| { | |
| "2015_Ukraine_Electric_Power_Attack": 31221, | |
| "2016_Ukraine_Electric_Power_Attack": 31252, | |
| "3PARA_RAT": 31036, | |
| "4H_RAT": 30659, | |
| "</campaign>": 31334, | |
| "</code>": 31340, | |
| "</group>": 31336, | |
| "</software>": 31338, | |
| "<campaign>": 31333, | |
| "<code>": 31339, | |
| "<group>": 31335, | |
| "<software>": 31337, | |
| "AADInternals": 31199, | |
| "ABK": 30649, | |
| "ADVSTORESHELL": 31250, | |
| "ANDROMEDA": 31269, | |
| "APT-C-36": 30695, | |
| "APT1": 30902, | |
| "APT12": 30590, | |
| "APT16": 30891, | |
| "APT17": 31323, | |
| "APT18": 30963, | |
| "APT19": 30666, | |
| "APT28": 31058, | |
| "APT29": 31283, | |
| "APT3": 31155, | |
| "APT30": 31120, | |
| "APT32": 30802, | |
| "APT33": 31017, | |
| "APT37": 30742, | |
| "APT38": 31321, | |
| "APT39": 30811, | |
| "APT41": 31291, | |
| "ASPXSpy": 30913, | |
| "Action_RAT": 30769, | |
| "AdFind": 31045, | |
| "Agent.btz": 30866, | |
| "Agent_Tesla": 31066, | |
| "Ajax_Security_Team": 30943, | |
| "Amadey": 31195, | |
| "Anchor": 31238, | |
| "Andariel": 31328, | |
| "Aoqin_Dragon": 31204, | |
| "AppleJeus": 31042, | |
| "AppleScript": 30992, | |
| "AppleSeed": 31134, | |
| "Aquatic_Panda": 31023, | |
| "Aria-body": 30525, | |
| "Arp": 30942, | |
| "Astaroth": 30651, | |
| "AsyncRAT": 31008, | |
| "Attor": 30850, | |
| "AuTo_Stealer": 30950, | |
| "AuditCred": 30971, | |
| "AutoIt_backdoor": 30729, | |
| "Avaddon": 31239, | |
| "Avenger": 30703, | |
| "AvosLocker": 31016, | |
| "Axiom": 31047, | |
| "Azorult": 30804, | |
| "BACKSPACE": 30794, | |
| "BADCALL": 30814, | |
| "BADFLICK": 30594, | |
| "BADHATCH": 30626, | |
| "BADNEWS": 30884, | |
| "BBK": 31306, | |
| "BBSRAT": 30860, | |
| "BISCUIT": 30687, | |
| "BITSAdmin": 31255, | |
| "BITTER": 31009, | |
| "BLACKCOFFEE": 31212, | |
| "BLINDINGCAN": 30916, | |
| "BLUELIGHT": 31264, | |
| "BONDUPDATER": 30837, | |
| "BOOSTWRITE": 30727, | |
| "BOOTRASH": 30537, | |
| "BRONZE_BUTLER": 31304, | |
| "BS2005": 30898, | |
| "BUBBLEWRAP": 31028, | |
| "Babuk": 31077, | |
| "BabyShark": 31211, | |
| "BackConfig": 30949, | |
| "Backdoor.Oldrea": 31185, | |
| "BackdoorDiplomacy": 31315, | |
| "BadPatch": 30548, | |
| "Bad_Rabbit": 31163, | |
| "Bandook": 31069, | |
| "Bankshot": 31254, | |
| "Bazar": 31143, | |
| "BendyBear": 30944, | |
| "Bisonal": 30756, | |
| "BitPaymer": 30611, | |
| "BlackCat": 31122, | |
| "BlackEnergy": 31297, | |
| "BlackMould": 31245, | |
| "BlackOasis": 31276, | |
| "BlackTech": 31282, | |
| "Black_Basta": 31004, | |
| "BloodHound": 30966, | |
| "Blue_Mockingbird": 30945, | |
| "Bonadan": 30595, | |
