| Name / Title | Added | Expires | Hits | Comments | Syntax | |
|---|---|---|---|---|---|---|
| moikopoli[.]com | Feb 2nd, 2019 | Never | 492 | 0 | None | - |
| dvk01uk/status/1089015478180343808 | Jan 26th, 2019 | Never | 627 | 0 | None | - |
| gandCrab v4 C2s | Jul 8th, 2018 | Never | 940 | 0 | None | - |
| validcc[.ws - Sandiflux && Fluxxy | Apr 19th, 2018 | Never | 940 | 0 | None | - |
| Sandiflux-2018-04-18 | Apr 18th, 2018 | Never | 818 | 0 | None | - |
| Kovter_StackPathDNS_Response 2018-03-12 | Mar 12th, 2018 | Never | 534 | 0 | None | - |
| Kovter - CEF instructions - 2018-03-12 | Mar 12th, 2018 | Never | 532 | 0 | None | - |
| 5uu8 | Feb 23rd, 2018 | Never | 600 | 0 | JavaScript | - |
| Kovter - Adfraud Instrucitons - 2018-02-22 | Feb 22nd, 2018 | Never | 550 | 0 | None | - |
| Kovter - Config - 2018-02-22 | Feb 22nd, 2018 | Never | 706 | 0 | None | - |
| Kovter_AdFraudInstruction_2018-02-22 | Feb 22nd, 2018 | Never | 485 | 0 | None | - |
| 2018-02-16 - 8504df0271d69aaa34641acba44e0f5b835f4814 | Feb 16th, 2018 | Never | 557 | 0 | None | - |
| Kovter Update list from stackpath 2018-02-10 | Feb 10th, 2018 | Never | 784 | 0 | None | - |
| Kovter Update command C2 2018-02-10 | Feb 10th, 2018 | Never | 426 | 0 | None | - |
| Kovter Config - 2018-02-10 | Feb 10th, 2018 | Never | 539 | 0 | None | - |
| Kovter - Confige - 2018-02-03 | Feb 3rd, 2018 | Never | 430 | 0 | None | - |
| Kovter - Configd_update - 2018-02-03 | Feb 3rd, 2018 | Never | 487 | 0 | None | - |
| Kovter - Configc - 2018-02-03 | Feb 3rd, 2018 | Never | 543 | 0 | None | - |
| Kovter - Configb - 2018-02-03 | Feb 3rd, 2018 | Never | 465 | 0 | None | - |
| Kovter - Config - 2018-02-03 | Feb 3rd, 2018 | Never | 630 | 0 | None | - |
| Ramnit gav2 | Jan 30th, 2018 | Never | 575 | 0 | None | - |
| KovterAdfraudInstruction_2018-01-21 | Jan 21st, 2018 | Never | 519 | 0 | None | - |
| Kovter_StackPathDNS_Response | Jan 21st, 2018 | Never | 726 | 0 | None | - |
| Kovter Update command C2 Reply 2017-01-21 | Jan 21st, 2018 | Never | 560 | 0 | None | - |
| Kovter_AdFraudInstruction_2018-01-20 | Jan 20th, 2018 | Never | 548 | 0 | None | - |
| kovconf1_2017-12-22 | Dec 22nd, 2017 | Never | 499 | 0 | None | - |
| Kovter_CEF_Command_2017-12-16 | Dec 16th, 2017 | Never | 447 | 0 | None | - |
| kovconf5_2017-12-16 | Dec 16th, 2017 | Never | 553 | 0 | None | - |
| kovconf4_2017-12-16 | Dec 16th, 2017 | Never | 477 | 0 | None | - |
| kovconf3_2017-12-15 | Dec 15th, 2017 | Never | 509 | 0 | None | - |
| kovconf2_2017-12-15 | Dec 15th, 2017 | Never | 635 | 0 | None | - |
| kovconf1_2017-12-15 | Dec 15th, 2017 | Never | 581 | 0 | None | - |
| KovterConfig_519 | Dec 15th, 2017 | Never | 660 | 0 | None | - |
| Nym_swmsoyurof.com | Nov 6th, 2017 | Never | 1,352 | 0 | None | - |
| KovterCoreG | Oct 1st, 2017 | Never | 421 | 0 | None | - |
| FF3_2017-09-12 | Sep 12th, 2017 | Never | 5,098 | 0 | None | - |
| FF2_170831 | Aug 31st, 2017 | Never | 540 | 0 | None | - |
| RIG - 2017-03-12 | Mar 13th, 2017 | Never | 586 | 0 | None | - |
| Undefined Ransomware | Dec 13th, 2016 | Never | 493 | 0 | None | - |
| RIG-v New URI Pattern | Oct 24th, 2016 | Never | 3,424 | 0 | None | - |
| js_neut | Jun 7th, 2016 | Never | 469 | 0 | JavaScript | - |
