ThreatTrove

Cryxos

8 cached samples attributed to Cryxos by 2 sources, through 5 distinct vendor labels.

8cached samples
2sources naming it
5distinct labels
2also in another family

Samples

Newest cache entry first. Every row links to the full report, where each source's own answer is shown unsummarised. The labels behind these rows are listed below the table.

SampleVerdictNamed byAlso taggedCached
2d792a60273e0b756e5efe2ef9275df360eb55faa365fdb2dffeb4a6ba431846 Malicious hybridanalysisvirustotal Formbook 6d ago
236ae97e52af5482c7ce492efaee3543cc5cbd6f2fa352bc158e7a311d91bf9c Malicious virustotal – 6d ago
09ee215bacc4a53718e2b55262c4a696e538be8c Malicious virustotal Formbook 6d ago
ac62521b652b6c36c17934dc2705679dc39a7deb Malicious virustotal – 6d ago
b25d6f267a7f69d4c252d47b9c15f94f4bc13a95 Malicious virustotal – 6d ago
c2b9339fc1c23823d40619947e8bbc362fd4da1ab25cbef11c1b34ff9d683931 Malicious virustotal – 6d ago
ca386b95da01f7282f322eb46022598758fb3152 Malicious virustotal – 6d ago
ebc7a02863d6c6d2966dbbfb59ac2e05a5de5f4f809fcd26db4e6eacbc5d5752 Malicious hybridanalysisvirustotal – 6d ago
1–8 of 8 page 1 / 1

Why these samples are here

Each source returns its own string for a family. This is every label behind the 8 samples above, the source that returned it, and how many samples carried it. Counts overlap: one sample can be named twice, so they do not add up to the sample total.

Label as returnedSource that returned itSamples carrying it
Trojan.Cryxos.JS hybridanalysis 2 samples
trojan.cryxos/suspic virustotal 2 samples
3 more labels carry an engine suffix or a second family name

The same evidence in less readable strings: an engine's own suffix, a variant token, or a label that names two families. They are still this family's evidence and they are counted in the 5 labels above; a token the alias table does not know is never guessed at, so it stays exactly as the source sent it.

Label as returnedSource that returned itSamples carrying it
trojan.cryxos/affk virustotal 2 samples
trojan.cryxos/cwnw virustotal 2 samples
trojan.cryxos/topis virustotal 2 samples

Named alongside

Counted per sample: a sample tagged with both families adds one here. This is co-occurrence in vendor labels, not a claim that the two families are related.

Formbook2

Derived from cached source answers, newest cache entry 2026-11-02 15:30. A sample leaves this page when the cache entry it was read from is replaced; a generic or unrecognised label never put it here.