/Swotter is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwar... |
| tilken | Ransomware | 6 | Trojan:Win32/Tilken is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| toga | Ransomware | 6 | Trojan:Win32/Toga is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware, ... |
| vanilloader | Ransomware | 6 | TrojanDownloader:Win32/Vanilloader is a lightweight, highly obfuscated trojan designed exclusively to act as the first stage in a multi-stage infection chain. I... |
| venik | Ransomware | 6 | Trojan:Win32/Venik is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware,... |
| vidro | Ransomware | 6 | Trojan:Win32/Vidro is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware,... |
| xpyn | Ransomware | 6 | Trojan:Win32/Xpyn is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware, ... |
| zygug | Ransomware | 6 | Trojan:Win32/Zygug is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware,... |
| agentwdcr | Ransomware | 5 | Agentwdcr (classified in antivirus detection telemetry under designations including Ransom:Win32/Agentwdcr, Ransom.Win32.Agentwdcr, and Win32/Agentwdcr) is a cr... |
| baserch | Ransomware | 5 | Baserch (classified in antivirus detection telemetry under designations including Ransom:Win32/Baserch, Ransom.Win32.Baserch, and Win32/Baserch) is a crypto-ran... |
| bero | Ransomware | 5 | Bero (classified in antivirus detection telemetry under designations including Ransom:Win32/Bero, Ransom.Win32.Bero, and Win32/Bero) is a crypto-ransomware desi... |
| chifrax | Ransomware | 5 | Trojan:Win32/Chifrax is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwar... |
| conjar | Ransomware | 5 | Trojan:Win32/Conjar is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| cslz | Ransomware | 5 | Trojan:Win32/Cslz is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware, ... |
| cyfin | Ransomware | 5 | Trojan:Win32/Cyfin is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware,... |
| dadobra | Ransomware | 5 | Trojan:Win32/Dadobra is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwar... |
| delfiles | Ransomware | 5 | Trojan:Win32/Delfiles is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwa... |
| dodiw | Ransomware | 5 | Trojan:Win32/Dodiw is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware,... |
| dominator | Ransomware | 5 | Trojan:Win32/Dominator is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomw... |
| downer | Ransomware | 5 | TrojanDownloader:Win32/Downer (or Generic Downloader) is a broad heuristic classification for malicious software whose primary purpose is to securely bypass loc... |
| enestedel | Ransomware | 5 | Trojan:Win32/Enestedel is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomw... |
| fakeie | Ransomware | 5 | Trojan:Win32/Fakeie is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| fbsi | Ransomware | 5 | Trojan:Win32/Fbsi is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware, ... |
| fraudster | Ransomware | 5 | Trojan:Win32/Fraudster is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomw... |
| genericrxcl | Ransomware | 5 | Trojan:Win32/Genericrxcl is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ranso... |
| genericrxen | Ransomware | 5 | Trojan:Win32/Genericrxen is a broad, heuristic detection name used by Microsoft Defender and other antivirus engines to classify a wide variety of trojans that ... |
| gojdue | Ransomware | 5 | Trojan:Win32/Gojdue is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| haperlock | Ransomware | 5 | Trojan:Win32/Haperlock is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomw... |
| inegery | Ransomware | 5 | Trojan:Win32/Inegery is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwar... |
| jyuqet | Ransomware | 5 | Trojan:Win32/Jyuqet is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| kasinst | Ransomware | 5 | Trojan:Win32/Kasinst is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwar... |
| laban | Ransomware | 5 | Trojan:Win32/Laban is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware,... |
| mensa | Ransomware | 5 | Trojan:Win32/Mensa is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware,... |
| mufanom | Ransomware | 5 | Trojan:Win32/Mufanom is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwar... |
| naprat | Ransomware | 5 | Trojan:Win32/Naprat is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| necne | Ransomware | 5 | Trojan:Win32/Necne is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware,... |
| perkiler | Ransomware | 5 | Trojan:Win32/Perkiler is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwa... |
| pintu | Ransomware | 5 | Trojan:Win32/Pintu is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware,... |
| pres | Ransomware | 5 | Trojan:Win32/Pres is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware, ... |
| remoh | Ransomware | 5 | Trojan:Win32/Remoh is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware,... |
| rovnix | Bootkit | 5 | Trojan:Win32/Rovnix is a highly sophisticated bootkit and trojan downloader designed to infect the Master Boot Record (MBR) or Volume Boot Record (VBR) to achie... |
| ruco | Ransomware | 5 | Trojan:Win32/Ruco is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware, ... |
| sahat | Ransomware | 5 | Trojan:Win32/Sahat is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware,... |
| sasfis | Trojan | 5 | TrojanDownloader:Win32/Sasfis is a prevalent, highly active botnet component and downloader trojan. It is primarily utilized by cybercriminal syndicates as a 'f... |
| skillis | Ransomware | 5 | Trojan:Win32/Skillis is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwar... |
| smearpasse | Ransomware | 5 | Trojan:Win32/Smearpasse is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransom... |
| stocde | Ransomware | 5 | Trojan:Win32/Stocde is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| tanske | Ransomware | 5 | Trojan:Win32/Tanske is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| tar4rkdi | Ransomware | 5 | Trojan:Win32/Tar4rkdi is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwa... |
| tibs | Trojan | 5 | TrojanDownloader:Win32/Tibs is a classic, persistent trojan downloader designed to breach endpoint defenses and securely deliver secondary, high-severity payloa... |
| ukpa | Ransomware | 5 | Trojan:Win32/Ukpa is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware, ... |
| vapsup | Ransomware | 5 | Trojan:Win32/Vapsup is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| wigon | Ransomware | 5 | Trojan:Win32/Wigon is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware,... |
| wintrim | Trojan | 5 | Trojan:Win32/Wintrim is a persistent, stealthy trojan often functioning as an adware clicker or a backdoor designed to breach endpoint defenses and securely del... |
| 000c | Ransomware | 4 | 000C (classified in antivirus detection telemetry under designations including Ransom:Win32/000C, Ransom.Win32.000C, and Win32/000C) is a crypto-ransomware desi... |
| blakamba | Ransomware | 4 | Blakamba (classified in antivirus detection telemetry under designations including Ransom:Win32/Blakamba, Ransom.Win32.Blakamba, and Win32/Blakamba) is a crypto... |
| boht | Ransomware | 4 | Boht (classified in antivirus detection telemetry under designations including Ransom:Win32/Boht, Ransom.Win32.Boht, and Win32/Boht) is a crypto-ransomware desi... |
| canbis | Ransomware | 4 | Canbis (classified in antivirus detection telemetry under designations including Ransom:Win32/Canbis, Ransom.Win32.Canbis, and Win32/Canbis) is a crypto-ransomw... |
| denes | Ransomware | 4 | Trojan:Win32/Denes is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware,... |
| dubfot | Ransomware | 4 | Trojan:Win32/Dubfot is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| dycler | Ransomware | 4 | Trojan:Win32/Dycler is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| eggnog | Ransomware | 4 | Trojan:Win32/Eggnog is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| emelent | Ransomware | 4 | Trojan:Win32/Emelent is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwar... |
| emogen | Ransomware | 4 | Trojan:Win32/Emogen is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| eqtonex | Ransomware | 4 | Trojan:Win32/Eqtonex is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwar... |
| fakeime | Ransomware | 4 | Trojan:Win32/Fakeime is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwar... |
| fesber | Ransomware | 4 | Trojan:Win32/Fesber is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| floder | Ransomware | 4 | Trojan:Win32/Floder is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| fwwy | Ransomware | 4 | Trojan:Win32/Fwwy is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware, ... |
| gamup | Ransomware | 4 | Trojan:Win32/Gamup is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware,... |
| genericrxdr | Ransomware | 4 | Trojan:Win32/Genericrxdr is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ranso... |
| gh0st | Rat | 4 | Gh0st RAT (also tracked as Ghost RAT, Backdoor.Gh0st, and Win32/Gh0st) is one of the most historically significant, modular, and widely weaponized Remote Access... |
| hvom | Ransomware | 4 | Trojan:Win32/Hvom is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware, ... |
| inservice | Ransomware | 4 | Trojan:Win32/Inservice is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomw... |
| ircnite | Trojan | 4 | Backdoor:Win32/Ircnite (often associated with older, legacy botnets) is a trojan that infects a system and connects it to a clandestine Internet Relay Chat (IRC... |
| irplan | Ransomware | 4 | Trojan:Win32/Irplan is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| kapucen | Ransomware | 4 | Trojan:Win32/Kapucen is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwar... |
| kelios | Ransomware | 4 | Trojan:Win32/Kelios is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| kriskynote | Ransomware | 4 | Trojan:Win32/Kriskynote is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransom... |
| listicka | Ransomware | 4 | Trojan:Win32/Listicka is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwa... |
| mahato | Ransomware | 4 | Trojan:Win32/Mahato is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| marocan | Ransomware | 4 | Trojan:Win32/Marocan is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwar... |
| mazben | Ransomware | 4 | Trojan:Win32/Mazben is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| mkar | Ransomware | 4 | Trojan:Win32/Mkar is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware, ... |
| morphex | Ransomware | 4 | Trojan:Win32/Morphex is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwar... |
| patpoopy | Ransomware | 4 | Trojan:Win32/Patpoopy is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwa... |
| perseus | Ransomware | 4 | Trojan:Win32/Perseus is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwar... |
| prosti | Ransomware | 4 | Trojan:Win32/Prosti is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| pwsime | Ransomware | 4 | PWS:Win32/Pwsime is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware, b... |
| qqten | Ransomware | 4 | Trojan:Win32/Qqten is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware,... |
| rabased | Ransomware | 4 | Trojan:Win32/Rabased is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwar... |
| scribble | Ransomware | 4 | TrojanDownloader:O97M/Scribble (or similar macro-based droppers) represents a prevalent technique for initial access: the weaponization of Microsoft Office docu... |
| shaosmine | Ransomware | 4 | Trojan:Win32/Shaosmine is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomw... |
| stagol | Ransomware | 4 | Trojan:Win32/Stagol is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| startserv | Ransomware | 4 | Trojan:Win32/Startserv is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomw... |
| sysupdate | Ransomware | 4 | Trojan:Win32/Sysupdate is a highly deceptive malware family that relies heavily on social engineering, specifically the technique of **Masquerading**. As the na... |
| tarayt | Ransomware | 4 | Trojan:Win32/Tarayt is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| tbma | Ransomware | 4 | Trojan:Win32/Tbma is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware, ... |
| titirez | Ransomware | 4 | Trojan:Win32/Titirez is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwar... |
| upadter | Ransomware | 4 | Trojan:Win32/Upadter is a deceptive malware family that relies heavily on social engineering, specifically the technique of **Masquerading**. As the name implie... |
| weiduan | Ransomware | 4 | Trojan:Win32/Weiduan is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwar... |
| werly | Ransomware | 4 | Trojan:Win32/Werly is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware,... |
| xiazai | Ransomware | 4 | TrojanDownloader:Win32/Xiazai is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ... |
| xylauncher | Ransomware | 4 | TrojanDownloader:Win32/Xylauncher is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads l... |
| yakbeex | Ransomware | 4 | Trojan:Win32/Yakbeex is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwar... |
| zard | Ransomware | 4 | Trojan:Win32/Zard is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware, ... |
| zesibund | Ransomware | 4 | Trojan:Win32/Zesibund is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwa... |
| admoke | Ransomware | 3 | Admoke (classified in antivirus detection telemetry under designations including Ransom:Win32/Admoke, Ransom.Win32.Admoke, and Win32/Admoke) is a crypto-ransomw... |
| aotoit | Ransomware | 3 | Aotoit (classified in antivirus detection telemetry under designations including Ransom:Win32/Aotoit, Ransom.Win32.Aotoit, and Win32/Aotoit) is a crypto-ransomw... |
| bandios | Ransomware | 3 | Bandios (classified in antivirus detection telemetry under designations including Ransom:Win32/Bandios, Ransom.Win32.Bandios, and Win32/Bandios) is a crypto-ran... |
| banz | Ransomware | 3 | Banz (classified in antivirus detection telemetry under designations including Ransom:Win32/Banz, Ransom.Win32.Banz, and Win32/Banz) is a crypto-ransomware desi... |
| basine | Ransomware | 3 | Basine (classified in antivirus detection telemetry under designations including Ransom:Win32/Basine, Ransom.Win32.Basine, and Win32/Basine) is a crypto-ransomw... |
| batlauncher | Ransomware | 3 | Batlauncher (classified in antivirus detection telemetry under designations including Ransom:Win32/Batlauncher, Ransom.Win32.Batlauncher, and Win32/Batlauncher)... |
| beaugrit | Ransomware | 3 | Beaugrit (classified in antivirus detection telemetry under designations including Ransom:Win32/Beaugrit, Ransom.Win32.Beaugrit, and Win32/Beaugrit) is a crypto... |
| belonard | Ransomware | 3 | Belonard (classified in antivirus detection telemetry under designations including Ransom:Win32/Belonard, Ransom.Win32.Belonard, and Win32/Belonard) is a crypto... |
| blacked | Ransomware | 3 | Blacked (classified in antivirus detection telemetry under designations including Ransom:Win32/Blacked, Ransom.Win32.Blacked, and Win32/Blacked) is a crypto-ran... |
| blubot | Ransomware | 3 | Blubot (classified in antivirus detection telemetry under designations including Ransom:Win32/Blubot, Ransom.Win32.Blubot, and Win32/Blubot) is a crypto-ransomw... |
| boaxxe | Ransomware | 3 | Boaxxe (classified in antivirus detection telemetry under designations including Ransom:Win32/Boaxxe, Ransom.Win32.Boaxxe, and Win32/Boaxxe) is a crypto-ransomw... |
| cgmu | Ransomware | 3 | Trojan:Win32/Cgmu is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware, ... |
| comei | Ransomware | 3 | Trojan:Win32/Comei is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware,... |
| coolmirage | Ransomware | 3 | Trojan:Win32/Coolmirage is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransom... |
| crastic | Ransomware | 3 | Trojan:Win32/Crastic is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwar... |
| crcf | Ransomware | 3 | Trojan:Win32/Crcf is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware, ... |
| ctqc | Ransomware | 3 | Trojan:Win32/Ctqc is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware, ... |
| darkvnc | Ransomware | 3 | HackTool:Win32/Darkvnc is an incredibly dangerous and specialized Remote Access Trojan (RAT) component. It is a highly customized, stealthy implementation of th... |
| deshacop | Ransomware | 3 | Trojan:Win32/Deshacop is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwa... |
| diss | Ransomware | 3 | Trojan:Win32/Diss is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware, ... |
| dunco | Ransomware | 3 | Trojan:Win32/Dunco is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware,... |
| dyamar | Ransomware | 3 | Trojan:Win32/Dyamar is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| enosch | Ransomware | 3 | Trojan:Win32/Enosch is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| eroyee | Ransomware | 3 | Trojan:Win32/Eroyee is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| exdek | Ransomware | 3 | Trojan:Win32/Exdek is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware,... |
| exeaqtor | Ransomware | 3 | Trojan:Win32/Exeaqtor is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwa... |
| expressdownloader | Trojan | 3 | Adware:Win32/Expressdownloader is a detection for a deceptive software packager or **Bundler**. It is designed to act as a primary installation wrapper, promisi... |
| ezoons | Ransomware | 3 | Trojan:Win32/Ezoons is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| fadok | Ransomware | 3 | Trojan:Win32/Fadok is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware,... |
| fourthrem | Ransomware | 3 | Trojan:Win32/Fourthrem is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomw... |
| gamsoft | Trojan | 3 | Adware:Win32/Gamsoft is a detection for a potentially malicious software packager or bundler. It is designed to act as a primary installation wrapper, promising... |
| gasti | Ransomware | 3 | Trojan:Win32/Gasti is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware,... |
| gate | Ransomware | 3 | Trojan:Win32/Gate is a persistent, stealthy backdoor trojan designed to silently breach endpoint defenses, establish long-term persistence, and open a covert co... |
| genericrxev | Ransomware | 3 | Trojan:Win32/Genericrxev is a generic, heuristic detection applied by Microsoft Defender to binaries exhibiting a broad range of malicious behaviors, primarily ... |
| genericrxgl | Ransomware | 3 | Trojan:Win32/Genericrxgl is a generic, heuristic detection applied by Microsoft Defender to binaries exhibiting a broad range of malicious behaviors, primarily ... |
| ghoul | Ransomware | 3 | Trojan:Win32/Ghoul is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware,... |
| glox | Ransomware | 3 | Trojan:Win32/Glox is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware, ... |
| goabeny | Ransomware | 3 | Trojan:Win32/Goabeny is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwar... |
