| | | ResolverRAT | [] | win.resolver_rat | [] | 2025-04-15 | | | |
| | | PortStarter | [] | win.portstarter | [] | 2024-10-15 | | | |
| | | RN Stealer | [] | py.rn_stealer | ['TraderTraitor'] | 2025-04-15 | | | |
| | | AIRASHI | [] | elf.airashi | [] | 2025-04-10 | | | |
| | | BPFDoor | ['JustForFun'] | elf.bpfdoor | ['Red Menshen'] | 2025-04-14 | | | |
| | | WhiteSnake Stealer | [] | win.whitesnake | [] | 2025-04-14 | | | |
| | | Unidentified 119 | [] | win.unidentified_119 | [] | 2025-04-14 | | | |
| | | neshta | [] | win.neshta | [] | 2025-04-14 | | | |
| | | JSOutProx | [] | win.jsoutprox | ['SOLAR SPIDER'] | 2024-04-08 | | | |
| | | GolangGhost | [] | osx.golangghost | [] | 2025-04-09 | | | |
| | | FrostyFerret | [] | osx.frostyferret | ['WageMole'] | 2025-04-09 | | | |
| | | Octowave Loader | [] | win.octowave | [] | 2025-04-01 | | | |
| | | Sheriff | [] | win.sheriff | [] | 2025-04-10 | | | |
| | | ReedBed | [] | win.reedbed | ['MALLARD SPIDER', 'UNC4393'] | 2025-03-28 | | | |
| | | SPAWNSNARE | [] | elf.spawnsnare | [] | 2025-04-11 | | | |
| | | RAILSETTER | [] | win.railsetter | [] | 2025-04-11 | | | |
| | | Stealc | [] | win.stealc | [] | 2025-04-11 | | | |
| | | Godzilla Webshell | [] | jsp.godzilla_webshell | [] | 2025-04-11 | | | |
| | | Cobalt Strike | ['Agentemis', 'BEACON', 'CobaltStrike', 'cobeacon'] | win.cobalt_strike | ['APT 29', 'APT32', 'APT41', 'AQUATIC PANDA', 'Anunak', 'Cobalt', 'Codoso', 'CopyKittens', 'DarkHydrus', 'Earth Baxia', 'FIN6', 'FIN7', 'Leviathan', 'Mustang Panda', 'Shell Crew', 'Stone Panda', 'TianWu', 'UNC1878', 'UNC2452', 'Winnti Umbrella'] | 2025-04-11 | | | |
| | | Broomstick | ['CLEANBOOST', 'CleanUp', 'CleanUpLoader', 'Oyster'] | win.broomstick | [] | 2025-04-11 | | | |
| | | MintsLoader | [] | js.mints_loader | [] | 2025-04-11 | | | |
| | | FAKEUPDATES | ['FakeUpdate', 'SocGholish'] | js.fakeupdates | ['GOLD PRELUDE'] | 2025-04-11 | | | |
| | | Rhysida | [] | elf.rhysida | [] | 2025-04-11 | | | |
| | | Remcos | ['RemcosRAT', 'Remvio', 'Socmer'] | win.remcos | ['APT33', 'The Gorgon Group', 'UAC-0050'] | 2025-04-11 | | | |
| | | Rhysida | [] | win.rhysida | [] | 2025-04-11 | | | |
| | | WarmCookie | ['Badspace', 'Carrotstick', 'QUICKBIND'] | win.warmcookie | [] | 2025-04-11 | | | |
| | | HyperSSL | ['SysUpdate'] | elf.hyperssl | ['APT27'] | 2023-03-13 | | | |
| | | GolangGhost | ['BitStep RAT'] | win.golangghost | [] | 2025-04-10 | | | |
| | | Latrodectus | ['BLACKWIDOW', 'IceNova', 'Latrodectus', 'Lotus'] | win.latrodectus | [] | 2025-02-10 | | | |
| | | Kematian Stealer | [] | win.kematian | [] | 2025-04-11 | | | |
| | | Rhadamanthys | [] | win.rhadamanthys | ['Sandworm'] | 2025-04-11 | | | |
| | | SilentPrism | [] | ps1.silent_prism | ['Larva-208'] | 2025-04-11 | | | |
