{ "2015_Ukraine_Electric_Power_Attack": 29674, "2016_Ukraine_Electric_Power_Attack": 29704, "3PARA_RAT": 29494, "4H_RAT": 29129, "": 29783, "": 29789, "": 29785, "": 29787, "": 29782, "": 29788, "": 29784, "": 29786, "AADInternals": 29653, "ABK": 29119, "ADVSTORESHELL": 29702, "ANDROMEDA": 29719, "APT-C-36": 29161, "APT1": 29364, "APT12": 29063, "APT16": 29353, "APT17": 29772, "APT18": 29423, "APT19": 29135, "APT28": 29515, "APT29": 29733, "APT3": 29608, "APT30": 29575, "APT32": 29267, "APT33": 29476, "APT37": 29207, "APT38": 29770, "APT39": 29276, "APT41": 29741, "ASPXSpy": 29374, "Action_RAT": 29234, "AdFind": 29502, "Agent.btz": 29329, "Agent_Tesla": 29523, "Ajax_Security_Team": 29404, "Amadey": 29649, "Anchor": 29691, "Andariel": 29777, "Aoqin_Dragon": 29657, "AppleJeus": 29499, "AppleScript": 29451, "AppleSeed": 29589, "Aquatic_Panda": 29482, "Aria-body": 28999, "Arp": 29403, "Astaroth": 29121, "AsyncRAT": 29467, "Attor": 29313, "AuTo_Stealer": 29411, "AuditCred": 29431, "AutoIt_backdoor": 29194, "Avaddon": 29692, "Avenger": 29169, "AvosLocker": 29475, "Axiom": 29504, "Azorult": 29269, "BACKSPACE": 29259, "BADCALL": 29279, "BADFLICK": 29066, "BADHATCH": 29097, "BADNEWS": 29346, "BBK": 29755, "BBSRAT": 29323, "BISCUIT": 29153, "BITSAdmin": 29707, "BITTER": 29468, "BLACKCOFFEE": 29665, "BLINDINGCAN": 29377, "BLUELIGHT": 29714, "BONDUPDATER": 29301, "BOOSTWRITE": 29192, "BOOTRASH": 29011, "BRONZE_BUTLER": 29753, "BS2005": 29360, "BUBBLEWRAP": 29486, "Babuk": 29534, "BabyShark": 29664, "BackConfig": 29410, "Backdoor.Oldrea": 29638, "BackdoorDiplomacy": 29764, "BadPatch": 29022, "Bad_Rabbit": 29616, "Bandook": 29526, "Bankshot": 29706, "Bazar": 29598, "BendyBear": 29405, "Bisonal": 29221, "BitPaymer": 29082, "BlackCat": 29577, "BlackEnergy": 29747, "BlackMould": 29697, "BlackOasis": 29726, "BlackTech": 29732, "Black_Basta": 29463, "BloodHound": 29426, "Blue_Mockingbird": 29406, "Bonadan": 29067, "BoomBox": 29385, "BoxCaon": 29671, "Brave_Prince": 29185, "Briba": 29283, "Brute_Ratel_C4": 29551, "Bumblebee": 29237, "Bundlore": 29386, "C0010": 29089, "C0011": 29613, "C0015": 29645, "C0017": 29436, "C0018": 29083, "C0021": 29239, "C0026": 29012, "C0027": 29084, "CALENDAR": 29666, "CARROTBALL": 29013, "CARROTBAT": 29381, "CCBkdr": 29422, "CHOPSTICK": 29435, "CORALDECK": 29130, "CORESHELL": 29250, "CSPY_Downloader": 29367, "CURIUM": 29629, "Cachedump": 29614, "CaddyWiper": 29334, "Cadelspy": 29417, "Calisto": 29215, "CallMe": 29557, "Carbanak": 29270, "Carberp": 29572, "Cardinal_RAT": 29178, "Catchamas": 29187, "Caterpillar_WebShell": 