| "BoomBox": 30924, | |
| "BoxCaon": 31218, | |
| "Brave_Prince": 30720, | |
| "Briba": 30818, | |
| "Brute_Ratel_C4": 31094, | |
| "Bumblebee": 30772, | |
| "Bundlore": 30925, | |
| "C0010": 30618, | |
| "C0011": 31160, | |
| "C0015": 31191, | |
| "C0017": 30976, | |
| "C0018": 30612, | |
| "C0021": 30774, | |
| "C0026": 30538, | |
| "C0027": 30613, | |
| "CALENDAR": 31213, | |
| "CARROTBALL": 30539, | |
| "CARROTBAT": 30920, | |
| "CCBkdr": 30962, | |
| "CHOPSTICK": 30975, | |
| "CORALDECK": 30661, | |
| "CORESHELL": 30785, | |
| "CSPY_Downloader": 30906, | |
| "CURIUM": 31176, | |
| "Cachedump": 31161, | |
| "CaddyWiper": 30871, | |
| "Cadelspy": 30957, | |
| "Calisto": 30750, | |
| "CallMe": 31100, | |
| "Cannon": 31240, | |
| "Carbanak": 30805, | |
| "Carberp": 31117, | |
| "Carbon": 30838, | |
| "Cardinal_RAT": 30713, | |
| "Catchamas": 30722, | |
| "Caterpillar_WebShell": 30846, | |
| "ChChes": 30560, | |
| "Chaes": 30857, | |
| "Chaos": 30872, | |
| "CharmPower": 30815, | |
| "Cherry_Picker": 30982, | |
| "Chimera": 31167, | |
| "China_Chopper": 30807, | |
| "Chinoxy": 31227, | |
| "Chrommme": 30946, | |
| "Clambling": 30585, | |
| "Cleaver": 30624, | |
| "Clop": 31029, | |
| "CloudDuke": 30799, | |
| "Cobalt_Group": 30991, | |
| "Cobalt_Strike": 30972, | |
| "Cobian_RAT": 31132, | |
| "CoinTicker": 30587, | |
| "ComRAT": 31251, | |
| "Comnie": 30625, | |
| "Conficker": 30747, | |
| "Confucius": 30603, | |
| "ConnectWise": 31027, | |
| "Conti": 30578, | |
| "CookieMiner": 30927, | |
| "CopyKittens": 30954, | |
| "CosmicDuke": 31146, | |
| "CostaBricks": 31015, | |
| "CostaRicto": 30581, | |
| "CozyCar": 30576, | |
| "CrackMapExec": 30646, | |
| "CreepyDrive": 30732, | |
| "CreepySnail": 30825, | |
| "Crimson": 30984, | |
| "CrossRAT": 31210, | |
| "Crutch": 30568, | |
| "Cryptoistic": 30877, | |
| "Cuba": 31257, | |
| "Cyclops_Blink": 30908, | |
| "DCSrv": 30869, | |
| "DDKONG": 31174, | |
| "DEADEYE": 31101, | |
| "DEATHRANSOM": 31024, | |
| "DOGCALL": 31249, | |
| "DRATzarus": 31295, | |
| "Dacls": 30580, | |
| "DanBot": 30801, | |
| "DarkComet": 31314, | |
| "DarkHydrus": 30783, | |
| "DarkTortilla": 31103, | |
| "DarkVishnya": 31296, | |
| "DarkWatchman": 31170, | |
| "Dark_Caracal": 30821, | |
| "Darkhotel": 31126, | |
| "Daserf": 30827, | |
| "DealersChoice": 30707, | |
| "Deep_Panda": 30751, | |
| "Denis": 30638, | |
| "Derusbi": 30544, | |
| "Diavol": 31156, | |
| "Dipsind": 30749, | |
| "Disco": 31202, | |
| "DnsSystem": 30710, | |
| "Dok": 31098, | |
| "Doki": 31124, | |
| "Donut": 31175, | |
| "DownPaper": 30753, | |
| "Downdelph": 30610, | |
