Malware Families

Malware families tracked across abuse.ch ThreatFox, MalwareBazaar and URLhaus. Each family links to its observed indicators of compromise — domains, IPs, URLs and file hashes — and the CVEs it is seen exploiting.

Families tracked

2 403

Attributed indicators

2 829 110

Most active

Mirai

Mirai473,958 IOCs Heodo292,482 IOCs AgentTesla264,573 IOCs Quakbot192,561 IOCs Formbook130,537 IOCs RedLineStealer119,211 IOCs Dridex110,323 IOCs RemcosRAT55,383 IOCs SnakeKeylogger54,183 IOCs Gafgyt54,177 IOCs Loki51,462 IOCs GuLoader43,416 IOCs Smoke Loader43,359 IOCs Amadey35,736 IOCs AsyncRAT33,995 IOCs LummaStealer31,815 IOCs SilentBuilder29,397 IOCs CobaltStrike29,073 IOCs ClearFake27,459 IOCs Prometei26,715 IOCs GCleaner25,825 IOCs NanoCore23,778 IOCs njrat23,772 IOCs AveMariaRAT22,875 IOCs Gozi22,398 IOCs CoinMiner19,812 IOCs IcedID17,959 IOCs GandCrab17,940 IOCs XWorm17,318 IOCs MassLogger17,184 IOCs DCRat17,044 IOCs Vidar16,575 IOCs Rhadamanthys16,536 IOCs TrickBot16,222 IOCs Stealc15,791 IOCs RaccoonStealer14,565 IOCs StrelaStealer14,416 IOCs QuasarRAT13,852 IOCs Socks5Systemz11,878 IOCs ArkeiStealer11,595 IOCs QuakBot10,980 IOCs Jadtre9,798 IOCs ValleyRAT9,246 IOCs FormBook8,853 IOCs Unknown malware7,862 IOCs Adware.Neoreklami7,422 IOCs NetSupport7,311 IOCs Stop6,867 IOCs ConnectWise6,843 IOCs AZORult6,537 IOCs Tofsee6,455 IOCs RiseProStealer6,240 IOCs RecordBreaker6,045 IOCs PureLogsStealer5,931 IOCs NetWire5,691 IOCs VIPKeylogger5,202 IOCs WannaCry4,869 IOCs ACRStealer4,620 IOCs DarkCloud4,602 IOCs Xorbot4,596 IOCs Cobalt Strike4,587 IOCs GootLoader4,527 IOCs Vjw0rm4,435 IOCs CryptBot4,428 IOCs a310Logger4,314 IOCs STRRAT4,242 IOCs DanaBot3,991 IOCs ZLoader3,987 IOCs RustyStealer3,855 IOCs MarsStealer3,834 IOCs NightHawk3,822 IOCs SalatStealer3,812 IOCs CredentialFlusher3,639 IOCs ModiLoader3,630 IOCs Gh0stRAT3,573 IOCs BitRAT3,495 IOCs PhantomStealer3,483 IOCs Healer3,339 IOCs Phorpiex3,267 IOCs DBatLoader3,255 IOCs HawkEye3,180 IOCs Unknown Loader3,143 IOCs Efimer3,120 IOCs AmosStealer3,018 IOCs IClickFix2,866 IOCs RemusStealer2,751 IOCs BazaLoader2,640 IOCs Grandoreiro2,578 IOCs Pony2,574 IOCs Adwind2,472 IOCs Meterpreter2,424 IOCs Sliver2,220 IOCs PureCrypter2,199 IOCs TeamBot2,169 IOCs Remcos2,147 IOCs Joker2,113 IOCs IRATA2,097 IOCs DarkTortilla2,040 IOCs Hajime2,001 IOCs zgRAT1,986 IOCs Matiex1,920 IOCs Fabookie1,890 IOCs SSHdKit1,857 IOCs SMSAGENT1,854 IOCs Adware.Generic1,845 IOCs Socelars1,830 IOCs BumbleBee1,824 IOCs Kaiji1,799 IOCs Metasploit1,767 IOCs Neshta1,746 IOCs VirLock1,746 IOCs Glupteba1,683 IOCs SystemBC1,658 IOCs DarkComet1,627 IOCs Blackmoon1,617 IOCs OskiStealer1,614 IOCs WSHRAT1,548 IOCs Quasar RAT1,535 IOCs RevengeRAT1,524 IOCs MetaStealer1,512 IOCs DonutLoader1,488 IOCs MysticStealer1,485 IOCs PrivateLoader1,464 IOCs NirCmd1,458 IOCs QNodeService1,455 IOCs BlankGrabber1,446 IOCs Hancitor1,444 IOCs Arechclient21,407 IOCs KongTuke1,383 IOCs NominatusStorm1,320 IOCs Pikabot1,308 IOCs LaplasClipper1,239 IOCs Guildma1,233 IOCs Mekotio1,218 IOCs Kimsuky1,216 IOCs DarkGate1,215 IOCs DDoSAgent1,185 IOCs VShell1,136 IOCs Unknown Stealer1,136 IOCs PythonStealer1,122 IOCs SpyNote1,109 IOCs PureRAT1,082 IOCs ZeuS1,080 IOCs Braodo1,071 IOCs WeedHack1,053 IOCs Tsunami1,044 IOCs Chaos1,030 IOCs HijackLoader1,013 IOCs Simda993 IOCs PureHVNC987 IOCs Sodinokibi984 IOCs CountLoader966 IOCs StormKitty963 IOCs SilentNet927 IOCs Havoc900 IOCs Nitol894 IOCs Worm.Ramnit891 IOCs Lazarus888 IOCs Akira866 IOCs SheetRAT864 IOCs Kuiper861 IOCs Plugx849 IOCs Venus Stealer849 IOCs N-W0rm843 IOCs RedLine Stealer842 IOCs CryptOne825 IOCs TA505822 IOCs php.shin_webshell819 IOCs DiskWriter807 IOCs BlackMatter804 IOCs YellowCockatoo798 IOCs Babadeda786 IOCs LimeRAT756 IOCs LockBit736 IOCs VenomRAT735 IOCs AdaptixC2732 IOCs Tinba729 IOCs RemoteManipulator714 IOCs MaskGramStealer712 IOCs SantaStealer704 IOCs NetWire RC699 IOCs XenoRAT697 IOCs Emotet697 IOCs Cerberus684 IOCs LgoogLoader684 IOCs Kimwolf678 IOCs Backdoor.TeamViewer663 IOCs Latrodectus644 IOCs FickerStealer642 IOCs Triada632 IOCs Hive630 IOCs Expiro627 IOCs XFilesStealer603 IOCs Nymaim597 IOCs OrcusRAT594 IOCs ScarfaceStealer588 IOCs Metamorfo588 IOCs 404Keylogger573 IOCs MooBot568 IOCs Kutaki567 IOCs

CVE Database

Vulnerabilities with CVSS, EPSS, KEV and malware correlation

Check an indicator

Look up a domain, IP, URL or hash in real time

Malware Hash FeedsMD5 / SHA1 / SHA256 lists for scanners and SOAR File Hash LookupCheck a single hash against the threat corpus Ransomware TrackerActive groups and victim intelligence STIX / TAXII FeedStream family IOCs into OpenCTI, MISP, and other TIPs

Malware Families

Related pages