| | | Sliver | [] | win.sliver | [] | 2025-06-24 | | | |
| | | RedLine Stealer | ['RECORDSTEALER'] | win.redline_stealer | [] | 2025-06-24 | | | |
| | | Ghost RAT | ['Farfli', 'Gh0st RAT', 'PCRat'] | win.ghost_rat | ['EMISSARY PANDA', 'Hurricane Panda', 'Lazarus Group', 'Leviathan', 'Red Menshen', 'Stone Panda'] | 2025-06-24 | | | |
| | | Fog | [] | win.fog | [] | 2025-06-24 | | | |
| | | Quasar RAT | ['CinaRAT', 'QuasarRAT', 'Yggdrasil'] | win.quasar_rat | ['APT33', 'Dropping Elephant', 'Stone Panda', 'The Gorgon Group'] | 2025-06-24 | | | |
| | | Lumma Stealer | ['LummaC2 Stealer'] | win.lumma | ['Angry Likho'] | 2025-06-24 | | | |
| | | Meduza Stealer | [] | win.meduza | [] | 2025-06-24 | | | |
| | | Brute Ratel C4 | ['BOLDBADGER', 'BruteRatel'] | win.brute_ratel_c4 | [] | 2025-06-24 | | | |
| | | Cobalt Strike | ['Agentemis', 'BEACON', 'CobaltStrike', 'cobeacon'] | win.cobalt_strike | ['APT 29', 'APT29', 'APT32', 'APT41', 'AQUATIC PANDA', 'Anunak', 'Cobalt', 'Codoso', 'CopyKittens', 'DarkHydrus', 'Earth Baxia', 'FIN6', 'FIN7', 'Leviathan', 'Mustang Panda', 'Shell Crew', 'Stone Panda', 'TianWu', 'UNC1878', 'UNC2452', 'Winnti Umbrella'] | 2025-06-24 | | | |
| | | AsyncRAT | [] | win.asyncrat | [] | 2025-06-24 | | | |
| | | LaZagne | [] | py.lazagne | [] | 2025-06-24 | | | |
| | | ShortLeash | [] | elf.shortleash | [] | 2025-06-24 | | | |
| | | Meterpreter | [] | win.meterpreter | [] | 2025-06-24 | | | |
| | | MimiKatz | [] | win.mimikatz | ['APT32', 'Anunak', 'GALLIUM'] | 2025-06-24 | | | |
| | | ShortLeash | [] | win.shortleash | [] | 2025-06-24 | | | |
| | | JuicyPotato | [] | win.juicy_potato | [] | 2025-06-24 | | | |
| | | PylangGhost | [] | py.pylangghost | ['WageMole'] | 2025-06-24 | | | |
| | | Flodrix | [] | elf.flodrix | [] | 2025-06-23 | | | |
| | | Sorillus RAT | [] | jar.sorillus | [] | 2025-06-23 | | | |
| | | Amatera | [] | win.amatera | [] | 2025-06-23 | | | |
| | | XDSpy | [] | win.xdspy | [] | 2025-06-23 | | | |
| | | Supper | ['SocksShell', 'ZAPCAT'] | win.supper | ['Vanilla Tempest'] | 2025-06-23 | | | |
| | | HOLERUN | ['LAGTOY'] | win.holerun | [] | 2025-06-20 | | | |
| | | DollyWay | [] | php.dollyway | [] | 2025-06-20 | | | |
| | | KimJongRat | [] | win.kimjongrat | [] | 2025-06-20 | | | |
| | | HijackLoader | ['DOILoader', 'GHOSTPULSE', 'IDAT Loader', 'SHADOWLADDER'] | win.hijackloader | [] | 2025-06-20 | | | |
| | | SectopRAT | ['1xxbot', 'ArechClient'] | win.sectop_rat | [] | 2025-06-20 | | | |
| | | HyperSSL | ['FOCUSFJORD', 'Soldier', 'Sysupdate'] | win.hyperssl | ['EMISSARY PANDA'] | 2025-06-20 | | | |
| | | HyperSSL | ['SysUpdate'] | elf.hyperssl | ['APT27'] | 2025-06-20 | | | |
| | | Pteranodon | ['Pterodo'] | win.pteranodon | ['Gamaredon Group', 'Operation Armageddon'] | 2025-06-20 | | | |
| | | QuietSieve | [] | win.quietsieve | ['Gamaredon Group'] | 2025-06-20 | | | |