| "Dragonfly": 31179, | |
| "Dridex": 30897, | |
| "DropBook": 30536, | |
| "Drovorub": 31290, | |
| "Dtrack": 30888, | |
| "Duqu": 30600, | |
| "DustySky": 30718, | |
| "Dyre": 31109, | |
| "ECCENTRICBANDWAGON": 30598, | |
| "EKANS": 31182, | |
| "ELMER": 31021, | |
| "EVILNUM": 30586, | |
| "EXOTIC_LILY": 30632, | |
| "Earth_Lusca": 30873, | |
| "Ebury": 30819, | |
| "Ecipekac": 30789, | |
| "Egregor": 30912, | |
| "Elderwood": 30939, | |
| "Elise": 31025, | |
| "Ember_Bear": 30781, | |
| "Emissary": 31262, | |
| "Emotet": 31056, | |
| "Empire": 30675, | |
| "EnvyScout": 30740, | |
| "Epic": 30553, | |
| "Equation": 30981, | |
| "EvilBunny": 31330, | |
| "EvilGrab": 31311, | |
| "Evilnum": 30836, | |
| "Exaramel_for_Linux": 30627, | |
| "Exaramel_for_Windows": 30979, | |
| "Expand": 30983, | |
| "Explosive": 30741, | |
| "FALLCHILL": 31193, | |
| "FELIXROOT": 30605, | |
| "FIN10": 31012, | |
| "FIN13": 31242, | |
| "FIN4": 30634, | |
| "FIN5": 30835, | |
| "FIN6": 31200, | |
| "FIN7": 31320, | |
| "FIN8": 30808, | |
| "FIVEHANDS": 31309, | |
| "FLASHFLOOD": 30844, | |
| "FLIPSIDE": 30543, | |
| "FYAnti": 31154, | |
| "FakeM": 30766, | |
| "FatDuke": 30719, | |
| "Felismus": 30938, | |
| "Ferocious": 31241, | |
| "Ferocious_Kitten": 30791, | |
| "Fgdump": 30923, | |
| "FinFisher": 31316, | |
| "Final1stspy": 31260, | |
| "Flagpro": 31040, | |
| "Flame": 30680, | |
| "FlawedAmmyy": 31275, | |
| "FlawedGrace": 31201, | |
| "FoggyWeb": 30998, | |
| "Forfiles": 31129, | |
| "Fox_Kitten": 30744, | |
| "FrameworkPOS": 30847, | |
| "Frankenstein": 31041, | |
| "FruitFly": 30714, | |
| "FunnyDream": 30629, | |
| "Fysbis": 31144, | |
| "GALLIUM": 30986, | |
| "GCMAN": 30952, | |
| "GLOOXMAIL": 31081, | |
| "GOLD_SOUTHFIELD": 30746, | |
| "GRIFFON": 30965, | |
| "Gallmaker": 30704, | |
| "Gamaredon_Group": 31166, | |
| "Gazer": 31164, | |
| "Gelsemium": 30977, | |
| "GeminiDuke": 31325, | |
| "Get2": 30552, | |
| "GoldFinder": 30894, | |
| "GoldMax": 30961, | |
| "Gold_Dragon": 31299, | |
| "GoldenSpy": 30631, | |
| "Goopy": 30780, | |
| "Gorgon_Group": 30793, | |
| "Grandoreiro": 30557, | |
| "GravityRAT": 30556, | |
| "Green_Lambert": 31236, | |
| "GreyEnergy": 31207, | |
| "GrimAgent": 30696, | |
| "Group5": 31130, | |
| "GuLoader": 30759, | |
| "H1N1": 30974, | |
| "HAFNIUM": 31223, | |
| "HALFBAKED": 30739, | |
| "HAMMERTOSS": 31116, | |
| "HARDRAIN": 30792, | |
| "HAWKBALL": 30997, | |
| "HDoor": 30763, | |
| "HELLOKITTY": 30694, | |
| "HEXANE": 30758, | |
| "HIDEDRV": 30831, | |
| "HOMEFRY": 30914, | |
| "HOPLIGHT": 31194, | |
| "HTRAN": 30773, | |
| "HTTPBrowser": 30731, | |
