| Threat Alias | Number of Incidents |
| Troj/Drop-DE [Sophos] | 8 |
| Trojan.Win32.Agent.cnhi [Kaspersky Lab] | 7 |
| Trojan.Win32.Refroso [Ikarus] | 5 |
| Win-Trojan/Bifrose.59261 [AhnLab] | 5 |
| Backdoor.Win32.Gaertob [Ikarus] | 4 |
| Backdoor.Trojan [Symantec] | 3 |
| TrojanSpy:Win32/Agent.FGI [Microsoft] | 3 |
| Win-Trojan/Poison.622592.B [AhnLab] | 2 |
| Backdoor.Trojan [PC Tools] | 1 |
| Backdoor-DWV [McAfee] | 1 |
| Dropper/Droco.20992 [AhnLab] | 1 |
| Infostealer.Banker.C [Symantec] | 1 |
| Mal/Generic-A [Sophos] | 1 |
| Troj/BRMCrypt-A [Sophos] | 1 |
| Trojan.Win32.Ransom [Ikarus] | 1 |
| Trojan-Dropper.Win32.Droco.a [Kaspersky Lab] | 1 |
| Trojan-Spy.Win32.Zbot.wsu [Kaspersky Lab] | 1 |
| VirTool:Win32/CeeInject.A [Microsoft] | 1 |
| Win32/IRCBot.worm.variant [AhnLab] | 1 |
| Win-Trojan/Poison.61821 [AhnLab] | 1 |