| gobot | Trojan | 3 | Backdoor:Win32/Gobot is an older, but persistent, Remote Access Trojan (RAT) and Botnet agent that relies on the Internet Relay Chat (IRC) protocol for Command ... |
| gottle | Ransomware | 3 | Trojan:Win32/Gottle is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| hancitor | Ransomware | 3 | TrojanDownloader:Win32/Hancitor (also widely known as **Chanitor**) is a highly prolific and dangerous Initial Access Broker (IAB) and downloader trojan. It is ... |
| higuniel | Ransomware | 3 | Trojan:Win32/Higuniel is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwa... |
| hlubea | Ransomware | 3 | Trojan:Win32/Hlubea is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| horst | Ransomware | 3 | Trojan:Win32/Horst is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware,... |
| ilomo | Ransomware | 3 | Trojan:Win32/Ilomo is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware,... |
| installflash | Trojan | 3 | Trojan:Win32/Installflash is a highly deceptive malware family that relies entirely on social engineering, specifically the technique of **Masquerading**. It di... |
| installmate | Trojan | 3 | Adware:Win32/Installmate is a detection for a potentially malicious software packager or bundler. InstallMate itself (formerly Tarma InstallMate) is a legitimat... |
| jobaka | Ransomware | 3 | Trojan:Win32/Jobaka is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| koal | Ransomware | 3 | Trojan:Win32/Koal is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware, ... |
| konus | Ransomware | 3 | Trojan:Win32/Konus is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware,... |
| koobcafe | Ransomware | 3 | Trojan:Win32/Koobcafe is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwa... |
| krunchy | Ransomware | 3 | Trojan:Win32/Krunchy is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwar... |
| kwampirs | Trojan | 3 | Backdoor:Win32/Kwampirs is a sophisticated, highly targeted remote access trojan (RAT) primarily associated with the Advanced Persistent Threat (APT) group know... |
| lapka | Ransomware | 3 | Trojan:Win32/Lapka is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware,... |
| lenwadu | Ransomware | 3 | Trojan:Win32/Lenwadu is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwar... |
| liev | Ransomware | 3 | Trojan:Win32/Liev is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware, ... |
| lipler | Ransomware | 3 | Trojan:Win32/Lipler is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| lodbak | Ransomware | 3 | Trojan:Win32/Lodbak is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| luder | Ransomware | 3 | Trojan:Win32/Luder is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware,... |
| macoute | Ransomware | 3 | Trojan:Win32/Macoute is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwar... |
| maesorn | Ransomware | 3 | Trojan:Win32/Maesorn is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwar... |
| mdeclass | Ransomware | 3 | Trojan:Win32/Mdeclass is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwa... |
| moneyinst | Trojan | 3 | Adware:Win32/Moneyinst is a detection for a potentially malicious software packager or bundler. It is designed to act as a primary installation wrapper, promisi... |
| msidrop | Ransomware | 3 | Behavior:Win32/Msidrop is a critical **Heuristic and Generic Detection** applied to malicious Windows Installer (`.msi`) packages. Attackers heavily utilize mal... |
| mutant | Ransomware | 3 | Trojan:Win32/Mutant is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| mycop | Ransomware | 3 | Trojan:Win32/Mycop is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware,... |
| myxah | Ransomware | 3 | Trojan:Win32/Myxah is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware,... |
| nystprac | Ransomware | 3 | Trojan:Win32/Nystprac is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwa... |
| octopus | Ransomware | 3 | Trojan:Win32/Octopus is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwar... |
| opesup | Ransomware | 3 | Trojan:Win32/Opesup is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| palibu | Ransomware | 3 | Trojan:Win32/Palibu is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| passma | Ransomware | 3 | Trojan:Win32/Passma is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| petun | Ransomware | 3 | Trojan:Win32/Petun is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware,... |
| povertel | Ransomware | 3 | Trojan:Win32/Povertel is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwa... |
| powerless | Ransomware | 3 | Trojan:Win32/Powerless is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomw... |
| pshell | Ransomware | 3 | Trojan:PowerShell/Pshell is not a specific malware family, but a highly critical **Generic Heuristic Detection** focused entirely on the malicious abuse of the ... |
| pstinb | Ransomware | 3 | Trojan:Win32/Pstinb is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| purgen | Ransomware | 3 | Trojan:Win32/Purgen is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| qqfarmer | Ransomware | 3 | Trojan:Win32/Qqfarmer is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwa... |
| randrew | Ransomware | 3 | Trojan:Win32/Randrew is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwar... |
| redlonam | Ransomware | 3 | Trojan:Win32/Redlonam is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwa... |
| rifdoor | Ransomware | 3 | Trojan:Win32/Rifdoor is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwar... |
| rising | Ransomware | 3 | Trojan:Win32/Rising is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| ruandmel | Ransomware | 3 | Trojan:Win32/Ruandmel is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwa... |
| rukometa | Ransomware | 3 | Trojan:Win32/Rukometa is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwa... |
| sasquor | Ransomware | 3 | Trojan:Win32/Sasquor is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwar... |
| scano | Ransomware | 3 | Trojan:Win32/Scano is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware,... |
| sdld | Ransomware | 3 | Trojan:Win32/Sdld is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware, ... |
| shepher | Ransomware | 3 | Trojan:Win32/Shepher is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwar... |
| smalo | Ransomware | 3 | Trojan:Win32/Smalo is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware,... |
| sperolz | Ransomware | 3 | Trojan:Win32/Sperolz is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwar... |
| suloc | Ransomware | 3 | Trojan:Win32/Suloc is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware,... |
| takbum | Ransomware | 3 | Trojan:Win32/Takbum is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| tarctox | Ransomware | 3 | Trojan:Win32/Tarctox is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwar... |
| temr | Ransomware | 3 | Trojan:Win32/Temr is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware, ... |
| tenavt | Ransomware | 3 | Trojan:Win32/Tenavt is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| tftpd | Ransomware | 3 | HackTool:Win32/Tftpd is a critical detection that flags the presence of an unauthorized Trivial File Transfer Protocol (TFTP) daemon (server) running on a Windo... |
| therat | Ransomware | 3 | Trojan:Win32/Therat is a persistent, stealthy Remote Access Trojan (RAT) designed to breach endpoint defenses and securely deliver secondary, high-severity payl... |
| torjok | Ransomware | 3 | Trojan:Win32/Torjok is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| tyhos | Ransomware | 3 | Trojan:Win32/Tyhos is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware,... |
| ursumdt | Ransomware | 3 | Trojan:Win32/Ursumdt is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwar... |
| uwamson | Ransomware | 3 | Trojan:Win32/Uwamson is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwar... |
| uztub | Ransomware | 3 | Trojan:Win32/Uztub is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware,... |
| uztuby | Ransomware | 3 | Trojan:Win32/Uztuby is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| veilev | Ransomware | 3 | Trojan:Win32/Veilev is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| vkont | Ransomware | 3 | Trojan:Win32/Vkont is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware,... |
| vucha | Ransomware | 3 | Trojan:Win32/Vucha is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware,... |
| xorala | Ransomware | 3 | Trojan:Win32/Xorala is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| xyligan | Ransomware | 3 | Trojan:Win32/Xyligan is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwar... |
| 5hex | Ransomware | 2 | 5Hex (classified in antivirus detection telemetry under designations including Ransom:Win32/5Hex, Ransom.Win32.5Hex, and Win32/5Hex) is a crypto-ransomware desi... |
| advload | Trojan | 2 | Advload (classified in antivirus detection telemetry under designations including Trojan:Win32/Advload, Trojan.Win32.Advload, and Win32/Advload) is a multi-stag... |
| agentus | Ransomware | 2 | Agentus (classified in antivirus detection telemetry under designations including Ransom:Win32/Agentus, Ransom.Win32.Agentus, and Win32/Agentus) is a crypto-ran... |
| alphaeon | Ransomware | 2 | Alphaeon (classified in antivirus detection telemetry under designations including Ransom:Win32/Alphaeon, Ransom.Win32.Alphaeon, and Win32/Alphaeon) is a crypto... |
| alreay | Ransomware | 2 | Alreay (classified in antivirus detection telemetry under designations including Ransom:Win32/Alreay, Ransom.Win32.Alreay, and Win32/Alreay) is a crypto-ransomw... |
| ammyy | Ransomware | 2 | Ammyy (classified in antivirus detection telemetry under designations including Ransom:Win32/Ammyy, Ransom.Win32.Ammyy, and Win32/Ammyy) is a crypto-ransomware ... |
| aque | Ransomware | 2 | Aque (classified in antivirus detection telemetry under designations including Ransom:Win32/Aque, Ransom.Win32.Aque, and Win32/Aque) is a crypto-ransomware desi... |
| arhost | Ransomware | 2 | Arhost (classified in antivirus detection telemetry under designations including Ransom:Win32/Arhost, Ransom.Win32.Arhost, and Win32/Arhost) is a crypto-ransomw... |
| bagsu | Ransomware | 2 | Bagsu (classified in antivirus detection telemetry under designations including Ransom:Win32/Bagsu, Ransom.Win32.Bagsu, and Win32/Bagsu) is a crypto-ransomware ... |
| banspy | Infostealer | 2 | Banspy (classified in antivirus detection telemetry under designations including PWS:Win32/Banspy, PWS.Win32.Banspy, and Win32/Banspy) is a dedicated informatio... |
| bccrypt | Ransomware | 2 | Bccrypt (classified in antivirus detection telemetry under designations including Ransom:Win32/Bccrypt, Ransom.Win32.Bccrypt, and Win32/Bccrypt) is a crypto-ran... |
| begseabug | Ransomware | 2 | Begseabug (classified in antivirus detection telemetry under designations including Ransom:Win32/Begseabug, Ransom.Win32.Begseabug, and Win32/Begseabug) is a cr... |
| bluewushu | Ransomware | 2 | Bluewushu (classified in antivirus detection telemetry under designations including Ransom:Win32/Bluewushu, Ransom.Win32.Bluewushu, and Win32/Bluewushu) is a cr... |
| boopcel | Ransomware | 2 | Boopcel (classified in antivirus detection telemetry under designations including Ransom:Win32/Boopcel, Ransom.Win32.Boopcel, and Win32/Boopcel) is a crypto-ran... |
| bruhorn | Ransomware | 2 | Bruhorn (classified in antivirus detection telemetry under designations including Ransom:Win32/Bruhorn, Ransom.Win32.Bruhorn, and Win32/Bruhorn) is a crypto-ran... |
| bundleloader | Trojan Downloader | 2 | Bundleloader (classified in antivirus detection telemetry under designations including TrojanDownloader:Win32/Bundleloader, TrojanDownloader.Win32.Bundleloader,... |
| bustem | Ransomware | 2 | Bustem (classified in antivirus detection telemetry under designations including Ransom:Win32/Bustem, Ransom.Win32.Bustem, and Win32/Bustem) is a crypto-ransomw... |
| bybz | Ransomware | 2 | Bybz (classified in antivirus detection telemetry under designations including Ransom:Win32/Bybz, Ransom.Win32.Bybz, and Win32/Bybz) is a crypto-ransomware desi... |
| cakl | Ransomware | 2 | Cakl (classified in antivirus detection telemetry under designations including Ransom:Win32/Cakl, Ransom.Win32.Cakl, and Win32/Cakl) is a crypto-ransomware desi... |
| capredeam | Ransomware | 2 | Capredeam (classified in antivirus detection telemetry under designations including Ransom:Win32/Capredeam, Ransom.Win32.Capredeam, and Win32/Capredeam) is a cr... |
| cdvq | Ransomware | 2 | Cdvq (classified in antivirus detection telemetry under designations including Ransom:Win32/Cdvq, Ransom.Win32.Cdvq, and Win32/Cdvq) is a crypto-ransomware desi... |
| ceckno | Ransomware | 2 | Ceckno (classified in antivirus detection telemetry under designations including Ransom:Win32/Ceckno, Ransom.Win32.Ceckno, and Win32/Ceckno) is a crypto-ransomw... |
| chanitor | Ransomware | 2 | Trojan:Win32/Chanitor (also widely tracked as **Hancitor**) is a notorious, highly active trojan downloader. Its sole purpose is to serve as the initial infecti... |
| chekafev | Ransomware | 2 | Trojan:Win32/Chekafev is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwa... |
| chistudi | Ransomware | 2 | Trojan:Win32/Chistudi is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwa... |
| chupik | Ransomware | 2 | Trojan:Win32/Chupik is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| cloverplus | Ransomware | 2 | Trojan:Win32/Cloverplus is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransom... |
| coantor | Ransomware | 2 | Trojan:Win32/Coantor is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwar... |
| cobra | Ransomware | 2 | Trojan:Win32/Cobra is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware,... |
| codewall | Ransomware | 2 | Trojan:Win32/Codewall is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwa... |
| comisproc | Ransomware | 2 | Trojan:Win32/Comisproc is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomw... |
| cordis | Ransomware | 2 | Trojan:Win32/Cordis is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| crime | Ransomware | 2 | Trojan:Win32/Crime is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware,... |
| crisisht | Ransomware | 2 | Trojan:Win32/Crisisht is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwa... |
| cryptexe | Ransomware | 2 | Trojan:Win32/Cryptexe is a generic detection frequently applied to malware that utilizes sophisticated software packing, encryption, or obfuscation tools ('cryp... |
| cryptoload | Ransomware | 2 | TrojanDownloader:Win32/Cryptoload is a specialized, highly obfuscated trojan component whose sole purpose is to establish initial access, bypass endpoint securi... |
| d0f3570c | Ransomware | 2 | Trojan:Win32/D0f3570c (or similar hash-based naming conventions) represents a generic or heuristic detection by an antivirus engine. Instead of identifying a sp... |
| dacic | Ransomware | 2 | Trojan:Win32/Dacic is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware,... |
| darkneuron | Ransomware | 2 | Trojan:Win32/Darkneuron is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransom... |
| davobevix | Ransomware | 2 | Trojan:Win32/Davobevix is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomw... |
| dazi | Ransomware | 2 | Trojan:Win32/Dazi is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware, ... |
| deliric | Ransomware | 2 | Trojan:Win32/Deliric is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwar... |
| delpem | Ransomware | 2 | Trojan:Win32/Delpem is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| desurou | Ransomware | 2 | Trojan:Win32/Desurou is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwar... |
| detplock | Ransomware | 2 | Trojan:Win32/Detplock is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwa... |
| dlassistant | Advanced Threat | 2 | Adware:Win32/Dlassistant (Download Assistant) is a classification for Potentially Unwanted Programs (PUPs) that masquerade as download accelerators or file mana... |
| downloaderb | Ransomware | 2 | Trojan:Win32/Downloaderb is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ranso... |
| droma | Ransomware | 2 | Trojan:Win32/Droma is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware,... |
| ekisoli | Ransomware | 2 | Trojan:Win32/Ekisoli is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwar... |
| eszjuxuan | Ransomware | 2 | Trojan:Win32/Eszjuxuan is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomw... |
| etap | Ransomware | 2 | Trojan:Win32/Etap is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware, ... |
| facemoi | Ransomware | 2 | Trojan:Win32/Facemoi is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwar... |
| famvt | Ransomware | 2 | Trojan:Win32/Famvt is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware,... |
| fasem | Ransomware | 2 | Trojan:Win32/Fasem is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware,... |
| fdoh | Ransomware | 2 | Trojan:Win32/Fdoh is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware, ... |
| fearso | Ransomware | 2 | Trojan:Win32/Fearso is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| gena | Ransomware | 2 | Trojan:Win32/Gena is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware, ... |
| genasep | Ransomware | 2 | Trojan:Win32/Genasep is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwar... |
| genericrxca | Ransomware | 2 | Trojan:Win32/Genericrxca is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ranso... |
| genericrxdm | Ransomware | 2 | Trojan:Win32/Genericrxdm is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ranso... |
| genericrxeo | Ransomware | 2 | Trojan:Win32/Genericrxeo (or similar heuristically named detections) signifies that the antivirus engine has blocked a file not based on a specific, known signa... |
| genericrxep | Ransomware | 2 | Trojan:Win32/Genericrxep (or similar heuristically named detections) signifies that the antivirus engine has blocked a file not based on a specific, known signa... |
| genericrxeq | Ransomware | 2 | Trojan:Win32/Genericrxeq is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ranso... |
| genericrxer | Ransomware | 2 | Trojan:Win32/Genericrxer (or similar heuristically named detections) signifies that the antivirus engine has blocked a file not based on a specific, known signa... |
| genericrxew | Ransomware | 2 | Trojan:Win32/Genericrxew (or similar heuristically named detections) signifies that the antivirus engine has blocked a file not based on a specific, known signa... |
| genericrxfq | Ransomware | 2 | Trojan:Win32/Genericrxfq is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ranso... |
| genericrxft | Ransomware | 2 | Trojan:Win32/Genericrxft is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ranso... |
| genericrxfv | Ransomware | 2 | Trojan:Win32/Genericrxfv is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ranso... |
| genericrxgb | Ransomware | 2 | Trojan:Win32/Genericrxgb (or similar heuristically named detections) signifies that the antivirus engine has blocked a file not based on a specific, known signa... |