| "Hacking_Team_UEFI_Rootkit": 31131, | |
| "Hancitor": 30813, | |
| "Havij": 30779, | |
| "Helminth": 30656, | |
| "HermeticWiper": 31125, | |
| "HermeticWizard": 31118, | |
| "Heyoka_Backdoor": 30933, | |
| "Hi-Zor": 31313, | |
| "HiddenWasp": 30565, | |
| "Higaisa": 31010, | |
| "Hikit": 31099, | |
| "Hildegard": 30936, | |
| "HotCroissant": 30848, | |
| "Hydraq": 31111, | |
| "HyperBro": 30764, | |
| "HyperStack": 31317, | |
| "ISMInjector": 30604, | |
| "IceApple": 31114, | |
| "IcedID": 30885, | |
| "Imminent_Monitor": 31267, | |
| "Impacket": 30558, | |
| "Inception": 31169, | |
| "IndigoZebra": 31097, | |
| "Indrik_Spider": 30662, | |
| "Industroyer": 30569, | |
| "Industroyer2": 30737, | |
| "InnaputRAT": 31057, | |
| "InvisiMole": 30864, | |
| "Invoke-PSImage": 30577, | |
| "IronNetInjector": 30564, | |
| "Ixeshe": 30673, | |
| "JCry": 31035, | |
| "JHUHUGIT": 30875, | |
| "JPIN": 31147, | |
| "JSS_Loader": 30527, | |
| "Janicab": 31033, | |
| "Javali": 30817, | |
| "KARAE": 30619, | |
| "KEYMARBLE": 30787, | |
| "KEYPLUG": 30929, | |
| "KGH_SPY": 31115, | |
| "KOCTOPUS": 30862, | |
| "KOMPROGO": 31019, | |
| "KONNI": 30960, | |
| "KOPILUWAK": 30931, | |
| "Kasidet": 30636, | |
| "Kazuar": 30796, | |
| "Ke3chang": 30883, | |
| "KernelCallbackTable": 31198, | |
| "Kerrdown": 31087, | |
| "Kessel": 30637, | |
| "Kevin": 31102, | |
| "KeyBoy": 31133, | |
| "Keydnap": 30592, | |
| "KillDisk": 31014, | |
| "Kimsuky": 30947, | |
| "Kinsing": 30761, | |
| "Kivars": 30693, | |
| "Koadic": 31149, | |
| "Kobalos": 31246, | |
| "Komplex": 30918, | |
| "Kwampirs": 30531, | |
| "LAPSUS$": 30915, | |
| "LOWBALL": 31308, | |
| "LaZagne": 30616, | |
| "Launch_Agent": 31272, | |
| "Launch_Daemon": 30641, | |
| "Lazarus_Group": 31196, | |
| "LazyScripter": 30647, | |
| "Leafminer": 31265, | |
| "Leviathan": 30760, | |
| "LightNeuron": 30934, | |
| "Linfo": 30845, | |
| "Linux_Rabbit": 31237, | |
| "LiteDuke": 30865, | |
| "LitePower": 30795, | |
| "Lizar": 31070, | |
| "LoJax": 31217, | |
| "LockerGoga": 30593, | |
| "Lokibot": 31208, | |
| "LookBack": 30674, | |
| "LoudMiner": 30652, | |
| "Lslsass": 31026, | |
| "Lucifer": 30833, | |
| "LuminousMoth": 30644, | |
| "Lurid": 30614, | |
| "MCMD": 31300, | |
| "MESSAGETAP": 30529, | |
| "MURKYTOP": 31293, | |
| "MacMa": 31270, | |
| "MacSpy": 31085, | |
| "Machete": 31244, | |
| "Mafalda": 30767, | |
| "Magic_Hound": 30555, | |
| "MailSniper": 30607, | |
| "MarkiRAT": 30523, | |
| "Matryoshka": 30653, | |
| "Maze": 30830, | |
| "MechaFlounder": 30533, | |
| "MegaCortex": 31312, | |
| "Melcoz": 30755, | |
| "Metador": 31107, | |
