| | | Lumma Stealer | ['LummaC2 Stealer'] | win.lumma | [] | 2025-01-20 | | | |
| | | PLAY | ['PlayCrypt'] | win.play | [] | 2025-01-20 | | | |
| | | RedLine Stealer | ['RECORDSTEALER'] | win.redline_stealer | [] | 2025-01-20 | | | |
| | | HijackLoader | ['DOILoader', 'GHOSTPULSE', 'IDAT Loader', 'SHADOWLADDER'] | win.hijackloader | [] | 2025-01-20 | | | |
| | | Carbanak | ['Anunak', 'Sekur RAT'] | win.carbanak | ['FIN7'] | 2025-01-20 | | | |
| | | Industroyer | ['Crash', 'CrashOverride'] | win.industroyer | ['ELECTRUM'] | 2024-05-23 | | | |
| | | Mirai | ['Katana'] | elf.mirai | [] | 2025-01-14 | | | |
| | | HATVIBE | [] | vbs.hatvibe | ['UAC-0063'] | 2025-01-17 | | | |
| | | AIRASHI | [] | elf.airashi | [] | 2025-01-16 | | | |
| | | kitty-soks5 | [] | elf.kitty_soks5 | [] | 2025-01-16 | | | |
| | | Splinter | [] | win.splinter | [] | 2025-01-15 | | | |
| | | POORTRY | [] | win.poortry | [] | 2025-01-15 | | | |
| | | Ladon | [] | win.ladon | [] | 2025-01-15 | | | |
| | | Yasso | [] | win.yasso | [] | 2025-01-15 | | | |
| | | scanbox | [] | js.scanbox | ['Leviathan'] | 2025-01-15 | | | |
| | | Sync-Scheduler | [] | win.sync_scheduler | [] | 2025-01-15 | | | |
| | | ValleyRAT | ['Winos'] | win.valley_rat | [] | 2025-01-15 | | | |
| | | MISTPEN | [] | win.mistpen | ['UNC2970'] | 2025-01-15 | | | |
| | | SNAPPYBEE | ['Deed RAT'] | win.snappybee | ['Earth Estries'] | 2025-01-15 | | | |
| | | PlugX | ['Destroy RAT', 'Kaba', 'Korplug', 'Sogu', 'TIGERPLUG', 'RedDelta'] | win.plugx | ['APT 22', 'APT 26', 'APT31', 'APT41', 'Aurora Panda', 'Calypso group', 'DragonOK', 'EMISSARY PANDA', 'Hellsing', 'Hurricane Panda', 'Leviathan', 'Mirage', 'Mustang Panda', 'NetTraveler', 'Nightshade Panda', 'SLIME29', 'Samurai Panda', 'Stone Panda', 'UPS', 'Violin Panda'] | 2025-01-15 | | | |
| | | Rubeus | [] | win.rubeus | [] | 2025-01-15 | | | |
| | | Royal Ransom | [] | win.royal_ransom | [] | 2025-01-15 | | | |
| | | Royal Ransom | [] | ps1.royal_ransom | [] | 2025-01-15 | | | |
| | | BlackSuit | [] | elf.blacksuit | [] | 2025-01-15 | | | |
| | | BlackSuit | [] | win.blacksuit | [] | 2025-01-15 | | | |
| | | Royal Ransom | ['Royal_unix', 'Royal'] | elf.royal_ransom | [] | 2025-01-15 | | | |
| | | ComeBacker | [] | win.comebacker | ['Lazarus Group'] | 2025-01-14 | | | |
| | | SimpleTea | [] | osx.simpletea | ['Lazarus Group'] | 2025-01-14 | | | |
| | | SimpleTea | ['PondRAT', 'SimplexTea'] | elf.simpletea | ['Lazarus Group'] | 2025-01-14 | | | |
| | | BumbleBee | ['BUMBLEBEE_LOADER', 'COLDTRAIN', 'SHELLSTING', 'Shindig'] | win.bumblebee | ['EXOTIC LILY', 'GOLD CABIN', 'TA578', 'TA579'] | 2025-01-14 | | | |
| | | More_eggs | ['SpicyOmelette', 'SKID'] | js.more_eggs | ['Cobalt', 'FIN6', 'VENOM SPIDER'] | 2025-01-14 | | | |