| | | DarkWisp | [] | ps1.dark_wisp | ['Larva-208'] | 2025-04-11 | | | |
| | | INCONTROLLER | [] | win.incontroller | [] | 2025-04-10 | | | |
| | | HijackLoader | ['DOILoader', 'GHOSTPULSE', 'IDAT Loader', 'SHADOWLADDER'] | win.hijackloader | [] | 2025-04-10 | | | |
| | | Crocodilus | [] | apk.crocodilus | [] | 2025-04-10 | | | |
| | | TsarBot | [] | apk.tsarbot | [] | 2025-04-10 | | | |
| | | Salvador Stealer | [] | apk.salvador | [] | 2025-04-10 | | | |
| | | BeaverTail | [] | js.beavertail | ['WageMole'] | 2025-04-10 | | | |
| | | Aisuru | [] | elf.aisuru | [] | 2025-04-10 | | | |
| | | kitty-socks5 | [] | elf.kitty_soks5 | [] | 2025-04-10 | | | |
| | | Deputy | [] | win.deputy | [] | 2025-04-10 | | | |
| | | Black Basta | [] | elf.blackbasta | [] | 2025-04-10 | | | |
| | | Black Basta | ['no_name_software'] | win.blackbasta | ['GOLD REBELLION', 'STAC5143', 'Storm-0506', 'Storm-0826', 'TA2101', 'UNC3973', 'UNC4393'] | 2025-04-10 | | | |
| | | InvisibleFerret | [] | py.invisibleferret | ['WageMole'] | 2025-04-09 | | | |
| | | VIP Keylogger | [] | win.vipkeylogger | [] | 2025-04-09 | | | |
| | | CurlBack RAT | [] | win.curlback | ['SideCopy'] | 2025-04-09 | | | |
| | | badbazaar | [] | apk.badbazaar | ['APT15'] | 2025-04-09 | | | |
| | | XenoRAT | [] | win.xenorat | [] | 2025-04-09 | | | |
| | | ShadowPad | ['POISONPLUG.SHADOW', 'XShellGhost'] | win.shadowpad | ['APT23', 'APT41', 'APT17', 'DAGGER PANDA', 'Earth Lusca', 'Tonto Team', 'WET PANDA'] | 2025-04-09 | | | |
| | | ValleyRAT | ['Winos'] | win.valley_rat | [] | 2025-04-09 | | | |
| | | Rugmi | ['Penguish'] | win.rugmi | [] | 2025-04-09 | | | |
| | | RansomHub | [] | win.ransomhub | ['RansomHub'] | 2025-04-09 | | | |
| | | SmokeLoader | ['Dofoil', 'Sharik', 'Smoke', 'Smoke Loader'] | win.smokeloader | ['SMOKY SPIDER', 'UAC-0006'] | 2025-04-09 | | | |
| | | Grenam | ['Renamer', 'gnamer'] | win.grenam | [] | 2025-04-07 | | | |
| | | SystemBC | ['Coroxy', 'DroxiDat'] | win.systembc | [] | 2025-03-05 | | | |
| | | Nitrogen Loader | [] | win.nitrogen | [] | 2025-02-13 | | | |
| | | Auto-Color | [] | elf.auto_color | [] | 2025-04-01 | | | |
| | | DOPLUGS | [] | win.doplugs | ['MUSTANG PANDA'] | 2025-03-21 | | | |
| | | NetSupportManager RAT | ['NetSupport'] | win.netsupportmanager_rat | [] | 2025-04-01 | | | |
| | | sLoad | ['Starslord'] | ps1.sload | [] | 2025-04-01 | | | |
| | | AsyncRAT | [] | win.asyncrat | [] | 2025-04-01 | | | |
| | | Lynx | [] | win.lynx | [] | 2025-04-01 | | | |
| | | GootLoader | ['SLOWPOUR'] | js.gootloader | [] | 2025-04-01 | | | |
| | | CHINACHOPPER | [] | win.chinachopper | ['APT41', 'EMISSARY PANDA', 'GALLIUM', 'HAFNIUM', 'Hurricane Panda', 'Leviathan'] | 2025-03-28 | | | |
| | | reGeorg | [] | win.regeorg | [] | 2025-03-28 | | | |
| | | Roshtyak | [] | win.roshtyak | [] | 2025-03-27 | | | |
