HOMETHREATSBreakthrough
MALWARE FAMILY

Breakthrough

Internal ID: win.breakthrough_loader
1
aliases
Last seen:Mar 17, 2026

Intelligence Profile

There is no reference available for this family and all known samples have version 1.0.0.

Pdb-strings in the samples suggest that this is an "exclusive" loader, known as "breakthrough" (maybe), e.g. C:\Users\Exclusiv\Desktop\хп-пробив\Release\build.pdb

The communication url parameters are pretty unique in this combination:

gate.php?hwid=<guid>&os=<OS>&build=1.0.0&cpu=8

<OS> is one of:

Windows95

Windows98

WindowsMe

Windows95family

WindowsNT3

WindowsNT4

Windows2000

WindowsXP

WindowsServer2003

WindowsNTfamily

WindowsVista

Windows7

Windows8

Windows10

Threat Analysis

Breakthrough is a malware family tracked by threat intelligence researchers and catalogued in the Malpedia dataset. It represents a distinct malicious software lineage with identifiable code characteristics, behaviors, and victimology.

Quick Facts

TypeMalware Family
Aliases1

Also Known As

win.breakthrough_loader

Research Links

Data sourced from Malpedia, Ransomware.live, RansomLook, and CTIWATCH OSINT collection. Actor attribution is based on available intelligence and may be incomplete.
Breakthrough — Malware Family | Threat Intelligence | CTIWATCH.COM