| | | SUGARLOADER | [] | osx.sugarloader | ['Lazarus Group'] | 2025-01-14 | | | |
| | | KANDYKORN | [] | osx.kandykorn | ['Lazarus Group'] | 2025-01-14 | | | |
| | | HLOADER | [] | osx.hloader | ['Lazarus Group'] | 2025-01-14 | | | |
| | | FunkSec | [] | win.funksec | [] | 2025-01-14 | | | |
| | | RustBucket | [] | osx.rustbucket | ['Lazarus Group'] | 2025-01-14 | | | |
| | | ToxicPanda | [] | apk.toxic_panda | [] | 2025-01-14 | | | |
| | | Hook | [] | apk.hook | [] | 2025-01-14 | | | |
| | | FluBot | ['Cabassous', 'FakeChat'] | apk.flubot | [] | 2025-01-14 | | | |
| | | Coper | ['ExobotCompact', 'Octo'] | apk.coper | [] | 2025-01-14 | | | |
| | | FAKEUPDATES | ['FakeUpdate', 'SocGholish'] | js.fakeupdates | ['GOLD PRELUDE'] | 2025-01-14 | | | |
| | | AsyncRAT | [] | win.asyncrat | [] | 2025-01-14 | | | |
| | | Cobalt Strike | ['Agentemis', 'BEACON', 'CobaltStrike', 'cobeacon'] | win.cobalt_strike | ['APT 29', 'APT32', 'APT41', 'AQUATIC PANDA', 'Anunak', 'Cobalt', 'Codoso', 'CopyKittens', 'DarkHydrus', 'Earth Baxia', 'FIN6', 'FIN7', 'Leviathan', 'Mustang Panda', 'Shell Crew', 'Stone Panda', 'TianWu', 'UNC1878', 'UNC2452', 'Winnti Umbrella'] | 2025-01-14 | | | |
| | | BianLian | [] | win.bianlian | [] | 2025-01-14 | | | |
| | | Brute Ratel C4 | ['BOLDBADGER', 'BruteRatel'] | win.brute_ratel_c4 | [] | 2025-01-14 | | | |
| | | DanaBot | [] | win.danabot | ['SCULLY SPIDER'] | 2025-01-14 | | | |
| | | DCRat | ['DarkCrystal RAT'] | win.dcrat | [] | 2025-01-14 | | | |
| | | Rhadamanthys | [] | win.rhadamanthys | ['Sandworm'] | 2025-01-14 | | | |
| | | Sliver | [] | win.sliver | [] | 2025-01-14 | | | |
| | | NjRAT | ['Bladabindi', 'Lime-Worm'] | win.njrat | ['AQUATIC PANDA', 'Earth Lusca', 'Operation C-Major', 'The Gorgon Group'] | 2025-01-14 | | | |
| | | Havoc | ['Havokiz'] | win.havoc | [] | 2025-01-14 | | | |
| | | Latrodectus | ['BLACKWIDOW', 'IceNova', 'Latrodectus', 'Lotus'] | win.latrodectus | [] | 2025-01-14 | | | |
| | | Quasar RAT | ['CinaRAT', 'QuasarRAT', 'Yggdrasil'] | win.quasar_rat | ['APT33', 'Dropping Elephant', 'Stone Panda', 'The Gorgon Group'] | 2025-01-14 | | | |
| | | Remcos | ['RemcosRAT', 'Remvio', 'Socmer'] | win.remcos | ['APT33', 'The Gorgon Group', 'UAC-0050'] | 2025-01-14 | | | |
| | | Stealc | [] | win.stealc | [] | 2025-01-14 | | | |
| | | NonEuclid RAT | [] | win.noneuclid_rat | [] | 2025-01-09 | | | |
| | | BADBOX | [] | apk.badbox | [] | 2025-01-07 | | | |
| | | SpyMax | [] | apk.spymax | [] | 2025-01-07 | | | |
| | | SpyNote | ['CypherRat'] | apk.spynote | ['OilRig'] | 2025-01-07 | | | |
| | | CraxsRAT | [] | apk.craxs_rat | [] | 2025-01-07 | | | |
| | | ArdaMax | [] | win.ardamax | [] | 2025-01-07 | | | |
| | | CryptBot | [] | win.cryptbot | [] | 2025-01-07 | | | |
| | | PrivateLoader | [] | win.privateloader | [] | 2025-01-07 | | | |