| genericrxgf | Ransomware | 2 | Trojan:Win32/Genericrxgf (or similar heuristically named detections) signifies that the antivirus engine has blocked a file not based on a specific, known signa... |
| genericrxgj | Ransomware | 2 | Trojan:Win32/Genericrxgj is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ranso... |
| genx | Ransomware | 2 | Trojan:Win32/Genx is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware, ... |
| gojdu | Ransomware | 2 | Trojan:Win32/Gojdu is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware,... |
| goppel | Ransomware | 2 | Trojan:Win32/Goppel is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| hallaj | Ransomware | 2 | Trojan:Win32/Hallaj is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| harnig | Ransomware | 2 | Trojan:Win32/Harnig is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| hbov | Ransomware | 2 | Trojan:Win32/Hbov is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware, ... |
| homles | Ransomware | 2 | Trojan:Win32/Homles is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| hostwack | Ransomware | 2 | Trojan:Win32/Hostwack is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwa... |
| hotdownloads | Advanced Threat | 2 | Adware:Win32/Hotdownloads is a widespread Potentially Unwanted Program (PUP) categorized as a 'Bundler' or 'Wrapper'. Its primary function is to act as an insta... |
| hpgen | Ransomware | 2 | Trojan:Win32/Hpgen is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware,... |
| hrup | Ransomware | 2 | Trojan:Win32/Hrup is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware, ... |
| installm | Advanced Threat | 2 | Adware:Win32/Installm is a widespread Potentially Unwanted Program (PUP) categorized as a 'Bundler' or 'Wrapper'. Its primary function is to act as an installat... |
| instally | Advanced Threat | 2 | Adware:Win32/Instally is a widespread Potentially Unwanted Program (PUP) categorized as a 'Bundler' or 'Wrapper'. Its primary function is to act as an installat... |
| instmonster | Advanced Threat | 2 | Adware:Win32/Instmonster is a widespread Potentially Unwanted Program (PUP) categorized as a 'Bundler' or 'Wrapper'. Its primary function is to act as an instal... |
| isnev | Ransomware | 2 | Trojan:Win32/Isnev is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware,... |
| isof | Ransomware | 2 | Trojan:Win32/Isof is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware, ... |
| itva | Ransomware | 2 | Trojan:Win32/Itva is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware, ... |
| jbomi | Ransomware | 2 | Trojan:Win32/Jbomi is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware,... |
| jyfi | Ransomware | 2 | Trojan:Win32/Jyfi is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware, ... |
| kate | Ransomware | 2 | Trojan:Win32/Kate is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware, ... |
| kates | Trojan | 2 | Virus:Win32/Kates is a parasitic file infector virus that specifically targets executable files (`.exe` and `.dll`) on the compromised system. Unlike a trojan t... |
| kovloer | Ransomware | 2 | Trojan:Win32/Kovloer is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwar... |
| krolol | Ransomware | 2 | Trojan:Win32/Krolol is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| leymo | Ransomware | 2 | Trojan:Win32/Leymo is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware,... |
| lightsee | Ransomware | 2 | Trojan:Win32/Lightsee is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwa... |
| lojulox | Ransomware | 2 | Trojan:Win32/Lojulox is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwar... |
| ludicrouz | Ransomware | 2 | Trojan:Win32/Ludicrouz is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomw... |
| lulusoftware | Advanced Threat | 2 | Adware:Win32/Lulusoftware is a classification primarily associated with deceptive software bundling and aggressive adware distribution. Originally tied to compa... |
| macrodrop | Ransomware | 2 | TrojanDownloader:O97M/Macrodrop is a highly prevalent category of malware that utilizes weaponized Microsoft Office macros (VBA code) to establish an initial fo... |
| malushka | Ransomware | 2 | Trojan:Win32/Malushka is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwa... |
| manbat | Ransomware | 2 | Trojan:Win32/Manbat is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| mantana | Ransomware | 2 | Trojan:Win32/Mantana is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwar... |
| matsnu | Ransomware | 2 | Trojan:Win32/Matsnu is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| mimilove | Ransomware | 2 | Trojan:Win32/Mimilove is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwa... |
| minerbat | Trojan | 2 | Trojan:BAT/Minerbat (or simply Miner.bat) is a classification for extremely simple, script-based cryptojacking malware. Instead of complex compiled executables,... |
| minggy | Ransomware | 2 | Trojan:Win32/Minggy is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| moljec | Ransomware | 2 | Trojan:Win32/Moljec is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| mresmon | Ransomware | 2 | Trojan:Win32/Mresmon is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwar... |
| msposer | Ransomware | 2 | Trojan:Win32/Msposer is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwar... |
| murlo | Ransomware | 2 | Trojan:Win32/Murlo is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware,... |
| narcha | Ransomware | 2 | Trojan:Win32/Narcha is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| nebuler | Ransomware | 2 | Trojan:Win32/Nebuler is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwar... |
| nosok | Ransomware | 2 | Trojan:Win32/Nosok is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware,... |
| nscauth | Ransomware | 2 | Trojan:Win32/Nscauth is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwar... |
| offend | Ransomware | 2 | Trojan:Win32/Offend is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| oficla | Trojan | 2 | Trojan:Win32/Oficla (also widely known as Sasfis) is a historically massive botnet and trojan downloader that peaked in activity between 2010 and 2012. Its prim... |
| olala | Ransomware | 2 | Trojan:Win32/Olala is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware,... |
| oligo | Ransomware | 2 | Trojan:Win32/Oligo is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware,... |
| oneclickdownloader | Advanced Threat | 2 | Adware:Win32/Oneclickdownloader is a widespread Potentially Unwanted Program (PUP) categorized as a 'Bundler' or 'Wrapper'. Its primary function is to act as an... |
| oneinstaller | Advanced Threat | 2 | Adware:Win32/Oneinstaller is a widespread Potentially Unwanted Program (PUP) categorized as a 'Bundler'. Its primary function is to act as an installation wrapp... |
| outbreak | Ransomware | 2 | Trojan:Win32/Outbreak is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwa... |
| pacex | Ransomware | 2 | Trojan:Win32/Pacex is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware,... |
| perkesh | Ransomware | 2 | Trojan:Win32/Perkesh is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwar... |
| pfoenic | Ransomware | 2 | Trojan:Win32/Pfoenic is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwar... |
| pieshua | Ransomware | 2 | Trojan:Win32/Pieshua is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwar... |
| piker | Ransomware | 2 | Trojan:Win32/Piker is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware,... |
| pincher | Ransomware | 2 | Trojan:Win32/Pincher is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwar... |
| plimrost | Ransomware | 2 | Trojan:Win32/Plimrost is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwa... |
| pophot | Ransomware | 2 | Trojan:Win32/Pophot is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| pramro | Ransomware | 2 | Trojan:Win32/Pramro is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| psyokym | Ransomware | 2 | Trojan:Win32/Psyokym is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwar... |
| quchispy | Ransomware | 2 | Trojan:Win32/Quchispy is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwa... |
| radmin | Ransomware | 2 | RemoteAdmin:Win32/Radmin (Remote Administrator) is a legitimate, commercial remote control software application. However, because it provides full, interactive ... |
| rapkill | Ransomware | 2 | Trojan:Win32/Rapkill is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwar... |
| refpron | Ransomware | 2 | Trojan:Win32/Refpron is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwar... |
| remas | Ransomware | 2 | Trojan:Win32/Remas is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware,... |
| renaz | Ransomware | 2 | Trojan:Win32/Renaz is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware,... |
| rifbu | Ransomware | 2 | Trojan:Win32/Rifbu is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware,... |
| rofin | Ransomware | 2 | Trojan:Win32/Rofin is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware,... |
| ruby | Ransomware | 2 | Trojan:Win32/Ruby is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware, ... |
| ructo | Ransomware | 2 | Trojan:Win32/Ructo is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware,... |
| rukoma | Ransomware | 2 | Trojan:Win32/Rukoma is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| ryzerlo | Ransomware | 2 | Trojan:Win32/Ryzerlo is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwar... |
| selltim | Ransomware | 2 | Trojan:Win32/Selltim is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwar... |
| seodec | Ransomware | 2 | Trojan:Win32/Seodec is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| sheldor | Ransomware | 2 | Trojan:Win32/Sheldor is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwar... |
| shrejh | Ransomware | 2 | Trojan:Win32/Shrejh is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| shufab | Ransomware | 2 | Trojan:Win32/Shufab is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| silcon | Ransomware | 2 | Trojan:Win32/Silcon is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| slefdel | Ransomware | 2 | Trojan:Win32/Slefdel is a heuristic detection identifying a specific, evasive behavior common in malware droppers and initial stagers: self-deletion (`T1070.004... |
| slipafext | Ransomware | 2 | Trojan:Win32/Slipafext is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomw... |
| snoload | Ransomware | 2 | TrojanDownloader:Win32/Snoload is a stealthy, first-stage downloader designed specifically to establish a foothold on a compromised system and securely retrieve... |
| sorcurat | Ransomware | 2 | Trojan:Win32/Sorcurat is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwa... |
| soul | Ransomware | 2 | Trojan:Win32/Soul is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware, ... |
| ssebot | Ransomware | 2 | Trojan:Win32/Ssebot is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| sysdrop | Ransomware | 2 | Trojan:Win32/Sysdrop is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwar... |
| tarifarch | Ransomware | 2 | Trojan:Win32/Tarifarch is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomw... |
| tirrip | Ransomware | 2 | Trojan:Win32/Tirrip is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| tnega | Ransomware | 2 | Trojan:Win32/Tnega is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware,... |
| toauta | Ransomware | 2 | Trojan:Win32/Toauta is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| togapy | Ransomware | 2 | Trojan:Win32/Togapy is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| torr | Ransomware | 2 | Trojan:Win32/Torr is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware, ... |
| trabin | Ransomware | 2 | Trojan:Win32/Trabin is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| trafog | Ransomware | 2 | Trojan:Win32/Trafog is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| tulong | Ransomware | 2 | Trojan:Win32/Tulong is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| tvido | Ransomware | 2 | Trojan:Win32/Tvido is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware,... |
| typic | Ransomware | 2 | Trojan:Win32/Typic is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware,... |
| tzabf | Ransomware | 2 | Trojan:Win32/Tzabf is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware,... |
| ufraie | Ransomware | 2 | Trojan:Win32/Ufraie is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| uloader | Ransomware | 2 | Trojan:Win32/Uloader is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwar... |
| utoti | Ransomware | 2 | Trojan:Win32/Utoti is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware,... |
| vake | Ransomware | 2 | Trojan:Win32/Vake is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware, ... |
| vbcheman | Ransomware | 2 | Trojan:Win32/Vbcheman is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwa... |
| vedpoz | Ransomware | 2 | Trojan:Win32/Vedpoz is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| virtum | Ransomware | 2 | Trojan:Win32/Virtum is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| virtumod | Ransomware | 2 | Trojan:Win32/Virtumod is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwa... |
| vkdj | Ransomware | 2 | Trojan:Win32/Vkdj is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware, ... |
| webhat | Ransomware | 2 | Trojan:Win32/Webhat is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| wemosis | Ransomware | 2 | Trojan:Win32/Wemosis is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwar... |
| wiliky | Ransomware | 2 | Trojan:Win32/Wiliky is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| windapp | Ransomware | 2 | Trojan:Win32/Windapp is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwar... |
| winload | Ransomware | 2 | Trojan:Win32/Winload is a classification for trojans specifically designed to act as 'Loaders' or 'Droppers'. Its sole purpose is to securely download, decrypt,... |
| writos | Ransomware | 2 | Trojan:Win32/Writos is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| xanfpezes | Ransomware | 2 | Trojan:Win32/Xanfpezes is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomw... |
| xdisccorp | Ransomware | 2 | Trojan:Win32/Xdisccorp is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomw... |
| xiaoba | Ransomware | 2 | Trojan:Win32/Xiaoba is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| xiquitir | Ransomware | 2 | Trojan:Win32/Xiquitir is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwa... |
| xpun | Ransomware | 2 | Trojan:Win32/Xpun is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware, ... |
| xxyheo | Ransomware | 2 | Trojan:Win32/Xxyheo is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| yobdam | Ransomware | 2 | Trojan:Win32/Yobdam is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| zapinit | Ransomware | 2 | Trojan:Win32/Zapinit is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwar... |
| zeleffo | Ransomware | 2 | Trojan:Win32/Zeleffo is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwar... |
| zjaisino | Ransomware | 2 | Trojan:Win32/Zjaisino is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwa... |
| 5z0ba4mkpih | Ransomware | 1 | 5Z0Ba4Mkpih (classified in antivirus detection telemetry under designations including Ransom:Win32/5Z0Ba4Mkpih, Ransom.Win32.5Z0Ba4Mkpih, and Win32/5Z0Ba4Mkpih)... |
| 6b47672c | Trojan | 1 | 6B47672C (classified in antivirus detection telemetry under designations including Trojan:Win32/6B47672C, Trojan.Win32.6B47672C, and Win32/6B47672C) is a multi-... |
| agiala | Ransomware | 1 | Agiala (classified in antivirus detection telemetry under designations including Ransom:Win32/Agiala, Ransom.Win32.Agiala, and Win32/Agiala) is a crypto-ransomw... |
| agile | Ransomware | 1 | Agile (classified in antivirus detection telemetry under designations including Ransom:Win32/Agile, Ransom.Win32.Agile, and Win32/Agile) is a crypto-ransomware ... |
| akcom | Ransomware | 1 | Akcom (classified in antivirus detection telemetry under designations including Ransom:Win32/Akcom, Ransom.Win32.Akcom, and Win32/Akcom) is a crypto-ransomware ... |
| akely | Ransomware | 1 | Akely (classified in antivirus detection telemetry under designations including Ransom:Win32/Akely, Ransom.Win32.Akely, and Win32/Akely) is a crypto-ransomware ... |
| aksula | Ransomware | 1 | Aksula (classified in antivirus detection telemetry under designations including Ransom:Win32/Aksula, Ransom.Win32.Aksula, and Win32/Aksula) is a crypto-ransomw... |
| alvabrig | Ransomware | 1 | Alvabrig (classified in antivirus detection telemetry under designations including Ransom:Win32/Alvabrig, Ransom.Win32.Alvabrig, and Win32/Alvabrig) is a crypto... |
| amdocssims | Trojan | 1 | Amdocssims (classified in antivirus detection telemetry under designations including Trojan:Win32/Amdocssims, Trojan.Win32.Amdocssims, and Win32/Amdocssims) is ... |
| amgfaohk2uf | Ransomware | 1 | Amgfaohk2Uf (classified in antivirus detection telemetry under designations including Ransom:Win32/Amgfaohk2Uf, Ransom.Win32.Amgfaohk2Uf, and Win32/Amgfaohk2Uf)... |
| amtgimon | Ransomware | 1 | Amtgimon (classified in antivirus detection telemetry under designations including Ransom:Win32/Amtgimon, Ransom.Win32.Amtgimon, and Win32/Amtgimon) is a crypto... |
| animus | Ransomware | 1 | Animus (classified in antivirus detection telemetry under designations including Ransom:Win32/Animus, Ransom.Win32.Animus, and Win32/Animus) is a crypto-ransomw... |
| anprot | Ransomware | 1 | Anprot (classified in antivirus detection telemetry under designations including Ransom:Win32/Anprot, Ransom.Win32.Anprot, and Win32/Anprot) is a crypto-ransomw... |
| arload | Ransomware | 1 | Arload (classified in antivirus detection telemetry under designations including Ransom:Win32/Arload, Ransom.Win32.Arload, and Win32/Arload) is a crypto-ransomw... |
| artel | Ransomware | 1 | Artel (classified in antivirus detection telemetry under designations including Ransom:Win32/Artel, Ransom.Win32.Artel, and Win32/Artel) is a crypto-ransomware ... |
| aseye | Ransomware | 1 | Aseye (classified in antivirus detection telemetry under designations including Ransom:Win32/Aseye, Ransom.Win32.Aseye, and Win32/Aseye) is a crypto-ransomware ... |
| asianraw | Ransomware | 1 | Asianraw (classified in antivirus detection telemetry under designations including Ransom:Win32/Asianraw, Ransom.Win32.Asianraw, and Win32/Asianraw) is a crypto... |
| asym | Ransomware | 1 | Asym (classified in antivirus detection telemetry under designations including Ransom:Win32/Asym, Ransom.Win32.Asym, and Win32/Asym) is a crypto-ransomware desi... |
| atmrod | Ransomware | 1 | Atmrod (classified in antivirus detection telemetry under designations including Ransom:Win32/Atmrod, Ransom.Win32.Atmrod, and Win32/Atmrod) is a crypto-ransomw... |
| atmulator | Ransomware | 1 | Atmulator (classified in antivirus detection telemetry under designations including Ransom:Win32/Atmulator, Ransom.Win32.Atmulator, and Win32/Atmulator) is a cr... |
