Malware Families

Malware families tracked across community indicator feeds, MalwareBazaar and URLhaus. Each family links to its observed indicators of compromise — domains, IPs, URLs and file hashes — and the CVEs it is seen exploiting.

Families tracked

2 503

Attributed indicators

2 906 623

Most active

Mirai

Mirai497,709 IOCs Heodo292,491 IOCs AgentTesla265,371 IOCs Quakbot192,561 IOCs Formbook131,706 IOCs RedLineStealer119,226 IOCs Dridex110,323 IOCs RemcosRAT56,460 IOCs Gafgyt54,852 IOCs SnakeKeylogger54,252 IOCs Loki51,477 IOCs AsyncRAT44,984 IOCs GuLoader43,632 IOCs Smoke Loader43,359 IOCs Amadey35,782 IOCs ClearFake31,858 IOCs LummaStealer31,854 IOCs SilentBuilder29,397 IOCs CobaltStrike29,103 IOCs Prometei26,907 IOCs GCleaner25,894 IOCs NanoCore23,910 IOCs njrat23,850 IOCs AveMariaRAT22,890 IOCs Gozi22,398 IOCs CoinMiner20,361 IOCs Vidar19,101 IOCs IcedID17,959 IOCs GandCrab17,940 IOCs XWorm17,784 IOCs MassLogger17,484 IOCs DCRat17,191 IOCs Rhadamanthys16,547 IOCs TrickBot16,226 IOCs Stealc15,922 IOCs RaccoonStealer14,565 IOCs StrelaStealer14,417 IOCs QuasarRAT13,960 IOCs Socks5Systemz11,882 IOCs ArkeiStealer11,610 IOCs Unknown Loader10,993 IOCs QuakBot10,980 IOCs ValleyRAT9,849 IOCs Jadtre9,798 IOCs IClickFix9,303 IOCs Unknown malware9,222 IOCs FormBook8,853 IOCs ConnectWise7,461 IOCs Adware.Neoreklami7,422 IOCs NetSupport7,341 IOCs Stop6,870 IOCs AZORult6,537 IOCs Tofsee6,465 IOCs RiseProStealer6,240 IOCs PureLogsStealer6,216 IOCs RecordBreaker6,045 IOCs NetWire5,691 IOCs VIPKeylogger5,364 IOCs WannaCry5,127 IOCs Cobalt Strike4,984 IOCs ACRStealer4,779 IOCs DarkCloud4,608 IOCs Xorbot4,596 IOCs GootLoader4,527 IOCs Vjw0rm4,439 IOCs CryptBot4,428 IOCs a310Logger4,344 IOCs STRRAT4,259 IOCs SalatStealer4,194 IOCs DanaBot4,055 IOCs RustyStealer4,023 IOCs ZLoader3,987 IOCs MarsStealer3,834 IOCs NightHawk3,822 IOCs CredentialFlusher3,639 IOCs PhantomStealer3,633 IOCs ModiLoader3,633 IOCs Gh0stRAT3,624 IOCs BitRAT3,495 IOCs Healer3,339 IOCs Phorpiex3,335 IOCs DBatLoader3,255 IOCs HawkEye3,180 IOCs Efimer3,120 IOCs RemusStealer3,111 IOCs AmosStealer3,024 IOCs VShell2,903 IOCs Remcos2,784 IOCs BazaLoader2,640 IOCs Grandoreiro2,580 IOCs Pony2,577 IOCs Adwind2,472 IOCs Meterpreter2,461 IOCs Sliver2,426 IOCs JOMANGY2,382 IOCs SilentNet2,286 IOCs PureCrypter2,211 IOCs TeamBot2,169 IOCs php.shin_webshell2,140 IOCs Joker2,113 IOCs IRATA2,103 IOCs DarkTortilla2,076 IOCs Hajime2,028 IOCs zgRAT1,986 IOCs Matiex1,920 IOCs Fabookie1,890 IOCs SSHdKit1,857 IOCs SMSAGENT1,854 IOCs Adware.Generic1,851 IOCs Kaiji1,835 IOCs Socelars1,830 IOCs BumbleBee1,824 IOCs Metasploit1,770 IOCs Neshta1,749 IOCs VirLock1,746 IOCs Quasar RAT1,717 IOCs Glupteba1,683 IOCs SystemBC1,672 IOCs Blackmoon1,647 IOCs DarkComet1,639 IOCs OskiStealer1,614 IOCs DonutLoader1,563 IOCs Unknown Stealer1,562 IOCs WSHRAT1,554 IOCs RevengeRAT1,524 IOCs MetaStealer1,511 IOCs KongTuke1,497 IOCs MysticStealer1,485 IOCs PrivateLoader1,464 IOCs NirCmd1,458 IOCs QNodeService1,455 IOCs BlankGrabber1,455 IOCs Hancitor1,444 IOCs DDoSAgent1,437 IOCs Arechclient21,422 IOCs PureRAT1,414 IOCs NominatusStorm1,320 IOCs Pikabot1,308 IOCs Guildma1,263 IOCs LaplasClipper1,239 IOCs Mekotio1,218 IOCs Kimsuky1,216 IOCs DarkGate1,215 IOCs PythonStealer1,140 IOCs SpyNote1,109 IOCs ZeuS1,080 IOCs Braodo1,071 IOCs Tsunami1,067 IOCs WeedHack1,056 IOCs Chaos1,054 IOCs HijackLoader1,040 IOCs AdaptixC21,035 IOCs Simda993 IOCs PureHVNC987 IOCs Sodinokibi984 IOCs Havoc970 IOCs CountLoader969 IOCs StormKitty963 IOCs Venus Stealer939 IOCs Worm.Ramnit894 IOCs Nitol894 IOCs SheetRAT894 IOCs Lazarus888 IOCs RedLine Stealer878 IOCs Akira872 IOCs Kuiper861 IOCs Plugx849 IOCs N-W0rm847 IOCs CryptOne825 IOCs TA505822 IOCs BlackMatter810 IOCs DiskWriter807 IOCs YellowCockatoo798 IOCs Babadeda786 IOCs NetWire RC780 IOCs LimeRAT756 IOCs VenomRAT756 IOCs Unknown RAT755 IOCs LockBit736 IOCs AMOS732 IOCs Tinba729 IOCs Emotet728 IOCs RemoteManipulator720 IOCs MaskGramStealer712 IOCs XenoRAT705 IOCs SantaStealer704 IOCs Kimwolf692 IOCs Cerberus685 IOCs LgoogLoader684 IOCs Backdoor.TeamViewer663 IOCs Latrodectus648 IOCs FickerStealer642 IOCs Expiro633 IOCs Triada632 IOCs Hive630 IOCs Aisuru617 IOCs Coinminer610 IOCs XFilesStealer603 IOCs Nymaim597 IOCs OrcusRAT594 IOCs

Browse all 1186 families

CVE Database

Vulnerabilities with CVSS, EPSS, KEV and malware correlation

Check an indicator

Look up a domain, IP, URL or hash in real time

Malware Hash FeedsMD5 / SHA1 / SHA256 lists for scanners and SOAR File Hash LookupCheck a single hash against the threat corpus Ransomware TrackerActive groups and victim intelligence STIX / TAXII FeedStream family IOCs into OpenCTI, MISP, and other TIPs

Malware Families

Related pages