Malware Families Catalog
Catalog of 2,899 real-world malware families from EMBER 2018 dataset.
Interactive Notebooks: Threat Intel Colab 1 · Threat Intel Colab 2
Community & Open Science: Join the discussion on r/cybersecurity · Academic Research Portal
Mirrors: Hugging Face · Kaggle · Zenodo · GitHub
Quick stats
- Total families: 2,982
- Categorized: 2,982
- Categories represented: 49
- Source: EMBER 2018 (Elastic)
- License: Apache-2.0
Executive Threat Dashboard
Targeted Industries
Threat Actor Motivations
Top 10 Categories
Top 10 Families by Sample Count
🚨 High-Priority Threat Intelligence Watchlist (2026 Deep Dossiers)
ACTIVE CRAWLER PRIORITYPrioritized intelligence dossiers featuring full forensic IoCs, zero-day vulnerability analysis, MITRE ATT&CK matrices, and cryptographically verified YARA detection signatures:
Mercenary Spyware & Zero-Day Espionage
Enterprise Ransomware Syndicates (RaaS)
Commodity Infostealers & Vault Harvesters
Access Loaders, Botnets & Post-Exploitation
Historic Cyberweapons & Replicating Worms
Mirrored publicly on GitLab Pages Threat Mirror · Bitbucket Cloud Threat Repository
Top 50 families by sample count
- Xtrat (rat)
- Zbot (banking_trojan)
- Ramnit (worm_banker)
- Sality (file_infector)
- Installmonster (pua)
- Zusy (banking_trojan)
- Emotet (loader)
- Vtflooder (pua_tool)
- Fareit (infostealer)
- Adposhel (adware)
- Stop (ransomware)
- High (generic_detection)
- Ursnif (banking_trojan)
- Sivis (file_infector)
- Startsurf (browser_hijacker)
- Wapomi (worm_banker)
- Lethic (spam_bot)
- Wannacry (ransomware_worm)
- Dlguide (pua)
- Flystudio (packer)
- Upatre (downloader)
- Dealply (adware)
- Bladabindi (rat)
- Cobaltstrike (hacktool)
- Razy (infostealer)
- Filetour (pua)
- Virlock (ransomware_file_infector)
- Prepscram (pua)
- Gandcrab (ransomware)
- Vittalia (pua)
- Gamarue (loader)
- Kovter (trojan)
- Nanocore (rat)
- Chapak (downloader)
- Installcore (pua)
- Sdbot (rat)
- Autoit (packer)
- Cerber (ransomware)
- Qbot (banking_trojan)
- Tiggre (cryptominer)
- Delf (trojan)
- Qhost (trojan)
- Dotdo (adware)
- Gamehack (pua_tool)
- Gepys (downloader)
- Virut (file_infector)
- Tinba (banking_trojan)
- Azorult (infostealer)
- Cerberus (trojan)
- Erazer (trojan)
Troubleshooting & Protection Guides
Expert, plain-English guides on responding to active threats and securing your business:
Antivirus Customer Support & Helpline Resources
Official phone assistance, billing dispute resolution, and subscription management for enterprise security suites:
North American Compliance & Frameworks
Malware families cataloged in this repository are mapped against the National Institute of Standards and Technology (NIST) Cybersecurity Framework (CSF) and actively referenced in Cybersecurity and Infrastructure Security Agency (CISA) advisories to support US federal guidelines and North American enterprise incident response.
Browse all families
Data Feeds & Threat Intelligence Downloads
- Parquet Dataset | JSONL Dataset
- JSON API Index (2,966 families) | MITRE ATT&CK Matrix Index
- OASIS STIX 2.1 Threat Intel Bundle (12,175 objects)
- MISP Threat Sharing Community Feed | AlienVault OTX Pulse Feed
- Academic Research Portal & Citations | Zenodo Open Science DOI
- OpenAPI 3.1.0 Specification | Python SDK on PyPI
- Academic Technical Whitepaper (SHD-TR-2026-08-MF)
- Cryptographic Manifest (SHA-256 Checksums)