| atomix | Ransomware | 1 | Atomix (classified in antivirus detection telemetry under designations including Ransom:Win32/Atomix, Ransom.Win32.Atomix, and Win32/Atomix) is a crypto-ransomw... |
| axbn | Ransomware | 1 | Axbn (classified in antivirus detection telemetry under designations including Ransom:Win32/Axbn, Ransom.Win32.Axbn, and Win32/Axbn) is a crypto-ransomware desi... |
| azero | Ransomware | 1 | Azero (classified in antivirus detection telemetry under designations including Ransom:Win32/Azero, Ransom.Win32.Azero, and Win32/Azero) is a crypto-ransomware ... |
| babonock | Ransomware | 1 | Babonock (classified in antivirus detection telemetry under designations including Ransom:Win32/Babonock, Ransom.Win32.Babonock, and Win32/Babonock) is a crypto... |
| bacalid | Ransomware | 1 | Bacalid (classified in antivirus detection telemetry under designations including Ransom:Win32/Bacalid, Ransom.Win32.Bacalid, and Win32/Bacalid) is a crypto-ran... |
| bagif | Ransomware | 1 | Bagif (classified in antivirus detection telemetry under designations including Ransom:Win32/Bagif, Ransom.Win32.Bagif, and Win32/Bagif) is a crypto-ransomware ... |
| bamsupr | Ransomware | 1 | Bamsupr (classified in antivirus detection telemetry under designations including Ransom:Win32/Bamsupr, Ransom.Win32.Bamsupr, and Win32/Bamsupr) is a crypto-ran... |
| baryumka | Ransomware | 1 | Baryumka (classified in antivirus detection telemetry under designations including Ransom:Win32/Baryumka, Ransom.Win32.Baryumka, and Win32/Baryumka) is a crypto... |
| batton | Ransomware | 1 | Batton (classified in antivirus detection telemetry under designations including Ransom:Win32/Batton, Ransom.Win32.Batton, and Win32/Batton) is a crypto-ransomw... |
| bedefco | Ransomware | 1 | Bedefco (classified in antivirus detection telemetry under designations including Ransom:Win32/Bedefco, Ransom.Win32.Bedefco, and Win32/Bedefco) is a crypto-ran... |
| benban | Ransomware | 1 | Benban (classified in antivirus detection telemetry under designations including Ransom:Win32/Benban, Ransom.Win32.Benban, and Win32/Benban) is a crypto-ransomw... |
| bertle | Ransomware | 1 | Bertle (classified in antivirus detection telemetry under designations including Ransom:Win32/Bertle, Ransom.Win32.Bertle, and Win32/Bertle) is a crypto-ransomw... |
| betkrypt | Ransomware | 1 | Betkrypt (classified in antivirus detection telemetry under designations including Ransom:Win32/Betkrypt, Ransom.Win32.Betkrypt, and Win32/Betkrypt) is a crypto... |
| bhosta | Ransomware | 1 | Bhosta (classified in antivirus detection telemetry under designations including Ransom:Win32/Bhosta, Ransom.Win32.Bhosta, and Win32/Bhosta) is a crypto-ransomw... |
| bhxu | Ransomware | 1 | Bhxu (classified in antivirus detection telemetry under designations including Ransom:Win32/Bhxu, Ransom.Win32.Bhxu, and Win32/Bhxu) is a crypto-ransomware desi... |
| binderon | Ransomware | 1 | Binderon (classified in antivirus detection telemetry under designations including Ransom:Win32/Binderon, Ransom.Win32.Binderon, and Win32/Binderon) is a crypto... |
| bindex | Ransomware | 1 | Bindex (classified in antivirus detection telemetry under designations including Ransom:Win32/Bindex, Ransom.Win32.Bindex, and Win32/Bindex) is a crypto-ransomw... |
| bitrepeyp | Ransomware | 1 | Bitrepeyp (classified in antivirus detection telemetry under designations including Ransom:Win32/Bitrepeyp, Ransom.Win32.Bitrepeyp, and Win32/Bitrepeyp) is a cr... |
| bkff | Ransomware | 1 | Bkff (classified in antivirus detection telemetry under designations including Ransom:Win32/Bkff, Ransom.Win32.Bkff, and Win32/Bkff) is a crypto-ransomware desi... |
| blacoleref | Ransomware | 1 | Blacoleref (classified in antivirus detection telemetry under designations including Ransom:Win32/Blacoleref, Ransom.Win32.Blacoleref, and Win32/Blacoleref) is ... |
| blind | Ransomware | 1 | Blind (classified in antivirus detection telemetry under designations including Ransom:Win32/Blind, Ransom.Win32.Blind, and Win32/Blind) is a crypto-ransomware ... |
| blueeagle | Ransomware | 1 | Blueeagle (classified in antivirus detection telemetry under designations including Ransom:Win32/Blueeagle, Ransom.Win32.Blueeagle, and Win32/Blueeagle) is a cr... |
| bmgfrznl2gfaa | Ransomware | 1 | Bmgfrznl2Gfaa (classified in antivirus detection telemetry under designations including Ransom:Win32/Bmgfrznl2Gfaa, Ransom.Win32.Bmgfrznl2Gfaa, and Win32/Bmgfrz... |
| bmsdus4ufhei | Ransomware | 1 | Bmsdus4Ufhei (classified in antivirus detection telemetry under designations including Ransom:Win32/Bmsdus4Ufhei, Ransom.Win32.Bmsdus4Ufhei, and Win32/Bmsdus4Uf... |
| bnqp | Ransomware | 1 | Bnqp (classified in antivirus detection telemetry under designations including Ransom:Win32/Bnqp, Ransom.Win32.Bnqp, and Win32/Bnqp) is a crypto-ransomware desi... |
| bnuaaewgb2fb | Ransomware | 1 | Bnuaaewgb2Fb (classified in antivirus detection telemetry under designations including Ransom:Win32/Bnuaaewgb2Fb, Ransom.Win32.Bnuaaewgb2Fb, and Win32/Bnuaaewgb... |
| bototer | Trojan | 1 | Bototer (classified in antivirus detection telemetry under designations including Trojan:Win32/Bototer, Trojan.Win32.Bototer, and Win32/Bototer) is a multi-stag... |
| bredavi | Ransomware | 1 | Bredavi (classified in antivirus detection telemetry under designations including Ransom:Win32/Bredavi, Ransom.Win32.Bredavi, and Win32/Bredavi) is a crypto-ran... |
| bredo | Ransomware | 1 | Bredo (classified in antivirus detection telemetry under designations including Ransom:Win32/Bredo, Ransom.Win32.Bredo, and Win32/Bredo) is a crypto-ransomware ... |
| bredolab | Trojan | 1 | Bredolab (classified in antivirus detection telemetry under designations including Trojan:Win32/Bredolab, Trojan.Win32.Bredolab, and Win32/Bredolab) is a multi-... |
| bridex | Ransomware | 1 | Bridex (classified in antivirus detection telemetry under designations including Ransom:Win32/Bridex, Ransom.Win32.Bridex, and Win32/Bridex) is a crypto-ransomw... |
| brobaneup | Ransomware | 1 | Brobaneup (classified in antivirus detection telemetry under designations including Ransom:Win32/Brobaneup, Ransom.Win32.Brobaneup, and Win32/Brobaneup) is a cr... |
| broduplo | Ransomware | 1 | Broduplo (classified in antivirus detection telemetry under designations including Ransom:Win32/Broduplo, Ransom.Win32.Broduplo, and Win32/Broduplo) is a crypto... |
| broskod | Ransomware | 1 | Broskod (classified in antivirus detection telemetry under designations including Ransom:Win32/Broskod, Ransom.Win32.Broskod, and Win32/Broskod) is a crypto-ran... |
| bsdownloader | Trojan Downloader | 1 | Bsdownloader (classified in antivirus detection telemetry under designations including TrojanDownloader:Win32/Bsdownloader, TrojanDownloader.Win32.Bsdownloader,... |
| bsvsebni | Trojan | 1 | Bsvsebni (classified in antivirus detection telemetry under designations including Trojan:Win32/Bsvsebni, Trojan.Win32.Bsvsebni, and Win32/Bsvsebni) is a multi-... |
| bumat | Ransomware | 1 | Bumat (classified in antivirus detection telemetry under designations including Ransom:Win32/Bumat, Ransom.Win32.Bumat, and Win32/Bumat) is a crypto-ransomware ... |
| burden | Ransomware | 1 | Burden (classified in antivirus detection telemetry under designations including Ransom:Win32/Burden, Ransom.Win32.Burden, and Win32/Burden) is a crypto-ransomw... |
| burnwoo | Ransomware | 1 | Burnwoo (classified in antivirus detection telemetry under designations including Ransom:Win32/Burnwoo, Ransom.Win32.Burnwoo, and Win32/Burnwoo) is a crypto-ran... |
| busky | Ransomware | 1 | Busky (classified in antivirus detection telemetry under designations including Ransom:Win32/Busky, Ransom.Win32.Busky, and Win32/Busky) is a crypto-ransomware ... |
| bwod | Ransomware | 1 | Bwod (classified in antivirus detection telemetry under designations including Ransom:Win32/Bwod, Ransom.Win32.Bwod, and Win32/Bwod) is a crypto-ransomware desi... |
| caae34dd | Ransomware | 1 | Caae34Dd (classified in antivirus detection telemetry under designations including Ransom:Win32/Caae34Dd, Ransom.Win32.Caae34Dd, and Win32/Caae34Dd) is a crypto... |
| cachedis | Ransomware | 1 | Cachedis (classified in antivirus detection telemetry under designations including Ransom:Win32/Cachedis, Ransom.Win32.Cachedis, and Win32/Cachedis) is a crypto... |
| cafecup | Ransomware | 1 | Cafecup (classified in antivirus detection telemetry under designations including Ransom:Win32/Cafecup, Ransom.Win32.Cafecup, and Win32/Cafecup) is a crypto-ran... |
| carrobat | Ransomware | 1 | Carrobat (classified in antivirus detection telemetry under designations including Ransom:Win32/Carrobat, Ransom.Win32.Carrobat, and Win32/Carrobat) is a crypto... |
| caxnet | Ransomware | 1 | Caxnet (classified in antivirus detection telemetry under designations including Ransom:Win32/Caxnet, Ransom.Win32.Caxnet, and Win32/Caxnet) is a crypto-ransomw... |
| cbot | Ransomware | 1 | Cbot (classified in antivirus detection telemetry under designations including Ransom:Win32/Cbot, Ransom.Win32.Cbot, and Win32/Cbot) is a crypto-ransomware desi... |
| cebot | Ransomware | 1 | Cebot (classified in antivirus detection telemetry under designations including Ransom:Win32/Cebot, Ransom.Win32.Cebot, and Win32/Cebot) is a crypto-ransomware ... |
| ceram | Ransomware | 1 | Ceram (classified in antivirus detection telemetry under designations including Ransom:Win32/Ceram, Ransom.Win32.Ceram, and Win32/Ceram) is a crypto-ransomware ... |
| cfms | Ransomware | 1 | Cfms (classified in antivirus detection telemetry under designations including Ransom:Win32/Cfms, Ransom.Win32.Cfms, and Win32/Cfms) is a crypto-ransomware desi... |
| chepdu | Ransomware | 1 | Trojan:Win32/Chepdu is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| chinbo | Ransomware | 1 | <h3>Executive Summary</h3> Chinbo is a malicious Trojan designed to covertly infiltrate Windows systems, establish persistence, and act as a reliable downloader... |
| ciadoor | Trojan | 1 | <h3>Executive Summary</h3> CiaDoor is a stealthy Remote Access Trojan (RAT) and backdoor designed to provide threat actors with persistent, unauthorized adminis... |
| cinmus | Ransomware | 1 | <h3>Executive Summary</h3> Cinmus is a malicious Trojan designed to covertly infiltrate Windows systems, establish persistence, and act as a reliable downloader... |
| cleaman | Ransomware | 1 | Trojan:Win32/Cleaman is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwar... |
| clhf | Ransomware | 1 | TrojanDownloader:Win32/Clhf is a specialized trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads. Unlike a backdo... |
| client | Trojan | 1 | <h3>Executive Summary</h3> In the context of malware taxonomy, "Client" is a generic classification denoting the client-side executable of a Remote Access Troja... |
| cmgfaeflb9e | Ransomware | 1 | <h3>Executive Summary</h3> CMGFAEFLB9E is an automated, signature-based detection name used by security engines to identify a highly obfuscated, randomly genera... |
| cmhfbw9r | Ransomware | 1 | <h3>Executive Summary</h3> "Cmhfbw9r" is a heuristic identifier for a highly obfuscated, generically detected Trojan or Dropper. The random, DGA-like naming con... |
| coced | Ransomware | 1 | <h3>Executive Summary</h3> Coced is a malicious Trojan designed to covertly infiltrate Windows systems, establish persistence, and act as a reliable backdoor an... |
| code | Ransomware | 1 | Trojan:Win32/Code (or Exploit:JS/Code, Script:VBS/Code) is a generic classification denoting the detection of malicious scripting or raw exploit code, rather th... |
| coinloader | Ransomware | 1 | <h3>Executive Summary</h3> Coinloader is a specialized Trojan Downloader engineered with a singular, primary objective: to silently infect a system and subseque... |
| conju | Ransomware | 1 | <h3>Executive Summary</h3> Conju is a malicious Trojan designed to covertly infiltrate Windows systems, establish persistence, and act as a reliable downloader ... |
| corpse | Ransomware | 1 | <h3>Executive Summary</h3> Corpse is a malicious Trojan designed to covertly infiltrate Windows systems, establish persistence, and act as a reliable downloader... |
| cosratu | Ransomware | 1 | Trojan:Win32/Cosratu is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwar... |
| covus | Ransomware | 1 | <h3>Executive Summary</h3> Covus is a malicious Trojan designed to covertly infiltrate Windows systems, establish persistence, and act as a reliable downloader ... |
| cqst | Ransomware | 1 | <h3>Executive Summary</h3> Cqst is a malicious Trojan designed to covertly infiltrate Windows systems, establish persistence, and act as a reliable downloader f... |
| crifi | Ransomware | 1 | Trojan:Win32/Crifi is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware,... |
| crispit | Ransomware | 1 | Trojan:Win32/Crispit is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwar... |
| cromptui | Ransomware | 1 | <h3>Executive Summary</h3> Cromptui is a malicious Trojan designed to covertly infiltrate Windows systems, establish persistence, and act as a reliable download... |
| cshv | Ransomware | 1 | <h3>Executive Summary</h3> Cshv is a malicious Trojan designed to covertly infiltrate Windows systems, establish persistence, and act as a reliable downloader f... |
| csom | Ransomware | 1 | Trojan:Win32/Csom is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware, ... |
| cvky | Ransomware | 1 | <h3>Executive Summary</h3> Cvky is a malicious Trojan designed to covertly infiltrate Windows systems, establish persistence, and act as a reliable downloader f... |
| cxkh | Ransomware | 1 | <h3>Executive Summary</h3> Cxkh is a malicious Trojan designed to covertly infiltrate Windows systems, establish persistence, and act as a reliable downloader f... |
| cxkj | Ransomware | 1 | <h3>Executive Summary</h3> Cxkj is a malicious Trojan designed to covertly infiltrate Windows systems, establish persistence, and act as a reliable downloader f... |
| cypress | Ransomware | 1 | Trojan:Win32/Cypress is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwar... |
| dalatar | Ransomware | 1 | <h3>Executive Summary</h3> Dalatar is a malicious Trojan engineered to covertly infiltrate Windows systems, establish persistence, and act as a reliable downloa... |
| dalbot | Ransomware | 1 | Trojan:Win32/Dalbot is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| dalt | Ransomware | 1 | <h3>Executive Summary</h3> Dalt is a malicious Trojan designed to covertly infiltrate Windows systems, establish persistence, and act as a reliable downloader f... |
| darkcyrene | Ransomware | 1 | <h3>Executive Summary</h3> Darkcyrene is a malicious Trojan designed to covertly infiltrate Windows systems, establish persistence, and act as a reliable downlo... |
| darsing | Ransomware | 1 | <h3>Executive Summary</h3> Darsing is a malicious Trojan designed to covertly infiltrate Windows systems, establish persistence, and act as a reliable downloade... |
| datper | Ransomware | 1 | Trojan:Win32/Datper is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| datpol | Ransomware | 1 | <h3>Executive Summary</h3> Datpol is a malicious Trojan designed to covertly infiltrate Windows systems, establish persistence, and act as a reliable downloader... |
| davy | Ransomware | 1 | <h3>Executive Summary</h3> Davy is a malicious Trojan designed to covertly infiltrate Windows systems, establish persistence, and act as a reliable downloader f... |
| deau | Ransomware | 1 | <h3>Executive Summary</h3> Deau is a malicious Trojan designed to covertly infiltrate Windows systems, establish deep persistence, and act as a reliable backdoo... |
| defmid | Ransomware | 1 | Trojan:Win32/Defmid is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| defsel | Ransomware | 1 | <h3>Executive Summary</h3> Defsel is a malicious Trojan designed to covertly infiltrate Windows systems, establish persistence, and act as a reliable downloader... |
| devilz | Ransomware | 1 | <h3>Executive Summary</h3> Devilz is a malicious Trojan designed to covertly infiltrate Windows systems, establish persistence, and act as a reliable downloader... |
| diamin | Ransomware | 1 | <h3>Executive Summary</h3> Diamin is a malicious Trojan designed to covertly infiltrate Windows systems, establish persistence, and act as a reliable downloader... |
| dicsor | Ransomware | 1 | <h3>Executive Summary</h3> Dicsor is a malicious Trojan designed to covertly infiltrate Windows systems, establish persistence, and act as a reliable downloader... |
| district | Ransomware | 1 | <h3>Executive Summary</h3> District is a malicious Trojan designed to covertly infiltrate Windows systems, establish persistence, and act as a reliable download... |
| ditertag | Ransomware | 1 | <h3>Executive Summary</h3> Ditertag is a malicious Trojan designed to covertly infiltrate Windows systems, establish persistence, and act as a reliable download... |
| dluca | Ransomware | 1 | <h3>Executive Summary</h3> Dluca is a malicious Trojan designed to covertly infiltrate Windows systems, establish persistence, and act as a reliable downloader ... |
| dlzp | Ransomware | 1 | <h3>Executive Summary</h3> Dlzp is a malicious Trojan designed to covertly infiltrate Windows systems, establish persistence, and act as a reliable downloader f... |
| donise | Ransomware | 1 | <h3>Executive Summary</h3> Donise is a malicious Trojan designed to covertly infiltrate Windows systems, establish persistence, and act as a reliable downloader... |
| donloz | Ransomware | 1 | <h3>Executive Summary</h3> Donloz is a malicious downloader Trojan engineered to stealthily infiltrate a target system, establish a hidden foothold, and subsequ... |
| donn | Ransomware | 1 | <h3>Executive Summary</h3> Donn is a malicious Trojan designed to covertly infiltrate Windows systems, establish persistence, and act as a reliable downloader f... |
| doqv | Ransomware | 1 | Trojan:Win32/Doqv is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware, ... |
| dorgam | Ransomware | 1 | <h3>Executive Summary</h3> Dorgam is a malicious Trojan designed to covertly infiltrate Windows systems, establish persistence, and act as a reliable downloader... |
| doublefantasy | Backdoor | 1 | <h3>Executive Summary</h3> DoubleFantasy is a highly sophisticated, stealthy Backdoor and loader component widely attributed to the <strong>Equation Group</stro... |
| dowanun | Ransomware | 1 | <h3>Executive Summary</h3> Dowanun is a malicious Trojan designed to covertly infiltrate Windows systems, establish persistence, and act as a reliable downloade... |
| downexec | Ransomware | 1 | <h3>Executive Summary</h3> "Downexec" (often classified as Trojan.Downloader.Downexec) is a fundamental, yet highly effective, Trojan Downloader explicitly desi... |
| drefir | Ransomware | 1 | Trojan:Win32/Drefir is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| drowor | Ransomware | 1 | Trojan:Win32/Drowor is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| dsbot | Trojan | 1 | <h3>Executive Summary</h3> DSBot is a malicious Trojan with robust botnet capabilities, designed to covertly infiltrate Windows systems, establish deep persiste... |