| "Metamorfo": 31243, | |
| "Meteor": 30728, | |
| "Micropsia": 31232, | |
| "Milan": 31148, | |
| "MimiPenguin": 31322, | |
| "Mimikatz": 30699, | |
| "Miner-C": 30892, | |
| "MiniDuke": 30880, | |
| "MirageFox": 31178, | |
| "Mis-Type": 30993, | |
| "Misdat": 31089, | |
| "Mivast": 30812, | |
| "Moafee": 30572, | |
| "MobileOrder": 30956, | |
| "Mofang": 31268, | |
| "MoleNet": 31059, | |
| "Molerats": 30550, | |
| "Mongall": 30858, | |
| "MoonWind": 30622, | |
| "More_eggs": 30826, | |
| "Mori": 30935, | |
| "Moses_Staff": 30988, | |
| "Mosquito": 30650, | |
| "MoustachedBouncer": 31075, | |
| "MuddyWater": 30562, | |
| "Mustang_Panda": 31273, | |
| "Mythic": 31060, | |
| "NBTscan": 30583, | |
| "NDiskMonitor": 30551, | |
| "NETEAGLE": 30951, | |
| "NETWIRE": 30690, | |
| "NOKKI": 31324, | |
| "Naid": 30803, | |
| "Naikon": 30711, | |
| "NanHaiShu": 31186, | |
| "NanoCore": 30601, | |
| "NativeZone": 30669, | |
| "NavRAT": 31288, | |
| "Nebulae": 31281, | |
| "Neoichor": 30790, | |
| "Nerex": 30890, | |
| "Net": 30712, | |
| "NetTraveler": 31332, | |
| "Net_Crawler": 31158, | |
| "Netwalker": 30786, | |
| "Nidiran": 30768, | |
| "NightClub": 30684, | |
| "Night_Dragon": 30559, | |
| "Nltest": 31157, | |
| "Nomadic_Octopus": 30575, | |
| "NotPetya": 30716, | |
| "OLDBAIT": 31096, | |
| "OSInfo": 30798, | |
| "OSX/Shlayer": 30752, | |
| "OSX_OCEANLOTUS.D": 30940, | |
| "ObliqueRAT": 31022, | |
| "OceanSalt": 30567, | |
| "Octopus": 30554, | |
| "OilRig": 31214, | |
| "Okrum": 30824, | |
| "Olympic_Destroyer": 30672, | |
| "OnionDuke": 31063, | |
| "OopsIE": 30969, | |
| "Operation_CuckooBees": 30736, | |
| "Operation_Dream_Job": 30609, | |
| "Operation_Dust_Storm": 31139, | |
| "Operation_Ghost": 31049, | |
| "Operation_Honeybee": 31234, | |
| "Operation_Sharpshooter": 30788, | |
| "Operation_Spalax": 30757, | |
| "Operation_Wocao": 30899, | |
| "Orangeworm": 31123, | |
| "Orz": 31078, | |
| "Out1": 31090, | |
| "OutSteel": 31034, | |
| "OwaAuth": 30800, | |
| "P.A.S._Webshell": 30930, | |
| "P2P_ZeuS": 30843, | |
| "P8RAT": 30967, | |
| "PHOREAL": 30859, | |
| "PID": 31002, | |
| "PLAINTEE": 30829, | |
| "PLATINUM": 30839, | |
| "PLEAD": 31119, | |
| "POLONIUM": 30901, | |
| "POORAIM": 31065, | |
| "POSHSPY": 30863, | |
| "POWERSOURCE": 30849, | |
| "POWERSTATS": 30561, | |
| "POWERTON": 30702, | |
| "POWRUNER": 31331, | |
| "PROMETHIUM": 30900, | |
| "PS1": 30861, | |
| "PUNCHBUGGY": 30932, | |
| "PUNCHTRACK": 30599, | |
| "Pacu": 30852, | |
| "Pandora": 30953, | |
| "Pasam": 31301, | |
| "Pass-The-Hash_Toolkit": 31092, | |
| "Patchwork": 31188, | |