29309, "ChChes": 29033, "Chaes": 29320, "CharmPower": 29280, "Cherry_Picker": 29442, "Chimera": 29620, "China_Chopper": 29272, "Chinoxy": 29680, "Chrommme": 29407, "Clambling": 29058, "Cleaver": 29095, "Clop": 29487, "CloudDuke": 29264, "Cobalt_Group": 29450, "Cobalt_Strike": 29432, "Cobian_RAT": 29587, "CoinTicker": 29060, "ComRAT": 29703, "Comnie": 29096, "Conficker": 29212, "Confucius": 29074, "ConnectWise": 29485, "Conti": 29051, "CookieMiner": 29388, "CopyKittens": 29414, "CosmicDuke": 29601, "CostaBricks": 29474, "CostaRicto": 29054, "CozyCar": 29049, "CrackMapExec": 29116, "CreepyDrive": 29197, "CreepySnail": 29290, "CrossRAT": 29663, "Crutch": 29041, "Cryptoistic": 29339, "Cyclops_Blink": 29369, "DCSrv": 29332, "DDKONG": 29627, "DEADEYE": 29558, "DEATHRANSOM": 29483, "DOGCALL": 29701, "DRATzarus": 29745, "Dacls": 29053, "DanBot": 29266, "DarkComet": 29763, "DarkHydrus": 29248, "DarkTortilla": 29559, "DarkVishnya": 29746, "DarkWatchman": 29623, "Dark_Caracal": 29286, "Darkhotel": 29581, "Daserf": 29292, "DealersChoice": 29173, "Deep_Panda": 29216, "Derusbi": 29018, "Diavol": 29609, "Dipsind": 29214, "DnsSystem": 29176, "Dok": 29555, "Doki": 29579, "Donut": 29628, "DownPaper": 29218, "Downdelph": 29081, "Dragonfly": 29632, "Dridex": 29359, "DropBook": 29010, "Drovorub": 29740, "Dtrack": 29350, "Duqu": 29071, "DustySky": 29183, "Dyre": 29564, "ECCENTRICBANDWAGON": 29069, "EKANS": 29635, "ELMER": 29480, "EVILNUM": 29059, "EXOTIC_LILY": 29103, "Earth_Lusca": 29335, "Ebury": 29284, "Ecipekac": 29254, "Egregor": 29373, "Elderwood": 29400, "Ember_Bear": 29246, "Emissary": 29712, "Emotet": 29513, "EnvyScout": 29205, "Equation": 29441, "EvilBunny": 29779, "EvilGrab": 29760, "Evilnum": 29300, "Exaramel_for_Linux": 29098, "Exaramel_for_Windows": 29439, "Expand": 29443, "Explosive": 29206, "FALLCHILL": 29647, "FELIXROOT": 29076, "FIN10": 29471, "FIN13": 29694, "FIN4": 29105, "FIN5": 29299, "FIN6": 29654, "FIN7": 29769, "FIN8": 29273, "FIVEHANDS": 29758, "FLASHFLOOD": 29307, "FLIPSIDE": 29017, "FYAnti": 29607, "FakeM": 29231, "FatDuke": 29184, "Felismus": 29399, "Ferocious": 29693, "Ferocious_Kitten": 29256, "Fgdump": 29384, "FinFisher": 29765, "Final1stspy": 29711, "Flagpro": 29498, "FlawedAmmyy": 29725, "FlawedGrace": 29655, "FoggyWeb": 29457, "Forfiles": 29584, "Fox_Kitten": 29209, "FrameworkPOS": 29310, "FruitFly": 29179, "FunnyDream": 29100, "Fysbis": 29599, "GALLIUM": 29445, "GCMAN": 29413, "GLOOXMAIL": 29538, "GOLD_SOUTHFIELD": 29211, "GRIFFON": 29425, "Gallmaker": 29170, "Gamaredon_Group": 29619, "Gazer": 29617, "Gelsemium": 29437, "GeminiDuke": 