| duduunion | Ransomware | 1 | <h3>Executive Summary</h3> Duduunion is a malicious Trojan designed to covertly infiltrate Windows systems, establish persistence, and act as a reliable downloa... |
| dungcoi | Ransomware | 1 | <h3>Executive Summary</h3> Dungcoi is a malicious Trojan designed to covertly infiltrate Windows systems, establish persistence, and act as a reliable downloade... |
| dunik | Ransomware | 1 | <h3>Executive Summary</h3> Dunik is a malicious Trojan designed to covertly infiltrate Windows systems, establish persistence, and act as a reliable downloader ... |
| duon | Ransomware | 1 | <h3>Executive Summary</h3> Duon is a malicious Trojan designed to covertly infiltrate Windows systems, establish persistence, and act as a reliable downloader f... |
| dupate | Ransomware | 1 | Trojan:Win32/Dupate is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| dzan | Ransomware | 1 | <h3>Executive Summary</h3> Dzan is a malicious Trojan designed to covertly infiltrate Windows systems, establish persistence, and act as a reliable downloader f... |
| e13044af | Ransomware | 1 | <h3>Executive Summary</h3> E13044af is a heuristic detection name, typically representing a partial hash (like MD5 or SHA-256) assigned to a highly obfuscated o... |
| effbee | Ransomware | 1 | <h3>Executive Summary</h3> Effbee is a malicious Trojan designed to covertly infiltrate Windows systems, establish persistence, and act as a reliable downloader... |
| emathi | Ransomware | 1 | <h3>Executive Summary</h3> Emathi is a malicious Trojan designed to covertly infiltrate Windows systems, establish persistence, and act as a reliable downloader... |
| emotetn | Ransomware | 1 | <h3>Executive Summary</h3> EmotetN represents a specific detection signature or component variant of the notorious Emotet malware family. Originally designed as... |
| emudbot | Ransomware | 1 | <h3>Executive Summary</h3> Emudbot is a persistent trojan designed to recruit infected endpoints into a distributed botnet architecture. Once a machine is compr... |
| esendi | Ransomware | 1 | <h3>Executive Summary</h3> Esendi is a malicious Trojan designed to covertly infiltrate Windows systems, establish persistence, and act as a reliable downloader... |
| esprot | Ransomware | 1 | Trojan:Win32/Esprot is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| estapa | Ransomware | 1 | Trojan:Win32/Estapa is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| estrella | Ransomware | 1 | <h3>Executive Summary</h3> Estrella is a malicious Trojan designed to covertly infiltrate Windows systems, establish persistence, and act as a reliable download... |
| exchanger | Ransomware | 1 | <h3>Executive Summary</h3> Exchanger is a broad classification often applied to malware, typically trojans or potentially unwanted applications (PUAs), that fac... |
| excrevie | Ransomware | 1 | Trojan:Win32/Excrevie is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwa... |
| exksws | Ransomware | 1 | <h3>Executive Summary</h3> Exksws is a malicious Trojan designed to covertly infiltrate Windows systems, establish persistence, and act as a reliable downloader... |
| fakeplayer | Trojan | 1 | <h3>Executive Summary</h3> FakePlayer is a classification for a widespread category of Trojans that utilize social engineering—specifically, masquerading as req... |
| farsistall | Ransomware | 1 | Trojan:Win32/Farsistall is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransom... |
| fayu | Ransomware | 1 | Trojan:Win32/Fayu is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware, ... |
| fbng | Ransomware | 1 | <h3>Executive Summary</h3> Fbng is a malicious Trojan designed to covertly infiltrate Windows systems, establish persistence, and act as a reliable downloader f... |
| fgarb | Ransomware | 1 | Trojan:Win32/Fgarb is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware,... |
| figyek | Ransomware | 1 | Trojan:Win32/Figyek is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| filoskeed | Ransomware | 1 | Trojan:Win32/Filoskeed is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomw... |
| flowershop | Ransomware | 1 | Trojan:Win32/Flowershop is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransom... |
| flusihoc | Ransomware | 1 | Trojan:Win32/Flusihoc is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwa... |
| flystudi | Ransomware | 1 | Trojan:Win32/Flystudi is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwa... |
| fmgfagns0sge | Ransomware | 1 | <h3>Executive Summary</h3> "fmgfagns0sge" is a heuristic identifier for a highly obfuscated, generically detected Trojan or Dropper. The naming convention (whic... |
| foler | Ransomware | 1 | <h3>Executive Summary</h3> Foler is a malicious Trojan designed to covertly infiltrate Windows systems, establish persistence, and act as a reliable downloader ... |
| folstart | Ransomware | 1 | <h3>Executive Summary</h3> Folstart is a malicious Trojan designed to covertly infiltrate Windows systems, establish persistence, and act as a reliable download... |
| food | Ransomware | 1 | <h3>Executive Summary</h3> Food (often classified generically as Trojan.Food or under broad heuristic signatures) is a malicious Trojan designed to covertly inf... |
| forbot | Ransomware | 1 | Trojan:Win32/Forbot is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| fosniw | Ransomware | 1 | <h3>Executive Summary</h3> Fosniw is a hybrid threat that combines the persistence and payload delivery mechanisms of a Trojan with the rapid propagation capabi... |
| foxhiex | Ransomware | 1 | Trojan:Win32/Foxhiex is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwar... |
| frethoq | Ransomware | 1 | <h3>Executive Summary</h3> Frethoq is a malicious Trojan designed to covertly infiltrate Windows systems, establish persistence, and act as a reliable downloade... |
| frosparf | Ransomware | 1 | <h3>Executive Summary</h3> Frosparf is a malicious Trojan designed to covertly infiltrate Windows systems, establish persistence, and act as a reliable download... |
| gaofenq | Ransomware | 1 | <h3>Executive Summary</h3> Gaofenq is a malicious Trojan designed to covertly infiltrate Windows systems, establish persistence, and act as a reliable downloade... |
| garvi | Ransomware | 1 | <h3>Executive Summary</h3> Garvi is a malicious Trojan designed to covertly infiltrate Windows systems, establish persistence, and act as a reliable downloader ... |
| gdsda | Ransomware | 1 | <h3>Executive Summary</h3> Gdsda is a malicious Trojan designed to covertly infiltrate Windows systems, establish persistence, and act as a reliable downloader ... |
| gendelfan | Ransomware | 1 | <h3>Executive Summary</h3> Gendelfan is a malicious Trojan designed to covertly infiltrate Windows systems, establish persistence, and act as a reliable downloa... |
| genericrxam | Ransomware | 1 | Trojan:Win32/Genericrxam is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ranso... |
| genericrxas | Trojan | 1 | <h3>Executive Summary</h3> "Genericrxas" (often displayed as Generic.RX.Trojan or Generic.RX.Suspicious) is a heuristic detection name utilized by various antiv... |
| genericrxat | Ransomware | 1 | <h3>Executive Summary</h3> GenericRXAT is a broad, heuristic detection name used by antivirus engines to identify a file exhibiting suspicious, Trojan-like beha... |
| genericrxax | Ransomware | 1 | <h3>Executive Summary</h3> "Genericrxax" is a heuristic identifier for a highly obfuscated, generically detected Trojan or Dropper. The naming convention strong... |
| genericrxbu | Ransomware | 1 | <h3>Executive Summary</h3> "Genericrxbu" is a heuristic identifier for a highly obfuscated, generically detected Trojan or Dropper. The naming convention strong... |
| genericrxby | Trojan | 1 | <h3>Executive Summary</h3> "Genericrxby" (often displayed as Generic.RX.Trojan or Generic.RX.Suspicious) is a heuristic detection name utilized by various antiv... |
| genericrxbz | Ransomware | 1 | <h3>Executive Summary</h3> "Genericrxbz" is a heuristic identifier for a highly obfuscated, generically detected Trojan or Dropper. The naming convention strong... |
| genericrxcd | Ransomware | 1 | <h3>Executive Summary</h3> GenericRXCD is a broad, heuristic detection name used by antivirus engines to identify a file exhibiting suspicious, Trojan-like beha... |
| genericrxcf | Ransomware | 1 | <h3>Executive Summary</h3> GenericRXCF is a heuristic detection signature utilized by enterprise antivirus and EDR (Endpoint Detection and Response) engines to ... |
| genericrxcg | Trojan | 1 | <h3>Executive Summary</h3> "Genericrxcg" (often displayed as Generic.RX.Trojan or Generic.RX.Suspicious) is a heuristic detection name utilized by various antiv... |
| genericrxcr | Ransomware | 1 | <h3>Executive Summary</h3> GenericRXCR is a heuristic detection signature utilized by enterprise antivirus and EDR engines to identify files exhibiting behavior... |
| genericrxcu | Ransomware | 1 | <h3>Executive Summary</h3> GenericRXCU is a heuristic detection signature utilized by various antivirus engines to identify files exhibiting behaviors strongly ... |
| genericrxcv | Ransomware | 1 | <h3>Executive Summary</h3> GenericRXCV is a heuristic detection signature utilized by enterprise antivirus and EDR (Endpoint Detection and Response) engines to ... |
| genericrxef | Ransomware | 1 | <h3>Executive Summary</h3> GenericRXEF is a heuristic detection signature utilized by enterprise antivirus and EDR (Endpoint Detection and Response) engines to ... |
| genericrxel | Ransomware | 1 | <h3>Executive Summary</h3> "Genericrxel" is a heuristic identifier for a highly obfuscated, generically detected Trojan or Dropper. The naming convention strong... |
| genericrxet | Ransomware | 1 | <h3>Executive Summary</h3> Genericrxet is a heuristic identifier frequently used by security engines to flag generic Trojan or Ransomware behaviors. The "rxet" ... |
| genericrxfj | Trojan | 1 | <h3>Executive Summary</h3> "Genericrxfj" (often displayed as Generic.RX.Trojan or Generic.RX.Suspicious) is a heuristic detection name utilized by various antiv... |
| genericrxfo | Ransomware | 1 | Trojan:Win32/Genericrxfo is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ranso... |
| genericrxfy | Trojan | 1 | <h3>Executive Summary</h3> "Genericrxfy" (often displayed as Generic.RX.Trojan or Generic.RX.Suspicious) is a heuristic detection name utilized by various antiv... |
| genericrxge | Trojan | 1 | <h3>Executive Summary</h3> "Genericrxge" (often displayed as Generic.RX.Trojan or Generic.RX.Suspicious) is a heuristic detection name utilized by various antiv... |
| genericrxgh | Trojan | 1 | <h3>Executive Summary</h3> "Genericrxgh" (often displayed as Generic.RX.Trojan or Generic.RX.Suspicious) is a heuristic detection name utilized by various antiv... |
| genericrxgk | Ransomware | 1 | <h3>Executive Summary</h3> "Genericrxgk" is a heuristic identifier for a highly obfuscated, generically detected Trojan or Dropper. The naming convention strong... |
| geni | Ransomware | 1 | Trojan:Win32/Geni (often a truncation of 'Generic') signifies that the antivirus engine has blocked a file not based on a specific, known signature, but because... |
| genmaldow | Ransomware | 1 | TrojanDownloader:Win32/Genmaldow is a generic, heuristic detection string utilized by antivirus engines to flag a file that exhibits the unmistakable behavioral... |
| getnow | Ransomware | 1 | <h3>Executive Summary</h3> Getnow is a prevalent family of Adware and Potentially Unwanted Programs (PUPs), frequently operating as a deceptive downloader or "d... |
| ggdoor | Trojan | 1 | <h3>Executive Summary</h3> GGDoor is a dangerous Backdoor Trojan engineered to provide remote attackers with covert, persistent, and unfettered access to compro... |
| giri | Ransomware | 1 | <h3>Executive Summary</h3> Giri is a malicious Trojan designed to covertly infiltrate Windows systems, establish persistence, and act as a reliable downloader f... |
| globim | Ransomware | 1 | <h3>Executive Summary</h3> Globim is a malicious Trojan designed to covertly infiltrate Windows systems, establish persistence, and act as a reliable downloader... |
| goodpic | Ransomware | 1 | Trojan:Win32/Goodpic is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwar... |
| gosys | Ransomware | 1 | <h3>Executive Summary</h3> Gosys is a malicious Trojan designed to covertly infiltrate Windows systems, establish persistence, and act as a reliable downloader ... |
| gplyra | Ransomware | 1 | <h3>Executive Summary</h3> Gplyra is a malicious Trojan designed to covertly infiltrate Windows systems, establish persistence, and act as a reliable downloader... |
| gpukj | Ransomware | 1 | <h3>Executive Summary</h3> Gpukj is a malicious Trojan designed to covertly infiltrate Windows systems, establish persistence, and act as a reliable downloader ... |
| graybird | Ransomware | 1 | Trojan:Win32/Graybird is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwa... |
| graz | Ransomware | 1 | <h3>Executive Summary</h3> Graz is a malicious Trojan designed to covertly infiltrate Windows systems, establish persistence, and act as a reliable downloader f... |
| gupd | Ransomware | 1 | <h3>Executive Summary</h3> Gupd is a malicious Trojan (often functioning as a downloader or backdoor) that leverages social engineering by masquerading as a leg... |
| haed | Ransomware | 1 | <h3>Executive Summary</h3> Haed is a malicious Trojan designed to covertly infiltrate Windows systems, establish persistence, and act as a reliable downloader f... |
| haknata | Ransomware | 1 | <h3>Executive Summary</h3> Haknata is a malicious Trojan designed to covertly infiltrate Windows systems, establish persistence, and act as a reliable downloade... |
| hamaetot | Ransomware | 1 | Trojan:Win32/Hamaetot is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwa... |
| hamer | Ransomware | 1 | <h3>Executive Summary</h3> Hamer is a malicious Trojan designed to covertly infiltrate Windows systems, establish persistence, and act as a reliable downloader ... |
| hangup | Ransomware | 1 | <h3>Executive Summary</h3> Hangup is a malicious Trojan designed to covertly infiltrate Windows systems, establish persistence, and act as a reliable downloader... |
| happy | Ransomware | 1 | Trojan:Win32/Happy is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware,... |
| headache | Ransomware | 1 | Trojan:Win32/Headache is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwa... |
| heriplor | Ransomware | 1 | <h3>Executive Summary</h3> Heriplor is a malicious Trojan designed to covertly infiltrate Windows systems, establish persistence, and act as a reliable download... |
| hexloader | Ransomware | 1 | Trojan:Win32/Hexloader is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomw... |
| hexzone | Ransomware | 1 | Trojan:Win32/Hexzone is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwar... |
| hg8absxocmcj | Ransomware | 1 | <h3>Executive Summary</h3> "hg8absxocmcj" is a heuristic identifier for a highly obfuscated, generically detected Trojan or Dropper. The naming convention (whic... |
| hioles | Ransomware | 1 | <h3>Executive Summary</h3> Hioles is a malicious Trojan designed to covertly infiltrate Windows systems, establish persistence, and act as a backdoor for remote... |
| hkmain | Ransomware | 1 | Trojan:Win32/Hkmain is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| hmgfa45id4o | Trojan | 1 | <h3>Executive Summary</h3> "Hmgfa45id4o" is a generic, machine-generated detection signature utilized by advanced heuristic antivirus engines. It is not a named... |
| hokobot | Ransomware | 1 | Trojan:Win32/Hokobot is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwar... |
| honk | Ransomware | 1 | <h3>Executive Summary</h3> Honk is a malicious Trojan designed to covertly infiltrate Windows systems, establish persistence, and act as a reliable downloader f... |
| hookmoot | Ransomware | 1 | <h3>Executive Summary</h3> Hookmoot is a malicious Trojan designed to covertly infiltrate Windows systems, establish persistence, and act as a reliable download... |
| hpfareit | Ransomware | 1 | <h3>Executive Summary</h3> HPFareit is an alias used by specific security vendors to identify variants of the highly prolific **Fareit** (also known as Pony) ma... |
| hqsi | Ransomware | 1 | <h3>Executive Summary</h3> Hqsi is a malicious Trojan designed to covertly infiltrate Windows systems, establish persistence, and act as a reliable downloader f... |
| iczu | Ransomware | 1 | <h3>Executive Summary</h3> Iczu is a malicious Trojan designed to covertly infiltrate Windows systems, establish persistence, and act as a reliable downloader f... |
| ident | Ransomware | 1 | Trojan:Win32/Ident is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware,... |
| imps | Ransomware | 1 | <h3>Executive Summary</h3> Imps is a malicious Trojan designed to covertly infiltrate Windows systems, establish persistence, and act as a reliable downloader f... |
| indigorose | Trojan | 1 | <h3>Executive Summary</h3> "IndigoRose" refers to detections associated with AutoPlay Media Studio (and related products) developed by Indigo Rose Software. Thi... |
| inexsmar | Trojan | 1 | <h3>Executive Summary</h3> Inexsmar is a highly customized downloader Trojan primarily known for its role in delivering the Darkhotel APT (Advanced Persistent T... |
| inor | Ransomware | 1 | <h3>Executive Summary</h3> Inor is a malicious Trojan designed to covertly infiltrate Windows systems, establish persistence, and act as a reliable downloader f... |
| inrogatio | Ransomware | 1 | <h3>Executive Summary</h3> Inrogatio is a malicious Trojan designed to covertly infiltrate Windows systems, establish persistence, and act as a reliable downloa... |
| insebro | Ransomware | 1 | <h3>Executive Summary</h3> Insebro is a malicious Trojan designed to covertly infiltrate Windows systems, establish persistence, and act as a reliable downloade... |
| jakuz | Ransomware | 1 | <h3>Executive Summary</h3> Jakuz is a malicious Trojan designed to covertly infiltrate Windows systems, establish persistence, and act as a reliable downloader ... |
| jatif | Ransomware | 1 | Trojan:Win32/Jatif is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware,... |
| jevafus | Ransomware | 1 | <h3>Executive Summary</h3> Jevafus is a malicious Trojan designed to covertly infiltrate Windows systems, establish persistence, and act as a reliable downloade... |
| jhee | Ransomware | 1 | Trojan:Win32/Jhee is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware, ... |
| jinda | Ransomware | 1 | <h3>Executive Summary</h3> Jinda is a malicious Trojan designed to covertly infiltrate Windows systems, establish persistence, and act as a reliable downloader ... |
| jusabli | Ransomware | 1 | <h3>Executive Summary</h3> Jusabli is a malicious Trojan designed to covertly infiltrate Windows systems, establish persistence, and act as a reliable downloade... |
| kabymj | Ransomware | 1 | <h3>Executive Summary</h3> Kabymj is a malicious Trojan designed to covertly infiltrate Windows systems, establish persistence, and act as a reliable downloader... |