| "Pay2Key": 31247, | |
| "PcShare": 31279, | |
| "Peirates": 30851, | |
| "Penquin": 31231, | |
| "Peppy": 30645, | |
| "Pillowmint": 30620, | |
| "PinchDuke": 30563, | |
| "Ping": 30660, | |
| "PingPull": 31088, | |
| "PipeMon": 30765, | |
| "Pisloader": 30820, | |
| "PittyTiger": 30990, | |
| "PlugX": 31061, | |
| "PoetRAT": 31215, | |
| "PoisonIvy": 31142, | |
| "PolyglotDuke": 30867, | |
| "Pony": 31105, | |
| "Poseidon_Group": 30868, | |
| "PoshC2": 31233, | |
| "PowGoop": 30665, | |
| "PowerDuke": 31190, | |
| "PowerLess": 31222, | |
| "PowerPunch": 30685, | |
| "PowerShell": 30778, | |
| "PowerShower": 31263, | |
| "PowerSploit": 31266, | |
| "PowerStallion": 30708, | |
| "Power_Loader": 31228, | |
| "Prestige": 30726, | |
| "Prikormka": 31235, | |
| "ProLock": 31253, | |
| "Proton": 30905, | |
| "Proxysvc": 31128, | |
| "PsExec": 30655, | |
| "Psylo": 30770, | |
| "Pteranodon": 30635, | |
| "Pupy": 31286, | |
| "Putter_Panda": 30566, | |
| "PyDCrypt": 31177, | |
| "Pysa": 31220, | |
| "QUADAGENT": 31298, | |
| "QUIETCANARY": 30717, | |
| "QUIETEXIT": 31287, | |
| "QakBot": 31106, | |
| "QuasarRAT": 31284, | |
| "QuietSieve": 31203, | |
| "RARSTONE": 30881, | |
| "RATANKBA": 30579, | |
| "RCSession": 31180, | |
| "RDAT": 30639, | |
| "RDFSNIFFER": 30545, | |
| "REvil": 31172, | |
| "RGDoor": 31011, | |
| "RIPTIDE": 31127, | |
| "ROADTools": 30573, | |
| "ROCKBOOT": 31020, | |
| "ROKRAT": 31303, | |
| "RTM": 31108, | |
| "Ragnar_Locker": 30771, | |
| "Raindrop": 30677, | |
| "RainyDay": 31318, | |
| "Ramsay": 30596, | |
| "Rancor": 31086, | |
| "RawDisk": 30733, | |
| "RawPOS": 30642, | |
| "Rclone": 31104, | |
| "Reaver": 31219, | |
| "RedLeaves": 30964, | |
| "Reg": 30591, | |
| "RegDuke": 30678, | |
| "Regin": 31187, | |
| "Remcos": 30762, | |
| "Remexi": 31305, | |
| "RemoteCMD": 30958, | |
| "RemoteUtilities": 31013, | |
| "Remsec": 31310, | |
| "Responder": 31074, | |
| "Revenge_RAT": 30959, | |
| "Rifdoor": 31192, | |
| "Rising_Sun": 30855, | |
| "RobbinHood": 30643, | |
| "Rocke": 31165, | |
| "RogueRobin": 30692, | |
| "Rootkit": 30701, | |
| "RotaJakiro": 31001, | |
| "Rover": 30904, | |
| "Royal": 31302, | |
| "Rubeus": 30896, | |
| "Ruler": 30816, | |
| "RunningRAT": 31000, | |
| "Ryuk": 31083, | |
| "S-Type": 31031, | |
| "SDBbot": 30879, | |
| "SDelete": 31138, | |
| "SEASHARPEE": 31189, | |
| "SHARPSTATS": 30989, | |
| "SHIPSHAPE": 30970, | |
| "SHOTPUT": 30574, | |
| "SHUTTERSPEED": 30853, | |
| "SILENTTRINITY": 30706, | |
| "SLOTHFULMEDIA": 31145, | |
| "SLOWDRIFT": 30621, | |
| "SMOKEDHAM": 31224, | |
| "SNUGRIDE": 30697, | |
| "SOUNDBITE": 31319, | |