| | | Raspberry Robin | ['RaspberryRobin', 'QNAP-Worm', 'LINK_MSIEXEC'] | win.raspberry_robin | [] | 2025-03-27 | | | |
| | | CoffeeLoader | [] | win.coffee_loader | [] | 2025-03-27 | | | |
| | | RALord | [] | win.ralord | [] | 2025-03-27 | | | |
| | | Adylkuzz | [] | win.adylkuzz | [] | 2025-03-27 | | | |
| | | Anubis Backdoor | [] | py.anubisbackdoor | ['FIN7'] | 2025-03-26 | | | |
| | | GhostSocks | [] | win.ghostsocks | [] | 2025-03-26 | | | |
| | | FROZENHILL | [] | win.frozenhill | [] | 2025-03-28 | | | |
| | | Koi Loader | [] | win.koiloader | [] | 2024-12-09 | | | |
| | | Koi Stealer | [] | win.koistealer | [] | 2024-12-09 | | | |
| | | Ballista | [] | elf.ballista | [] | 2025-03-26 | | | |
| | | OtterCookie | [] | js.otter_cookie | ['WageMole'] | 2025-02-17 | | | |
| | | Emmenhtal | ['IDATDropper', 'PEAKLIGHT'] | win.emmenhtal | [] | 2025-03-25 | | | |
| | | Agent Tesla | ['AgenTesla', 'AgentTesla', 'Negasteal'] | win.agent_tesla | ['SWEED'] | 2025-03-25 | | | |
| | | Lumma Stealer | ['LummaC2 Stealer'] | win.lumma | [] | 2025-03-25 | | | |
| | | Vidar | [] | win.vidar | [] | 2025-03-25 | | | |
| | | Spyder | [] | win.spyder | [] | 2025-03-21 | | | |
| | | SodaMaster | ['dfls', 'HEAVYPOT', 'DelfsCake'] | win.sodamaster | ['Stone Panda'] | 2025-03-21 | | | |
| | | RedTiger Stealer | ['RedTiger Ste4ler', 'redtiger', 'redtiger-tools'] | py.redtiger | [] | 2025-03-21 | | | |
| | | Ymir | [] | win.ymir | [] | 2025-03-21 | | | |
| | | Quasar RAT | ['CinaRAT', 'QuasarRAT', 'Yggdrasil'] | win.quasar_rat | ['APT33', 'Dropping Elephant', 'Stone Panda', 'The Gorgon Group'] | 2025-03-21 | | | |
| | | r77 | ['r77 Rootkit'] | win.r77 | [] | 2025-03-21 | | | |
| | | Pykspa | [] | win.pykspa | [] | 2025-03-21 | | | |
| | | TeamTNT | [] | elf.teamtnt | [] | 2025-03-21 | | | |
| | | Mirai | ['Katana'] | elf.mirai | [] | 2025-03-21 | | | |
| | | PhantomCore | [] | win.phantomcore | [] | 2025-03-21 | | | |
| | | PlugX | ['Destroy RAT', 'Kaba', 'Korplug', 'Sogu', 'TIGERPLUG', 'RedDelta'] | win.plugx | ['APT 22', 'APT 26', 'APT31', 'APT41', 'Aurora Panda', 'Calypso group', 'DragonOK', 'EMISSARY PANDA', 'Hellsing', 'Hurricane Panda', 'Leviathan', 'Mirage', 'Mustang Panda', 'NetTraveler', 'Nightshade Panda', 'SLIME29', 'Samurai Panda', 'Stone Panda', 'UPS', 'Violin Panda'] | 2025-03-21 | | | |
| | | JuicyPotato | [] | win.juicy_potato | [] | 2025-03-21 | | | |
| | | Meterpreter | [] | win.meterpreter | [] | 2025-03-21 | | | |
| | | MimiKatz | [] | win.mimikatz | ['APT32', 'Anunak', 'GALLIUM'] | 2025-03-21 | | | |
| | | LaZagne | [] | py.lazagne | [] | 2025-03-21 | | | |
| | | Lethic | [] | win.lethic | [] | 2025-03-21 | | | |
| | | AMOS | ['Atomic macOS Stealer'] | osx.amos | [] | 2025-03-21 | | | |
| | | BlackMatter | [] | win.blackmatter | [] | 2025-03-21 | | | |