Malware intelligence

Malware Families

Families tracked across community indicator feeds, MalwareBazaar and URLhaus, each with its domains, IPs, URLs, hashes and exploited CVEs.

Families tracked: 2 555
Attributed indicators: 2 927 940
Most active: Mirai

Catalog

Largest families by indicator count.

Mirai504,753 IOCs Heodo292,497 IOCs AgentTesla265,800 IOCs Quakbot192,561 IOCs Formbook132,501 IOCs RedLineStealer119,226 IOCs Dridex110,323 IOCs RemcosRAT56,970 IOCs Gafgyt55,092 IOCs SnakeKeylogger54,300 IOCs Loki51,477 IOCs AsyncRAT45,991 IOCs GuLoader43,806 IOCs Smoke Loader43,359 IOCs Amadey35,795 IOCs ClearFake33,337 IOCs LummaStealer31,878 IOCs SilentBuilder29,397 IOCs CobaltStrike29,103 IOCs Prometei26,961 IOCs GCleaner25,928 IOCs NanoCore23,953 IOCs njrat23,887 IOCs AveMariaRAT22,890 IOCs Gozi22,398 IOCs CoinMiner20,486 IOCs Vidar19,595 IOCs XWorm18,063 IOCs IcedID17,959 IOCs GandCrab17,940 IOCs MassLogger17,574 IOCs DCRat17,287 IOCs Rhadamanthys16,547 IOCs TrickBot16,226 IOCs Stealc15,943 IOCs RaccoonStealer14,565 IOCs StrelaStealer14,421 IOCs QuasarRAT14,023 IOCs Unknown Loader13,021 IOCs Socks5Systemz11,882 IOCs ArkeiStealer11,613 IOCs QuakBot10,980 IOCs ValleyRAT10,030 IOCs IClickFix9,998 IOCs Jadtre9,798 IOCs Unknown malware9,582 IOCs FormBook8,853 IOCs ConnectWise7,674 IOCs Adware.Neoreklami7,422 IOCs NetSupport7,371 IOCs Stop6,870 IOCs AZORult6,537 IOCs Tofsee6,471 IOCs PureLogsStealer6,321 IOCs RiseProStealer6,240 IOCs RecordBreaker6,048 IOCs NetWire5,691 IOCs VIPKeylogger5,508 IOCs WannaCry5,229 IOCs Cobalt Strike5,070 IOCs ACRStealer4,815 IOCs DarkCloud4,644 IOCs Xorbot4,596 IOCs GootLoader4,527 IOCs Vjw0rm4,439 IOCs CryptBot4,428 IOCs a310Logger4,350 IOCs SalatStealer4,319 IOCs STRRAT4,273 IOCs DanaBot4,187 IOCs RustyStealer4,071 IOCs ZLoader3,987 IOCs MarsStealer3,834 IOCs NightHawk3,822 IOCs PhantomStealer3,738 IOCs Gh0stRAT3,657 IOCs CredentialFlusher3,639 IOCs ModiLoader3,633 IOCs VShell3,575 IOCs BitRAT3,498 IOCs Phorpiex3,380 IOCs Healer3,339 IOCs DBatLoader3,255 IOCs RemusStealer3,219 IOCs HawkEye3,180 IOCs Efimer3,132 IOCs AmosStealer3,024 IOCs Remcos2,983 IOCs SilentNet2,730 IOCs BazaLoader2,640 IOCs php.shin_webshell2,627 IOCs Grandoreiro2,580 IOCs Pony2,577 IOCs Sliver2,522 IOCs Adwind2,472 IOCs Meterpreter2,469 IOCs JOMANGY2,382 IOCs PureCrypter2,214 IOCs TeamBot2,169 IOCs Joker2,116 IOCs IRATA2,106 IOCs DarkTortilla2,091 IOCs Hajime2,034 IOCs zgRAT1,986 IOCs Matiex1,920 IOCs Fabookie1,890 IOCs SSHdKit1,857 IOCs Adware.Generic1,854 IOCs SMSAGENT1,854 IOCs Kaiji1,835 IOCs Socelars1,830 IOCs BumbleBee1,824 IOCs Unknown Stealer1,779 IOCs Metasploit1,770 IOCs Quasar RAT1,767 IOCs Neshta1,749 IOCs VirLock1,746 IOCs Glupteba1,683 IOCs SystemBC1,672 IOCs Blackmoon1,656 IOCs DarkComet1,639 IOCs DonutLoader1,617 IOCs OskiStealer1,614 IOCs WSHRAT1,557 IOCs RevengeRAT1,524 IOCs PureRAT1,512 IOCs MetaStealer1,511 IOCs KongTuke1,505 IOCs DDoSAgent1,500 IOCs MysticStealer1,485 IOCs BlankGrabber1,474 IOCs PrivateLoader1,464 IOCs NirCmd1,458 IOCs QNodeService1,455 IOCs Hancitor1,444 IOCs Arechclient21,434 IOCs NominatusStorm1,320 IOCs AMOS1,314 IOCs Pikabot1,308 IOCs Guildma1,272 IOCs LaplasClipper1,239 IOCs Mekotio1,218 IOCs Kimsuky1,217 IOCs DarkGate1,215 IOCs PythonStealer1,149 IOCs SpyNote1,110 IOCs ZeuS1,080 IOCs Braodo1,077 IOCs AdaptixC21,076 IOCs Tsunami1,068 IOCs Chaos1,061 IOCs WeedHack1,059 IOCs HijackLoader1,054 IOCs Venus Stealer1,023 IOCs Simda993 IOCs Havoc989 IOCs PureHVNC987 IOCs Sodinokibi984 IOCs CountLoader978 IOCs StormKitty963 IOCs SheetRAT897 IOCs Worm.Ramnit894 IOCs Nitol894 IOCs Lazarus888 IOCs RedLine Stealer878 IOCs Kuiper873 IOCs Akira872 IOCs NetWire RC852 IOCs Plugx849 IOCs N-W0rm847 IOCs CryptOne825 IOCs TA505822 IOCs BlackMatter813 IOCs DiskWriter807 IOCs Unknown RAT799 IOCs YellowCockatoo798 IOCs Babadeda789 IOCs VenomRAT765 IOCs LimeRAT756 IOCs LockBit736 IOCs Tinba729 IOCs Emotet728 IOCs RemoteManipulator720 IOCs MaskGramStealer712 IOCs XenoRAT708 IOCs SantaStealer707 IOCs Coinminer693 IOCs Kimwolf692 IOCs Cerberus685 IOCs LgoogLoader684 IOCs Aisuru664 IOCs Backdoor.TeamViewer663 IOCs Latrodectus648 IOCs Expiro642 IOCs FickerStealer642 IOCs Triada632 IOCs Hive630 IOCs XFilesStealer603 IOCs Nymaim597 IOCs OrcusRAT594 IOCs

Browse all 1210 families

CVE Database

Vulnerabilities with CVSS, EPSS, KEV and malware correlation

Check an indicator

Look up a domain, IP, URL or file hash.

Explore

Related pages to go further.

Malware Hash FeedsMD5 / SHA1 / SHA256 lists for scanners and SOAR File Hash LookupCheck a single hash against the threat corpus Ransomware TrackerActive groups and victim intelligence STIX / TAXII FeedStream family IOCs into OpenCTI, MISP, and other TIPs