| "SPACESHIP": 31184, | |
| "SQLRat": 30743, | |
| "STARWHALE": 30698, | |
| "SUGARDUMP": 31280, | |
| "SUGARUSH": 31005, | |
| "SUNBURST": 30691, | |
| "SUNSPOT": 30738, | |
| "SUPERNOVA": 30668, | |
| "SVCReady": 30540, | |
| "SYNful_Knock": 31054, | |
| "SYSCON": 31271, | |
| "Saint_Bot": 30870, | |
| "Sakula": 30882, | |
| "SamSam": 31071, | |
| "Sandworm_Team": 30688, | |
| "Sardonic": 30834, | |
| "Scarlet_Mimic": 30588, | |
| "Scattered_Spider": 31274, | |
| "SeaDuke": 30777, | |
| "Seasalt": 31259, | |
| "ServHelper": 31248, | |
| "Seth-Locker": 31209, | |
| "ShadowPad": 30911, | |
| "Shamoon": 31136, | |
| "Shark": 31153, | |
| "SharpDisco": 30535, | |
| "SharpStage": 31140, | |
| "ShiftyBug": 30715, | |
| "ShimRat": 30782, | |
| "ShimRatReporter": 31256, | |
| "Sibot": 30664, | |
| "SideCopy": 30919, | |
| "SideTwist": 30926, | |
| "Sidewinder": 31277, | |
| "Silence": 30681, | |
| "Silent_Librarian": 30589, | |
| "Siloscape": 30658, | |
| "SilverTerrier": 31055, | |
| "Skeleton_Key": 30893, | |
| "Skidmap": 31294, | |
| "Sliver": 31183, | |
| "Small_Sieve": 30676, | |
| "Smoke_Loader": 30809, | |
| "Snip3": 31043, | |
| "Socksbot": 30978, | |
| "SodaMaster": 31039, | |
| "SolarWinds_Compromise": 30910, | |
| "SombRAT": 30995, | |
| "SoreFang": 30532, | |
| "Sowbug": 30597, | |
| "Spark": 31091, | |
| "SpeakUp": 31141, | |
| "SpicyOmelette": 31329, | |
| "Squirrelwaffle": 31064, | |
| "SslMM": 31289, | |
| "Starloader": 30522, | |
| "Stealth_Falcon": 30571, | |
| "StoneDrill": 31006, | |
| "StreamEx": 30887, | |
| "Strider": 30549, | |
| "StrifeWater": 30723, | |
| "StrongPity": 30822, | |
| "Stuxnet": 31171, | |
| "Suckfly": 31062, | |
| "Sykipot": 30745, | |
| "SynAck": 31205, | |
| "Sys10": 31052, | |
| "SysUpdate": 30582, | |
| "Systeminfo": 31292, | |
| "T9000": 30623, | |
| "TA2541": 31051, | |
| "TA459": 31007, | |
| "TA505": 30724, | |
| "TA551": 30917, | |
| "TAINTEDSCRIBE": 31226, | |
| "TDTESS": 30980, | |
| "TEARDROP": 30748, | |
| "TEMP.Veles": 30608, | |
| "TEXTMATE": 31206, | |
| "TINYTYPHON": 30784, | |
| "TSCookie": 31053, | |
| "TURNEDUP": 30823, | |
| "TYPEFRAME": 30903, | |
| "Taidoor": 31093, | |
| "TajMahal": 30754, | |
| "Tarrask": 31080, | |
| "Tasklist": 30671, | |
| "TeamTNT": 31076, | |
| "The_White_Company": 31037, | |
| "ThiefQuest": 30776, | |
| "ThreatNeedle": 30584, | |
| "Threat_Group-1314": 30842, | |
| "Threat_Group-3390": 30526, | |
| "Thrip": 30705, | |
| "TinyTurla": 30630, | |
| "TinyZBot": 30547, | |
| "Tomiris": 31082, | |
| "Tonto_Team": 30734, | |
| "Tor": 31261, | |
| "Torisma": 30683, | |
| "TrailBlazer": 31216, | |
