Malware Families Catalog
Catalog of 2,899 real-world malware families from EMBER 2018 dataset.
Interactive Notebooks: Threat Intel Colab 1 · Threat Intel Colab 2
Community: Join the discussion on r/cybersecurity
Mirrors: Hugging Face · Kaggle · Zenodo · GitHub
Quick stats
- Total families: 2,903
- Categorized: 2,903
- Categories represented: 33
- Source: EMBER 2018 (Elastic)
- License: Apache-2.0
Executive Threat Dashboard
Targeted Industries
Threat Actor Motivations
Top 10 Categories
Top 10 Families by Sample Count
Top 50 families by sample count
- Xtrat (rat)
- Zbot (banking_trojan)
- Ramnit (worm_banker)
- Sality (file_infector)
- Installmonster (pua)
- Zusy (banking_trojan)
- Emotet (loader)
- Vtflooder (pua_tool)
- Fareit (infostealer)
- Adposhel (adware)
- High (generic_detection)
- Ursnif (banking_trojan)
- Sivis (file_infector)
- Startsurf (browser_hijacker)
- Wapomi (worm_banker)
- Lethic (spam_bot)
- Wannacry (ransomware_worm)
- Dlguide (pua)
- Flystudio (packer)
- Upatre (downloader)
- Dealply (adware)
- Bladabindi (rat)
- Lockbit (ransomware)
- Razy (infostealer)
- Filetour (pua)
- Virlock (ransomware_file_infector)
- Prepscram (trojan_generic)
- Gandcrab (ransomware)
- Vittalia (pua)
- Gamarue (loader)
- Kovter (click_fraud)
- Nanocore (rat)
- Chapak (downloader)
- Installcore (pua)
- Sdbot (rat)
- Autoit (packer)
- Cerber (ransomware)
- Qbot (banking_trojan)
- Tiggre (cryptominer)
- Delf (trojan_generic)
- Qhost (trojan_generic)
- Dotdo (adware)
- Gamehack (pua_tool)
- Gepys (trojan_generic)
- Virut (file_infector)
- Tinba (banking_trojan)
- Azorult (infostealer)
- Vobfus (worm)
- Triusor (trojan_generic)
- Agen (trojan_generic)
Troubleshooting & Protection Guides
Expert, plain-English guides on responding to active threats and securing your business:
North American Compliance & Frameworks
Malware families cataloged in this repository are mapped against the National Institute of Standards and Technology (NIST) Cybersecurity Framework (CSF) and actively referenced in Cybersecurity and Infrastructure Security Agency (CISA) advisories to support US federal guidelines and North American enterprise incident response.
Browse all families
Download
If you suspect malware on your system, do not attempt manual removal. Contact SystemHelpdesk MSP at 888-351-4380 for professional incident response.