| | | PlugX | ['Destroy RAT', 'Kaba', 'Korplug', 'Sogu', 'TIGERPLUG', 'RedDelta'] | win.plugx | ['APT 22', 'APT 26', 'APT31', 'APT41', 'Aurora Panda', 'Calypso group', 'DragonOK', 'EMISSARY PANDA', 'Hellsing', 'Hurricane Panda', 'Leviathan', 'Mirage', 'Mustang Panda', 'NetTraveler', 'Nightshade Panda', 'SLIME29', 'Samurai Panda', 'Stone Panda', 'UPS', 'Violin Panda'] | 2025-06-20 | | | |
| | | HUI Loader | ['SIDESTEP'] | win.hui_loader | [] | 2025-06-20 | | | |
| | | RokRAT | ['DOGCALL'] | win.rokrat | ['APT37'] | 2025-06-20 | | | |
| | | Nokki | [] | win.nokki | ['APT37'] | 2025-06-20 | | | |
| | | MyDoom | ['Novarg', 'Mimail'] | win.mydoom | [] | 2025-06-20 | | | |
| | | CosmicDuke | [] | win.cosmicduke | ['APT29'] | 2025-06-20 | | | |
| | | Hydra | [] | apk.hydra | [] | 2025-06-20 | | | |
| | | IPStorm | ['InterPlanetary Storm'] | apk.ipstorm | [] | 2025-06-20 | | | |
| | | AndroRAT | [] | apk.androrat | [] | 2025-06-20 | | | |
| | | FakeGram | ['FakeTGram'] | apk.faketgram | [] | 2025-06-20 | | | |
| | | Anubis | ['BankBot', 'android.bankbot', 'android.bankspy'] | apk.anubis | [] | 2025-06-20 | | | |
| | | Dendroid | [] | apk.dendroid | [] | 2025-06-20 | | | |
| | | SpyNote | ['CypherRat'] | apk.spynote | ['OilRig'] | 2025-06-20 | | | |
| | | CraxsRAT | [] | apk.craxs_rat | [] | 2025-06-20 | | | |
| | | Antidot | [] | apk.antidot | [] | 2025-06-20 | | | |
| | | ZeroAccess | ['Max++', 'Sirefef', 'Smiscer', 'ZAccess'] | win.zeroaccess | [] | 2025-06-20 | | | |
| | | GolangGhost | ['BitStep RAT', 'WeaselStore'] | win.golangghost | ['WageMole'] | 2025-06-20 | | | |
| | | GolangGhost | [] | osx.golangghost | ['WageMole'] | 2025-06-20 | | | |
| | | BumbleBee | ['COLDTRAIN', 'SHELLSTING', 'Shindig'] | win.bumblebee | ['EXOTIC LILY', 'GOLD CABIN', 'TA578', 'TA579'] | 2025-06-18 | | | |
| | | Pikabot | [] | win.pikabot | [] | 2025-06-18 | | | |
| | | SmokeLoader | ['Dofoil', 'Sharik', 'Smoke', 'Smoke Loader'] | win.smokeloader | ['SMOKY SPIDER', 'UAC-0006'] | 2025-06-18 | | | |
| | | TrickBot | ['Trickster', 'TheTrick', 'TrickLoader'] | win.trickbot | ['TA505', 'UNC1878', 'WIZARD SPIDER'] | 2025-06-18 | | | |
| | | Emotet | ['Geodo', 'Heodo'] | win.emotet | ['GOLD CABIN', 'MUMMY SPIDER', 'Mealybug'] | 2025-06-18 | | | |
| | | Chaos | ['FakeRyuk', 'RyukJoke', 'Yashma'] | win.chaos | [] | 2025-06-18 | | | |
| | | Nitrogen Loader | [] | win.nitrogen | [] | 2025-05-21 | | | |
| | | Flesh Stealer | [] | win.flesh_stealer | [] | 2025-06-18 | | | |
| | | SalatStealer | [] | win.salatstealer | [] | 2025-06-17 | | | |
| | | NetSupportManager RAT | ['NetSupport'] | win.netsupportmanager_rat | [] | 2025-06-17 | | | |
| | | POWERTRASH | [] | ps1.powertrash | ['FIN7'] | 2025-06-17 | | | |
| | | EugenLoader | ['FakeBat', 'NUMOZYLOD', 'PaykLoader'] | ps1.eugenloader | ['APOTHECARY SPIDER', 'Storm-1113'] | 2025-06-17 | | | |
| | | Voldemort | [] | win.voldemort | [] | 2024-10-23 | | | |