29774, "Get2": 29026, "GoldFinder": 29356, "GoldMax": 29421, "Gold_Dragon": 29749, "GoldenSpy": 29102, "Goopy": 29245, "Gorgon_Group": 29258, "Grandoreiro": 29030, "GravityRAT": 29029, "Green_Lambert": 29689, "GreyEnergy": 29660, "GrimAgent": 29162, "Group5": 29585, "GuLoader": 29224, "H1N1": 29434, "HAFNIUM": 29676, "HALFBAKED": 29204, "HAMMERTOSS": 29571, "HARDRAIN": 29257, "HAWKBALL": 29456, "HDoor": 29228, "HELLOKITTY": 29160, "HEXANE": 29223, "HIDEDRV": 29296, "HOMEFRY": 29375, "HOPLIGHT": 29648, "HTRAN": 29238, "HTTPBrowser": 29196, "Hacking_Team_UEFI_Rootkit": 29586, "Hancitor": 29278, "Havij": 29244, "Helminth": 29126, "HermeticWiper": 29580, "HermeticWizard": 29573, "Heyoka_Backdoor": 29394, "Hi-Zor": 29762, "HiddenWasp": 29038, "Higaisa": 29469, "Hikit": 29556, "Hildegard": 29397, "HotCroissant": 29311, "Hydraq": 29566, "HyperBro": 29229, "HyperStack": 29766, "ISMInjector": 29075, "IceApple": 29569, "IcedID": 29347, "Imminent_Monitor": 29717, "Impacket": 29031, "Inception": 29622, "IndigoZebra": 29554, "Indrik_Spider": 29131, "Industroyer": 29042, "Industroyer2": 29202, "InnaputRAT": 29514, "InvisiMole": 29327, "Invoke-PSImage": 29050, "IronNetInjector": 29037, "Ixeshe": 29142, "JCry": 29493, "JHUHUGIT": 29337, "JPIN": 29602, "JSS_Loader": 29001, "Janicab": 29491, "Javali": 29282, "KARAE": 29090, "KEYMARBLE": 29252, "KEYPLUG": 29390, "KGH_SPY": 29570, "KOCTOPUS": 29325, "KOMPROGO": 29478, "KONNI": 29420, "KOPILUWAK": 29392, "Kasidet": 29107, "Kazuar": 29261, "Ke3chang": 29345, "KernelCallbackTable": 29652, "Kerrdown": 29544, "Kessel": 29108, "KeyBoy": 29588, "Keydnap": 29064, "KillDisk": 29473, "Kimsuky": 29408, "Kinsing": 29226, "Kivars": 29159, "Koadic": 29603, "Kobalos": 29698, "Komplex": 29379, "Kwampirs": 29005, "LAPSUS$": 29376, "LOWBALL": 29757, "LaZagne": 29087, "Launch_Agent": 29722, "Launch_Daemon": 29111, "Lazarus_Group": 29650, "LazyScripter": 29117, "Leafminer": 29715, "Leviathan": 29225, "LightNeuron": 29395, "Linfo": 29308, "Linux_Rabbit": 29690, "LiteDuke": 29328, "LitePower": 29260, "Lizar": 29527, "LoJax": 29670, "LockerGoga": 29065, "Lokibot": 29661, "LookBack": 29143, "LoudMiner": 29122, "Lslsass": 29484, "LuminousMoth": 29114, "Lurid": 29085, "MCMD": 29750, "MESSAGETAP": 29003, "MURKYTOP": 29743, "MacMa": 29720, "MacSpy": 29542, "Machete": 29696, "Mafalda": 29232, "Magic_Hound": 29028, "MailSniper": 29078, "MarkiRAT": 28997, "Matryoshka": 29123, "Maze": 29295, "MechaFlounder": 29007, "MegaCortex": 29761, "Melcoz": 29220, "Metador": 29562, "Metamorfo": 29695, "Meteor": 29193, "Micropsia": 29685, "MimiPenguin": 