Skip to content

Hide Navigation Hide TOC

MISP Galaxy Statistics

Cluster statistics

Number of clusters

Here you can find the total number of clusters including public and private clusters.The number of public clusters has been calculated based on the number of unique Clusters in the MISP galaxy JSON files. The number of private clusters could only be approximated based on the number of relations to non-existing clusters. Therefore the number of private clusters is not accurate and only an approximation.

No. Type Count
1 Public clusters 36137
2 Private clusters 486

Galaxy statistics

Galaxies with the most clusters

No. Galaxy Count
1 UKHSA Culture Collections 6667
2 Firearms 5953
3 Tidal References 3872
4 Malpedia 3039
5 Sigma-Rules 2876
6 NAICS 2125
7 Ransomware 1706
8 Attack Pattern 1141
9 Tidal Software 931
10 Malware 705
11 Threat Actor 671
12 Tool 603
13 Intelligence Agencies 436
14 Android 433
15 Ammunitions 410
16 Techniques 376
17 Course of Action 281
18 SoD Matrix 276
19 RAT 266
20 Country 252

Galaxies with the least clusters

No. Galaxy Count
1 online-service 1
2 Levels 3
3 Cryptominers 5
4 Cert EU GovSector 6
5 Assets 7
6 Tea Matrix 7
7 Tactics 9
8 Groups 10
9 TDS 11
10 Branded Vulnerability 14
11 Tidal Tactic 14
12 Producer 15
13 Stealer 16
14 Software 17
15 MITRE ATLAS Course of Action 19
16 Dark Patterns 19
17 Preventive Measure 20
18 FIRST DNS Abuse Techniques Matrix 21
19 Election guidelines 23
20 Backdoor 28

Relation statistics

Here you can find the total number of relations including public and private relations. The number includes relations between public clusters and relations between public and private clusters. Therefore relatons between private clusters are not included in the statistics.

Number of relations

No. Type Count
1 Public relations 367578
2 Private relations 91907

Average number of relations per cluster: 12

Cluster with the most relations

No. Cluster Count
1 Lazarus - APT-C-26 915
2 ScarCruft - APT-C-28 915
3 Diamond Sleet 915
4 Sapphire Sleet 915
5 Lazarus group 915
6 Lazarus Group - G0032 915
7 APT38 - G0082 915
8 APT37 - G0067 915
9 Lazarus Group 915
10 APT37 915
11 Operation Sharpshooter 915
12 UNC2452 - G0118 848
13 GoldFinder 848
14 Sibot 848
15 SUNBURST 847
16 NOBELIUM 847
17 Midnight Blizzard 847
18 APT29 - G0016 847
19 Notion 847
20 APT29 847

Cluster with the least relations

No. Cluster Count
1 CIA - APT-C-39 0
2 黄金鼠 - APT-C-27 0
3 黄金雕 - APT-C-34 0
4 盲眼鹰 - APT-C-36 0
5 毒针 - APT-C-31 0
6 ArmaRat - APT-C-33 0
7 军刀狮 - APT-C-38 0
8 拍拍熊 - APT-C-37 0
9 人面狮 - APT-C-15 0
10 美人鱼 - APT-C-07 0
11 双尾蝎 - APT-C-23 0
12 蓝宝菇 - APT-C-12 0
13 毒云藤 - APT-C-01 0
14 肚脑虫 - APT-C-35 0
15 蔓灵花 - APT-C-08 0
16 潜行者 - APT-C-30 0
17 Turla - APT-C-29 0
18 飞鲨 - APT-C-17 0
19 方程式 - APT-C-40 0
20 腾云蛇 - APT-C-61 0

Synonym statistics

Cluster with the most synonyms

No. Cluster Count
1 Lazarus Group 39
2 Turla 25
3 APT28 24
4 APT29 17
5 ENERGETIC BEAR 17
6 APT41 17
7 APT29 - G0016 16
8 DarkHotel 16
9 APT32 16
10 JCrypt 15
11 APT15 15
12 APT37 15
13 APT19 14
14 APT27 14
15 Sandworm 14
16 APT40 14
17 APT10 13
18 OilRig 13
19 Gamaredon Group 13
20 APT28 - G0007 12