| "Transparent_Tribe": 31150, | |
| "TrickBot": 30968, | |
| "Trojan.Karagany": 30895, | |
| "Trojan.Mebromi": 30602, | |
| "Tropic_Trooper": 30628, | |
| "Truvasys": 31197, | |
| "Turian": 30928, | |
| "Turla": 31030, | |
| "UACMe": 31095, | |
| "UBoatRAT": 30994, | |
| "UPPERCUT": 31225, | |
| "USBStealer": 30856, | |
| "USBferry": 30921, | |
| "Umbreon": 30648, | |
| "Unknown_Logger": 31038, | |
| "Uroburos": 30700, | |
| "Ursnif": 30633, | |
| "VBShower": 30806, | |
| "VERMIN": 30878, | |
| "Valak": 31307, | |
| "VaporRage": 30985, | |
| "Vasport": 30606, | |
| "Volatile_Cedar": 30617, | |
| "Volgmer": 30735, | |
| "Volt_Typhoon": 31326, | |
| "WEBC2": 30987, | |
| "WINDSHIELD": 30686, | |
| "WINERACK": 30542, | |
| "WIRTE": 31327, | |
| "WannaCry": 31112, | |
| "WarzoneRAT": 30840, | |
| "WastedLocker": 30922, | |
| "Waterbear": 30725, | |
| "WellMail": 30546, | |
| "WellMess": 31113, | |
| "Wevtutil": 30999, | |
| "WhisperGate": 30889, | |
| "Whitefly": 30874, | |
| "Wiarp": 30876, | |
| "WinMM": 30679, | |
| "WindTail": 31258, | |
| "Windigo": 31135, | |
| "Windows_Credential_Editor": 31073, | |
| "Windshift": 30709, | |
| "Winexe": 31003, | |
| "Wingbird": 31168, | |
| "Winnti_Group": 30832, | |
| "Winnti_for_Linux": 30654, | |
| "Winnti_for_Windows": 31285, | |
| "Wiper": 30528, | |
| "Wizard_Spider": 30541, | |
| "Woody_RAT": 30797, | |
| "XAgentOSX": 30948, | |
| "XCSSET": 30937, | |
| "XTunnel": 30775, | |
| "Xbash": 31067, | |
| "YAHOYAH": 30663, | |
| "ZIRCONIUM": 30973, | |
| "ZLib": 30730, | |
| "Zebrocy": 30828, | |
| "ZeroT": 30907, | |
| "Zeroaccess": 30615, | |
| "Zeus_Panda": 30886, | |
| "Zox": 30955, | |
| "ZxShell": 31151, | |
| "ZxxZ": 30810, | |
| "adbupd": 31121, | |
| "admin@338": 31048, | |
| "build_downer": 30667, | |
| "ccf32": 31072, | |
| "certutil": 30909, | |
| "cmd": 31278, | |
| "dllname": 30534, | |
| "down_new": 31050, | |
| "dsquery": 30640, | |
| "esentutl": 31084, | |
| "ftp": 30682, | |
| "gh0st_RAT": 31110, | |
| "gsecdump": 31046, | |
| "hcdLoader": 31181, | |
| "httpclient": 30941, | |
| "iKitten": 31068, | |
| "ifconfig": 31079, | |
| "ipconfig": 31137, | |
| "jRAT": 31162, | |
| "kworker:0/1": 30721, | |
| "macOS.OSAMiner": 31152, | |
| "menuPass": 31173, | |
| "metaMain": 30530, | |
| "nbtstat": 31230, | |
| "netsh": 30570, | |
| "netstat": 30996, | |
| "ngrok": 30657, | |
| "njRAT": 30854, | |
| "pngdowner": 30841, | |
| "pwdump": 30670, | |
| "schtasks": 31159, | |
| "spwebmember": 31044, | |
| "sqlmap": 31018, | |
| "xCaon": 31032, | |
| "xCmd": 31229, | |
| "yty": 30689, | |
| "zwShell": 30524 | |
| } | |