29771, "Mimikatz": 29165, "Miner-C": 29354, "MiniDuke": 29342, "MirageFox": 29631, "Mis-Type": 29452, "Misdat": 29546, "Mivast": 29277, "Moafee": 29045, "MobileOrder": 29416, "Mofang": 29718, "MoleNet": 29516, "Molerats": 29024, "Mongall": 29321, "MoonWind": 29093, "More_eggs": 29291, "Mori": 29396, "Moses_Staff": 29447, "Mosquito": 29120, "MoustachedBouncer": 29532, "MuddyWater": 29035, "Mustang_Panda": 29723, "Mythic": 29517, "NBTscan": 29056, "NDiskMonitor": 29025, "NETEAGLE": 29412, "NETWIRE": 29156, "NOKKI": 29773, "Naid": 29268, "Naikon": 29177, "NanHaiShu": 29639, "NanoCore": 29072, "NativeZone": 29138, "NavRAT": 29738, "Nebulae": 29731, "Neoichor": 29255, "Nerex": 29352, "NetTraveler": 29781, "Net_Crawler": 29611, "Netwalker": 29251, "Nidiran": 29233, "NightClub": 29150, "Night_Dragon": 29032, "Nltest": 29610, "Nomadic_Octopus": 29048, "NotPetya": 29181, "OLDBAIT": 29553, "OSInfo": 29263, "OSX/Shlayer": 29217, "OSX_OCEANLOTUS.D": 29401, "ObliqueRAT": 29481, "OceanSalt": 29040, "Octopus": 29027, "OilRig": 29667, "Okrum": 29289, "Olympic_Destroyer": 29141, "OnionDuke": 29520, "OopsIE": 29429, "Operation_CuckooBees": 29201, "Operation_Dream_Job": 29080, "Operation_Dust_Storm": 29594, "Operation_Ghost": 29506, "Operation_Honeybee": 29687, "Operation_Sharpshooter": 29253, "Operation_Spalax": 29222, "Operation_Wocao": 29361, "Orangeworm": 29578, "Orz": 29535, "Out1": 29547, "OutSteel": 29492, "OwaAuth": 29265, "P.A.S._Webshell": 29391, "P2P_ZeuS": 29306, "P8RAT": 29427, "PHOREAL": 29322, "PID": 29461, "PLAINTEE": 29294, "PLATINUM": 29302, "PLEAD": 29574, "POLONIUM": 29363, "POORAIM": 29522, "POSHSPY": 29326, "POWERSOURCE": 29312, "POWERSTATS": 29034, "POWERTON": 29168, "POWRUNER": 29780, "PROMETHIUM": 29362, "PS1": 29324, "PUNCHBUGGY": 29393, "PUNCHTRACK": 29070, "Pacu": 29315, "Pasam": 29751, "Pass-The-Hash_Toolkit": 29549, "Patchwork": 29641, "Pay2Key": 29699, "PcShare": 29729, "Peirates": 29314, "Penquin": 29684, "Peppy": 29115, "Pillowmint": 29091, "PinchDuke": 29036, "PingPull": 29545, "PipeMon": 29230, "Pisloader": 29285, "PittyTiger": 29449, "PlugX": 29518, "PoetRAT": 29668, "PoisonIvy": 29597, "PolyglotDuke": 29330, "Poseidon_Group": 29331, "PoshC2": 29686, "PowGoop": 29134, "PowerDuke": 29643, "PowerLess": 29675, "PowerPunch": 29151, "PowerShell": 29243, "PowerShower": 29713, "PowerSploit": 29716, "PowerStallion": 29174, "Power_Loader": 29681, "Prestige": 29191, "Prikormka": 29688, "ProLock": 29705, "Proton": 29366, "Proxysvc": 29583, "PsExec": 29125, "Psylo": 29235, "Pteranodon": 29106, "Pupy": 29736, "Putter_Panda": 