| | | Broomstick | ['CLEANBOOST', 'CleanUp', 'CleanUpLoader', 'Oyster'] | win.broomstick | [] | 2025-01-07 | | | |
| | | SwaetRAT | [] | win.swaet_rat | [] | 2025-01-07 | | | |
| | | EagerBee | [] | win.eagerbee | [] | 2025-01-07 | | | |
| | | Satacom | ['CurlyGate', 'LegionLoader', 'RobotDropper'] | win.satacom | [] | 2025-01-07 | | | |
| | | Emmenhtal | ['IDATDropper', 'PEAKLIGHT'] | win.emmenhtal | [] | 2025-01-02 | | | |
| | | OtterCookie | [] | js.otter_cookie | ['WageMole'] | 2025-01-02 | | | |
| | | SADBRIDGE | [] | win.sadbridge | [] | 2025-01-02 | | | |
| | | Gosar | [] | win.gosar | [] | 2025-01-02 | | | |
| | | RiseLoader | [] | win.riseloader | [] | 2025-01-02 | | | |
| | | BeaverTail | [] | js.beavertail | [] | 2025-01-02 | | | |
| | | InvisibleFerret | [] | py.invisibleferret | [] | 2025-01-02 | | | |
| | | Raccoon | ['Mohazo', 'RaccoonStealer', 'Racealer', 'Racoon'] | win.raccoon | [] | 2024-12-20 | | | |
| | | RecordBreaker | [] | win.recordbreaker | [] | 2024-12-20 | | | |
| | | Mailto | ['Koko Ransomware', 'NetWalker'] | win.mailto | [] | 2022-04-07 | | | |
| | | magecart | [] | js.magecart | ['FIN6', 'MageCart'] | 2024-12-20 | | | |
| | | Glutton | [] | php.glutton | [] | 2024-12-20 | | | |
| | | PWNLNX | [] | elf.pwnlnx | [] | 2024-12-20 | | | |
| | | Ngioweb | [] | elf.ngioweb | ['Water Barghest'] | 2024-12-20 | | | |
| | | SSHDoor | [] | elf.sshdoor | [] | 2024-12-20 | | | |
| | | Winnti | ['BleDoor', 'JUMPALL', 'RbDoor', 'Pasteboy'] | win.winnti | ['APT17'] | 2024-12-20 | | | |
| | | Kimsuky | [] | win.kimsuky | ['Kimsuki', 'Kimsuky'] | 2024-12-20 | | | |
| | | EVILNUM | [] | win.evilnum | [] | 2024-12-20 | | | |
| | | MiyaRAT | [] | win.miya_rat | ['HAZY TIGER'] | 2024-12-20 | | | |
| | | MintsLoader | [] | js.mints_loader | [] | 2024-12-20 | | | |
| | | Winnti | [] | elf.winnti | ['Winnti Umbrella'] | 2024-12-20 | | | |
| | | Monokle | [] | apk.monokle | [] | 2024-12-09 | | | |
| | | PUMAKIT | ['PUMA', 'Kitsune'] | elf.pumakit | [] | 2024-12-13 | | | |
| | | WmRAT | [] | win.wm_rat | ['HAZY TIGER'] | 2024-12-17 | | | |
| | | Lynx | [] | win.lynx | [] | 2024-12-17 | | | |
| | | DEEPDATA | [] | win.deepdata | [] | 2024-12-16 | | | |
| | | PixPirate | [] | apk.pixpirate | [] | 2024-12-16 | | | |
| | | NetSupportManager RAT | ['NetSupport'] | win.netsupportmanager_rat | [] | 2024-12-16 | | | |
| | | RMS | ['Gussdoor', 'Remote Manipulator System', 'RuRAT'] | win.rms | ['TA505'] | 2024-12-16 | | | |
| | | Mocky LNK | [] | win.mocky_lnk | ['APT28'] | 2024-12-16 | | | |
| | | SpyGrace | ['SpyGlace'] | win.spygrace | ['APT-C-60'] | 2024-12-16 | | | |
| | | OctoberSeventh | ['ESET Wiper'] | win.october_seventh | [] | 2024-12-16 | | | |
| | | BiBi | ['BiBi-Windows'] | win.bibi | ['Void Manticore'] | 2024-12-16 | | | |