| Bedep_NonResolvingDomain_18xx_19xx | Apr 28th, 2016 | Never | 473 | 0 | None | - |
| Stairway to Magnitude | Mar 30th, 2016 | Never | 1,023 | 0 | JavaScript | - |
| VirtualDonna | Mar 8th, 2016 | Never | 944 | 0 | None | - |
| AnglerEK Pattern Change | Mar 8th, 2016 | Never | 4,217 | 0 | None | - |
| Partnerka - Menatep - Translate | Dec 19th, 2015 | Never | 685 | 0 | None | - |
| Partnerka /Sploit /Browblock /Syslocker /, Block Android Mo | Dec 19th, 2015 | Never | 780 | 0 | None | - |
| AnglerEK_2015-10-17 | Oct 27th, 2015 | Never | 457 | 0 | JavaScript | - |
| Nuclear Pack URI Pattern | Oct 26th, 2015 | Never | 2,405 | 0 | None | - |
| Shifu_GBR_2015-09-24 | Sep 24th, 2015 | Never | 1,014 | 0 | None | - |
| DecodeReply2 | Aug 10th, 2015 | Never | 1,507 | 0 | None | - |
| Decoded Reply | Aug 10th, 2015 | Never | 643 | 0 | JSON | - |
| Unescaped_Hexa | Aug 10th, 2015 | Never | 607 | 0 | None | - |
| Angler_L_Function | Aug 10th, 2015 | Never | 2,388 | 0 | JavaScript | - |
| AnglerEK_Landing_1stPass_150810 | Aug 10th, 2015 | Never | 2,165 | 0 | JavaScript | - |
| Nuclear Pack - Pattern | Jul 21st, 2015 | Never | 1,453 | 0 | None | - |
| Angler_Landing_2015-07-11 | Jul 11th, 2015 | Never | 801 | 0 | JavaScript | - |
| Kovter_Registry | Jul 2nd, 2015 | Never | 411 | 0 | JavaScript | - |
| Kovter_Config | Jul 2nd, 2015 | Never | 1,664 | 0 | None | - |
| media_ads.js | Jul 2nd, 2015 | Never | 540 | 0 | JavaScript | - |
| Landing_SilverlightCall_2015-07-01 | Jul 1st, 2015 | Never | 1,315 | 0 | JavaScript | - |
| Landing_2015-06-21_Pass2 | Jun 21st, 2015 | Never | 394 | 0 | JavaScript | - |
| Angler_2015-06-21 | Jun 21st, 2015 | Never | 782 | 0 | JavaScript | - |
| Landing_2015-06-14 | Jun 14th, 2015 | Never | 403 | 0 | JavaScript | - |
| Angler_2015-06-10 | Jun 10th, 2015 | Never | 1,091 | 0 | JavaScript | - |
| Some TBag Hashes | Jun 5th, 2015 | Never | 667 | 0 | None | - |
| DbP_gcd | May 18th, 2015 | Never | 659 | 0 | JavaScript | - |
| REK - Router EK | May 18th, 2015 | Never | 7,899 | 0 | JavaScript | - |
| Angler_Landing_2015-05-16 | May 16th, 2015 | Never | 1,360 | 0 | JavaScript | - |
| Niteris_Check_AfterVBSDeobfuscation_Jsbeautified | May 12th, 2015 | Never | 1,616 | 0 | JavaScript | - |
| Niteris_Check_AfterJsDeobfuscation | May 12th, 2015 | Never | 1,248 | 0 | VisualBasic | - |
| Niteris_Checks | May 12th, 2015 | Never | 1,130 | 0 | HTML | - |
| Niteris_CVE-2014-6332_after_JS_decoding | May 12th, 2015 | Never | 1,049 | 0 | VisualBasic | - |
| Niteris_CVE-2014-6332_after_JS_VBS_decoding | May 12th, 2015 | Never | 898 | 0 | VisualBasic | - |
| Niteris_CVE-2014-6332 | May 12th, 2015 | Never | 596 | 0 | HTML | - |
| Niteris_XPI | May 7th, 2015 | Never | 371 | 0 | HTML | - |
| Section_Inject | May 6th, 2015 | Never | 433 | 0 | JavaScript | - |
| AnglerEK_IE11_32bits_Landing_CVE-2014-4130 | Feb 28th, 2015 | Never | 797 | 0 | JavaScript | - |
| NuclearPack_2015-02-13_b | Feb 13th, 2015 | Never | 766 | 0 | JavaScript | - |
| NuclearPack_FirstPass_2015-02-13 | Feb 13th, 2015 | Never | 836 | 0 | JavaScript | - |
| NuclearPack_2015-02-13 | Feb 13th, 2015 | Never | 703 | 0 | JavaScript | - |
| Angler_IECVE_2015-02-09 | Feb 9th, 2015 | Never | 493 | 0 | JavaScript | - |