29039, "PyDCrypt": 29630, "Pysa": 29673, "QUADAGENT": 29748, "QUIETCANARY": 29182, "QUIETEXIT": 29737, "QakBot": 29561, "QuasarRAT": 29734, "QuietSieve": 29656, "RARSTONE": 29343, "RATANKBA": 29052, "RCSession": 29633, "RDAT": 29109, "RDFSNIFFER": 29019, "REvil": 29625, "RGDoor": 29470, "RIPTIDE": 29582, "ROADTools": 29046, "ROCKBOOT": 29479, "ROKRAT": 29752, "RTM": 29563, "Ragnar_Locker": 29236, "Raindrop": 29145, "RainyDay": 29767, "Rancor": 29543, "RawDisk": 29198, "RawPOS": 29112, "Rclone": 29560, "Reaver": 29672, "RedLeaves": 29424, "RegDuke": 29146, "Regin": 29640, "Remcos": 29227, "Remexi": 29754, "RemoteCMD": 29418, "RemoteUtilities": 29472, "Remsec": 29759, "Responder": 29531, "Revenge_RAT": 29419, "Rifdoor": 29646, "Rising_Sun": 29318, "RobbinHood": 29113, "Rocke": 29618, "RogueRobin": 29158, "Rootkit": 29167, "RotaJakiro": 29460, "Rubeus": 29358, "Ruler": 29281, "RunningRAT": 29459, "Ryuk": 29540, "S-Type": 29489, "SDBbot": 29341, "SDelete": 29593, "SEASHARPEE": 29642, "SHARPSTATS": 29448, "SHIPSHAPE": 29430, "SHOTPUT": 29047, "SHUTTERSPEED": 29316, "SILENTTRINITY": 29172, "SLOTHFULMEDIA": 29600, "SLOWDRIFT": 29092, "SMOKEDHAM": 29677, "SNUGRIDE": 29163, "SOUNDBITE": 29768, "SPACESHIP": 29637, "SQLRat": 29208, "STARWHALE": 29164, "SUGARDUMP": 29730, "SUGARUSH": 29464, "SUNBURST": 29157, "SUNSPOT": 29203, "SUPERNOVA": 29137, "SVCReady": 29014, "SYNful_Knock": 29511, "SYSCON": 29721, "Saint_Bot": 29333, "Sakula": 29344, "SamSam": 29528, "Sandworm_Team": 29154, "Sardonic": 29298, "Scarlet_Mimic": 29061, "Scattered_Spider": 29724, "SeaDuke": 29242, "Seasalt": 29710, "ServHelper": 29700, "Seth-Locker": 29662, "ShadowPad": 29372, "Shamoon": 29591, "SharpDisco": 29009, "SharpStage": 29595, "ShiftyBug": 29180, "ShimRat": 29247, "ShimRatReporter": 29708, "Sibot": 29133, "SideCopy": 29380, "SideTwist": 29387, "Sidewinder": 29727, "Silent_Librarian": 29062, "Siloscape": 29128, "SilverTerrier": 29512, "Skeleton_Key": 29355, "Skidmap": 29744, "Sliver": 29636, "Small_Sieve": 29144, "Smoke_Loader": 29274, "Snip3": 29500, "Socksbot": 29438, "SodaMaster": 29497, "SolarWinds_Compromise": 29371, "SombRAT": 29454, "SoreFang": 29006, "Sowbug": 29068, "Spark": 29548, "SpeakUp": 29596, "SpicyOmelette": 29778, "Squirrelwaffle": 29521, "SslMM": 29739, "Starloader": 28996, "Stealth_Falcon": 29044, "StoneDrill": 29465, "StreamEx": 29349, "Strider": 29023, "StrifeWater": 29188, "StrongPity": 29287, "Stuxnet": 29624, "Suckfly": 29519, "Sykipot": 29210, "SynAck": 29658, "Sys10": 29509, "SysUpdate": 29055, "Systeminfo": 29742, "T9000": 29094, "TA2541": 