| karagany | Trojan | 1 | <h3>Executive Summary</h3> Karagany is a sophisticated Backdoor Trojan historically associated with the state-sponsored Advanced Persistent Threat (APT) group k... |
| karius | Ransomware | 1 | Trojan:Win32/Karius is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| kastenl | Ransomware | 1 | <h3>Executive Summary</h3> Kastenl is a malicious Trojan designed to covertly infiltrate Windows systems, establish persistence, and act as a reliable downloade... |
| kavos | Ransomware | 1 | <h3>Executive Summary</h3> Kavos is a malicious Trojan designed to covertly infiltrate Windows systems, establish persistence, and act as a reliable downloader ... |
| kazus | Ransomware | 1 | Trojan:Win32/Kazus is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware,... |
| keenm | Ransomware | 1 | <h3>Executive Summary</h3> Keenm is a malicious Trojan designed to covertly infiltrate Windows systems, establish persistence, and act as a reliable downloader ... |
| keydownload | Ransomware | 1 | <h3>Executive Summary</h3> Keydownload is a classification for a specific category of Trojan Downloaders. Unlike highly sophisticated backdoors, Keydownload mal... |
| kheagol | Ransomware | 1 | <h3>Executive Summary</h3> Kheagol is a malicious Trojan designed to covertly infiltrate Windows systems, establish persistence, and act as a reliable downloade... |
| killnotes | Ransomware | 1 | Trojan:Win32/Killnotes is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomw... |
| kiser | Ransomware | 1 | <h3>Executive Summary</h3> Kiser is a malicious Trojan designed to covertly infiltrate Windows systems, establish persistence, and act as a reliable downloader ... |
| klozet | Ransomware | 1 | <h3>Executive Summary</h3> Klozet is a malicious Trojan designed to covertly infiltrate Windows systems, establish persistence, and act as a reliable downloader... |
| kmuaaovs | Ransomware | 1 | <h3>Executive Summary</h3> "Kmuaaovs" is a heuristic identifier for a highly obfuscated, generically detected Trojan or Dropper. The naming convention (which ap... |
| komilet | Ransomware | 1 | <h3>Executive Summary</h3> Komilet is a malicious Trojan designed to covertly infiltrate Windows systems, establish persistence, and act as a reliable downloade... |
| korad | Ransomware | 1 | <h3>Executive Summary</h3> Korad is a malicious Trojan designed to covertly infiltrate Windows systems, establish persistence, and act as a reliable downloader ... |
| krachulka | Ransomware | 1 | <h3>Executive Summary</h3> Krachulka is a malicious Trojan designed to covertly infiltrate Windows systems, establish persistence, and act as a reliable downloa... |
| krament | Ransomware | 1 | Trojan:Win32/Krament is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwar... |
| kranet | Trojan | 1 | <h3>Executive Summary</h3> Kranet is a malicious Trojan designed to covertly infiltrate Windows systems, establish persistence, and conscript the endpoint into ... |
| krdr | Ransomware | 1 | Trojan:Win32/Krdr is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware, ... |
| kryptstarter | Ransomware | 1 | <h3>Executive Summary</h3> Kryptstarter (often referred to as Kryptik or Kryptik.Starter) is a generic classification for a malicious downloader or initial acce... |
| kykymber | Ransomware | 1 | Trojan:Win32/Kykymber is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwa... |
| kz4aamkfbloj | Ransomware | 1 | <h3>Executive Summary</h3> KZ4AAMKFBLOJ is an automated, signature-based detection name used by security engines to identify a highly obfuscated, randomly gener... |
| lanxue | Ransomware | 1 | <h3>Executive Summary</h3> Lanxue is a malicious Trojan designed to covertly infiltrate Windows systems, establish persistence, and act as a reliable downloader... |
| ledruppi | Ransomware | 1 | Trojan:Win32/Ledruppi is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwa... |
| lemoore | Ransomware | 1 | <h3>Executive Summary</h3> Lemoore is a malicious Trojan designed to covertly infiltrate Windows systems, establish persistence, and act as a reliable downloade... |
| leopard | Ransomware | 1 | Trojan:Win32/Leopard is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwar... |
| lightmoon | Ransomware | 1 | Trojan:Win32/Lightmoon is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomw... |
| liimpact | Ransomware | 1 | Trojan:Win32/Liimpact is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwa... |
| linkhortry | Ransomware | 1 | <h3>Executive Summary</h3> Linkhortry is a malicious Trojan designed to covertly infiltrate Windows systems, establish persistence, and act as a reliable downlo... |
| litmus | Ransomware | 1 | <h3>Executive Summary</h3> Litmus is a malicious Trojan designed to covertly infiltrate Windows systems, establish persistence, and act as a reliable downloader... |
| liudoor | Ransomware | 1 | <h3>Executive Summary</h3> Liudoor is a malicious Backdoor Trojan designed to covertly infiltrate Windows systems, establish stealthy persistence, and provide a... |
| liusky | Ransomware | 1 | <h3>Executive Summary</h3> Liusky is a malicious Trojan designed to covertly infiltrate Windows systems, establish persistence, and act as a reliable downloader... |
| lixeaqbyzsj | Ransomware | 1 | <h3>Executive Summary</h3> "lixeaqbyzsj" is a heuristic identifier for a highly obfuscated, generically detected Trojan or Dropper. The naming convention (which... |
| loops | Ransomware | 1 | <h3>Executive Summary</h3> Loops is a malicious Trojan designed to covertly infiltrate Windows systems, establish persistence, and act as a reliable downloader ... |
| loring | Ransomware | 1 | <h3>Executive Summary</h3> Loring is a malicious Trojan designed to covertly infiltrate Windows systems, establish persistence, and act as a reliable downloader... |
| losabel | Ransomware | 1 | <h3>Executive Summary</h3> Losabel is a malicious Trojan designed to covertly infiltrate Windows systems, establish persistence, and act as a reliable downloade... |
| lowzones | Ransomware | 1 | <h3>Executive Summary</h3> Lowzones is a malicious Trojan designed to covertly infiltrate Windows systems, establish persistence, and act as a reliable download... |
| loyeetro | Ransomware | 1 | <h3>Executive Summary</h3> Loyeetro is a malicious Trojan designed to covertly infiltrate Windows systems, establish persistence, and act as a reliable download... |
| lozer | Ransomware | 1 | <h3>Executive Summary</h3> Lozer is a malicious Trojan designed to covertly infiltrate Windows systems, establish deep persistence, and act as a reliable backdo... |
| lpt8mkfbyfsjgnkb | Ransomware | 1 | <h3>Executive Summary</h3> LPT8MKFBYFSJGNKB is an automated, signature-based detection name used by security engines to identify a highly obfuscated, randomly g... |
| luna | Ransomware | 1 | Trojan:Win32/Luna is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware, ... |
| lurk | Ransomware | 1 | <h3>Executive Summary</h3> Lurk refers to both a highly sophisticated Trojan Downloader and the infamous Russian cybercriminal syndicate that created it. The Lu... |
| lyckriks | Ransomware | 1 | Trojan:Win32/Lyckriks is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwa... |
| machaer | Ransomware | 1 | Trojan:Win32/Machaer is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwar... |
| magnat | Ransomware | 1 | Trojan:Win32/Magnat is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| magni | Ransomware | 1 | Trojan:Win32/Magni is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware,... |
| mailcheck | Trojan | 1 | <h3>Executive Summary</h3> MailCheck (often detected as HackTool.MailChecker, Riskware.MailCheck, or Trojan.AccountChecker) is a category of illicit utility sof... |
| malkryp | Ransomware | 1 | <h3>Executive Summary</h3> Malkryp (often identified as Malkryp, MalKrypt, or similar variations) is a malicious Trojan designed to covertly infiltrate Windows ... |
| malwar | Ransomware | 1 | <h3>Executive Summary</h3> "Malwar" is a highly generic heuristic identifier often utilized by antivirus engines to flag a file that exhibits suspicious, Trojan... |
| mamianune | Ransomware | 1 | Trojan:Win32/Mamianune is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomw... |
| meinhudong | Ransomware | 1 | Trojan:Win32/Meinhudong is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransom... |
| meinv | Ransomware | 1 | <h3>Executive Summary</h3> Meinv is a malicious Trojan designed to covertly infiltrate Windows systems, establish persistence, and act as a reliable downloader ... |
| meno | Ransomware | 1 | <h3>Executive Summary</h3> Meno is a malicious Trojan designed to covertly infiltrate Windows systems, establish persistence, and act as a reliable downloader f... |
| mezzo | Ransomware | 1 | Trojan:Win32/Mezzo is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware,... |
| mi0ax8mhb4ji | Ransomware | 1 | <h3>Executive Summary</h3> MI0AX8MHB4JI is an automated, signature-based detection name used by security engines to identify a highly obfuscated, randomly gener... |
| minimal | Ransomware | 1 | TrojanDownloader:Win32/Minimal is a specialized, highly compact trojan designed to breach endpoint defenses and securely deliver secondary payloads. True to its... |
| miragefox | Trojan | 1 | <h3>Executive Summary</h3> MirageFox is a highly specialized, sophisticated Remote Access Trojan (RAT) and backdoor utilized exclusively by the Chinese state-sp... |
| mirkov | Ransomware | 1 | Trojan:Win32/Mirkov is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| mofin | Ransomware | 1 | Trojan:Win32/Mofin is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware,... |
| mosu | Ransomware | 1 | Trojan:Win32/Mosu is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware, ... |
| mozla | Trojan | 1 | <h3>Executive Summary</h3> Mozla is a highly deceptive Trojan designed to exploit user trust by masquerading as legitimate components of the Mozilla Firefox web... |
| mrdec | Ransomware | 1 | Trojan:Win32/Mrdec is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware,... |
| msilbot | Ransomware | 1 | <h3>Executive Summary</h3> MSILBot (often detected as MSIL.Trojan or MSIL.Bot) refers to a broad category of botnet malware and remote access trojans (RATs) tha... |
| multim | Ransomware | 1 | Trojan:Win32/Multim is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| muma | Ransomware | 1 | <h3>Executive Summary</h3> Muma is a malicious Trojan designed to covertly infiltrate Windows systems, establish persistence, and act as a reliable downloader f... |
| mupx | Trojan | 1 | <h3>Executive Summary</h3> Mupx is a malicious threat that combines the persistence and self-replication capabilities of a network worm with the payload deliver... |
| murka | Ransomware | 1 | <h3>Executive Summary</h3> Murka is a highly evasive Trojan designed to establish a covert backdoor on compromised Windows systems. While occasionally acting as... |
| musclecar | Ransomware | 1 | <h3>Executive Summary</h3> Musclecar is a malicious Trojan and Backdoor designed to covertly infiltrate Windows systems, establish persistence, and act as a rel... |
| mutuodo | Ransomware | 1 | Trojan:Win32/Mutuodo is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwar... |
| mytob | Backdoor | 1 | <h3>Executive Summary</h3> Mytob is a highly prolific and historically significant mass-mailing worm and botnet agent that first emerged in the mid-2000s. Based... |
| nabasa | Ransomware | 1 | Trojan:Win32/Nabasa is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| naco | Ransomware | 1 | Trojan:Win32/Naco is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware, ... |
| nadrac | Ransomware | 1 | Trojan:Win32/Nadrac is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| naffy | Ransomware | 1 | <h3>Executive Summary</h3> Naffy is a malicious Trojan designed to covertly infiltrate Windows systems, establish persistence, and act as a reliable downloader ... |
| nagram | Ransomware | 1 | <h3>Executive Summary</h3> Nagram is a malicious Trojan designed to covertly infiltrate Windows systems, establish persistence, and act as a reliable downloader... |
| nbcont | Ransomware | 1 | Trojan:Win32/Nbcont is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| nemucod | Ransomware | 1 | TrojanDownloader:JS/Nemucod (or VBS/Nemucod) is one of the most prolific and historically significant malware downloaders. Primarily distributed via massive spa... |
| netinject | Ransomware | 1 | Trojan:Win32/Netinject is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomw... |
| ngvck | Ransomware | 1 | Trojan:Win32/Ngvck is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware,... |
| nilaspo | Ransomware | 1 | <h3>Executive Summary</h3> Nilaspo is a malicious Trojan designed to covertly infiltrate Windows systems, establish persistence, and act as a reliable downloade... |
| nion | Ransomware | 1 | <h3>Executive Summary</h3> Nion is a malicious Trojan engineered to covertly infiltrate Windows systems, establish persistence, and act as a reliable downloader... |
| nistio | Ransomware | 1 | <h3>Executive Summary</h3> Nistio is a malicious Trojan designed to covertly infiltrate Windows systems, establish persistence, and act as a reliable downloader... |
| nitter | Ransomware | 1 | <h3>Executive Summary</h3> Nitter is a malicious Trojan designed to covertly infiltrate Windows systems, establish persistence, and act as a reliable downloader... |
| niwaa8lfbrj | Ransomware | 1 | <h3>Executive Summary</h3> Niwaa8lfbrj is a heuristic detection name assigned to a highly obfuscated Trojan variant. The randomly generated alphanumeric name st... |
| nmkfacwya3cg | Ransomware | 1 | <h3>Executive Summary</h3> "nmkfacwya3cg" is a heuristic identifier for a highly obfuscated, generically detected Trojan or Dropper. The naming convention (whic... |
| noupack | Ransomware | 1 | <h3>Executive Summary</h3> Noupack is a malicious Trojan designed to covertly infiltrate Windows systems, establish persistence, and act as a reliable backdoor ... |
| npgi | Ransomware | 1 | <h3>Executive Summary</h3> Npgi is a malicious Trojan designed to covertly infiltrate Windows systems, establish persistence, and act as a reliable downloader f... |
| nussamoc | Ransomware | 1 | <h3>Executive Summary</h3> Nussamoc is a malicious Trojan designed to covertly infiltrate Windows systems, establish persistence, and act as a reliable download... |
| oasisminus | Ransomware | 1 | <h3>Executive Summary</h3> Oasisminus is a malicious Trojan designed to covertly infiltrate Windows systems, establish persistence, and act as a reliable downlo... |
| obrypser | Ransomware | 1 | <h3>Executive Summary</h3> Obrypser is a malicious Trojan designed to covertly infiltrate Windows systems, establish persistence, and act as a reliable download... |
| oceanlotus | Backdoor | 1 | <h3>Executive Summary</h3> OceanLotus (also widely known as APT32 or Canvas Assassin) is a highly sophisticated Advanced Persistent Threat (APT) group believed ... |
| ocna | Ransomware | 1 | Trojan:Win32/Ocna is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware, ... |
| offtoup | Ransomware | 1 | Trojan:Win32/Offtoup is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwar... |
| oflwr | Ransomware | 1 | <h3>Executive Summary</h3> Oflwr is a malicious Trojan designed to covertly infiltrate Windows systems, establish persistence, and act as a reliable downloader ... |
| omgfamcremci | Ransomware | 1 | <h3>Executive Summary</h3> "Omgfamcremci" is a heuristic identifier for a highly obfuscated, generically detected Trojan or Dropper. The naming convention (whic... |
| onkfa0sahzhg | Ransomware | 1 | <h3>Executive Summary</h3> Onkfa0sahzhg is a heuristic detection name assigned to a highly obfuscated Trojan variant. The randomly generated alphanumeric name s... |
| orcusrat | Ransomware | 1 | <h3>Executive Summary</h3> Orcus RAT is a highly sophisticated, commercially available Remote Access Trojan (RAT). It is controversially marketed and sold on su... |
| oremu | Ransomware | 1 | <h3>Executive Summary</h3> Oremu is a malicious Trojan designed to covertly infiltrate Windows systems, establish persistence, and act as a reliable downloader ... |
| otezinu | Ransomware | 1 | Trojan:Win32/Otezinu is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwar... |
| otorunq | Trojan | 1 | <h3>Executive Summary</h3> Otorunq is a network worm and trojan that utilizes the legacy Windows `autorun.inf` feature for aggressive lateral movement and propa... |
| oxynoxy | Ransomware | 1 | <h3>Executive Summary</h3> Oxynoxy is a malicious Trojan designed to covertly infiltrate Windows systems, establish persistence, and act as a reliable downloade... |
| oyom | Ransomware | 1 | <h3>Executive Summary</h3> Oyom is a malicious Trojan designed to covertly infiltrate Windows systems, establish persistence, and act as a reliable downloader f... |
| oztar | Ransomware | 1 | Trojan:Win32/Oztar is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware,... |
| pabin | Ransomware | 1 | <h3>Executive Summary</h3> Pabin is a malicious Trojan designed to covertly infiltrate Windows systems, establish persistence, and act as a reliable downloader ... |
| padmer | Ransomware | 1 | <h3>Executive Summary</h3> Padmer is a malicious Trojan designed to covertly infiltrate Windows systems, establish persistence, and act as a reliable downloader... |
| pandview | Ransomware | 1 | Trojan:Win32/Pandview is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwa... |
| pantera | Ransomware | 1 | Trojan:Win32/Pantera is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwar... |
| pastraw | Ransomware | 1 | <h3>Executive Summary</h3> Pastraw is a malicious Trojan designed to covertly infiltrate Windows systems, establish persistence, and act as a reliable downloade... |
| pasur | Ransomware | 1 | <h3>Executive Summary</h3> Pasur is a malicious Trojan designed to covertly infiltrate Windows systems, establish persistence, and act as a reliable downloader ... |
| patchload | Ransomware | 1 | TrojanDownloader:Win32/Patchload is a specialized trojan designed to masquerade as legitimate software patches or updates (often for popular applications like A... |
| pclnt | Trojan | 1 | <h3>Executive Summary</h3> Pclnt is a dangerous Backdoor Trojan engineered to provide remote attackers with covert, persistent, and unfettered access to comprom... |
| pdxbbkgat9ci | Ransomware | 1 | <h3>Executive Summary</h3> Pdxbbkgat9ci is a heuristic detection name assigned to a highly obfuscated Trojan variant. The randomly generated alphanumeric name s... |
| pef13c | Ransomware | 1 | <h3>Executive Summary</h3> "Pef13c" is a heuristic identifier for a highly obfuscated, generically detected Trojan or Dropper. The naming convention strongly su... |
| penzievs | Ransomware | 1 | <h3>Executive Summary</h3> Penzievs is a highly evasive Trojan designed to establish a covert backdoor on compromised Windows systems. While occasionally acting... |