| | | Hawking | [] | win.hawking | ['OilRig'] | 2025-06-16 | | | |
| | | Veaty | ['Whisper'] | win.veaty | [] | 2025-06-16 | | | |
| | | Spereal | [] | win.spearal | [] | 2025-06-16 | | | |
| | | RDAT | ['GREYSTUFF'] | win.rdat | ['OilRig'] | 2025-06-16 | | | |
| | | EagerBee | ['Thumtais'] | win.eagerbee | [] | 2025-06-16 | | | |
| | | Latrodectus | ['BLACKWIDOW', 'IceNova', 'Latrodectus', 'Lotus'] | win.latrodectus | [] | 2025-06-02 | | | |
| | | INCONTROLLER | ['PIPEDREAM'] | win.incontroller | [] | 2025-06-13 | | | |
| | | Horus | [] | win.horus | ['Stealth Falcon'] | 2025-06-13 | | | |
| | | GOREshell | [] | elf.goreshell | [] | 2025-06-13 | | | |
| | | Vshell | [] | win.vshell | [] | 2025-06-13 | | | |
| | | ShadowPad | ['POISONPLUG.SHADOW', 'XShellGhost'] | win.shadowpad | ['APT23', 'APT41', 'APT17', 'DAGGER PANDA', 'Earth Lusca', 'Tonto Team', 'WET PANDA'] | 2025-06-13 | | | |
| | | Nimbo-C2 | [] | elf.nimbo_c2 | [] | 2025-06-13 | | | |
| | | FrostyFerret | [] | osx.frostyferret | ['WageMole'] | 2025-04-27 | | | |
| | | FaceStealer | [] | apk.facestealer | [] | 2025-06-13 | | | |
| | | Joker | ['Bread'] | apk.joker | [] | 2025-06-13 | | | |
| | | OtterCookie | [] | js.otter_cookie | ['WageMole'] | 2025-06-04 | | | |
| | | Crocodilus | [] | apk.crocodilus | [] | 2025-06-11 | | | |
| | | TrickMo | [] | apk.trickmo | [] | 2025-06-11 | | | |
| | | PureLogs Stealer | [] | win.purelogs | [] | 2025-06-11 | | | |
| | | DanaBot | ['DanaTools'] | win.danabot | ['SCULLY SPIDER'] | 2025-06-11 | | | |
| | | BabyShark | ['LATEOP'] | win.babyshark | ['Kimsuky'] | 2025-06-11 | | | |
| | | FlowerPower | ['BoBoStealer'] | ps1.flowerpower | ['Kimsuky'] | 2025-06-11 | | | |
| | | Appleseed | ['JamBog'] | win.appleseed | ['Kimsuky'] | 2025-06-11 | | | |
| | | elf.iocontrol | ['OrpraCab', 'QueueCat'] | elf.iocontrol | ['Cyber Av3ngers'] | 2025-06-11 | | | |
| | | XWorm | [] | win.xworm | [] | 2025-06-11 | | | |
| | | BADBOX | [] | apk.badbox | [] | 2025-06-06 | | | |
| | | BDarkRAT | [] | win.bdark_rat | ['HAZY TIGER'] | 2025-06-05 | | | |
| | | ZxxZ | ['MuuyDownloader'] | win.zxxz | ['HAZY TIGER'] | 2025-06-05 | | | |
| | | MiyaRAT | [] | win.miya_rat | ['HAZY TIGER'] | 2025-06-05 | | | |
| | | ORPCBackdoor | [] | win.orpcbackdoor | [] | 2025-06-05 | | | |
| | | WmRAT | [] | win.wm_rat | ['HAZY TIGER'] | 2025-06-05 | | | |
| | | Havoc | ['Havokiz'] | win.havoc | [] | 2025-06-05 | | | |
| | | KiwiStealer | [] | win.kiwistealer | ['HAZY TIGER'] | 2025-06-05 | | | |
| | | KugelBlitz | [] | win.kugelblitz | ['HAZY TIGER'] | 2025-06-05 | | | |
| | | Artra Downloader | [] | win.artra | [] | 2025-06-05 | | | |
| | | AlmondRAT | [] | win.almond_rat | ['HAZY TIGER'] | 2025-06-05 | | | |
| | | AlmondRAT | [] | win.almondrat | ['HAZY TIGER'] | 2025-06-05 | | | |
| | | PathWiper | [] | win.pathwiper | [] | 2025-06-05 | | | |