29508, "TA459": 29466, "TA505": 29189, "TA551": 29378, "TAINTEDSCRIBE": 29679, "TDTESS": 29440, "TEARDROP": 29213, "TEMP.Veles": 29079, "TEXTMATE": 29659, "TINYTYPHON": 29249, "TSCookie": 29510, "TURNEDUP": 29288, "TYPEFRAME": 29365, "Taidoor": 29550, "TajMahal": 29219, "Tarrask": 29537, "Tasklist": 29140, "TeamTNT": 29533, "The_White_Company": 29495, "ThiefQuest": 29241, "ThreatNeedle": 29057, "Threat_Group-1314": 29305, "Threat_Group-3390": 29000, "Thrip": 29171, "TinyTurla": 29101, "TinyZBot": 29021, "Tomiris": 29539, "Tonto_Team": 29199, "Torisma": 29149, "TrailBlazer": 29669, "Transparent_Tribe": 29604, "TrickBot": 29428, "Trojan.Karagany": 29357, "Trojan.Mebromi": 29073, "Tropic_Trooper": 29099, "Truvasys": 29651, "Turian": 29389, "Turla": 29488, "UACMe": 29552, "UBoatRAT": 29453, "UPPERCUT": 29678, "USBStealer": 29319, "USBferry": 29382, "Umbreon": 29118, "Unknown_Logger": 29496, "Uroburos": 29166, "Ursnif": 29104, "VBShower": 29271, "VERMIN": 29340, "Valak": 29756, "VaporRage": 29444, "Vasport": 29077, "Volatile_Cedar": 29088, "Volgmer": 29200, "Volt_Typhoon": 29775, "WEBC2": 29446, "WINDSHIELD": 29152, "WINERACK": 29016, "WIRTE": 29776, "WannaCry": 29567, "WarzoneRAT": 29303, "WastedLocker": 29383, "Waterbear": 29190, "WellMail": 29020, "WellMess": 29568, "Wevtutil": 29458, "WhisperGate": 29351, "Whitefly": 29336, "Wiarp": 29338, "WinMM": 29147, "WindTail": 29709, "Windigo": 29590, "Windows_Credential_Editor": 29530, "Windshift": 29175, "Winexe": 29462, "Wingbird": 29621, "Winnti_Group": 29297, "Winnti_for_Linux": 29124, "Winnti_for_Windows": 29735, "Wiper": 29002, "Wizard_Spider": 29015, "Woody_RAT": 29262, "XAgentOSX": 29409, "XCSSET": 29398, "XTunnel": 29240, "Xbash": 29524, "YAHOYAH": 29132, "ZIRCONIUM": 29433, "ZLib": 29195, "Zebrocy": 29293, "ZeroT": 29368, "Zeroaccess": 29086, "Zeus_Panda": 29348, "Zox": 29415, "ZxShell": 29605, "ZxxZ": 29275, "adbupd": 29576, "admin@338": 29505, "build_downer": 29136, "ccf32": 29529, "certutil": 29370, "cmd": 29728, "dllname": 29008, "down_new": 29507, "dsquery": 29110, "esentutl": 29541, "ftp": 29148, "gh0st_RAT": 29565, "gsecdump": 29503, "hcdLoader": 29634, "httpclient": 29402, "iKitten": 29525, "ifconfig": 29536, "ipconfig": 29592, "jRAT": 29615, "kworker:0/1": 29186, "macOS.OSAMiner": 29606, "meek": 29644, "menuPass": 29626, "metaMain": 29004, "nbtstat": 29683, "netsh": 29043, "netstat": 29455, "ngrok": 29127, "njRAT": 29317, "pngdowner": 29304, "pwdump": 29139, "schtasks": 29612, "spwebmember": 29501, "sqlmap": 29477, "xCaon": 29490, "xCmd": 29682, "yty": 29155, "zwShell": 28998 }