| pepex | Ransomware | 1 | <h3>Executive Summary</h3> Pepex is a malicious Trojan designed to covertly infiltrate Windows systems, establish persistence, and act as a reliable downloader ... |
| perez | Ransomware | 1 | <h3>Executive Summary</h3> Perez is a malicious Trojan designed to covertly infiltrate Windows systems, establish persistence, and act as a reliable downloader ... |
| petal | Ransomware | 1 | <h3>Executive Summary</h3> Petal is a malicious Trojan engineered to covertly infiltrate Windows systems, establish persistence, and act as a reliable downloade... |
| pgpsnippet | Ransomware | 1 | Trojan:Win32/Pgpsnippet is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransom... |
| phires | Ransomware | 1 | <h3>Executive Summary</h3> Phires is a malicious Trojan designed to covertly infiltrate Windows systems, establish persistence, and act as a reliable downloader... |
| phnu | Ransomware | 1 | <h3>Executive Summary</h3> Phnu is a malicious Trojan designed to covertly infiltrate Windows systems, establish persistence, and act as a reliable downloader f... |
| phpain | Ransomware | 1 | <h3>Executive Summary</h3> Phpain is a malicious Trojan designed to covertly infiltrate Windows systems, establish persistence, and act as a reliable downloader... |
| pidmecc | Ransomware | 1 | <h3>Executive Summary</h3> Pidmecc is a malicious Trojan designed to covertly infiltrate Windows systems, establish persistence, and act as a reliable downloade... |
| pipo | Ransomware | 1 | <h3>Executive Summary</h3> Pipo is a malicious Trojan designed to covertly infiltrate Windows systems, establish persistence, and act as a reliable downloader f... |
| pitin | Ransomware | 1 | <h3>Executive Summary</h3> Pitin is a malicious Trojan designed to covertly infiltrate Windows systems, establish persistence, and act as a reliable downloader ... |
| pizchao | Ransomware | 1 | Trojan:Win32/Pizchao is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwar... |
| platan | Ransomware | 1 | <h3>Executive Summary</h3> Platan is a malicious Trojan designed to covertly infiltrate Windows systems, establish persistence, and act as a reliable downloader... |
| ploprolo | Ransomware | 1 | Trojan:Win32/Ploprolo is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwa... |
| plugs | Ransomware | 1 | <h3>Executive Summary</h3> Plugs is a malicious Trojan designed to covertly infiltrate Windows systems, establish persistence, and act as a reliable downloader ... |
| pondfull | Ransomware | 1 | <h3>Executive Summary</h3> Pondfull is a malicious Trojan designed to covertly infiltrate Windows systems, establish persistence, and act as a reliable download... |
| porex | Ransomware | 1 | <h3>Executive Summary</h3> Porex is a malicious Trojan designed to covertly infiltrate Windows systems, establish persistence, and act as a reliable downloader ... |
| potukorp | Ransomware | 1 | <h3>Executive Summary</h3> Potukorp is a malicious Trojan designed to covertly infiltrate Windows systems, establish persistence, and act as a reliable download... |
| powstage | Ransomware | 1 | <h3>Executive Summary</h3> PowStage (or PowerShell Stager) refers to a class of fileless malware components used extensively in modern, "Living off the Land" (L... |
| poxters | Ransomware | 1 | <h3>Executive Summary</h3> Poxters is a malicious Trojan designed to covertly infiltrate Windows systems, establish persistence, and act as a reliable downloade... |
| prex | Ransomware | 1 | <h3>Executive Summary</h3> Prex is a malicious Trojan designed to covertly infiltrate Windows systems, establish persistence, and act as a reliable downloader f... |
| primawega | Ransomware | 1 | Trojan:Win32/Primawega is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomw... |
| procgmar | Ransomware | 1 | <h3>Executive Summary</h3> Procgmar is a malicious Trojan designed to covertly infiltrate Windows systems, establish persistence, and act as a reliable download... |
| proteus | Ransomware | 1 | <h3>Executive Summary</h3> Proteus represents a sophisticated, multi-purpose Botnet and Trojan framework designed to subjugate infected Windows systems. Once a ... |
| psyme | Ransomware | 1 | <h3>Executive Summary</h3> Psyme is a classification for a family of malicious Trojans that rely heavily on scripting languages—specifically VBScript (.vbs) and... |
| pulobe | Ransomware | 1 | <h3>Executive Summary</h3> Pulobe is a malicious Trojan designed to covertly infiltrate Windows systems, establish persistence, and act as a reliable downloader... |
| puontib | Ransomware | 1 | <h3>Executive Summary</h3> Puontib is a malicious Trojan designed to covertly infiltrate Windows systems, establish persistence, and act as a reliable downloade... |
| purgory | Ransomware | 1 | <h3>Executive Summary</h3> Purgory is a malicious Trojan designed to covertly infiltrate Windows systems, establish persistence, and act as a reliable downloade... |
| pushel | Ransomware | 1 | Trojan:Win32/Pushel is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| putabmow | Ransomware | 1 | Trojan:Win32/Putabmow is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwa... |
| qdownb | Ransomware | 1 | <h3>Executive Summary</h3> Qdownb is a malicious Trojan designed to covertly infiltrate Windows systems, establish persistence, and act as a reliable downloader... |
| qmuabwpoobbg | Ransomware | 1 | <h3>Executive Summary</h3> Qmuabwpoobbg is a heuristic detection name assigned to a highly obfuscated Trojan variant. The randomly generated alphanumeric name s... |
| qqmima | Ransomware | 1 | Trojan:Win32/Qqmima is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| quervar | Ransomware | 1 | Trojan:Win32/Quervar is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwar... |
| quireap | Ransomware | 1 | Trojan:Win32/Quireap is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwar... |
| ragua | Ransomware | 1 | <h3>Executive Summary</h3> Ragua is a malicious Trojan designed to covertly infiltrate Windows systems, establish persistence, and act as a reliable downloader ... |
| ranna | Ransomware | 1 | <h3>Executive Summary</h3> Ranna is a malicious Trojan designed to covertly infiltrate Windows systems, establish persistence, and act as a reliable downloader ... |
| rapidpass | Ransomware | 1 | <h3>Executive Summary</h3> Rapidpass is a malicious Trojan designed to covertly infiltrate Windows systems, establish persistence, and act as a reliable downloa... |
| rarmal | Ransomware | 1 | Trojan:Win32/Rarmal is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| rasch | Ransomware | 1 | <h3>Executive Summary</h3> Rasch is a malicious Trojan designed to covertly infiltrate Windows systems, establish persistence, and act as a reliable downloader ... |
| rastabaf | Ransomware | 1 | Trojan:Win32/Rastabaf is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwa... |
| ravs | Ransomware | 1 | Trojan:Win32/Ravs is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware, ... |
| redgirl | Ransomware | 1 | <h3>Executive Summary</h3> Redgirl is a malicious Trojan designed to covertly infiltrate Windows systems, establish persistence, and act as a reliable downloade... |
| redneck | Ransomware | 1 | Trojan:Win32/Redneck is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwar... |
| regub | Ransomware | 1 | Trojan:Win32/Regub is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware,... |
| remexi | Trojan | 1 | <h3>Executive Summary</h3> Remexi is a sophisticated Backdoor Trojan historically attributed to the Iranian-linked Advanced Persistent Threat (APT) group known ... |
| remotehack | Trojan | 1 | <h3>Executive Summary</h3> RemoteHack is a broad classification for a suite of Remote Access Trojans (RATs) and remote administration HackTools. These tools are... |
| remoxec | Trojan | 1 | <h3>Executive Summary</h3> Remoxec is a highly dangerous Remote Access Trojan (RAT) and Backdoor. Its primary objective is to silently infiltrate a Windows work... |
| reposfxg | Ransomware | 1 | <h3>Executive Summary</h3> Reposfxg is a malicious Trojan designed to covertly infiltrate Windows systems, establish persistence, and act as a reliable download... |
| reymbz | Ransomware | 1 | <h3>Executive Summary</h3> Reymbz is a malicious Trojan designed to covertly infiltrate Windows systems, establish persistence, and act as a reliable downloader... |
| reyptson | Ransomware | 1 | <h3>Executive Summary</h3> Reyptson is a malicious Trojan designed to covertly infiltrate Windows systems, establish persistence, and act as a reliable download... |
| rialega | Trojan | 1 | <h3>Executive Summary</h3> Rialega is a malicious Trojan engineered to compromise Windows environments, acting primarily as an initial access broker and downloa... |
| ridnu | Ransomware | 1 | <h3>Executive Summary</h3> Ridnu is a malicious Trojan designed to covertly infiltrate Windows systems, establish persistence, and act as a reliable downloader ... |
| rietspoof | Ransomware | 1 | <h3>Executive Summary</h3> Rietspoof is a highly sophisticated, multi-stage Trojan Downloader that emerged in early 2019. Unlike "smash-and-grab" malware, Riets... |
| rimic | Ransomware | 1 | Trojan:Win32/Rimic is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware,... |
| rmkefdlslaoi | Ransomware | 1 | <h3>Executive Summary</h3> "Rmkefdlslaoi" is a heuristic identifier for a highly obfuscated, generically detected Trojan or Dropper. The naming convention (whic... |
| rogan | Ransomware | 1 | Trojan:Win32/Rogan is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware,... |
| rozenaa | Ransomware | 1 | <h3>Executive Summary</h3> Rozenaa is a malicious Trojan designed to covertly infiltrate Windows systems, establish persistence, and act as a reliable downloade... |
| rubat | Ransomware | 1 | Trojan:Win32/Rubat is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware,... |
| ruho | Ransomware | 1 | Trojan:Win32/Ruho is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware, ... |
| rupttass | Ransomware | 1 | Trojan:Win32/Rupttass is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwa... |
| sadenav | Ransomware | 1 | Trojan:Win32/Sadenav is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwar... |
| sadredi | Ransomware | 1 | <h3>Executive Summary</h3> Sadredi is a malicious Trojan designed to covertly infiltrate Windows systems, establish persistence, and act as a reliable downloade... |
| safebreas | Ransomware | 1 | <h3>Executive Summary</h3> Safebreas is a malicious Trojan designed to covertly infiltrate Windows systems, establish persistence, and act as a reliable downloa... |
| sagonaire | Ransomware | 1 | Trojan:Win32/Sagonaire is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomw... |
| sakto | Ransomware | 1 | <h3>Executive Summary</h3> Sakto is a malicious Trojan designed to covertly infiltrate Windows systems, establish persistence, and act as a reliable downloader ... |
| sankei | Ransomware | 1 | <h3>Executive Summary</h3> Sankei is a malicious Trojan designed to covertly infiltrate Windows systems, establish persistence, and act as a reliable downloader... |
| sbdld | Trojan | 1 | <h3>Executive Summary</h3> SBDLD (often classified as Trojan.Downloader.SBDLD) is a malicious Trojan explicitly designed to act as a stealthy vanguard for subse... |
| scomma | Ransomware | 1 | <h3>Executive Summary</h3> Scomma is a malicious Trojan designed to covertly infiltrate Windows systems, establish persistence, and act as a reliable downloader... |
| scoopy | Ransomware | 1 | <h3>Executive Summary</h3> Scoopy is a malicious Trojan designed to covertly infiltrate Windows systems, establish persistence, and act as a reliable downloader... |
| scrami | Ransomware | 1 | <h3>Executive Summary</h3> Scrami is a malicious Trojan designed to covertly infiltrate Windows systems, establish persistence, and act as a reliable downloader... |
| sdrop | Ransomware | 1 | <h3>Executive Summary</h3> Sdrop is a malicious Trojan designed to covertly infiltrate Windows systems, establish persistence, and act as a reliable downloader ... |
| selcry | Ransomware | 1 | <h3>Executive Summary</h3> Selcry is a malicious Trojan designed to covertly infiltrate Windows systems, establish persistence, and act as a reliable downloader... |
| sennoma | Ransomware | 1 | <h3>Executive Summary</h3> Sennoma is a malicious Trojan designed to covertly infiltrate Windows systems, establish persistence, and act as a reliable downloade... |
| senta | Ransomware | 1 | <h3>Executive Summary</h3> Senta is a malicious Trojan designed to covertly infiltrate Windows systems, establish persistence, and act as a reliable downloader ... |
| seznam | Trojan | 1 | <h3>Executive Summary</h3> In a cybersecurity context, "Seznam" detections typically refer to aggressive browser hijackers and Potentially Unwanted Programs (PU... |
| sfdld | Ransomware | 1 | <h3>Executive Summary</h3> Sfdld (often classified as Downloader.Sfdld) is a malicious Trojan specifically engineered to act as a stealthy delivery mechanism fo... |
| sfuzuan | Ransomware | 1 | <h3>Executive Summary</h3> Sfuzuan is a malicious Trojan designed to covertly infiltrate Windows systems, establish persistence, and act as a reliable downloade... |
| shadowhammer | Backdoor | 1 | <h3>Executive Summary</h3> Operation ShadowHammer was a highly sophisticated Advanced Persistent Threat (APT) supply chain attack discovered in 2019, attributed... |
| sharer | Trojan | 1 | <h3>Executive Summary</h3> Sharer (often detected as Worm.P2P.Sharer or Trojan.Sharer) represents a family of legacy worms specifically engineered to exploit th... |
| shaskooth | Ransomware | 1 | Trojan:Win32/Shaskooth is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomw... |
| shell | Backdoor | 1 | <h3>Executive Summary</h3> "Shell" is a broad, generic classification used by security engines to identify a malicious script or executable designed to provide ... |
| siho | Ransomware | 1 | <h3>Executive Summary</h3> Siho is a malicious Trojan designed to covertly infiltrate Windows systems, establish persistence, and act as a reliable downloader f... |
| simple | Ransomware | 1 | Trojan:Win32/Simple is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| sipia | Ransomware | 1 | Trojan:Win32/Sipia is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware,... |
| sisron | Ransomware | 1 | <h3>Executive Summary</h3> Sisron is a malicious Trojan designed to covertly infiltrate Windows systems, establish persistence, and act as a reliable downloader... |
| sixmuch | Ransomware | 1 | Trojan:Win32/Sixmuch is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwar... |
| sloddat | Ransomware | 1 | <h3>Executive Summary</h3> Sloddat is a malicious Trojan designed to covertly infiltrate Windows systems, establish persistence, and act as a reliable downloade... |
| smallhttp | Advanced Threat | 1 | HackTool:Win32/Smallhttp refers to highly compact, portable web server executables that are frequently dropped onto compromised machines by attackers during pos... |
| sminager | Ransomware | 1 | Trojan:Win32/Sminager is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwa... |
| smuatemisagi | Ransomware | 1 | Trojan:Win32/Smuatemisagi is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like rans... |
| sneepy | Trojan | 1 | <h3>Executive Summary</h3> Sneepy is a malicious Trojan designed to covertly infiltrate Windows systems, establish persistence, and act as a reliable backdoor a... |
| snorm | Ransomware | 1 | Trojan:Win32/Snorm is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware,... |
| sonbokli | Ransomware | 1 | <h3>Executive Summary</h3> Sonbokli is a malicious Trojan designed to covertly infiltrate Windows systems, establish persistence, and act as a reliable download... |
| specx | Ransomware | 1 | <h3>Executive Summary</h3> Specx is a malicious Trojan designed to covertly infiltrate Windows systems, establish persistence, and act as a reliable downloader ... |
| staget | Ransomware | 1 | <h3>Executive Summary</h3> Staget is a malicious Trojan designed to covertly infiltrate Windows systems, establish persistence, and act as a reliable downloader... |
| stegvob | Ransomware | 1 | <h3>Executive Summary</h3> Stegvob is a highly sophisticated Trojan designed to covertly infiltrate Windows systems, establish deep persistence, and act as a hi... |
| stercogs | Ransomware | 1 | Trojan:Win32/Stercogs is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwa... |
| strat | Ransomware | 1 | <h3>Executive Summary</h3> Strat is a malicious Trojan designed to covertly infiltrate Windows systems, establish persistence, and act as a reliable downloader ... |
| strictorcrtd | Ransomware | 1 | Trojan:Win32/Strictorcrtd is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like rans... |
| subroate | Ransomware | 1 | <h3>Executive Summary</h3> Subroate is a malicious Trojan designed to covertly infiltrate Windows systems, establish persistence, and act as a reliable download... |
| suite | Ransomware | 1 | Trojan:Win32/Suite is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware,... |
| suviapen | Ransomware | 1 | <h3>Executive Summary</h3> Suviapen is a malicious Trojan designed to covertly infiltrate Windows systems, establish persistence, and act as a reliable download... |
| swog | Ransomware | 1 | <h3>Executive Summary</h3> Swog is a malicious Trojan designed to covertly infiltrate Windows systems, establish persistence, and act as a reliable downloader f... |
| syscon | Ransomware | 1 | Trojan:Win32/Syscon is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| talmad | Ransomware | 1 | <h3>Executive Summary</h3> Talmad is a malicious Trojan designed to covertly infiltrate Windows systems, establish persistence, and act as a reliable downloader... |
| tartober | Ransomware | 1 | <h3>Executive Summary</h3> Tartober is a malicious Trojan designed to covertly infiltrate Windows systems, establish persistence, and act as a reliable download... |
| tcdrop | Ransomware | 1 | <h3>Executive Summary</h3> Tcdrop is a malicious Trojan designed to covertly infiltrate Windows systems, establish persistence, and act as a reliable downloader... |
| teambot | Ransomware | 1 | <h3>Executive Summary</h3> TeamBot is a malicious Trojan designed to covertly infiltrate Windows systems, establish persistence, and act as a reliable downloade... |
| tear | Trojan | 1 | <h3>Executive Summary</h3> Tear is a highly dangerous Remote Access Trojan (RAT) and Backdoor. Its primary objective is to silently infiltrate a Windows worksta... |
| tedroo | Ransomware | 1 | <h3>Executive Summary</h3> Tedroo is a malicious Trojan designed to covertly infiltrate Windows systems, establish persistence, and act as a reliable downloader... |
| temcac | Ransomware | 1 | Trojan:Win32/Temcac is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| terkcop | Ransomware | 1 | Trojan:Win32/Terkcop is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwar... |
| termite | Trojan | 1 | <h3>Executive Summary</h3> Termite (often associated with the NetWeaver framework) is a highly capable Remote Access Trojan (RAT) and post-exploitation toolset.... |
| tgrandongc | Ransomware | 1 | <h3>Executive Summary</h3> Tgrandongc is a malicious Trojan designed to covertly infiltrate Windows systems, establish persistence, and act as a reliable downlo... |
| thoper | Ransomware | 1 | Trojan:Win32/Thoper is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| tierry | Ransomware | 1 | <h3>Executive Summary</h3> Tierry is a malicious Trojan designed to covertly infiltrate Windows systems, establish persistence, and act as a reliable downloader... |
| tikoog | Ransomware | 1 | <h3>Executive Summary</h3> Tikoog is a malicious Trojan designed to covertly infiltrate Windows systems, establish persistence, and act as a reliable downloader... |
| tinclex | Ransomware | 1 | <h3>Executive Summary</h3> Tinclex is a malicious Trojan designed to covertly infiltrate Windows systems, establish persistence, and act as a reliable downloade... |
| tinydl | Ransomware | 1 | TrojanDownloader:Win32/Tinydl is a specialized, highly compact trojan designed to breach endpoint defenses and securely deliver secondary payloads. True to its ... |
| tipp | Ransomware | 1 | Trojan:Win32/Tipp is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware, ... |
| tivmonk | Ransomware | 1 | <h3>Executive Summary</h3> Tivmonk is a malicious Trojan designed to covertly infiltrate Windows systems, establish persistence, and act as a reliable downloade... |
| tmgfayxalbaj | Ransomware | 1 | <h3>Executive Summary</h3> TMGFAYXALBAJ is an automated, signature-based detection name used by security engines to identify a highly obfuscated, randomly gener... |
| tobor | Trojan | 1 | <h3>Executive Summary</h3> Tobor is a malicious Trojan designed to covertly infiltrate Windows systems, establish persistence, and conscript the endpoint into a... |
| tomegun | Ransomware | 1 | <h3>Executive Summary</h3> Tomegun is a malicious Trojan designed to covertly infiltrate Windows systems, establish persistence, and act as a reliable downloade... |
| tosthin | Ransomware | 1 | <h3>Executive Summary</h3> Tosthin is a malicious Trojan designed to covertly infiltrate Windows systems, establish persistence, and act as a reliable downloade... |
| totbrick | Ransomware | 1 | <h3>Executive Summary</h3> Totbrick is a malicious Trojan designed to covertly infiltrate Windows systems, establish persistence, and act as a reliable download... |
| tougle | Ransomware | 1 | Trojan:Win32/Tougle is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| tracur | Ransomware | 1 | <h3>Executive Summary</h3> Tracur is a malicious Trojan designed to covertly infiltrate Windows systems, establish persistence, and act as a reliable downloader... |
| trilon | Ransomware | 1 | <h3>Executive Summary</h3> Trilon is a malicious Trojan designed to covertly infiltrate Windows systems, establish persistence, and act as a reliable downloader... |
| trioris | Ransomware | 1 | <h3>Executive Summary</h3> Trioris is a malicious Trojan designed to covertly infiltrate Windows systems, establish persistence, and act as a reliable downloade... |
| tron | Ransomware | 1 | <h3>Executive Summary</h3> Tron is a sophisticated Botnet and Trojan framework designed to subjugate infected Windows systems. Once a machine is compromised, Tr... |
| troxa | Ransomware | 1 | <h3>Executive Summary</h3> Troxa is a malicious Trojan designed to covertly infiltrate Windows systems, establish persistence, and act as a reliable downloader ... |
| trpctrooper | Ransomware | 1 | Trojan:Win32/Trpctrooper is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ranso... |
| tukrina | Ransomware | 1 | <h3>Executive Summary</h3> Tukrina is a malicious Trojan designed to covertly infiltrate Windows systems, establish persistence, and act as a reliable downloade... |
| tyuimoi | Ransomware | 1 | <h3>Executive Summary</h3> Tyuimoi is a malicious Trojan designed to covertly infiltrate Windows systems, establish persistence, and act as a reliable downloade... |
| udslee | Ransomware | 1 | <h3>Executive Summary</h3> Udslee is a malicious Trojan designed to covertly infiltrate Windows systems, establish persistence, and act as a reliable downloader... |
| uiwaowr6xsaje | Ransomware | 1 | <h3>Executive Summary</h3> "Uiwaowr6xsaje" is a heuristic identifier for a highly obfuscated, generically detected Trojan or Dropper. The random, DGA-like (Doma... |
| umgfxgkazyg | Ransomware | 1 | <h3>Executive Summary</h3> "umgfxgkazyg" is a heuristic identifier for a highly obfuscated, generically detected Trojan or Dropper. The naming convention (which... |
| umqabaxnjogc | Ransomware | 1 | <h3>Executive Summary</h3> "umqabaxnjogc" is a heuristic identifier for a highly obfuscated, generically detected Trojan or Dropper. The naming convention (whic... |
| urcs | Ransomware | 1 | <h3>Executive Summary</h3> URCS (often associated with the URC Bot) is a sophisticated Remote Access Trojan (RAT) and Botnet framework engineered to provide att... |
| ursnifdropper | Trojan | 1 | <h3>Executive Summary</h3> UrsnifDropper is a specialized, first-stage Trojan designed explicitly to facilitate the delivery and execution of the notorious Ursn... |
| uruasy | Ransomware | 1 | <h3>Executive Summary</h3> Uruasy is a malicious Trojan designed to covertly infiltrate Windows systems, establish persistence, and act as a reliable downloader... |
| vakcune | Ransomware | 1 | <h3>Executive Summary</h3> Vakcune is a malicious Trojan designed to covertly infiltrate Windows systems, establish persistence, and act as a reliable downloade... |
| valcaryx | Ransomware | 1 | Trojan:Win32/Valcaryx is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwa... |
| vbdrop | Ransomware | 1 | <h3>Executive Summary</h3> VBDrop is a generic classification for a vast array of Trojan droppers developed using Visual Basic (VB) or Visual Basic Script (VBS)... |
| vbmod | Ransomware | 1 | <h3>Executive Summary</h3> VBMod is a generic detection identifier utilized by security vendors to classify a wide variety of trojans, worms, and malicious down... |
| verecno | Ransomware | 1 | Trojan:Win32/Verecno is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwar... |
| virgilio | Ransomware | 1 | <h3>Executive Summary</h3> Virgilio is a malicious Trojan designed to covertly infiltrate Windows systems, establish persistence, and act as a reliable download... |
| vitruvian | Ransomware | 1 | <h3>Executive Summary</h3> Vitruvian is a malicious Trojan designed to covertly infiltrate Windows systems, establish persistence, and act as a reliable downloa... |
| vixup | Ransomware | 1 | <h3>Executive Summary</h3> Vixup is a malicious Trojan designed to covertly infiltrate Windows systems, establish persistence, and act as a reliable downloader ... |
| vmjfbex4hpjj | Ransomware | 1 | <h3>Executive Summary</h3> "vmjfbex4hpjj" is a heuristic identifier for a highly obfuscated, generically detected Trojan or Dropper. The naming convention (whic... |
| vopackage | Ransomware | 1 | Trojan:Win32/Vopackage is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomw... |
| votchsys | Ransomware | 1 | <h3>Executive Summary</h3> Votchsys is a malicious Trojan designed to covertly infiltrate Windows systems, establish persistence, and act as a reliable download... |
| walerlop | Ransomware | 1 | <h3>Executive Summary</h3> Walerlop is a malicious Trojan designed to covertly infiltrate Windows systems, establish persistence, and act as a reliable download... |
| wansrog | Ransomware | 1 | <h3>Executive Summary</h3> Wansrog is a malicious Trojan designed to covertly infiltrate Windows systems, establish persistence, and act as a reliable downloade... |
| wavipeg | Ransomware | 1 | <h3>Executive Summary</h3> Wavipeg is a malicious Trojan designed to covertly infiltrate Windows systems, establish persistence, and act as a reliable downloade... |
| weenloc | Ransomware | 1 | Trojan:Win32/Weenloc is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwar... |
| wellmess | Ransomware | 1 | <h3>Executive Summary</h3> WellMess is a highly sophisticated, cross-platform (Windows and Linux) malware family heavily utilized by the Russian state-sponsored... |
| whiteice | Ransomware | 1 | <h3>Executive Summary</h3> WhiteIce is a malicious downloader Trojan engineered to stealthily infiltrate a target system, establish a hidden foothold, and subse... |
| windang | Trojan | 1 | <h3>Executive Summary</h3> Windang is a malicious Trojan with robust botnet capabilities, designed to covertly infiltrate Windows systems, establish deep persis... |
| winemm | Ransomware | 1 | TrojanDownloader:Win32/Winemm is a specialized trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads. Unlike a back... |
| winiga | Ransomware | 1 | <h3>Executive Summary</h3> Winiga is a malicious Trojan designed to covertly infiltrate Windows systems, establish persistence, and act as a reliable downloader... |
| winner | Ransomware | 1 | Trojan:Win32/Winner is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| wmqarhe5p8fbt | Ransomware | 1 | <h3>Executive Summary</h3> "wmqarhe5p8fbt" is a heuristic identifier for a highly obfuscated, generically detected Trojan or Dropper. The naming convention (whi... |
| wombat | Ransomware | 1 | Trojan:Win32/Wombat is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| woripecs | Ransomware | 1 | <h3>Executive Summary</h3> Woripecs is a malicious Trojan designed to covertly infiltrate Windows systems, establish persistence, and act as a reliable download... |
| wrar | Trojan | 1 | <h3>Executive Summary</h3> "Wrar" (often flagged as Riskware.Wrar or PUP.Wrar) is a detection classification that typically refers to cracked, modified, or bund... |
| wraut | Ransomware | 1 | Trojan:Win32/Wraut is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware,... |
| wuca | Ransomware | 1 | Trojan:Win32/Wuca is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware, ... |
| wuji | Ransomware | 1 | Trojan:Win32/Wuji is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware, ... |
| xcomp | Ransomware | 1 | <h3>Executive Summary</h3> Xcomp is a malicious Trojan designed to covertly infiltrate Windows systems, establish persistence, and act as a reliable downloader ... |
| xihet | Ransomware | 1 | Trojan:Win32/Xihet is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware,... |
| xizfawwyz0ab | Ransomware | 1 | <h3>Executive Summary</h3> "Xizfawwyz0ab" is a heuristic identifier for a highly obfuscated, generically detected Trojan or Dropper. The random, DGA-like (Domai... |
| xmgfbs8lpqoib | Ransomware | 1 | <h3>Executive Summary</h3> XMGFBS8LPQOIB is an automated, signature-based detection name used by security engines to identify a highly obfuscated, randomly gene... |
| xnhmeb | Ransomware | 1 | <h3>Executive Summary</h3> "Xnhmeb" is a heuristic identifier for a highly obfuscated, generically detected Trojan or Dropper. The random, DGA-like naming conve... |
| xorpix | Ransomware | 1 | Trojan:Win32/Xorpix is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| xundlldl | Ransomware | 1 | <h3>Executive Summary</h3> Xundlldl is a generic detection identifier utilized by security vendors to flag malicious executables that specifically act as DLL (D... |
| xxybss | Trojan | 1 | <h3>Executive Summary</h3> "Xxybss" is a machine-generated detection signature utilized by advanced heuristic antivirus engines. It does not identify a specific... |
| xxybuj | Trojan | 1 | <h3>Executive Summary</h3> "Xxybuj" is a machine-generated detection signature utilized by advanced heuristic antivirus engines. It does not identify a specific... |
| xxybvi | Trojan | 1 | <h3>Executive Summary</h3> "Xxybvi" is a machine-generated detection signature utilized by advanced heuristic antivirus engines. It does not identify a specific... |
| xxybwe | Trojan | 1 | <h3>Executive Summary</h3> "Xxybwe" is a machine-generated detection signature utilized by advanced heuristic antivirus engines. It does not identify a specific... |
| xxybyu | Trojan | 1 | <h3>Executive Summary</h3> "Xxybyu" is a generic, machine-generated detection signature utilized by advanced heuristic antivirus engines and endpoint detection ... |
| xxybzx | Trojan | 1 | <h3>Executive Summary</h3> "Xxybzx" is a machine-generated detection signature utilized by advanced heuristic antivirus engines. It does not identify a specific... |
| xxyeut | Ransomware | 1 | <h3>Executive Summary</h3> Xxyeut is a malicious Trojan designed to covertly infiltrate Windows systems, establish persistence, and act as a reliable downloader... |
| xxyfhz | Ransomware | 1 | <h3>Executive Summary</h3> "xxyfhz" is a heuristic identifier for a highly obfuscated, generically detected Trojan or Dropper. The naming convention (which appe... |
| yolov | Ransomware | 1 | <h3>Executive Summary</h3> Yolov is a malicious Trojan designed to covertly infiltrate Windows systems, establish persistence, and act as a reliable downloader ... |
| yuri | Trojan | 1 | <h3>Executive Summary</h3> Yuri is a highly dangerous Remote Access Trojan (RAT) and Backdoor. Its primary objective is to silently infiltrate a Windows worksta... |
| za0au42rofm | Ransomware | 1 | <h3>Executive Summary</h3> "za0au42rofm" is a heuristic identifier for a highly obfuscated, generically detected Trojan or Dropper. The naming convention (which... |
| zacom | Ransomware | 1 | Trojan:Win32/Zacom is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware,... |
| zanoza | Trojan | 1 | <h3>Executive Summary</h3> Zanoza (Russian for "splinter") is a malicious Trojan designed to covertly infiltrate Windows systems, establish deep persistence, an... |
| zaxar | Ransomware | 1 | <h3>Executive Summary</h3> Zaxar is a highly sophisticated Trojan and Botnet component that poses a severe threat to enterprise networks. While it functions as ... |
| zbiw | Ransomware | 1 | Trojan:Win32/Zbiw is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware, ... |
| zdowbot | Trojan | 1 | <h3>Executive Summary</h3> Zdowbot is a malicious Trojan designed to covertly infiltrate Windows systems, establish persistence, and conscript the endpoint into... |
| zenfly | Ransomware | 1 | <h3>Executive Summary</h3> Zenfly is a malicious Trojan designed to covertly infiltrate Windows systems, establish persistence, and act as a reliable downloader... |
| zilix | Ransomware | 1 | <h3>Executive Summary</h3> Zilix is a malicious Trojan designed to covertly infiltrate Windows systems, establish persistence, and act as a reliable downloader ... |
| zjek | Ransomware | 1 | <h3>Executive Summary</h3> Zjek is a malicious Trojan designed to covertly infiltrate Windows systems, establish persistence, and act as a reliable downloader f... |
| zloyfly | Ransomware | 1 | Trojan:Win32/Zloyfly is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomwar... |
| zoldon | Ransomware | 1 | <h3>Executive Summary</h3> Zoldon is a malicious Trojan designed to covertly infiltrate Windows systems, establish persistence, and conscript the infected machi... |
| zombam | Ransomware | 1 | Trojan:Win32/Zombam is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware... |
| zonebac | Ransomware | 1 | <h3>Executive Summary</h3> Zonebac is a malicious Trojan designed to covertly infiltrate Windows systems, establish persistence, and act as a reliable downloade... |
| zorex | Ransomware | 1 | Trojan:Win32/Zorex is a persistent, stealthy trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads like ransomware,... |
| zudochka | Ransomware | 1 | <h3>Executive Summary</h3> Zudochka is a malicious Trojan designed to covertly infiltrate Windows systems, establish persistence, and act as a reliable download... |
| zvrek | Ransomware | 1 | <h3>Executive Summary</h3> Zvrek is a malicious Trojan designed to covertly infiltrate Windows systems, establish persistence, and act as a reliable downloader ... |
| zxor | Ransomware | 1 | <h3>Executive Summary</h3> Zxor is a malicious Trojan designed to covertly infiltrate Windows systems, establish persistence, and act as a reliable downloader f... |
| zxrloader | Ransomware | 1 | TrojanDownloader:Win32/Zxrloader is a specialized trojan designed to breach endpoint defenses and securely deliver secondary, high-severity payloads. Unlike a b... |
| zy0baazvyqni | Ransomware | 1 | <h3>Executive Summary</h3> "zy0baazvyqni" is a heuristic identifier for a highly obfuscated, generically detected Trojan or Dropper. The naming convention (whic... |
| aim_downloader | Downloader | Sampled | Aim Downloader (historically classified as Downloader.Win32.Aim or Trojan-Downloader.Aim) refers to a specialized family of malicious utility droppers first doc... |
| bersek | Backdoor | Sampled | Bersek is an intricate malware strain primarily characterized by its capabilities as a backdoor and information stealer. It infiltrates systems typically via so... |
| bump_rat | Trojan | Sampled | Bump-Rat is a specialized malware family that has drawn attention for its targeted application in cyber espionage campaigns. Unlike broadly distributed commodit... |
| institution_2004 | Trojan | Sampled | Institution 2004 (cataloged across security software as Trojan:Win32/Institution2004, Backdoor.Win32.Institution, and Trojan.Institution) is an early 2000s Delp... |
| jbonblanc | Trojan | Sampled | JBonBlanc (cataloged across security software as Trojan:Win32/JBonBlanc, Backdoor.Win32.JBonBlanc, and Trojan.JBonBlanc) is a legacy French-authored Delphi remo... |
| jps | Trojan | Sampled | JPS (cataloged across security software as Trojan:Win32/JPS, Virus:Win32/JPS, and Trojan.Win32.JPS) is the compiled runtime client component generated by the JP... |
| messiah | Trojan | Sampled | Messiah (cataloged across security software as Trojan:Win32/Messiah, Backdoor.Win32.Messiah, and Trojan.Messiah) is a classic Delphi-authored remote access troj... |
| netsphere | Trojan | Sampled | NetSphere (cataloged across security software as Backdoor:Win32/NetSphere, Trojan.Win32.NetSphere, and Backdoor.NetSphere) is a classic early 2000s remote admin... |
| schoolbus | Trojan | Sampled | Schoolbus (cataloged across security software as Backdoor:Win32/Schoolbus, Trojan.Win32.Schoolbus, and Backdoor.Schoolbus) is a classic early 2000s Remote Acces... |
| seed | Trojan | Sampled | Seed (cataloged across security software as Backdoor:Win32/Seed, Trojan.Win32.Seed, and Backdoor.Seed) is a stealthy, lightweight Remote Access Trojan developed... |
| serenity_rat | Rat | Sampled | Serenity RAT (cataloged across security software as Backdoor.Win32.Serenity, Trojan.Serenity, and Serenity RAT) is a mid-2000s Remote Access Trojan created in B... |
| sinique | Trojan | Sampled | Sinique (historically documented across threat intelligence archives as Sinique Trojan, Sinique 1.0, and Backdoor.Sinique) is an early 2000s remote access troja... |
| trojna | Trojan | Sampled | Trojna (cataloged across early antivirus archives as TrojNa$, Trojan.Trojna, and Backdoor.Win32.Trojna) is an early-2000s Remote Access Trojan created in Visual... |
| uk_splitter | Trojan | Sampled | UK Splitter (specifically known across security communities as UK Splitter 1.2 and HackTool.Win32.UKSplitter) is a specialized binary joiner, executable file bi... |