| | | Stealc | [] | win.stealc | [] | 2024-03-18 | | | |
| | | DinodasRAT | ['XDealer'] | win.dinodas_rat | [] | 2024-03-18 | | | |
| | | Reshell | [] | win.reshell | ['GALLIUM'] | 2024-03-18 | | | |
| | | RagnarLocker | [] | win.ragnarlocker | [] | 2024-03-18 | | | |
| | | RagnarLocker | [] | elf.ragnarlocker | [] | 2024-03-18 | | | |
| | | CaddyWiper | ['KillDisk.NCX'] | win.caddywiper | ['APT28'] | 2024-03-18 | | | |
| | | NewBot Loader | [] | win.newbot_loader | [] | 2024-03-18 | | | |
| | | SpectralBlur | [] | elf.spectral_blur | ['Lazarus Group'] | 2024-03-18 | | | |
| | | SpectralBlur | [] | osx.spectral_blur | ['Lazarus Group'] | 2024-03-18 | | | |
| | | Ave Maria | ['AVE_MARIA', 'AveMariaRAT', 'Warzone RAT', 'WarzoneRAT', 'avemaria'] | win.ave_maria | ['Anunak'] | 2024-03-18 | | | |
| | | AMOS | ['Atomic macOS Stealer'] | osx.amos | [] | 2024-03-18 | | | |
| | | Unidentified JS 006 (Winter Wyvern) | [] | js.unidentified_006 | ['Winter Vivern'] | 2024-02-20 | | | |
| | | Unidentified PS 004 (RAT) | [] | ps1.unidentified_004 | ['Kimsuky'] | 2024-03-18 | | | |
| | | Sliver | [] | win.sliver | [] | 2024-02-22 | | | |
| | | Pikabot | [] | win.pikabot | [] | 2024-03-18 | | | |
| | | WhiteSnake Stealer | [] | win.whitesnake | [] | 2024-03-18 | | | |
| | | STRRAT | [] | jar.strrat | [] | 2024-03-18 | | | |
| | | DarkGate | ['Meh', 'MehCrypter'] | win.darkgate | [] | 2024-03-18 | | | |
| | | Broomstick | ['CleanUpLoader', 'Oyster'] | win.broomstick | [] | 2024-03-04 | | | |
| | | Evilginx | [] | elf.evilginx | [] | 2024-03-18 | | | |
| | | POWERTRASH | [] | ps1.powertrash | ['FIN7'] | 2023-12-12 | | | |
| | | Carbanak | ['Anunak', 'Sekur RAT'] | win.carbanak | ['FIN7'] | 2023-12-27 | | | |
| | | NjRAT | ['Bladabindi', 'Lime-Worm'] | win.njrat | ['AQUATIC PANDA', 'Earth Lusca', 'Operation C-Major', 'The Gorgon Group'] | 2024-03-18 | | | |
| | | Remcos | ['RemcosRAT', 'Remvio', 'Socmer'] | win.remcos | ['APT33', 'The Gorgon Group', 'UAC-0050'] | 2024-03-18 | | | |
| | | OFFODE | [] | js.offode | [] | 2024-03-18 | | | |
| | | Donex | [] | win.donex | [] | 2024-03-14 | | | |
| | | LockerGoga | [] | win.lockergoga | ['FIN6'] | 2024-03-13 | | | |
| | | Mispadu | ['URSA'] | win.mispadu | [] | 2024-03-13 | | | |
| | | Matanbuchus | [] | win.matanbuchus | [] | 2024-03-12 | | | |
| | | BlackCat | ['ALPHV', 'Noberus'] | win.blackcat | [] | 2024-03-12 | | | |
| | | Elevator | [] | elf.elevator | [] | 2024-03-12 | | | |
| | | Unidentified 111 (Latrodectus) | ['BLACKWIDOW', 'IceNova', 'Latrodectus', 'Lotus'] | win.unidentified_111 | [] | 2024-03-12 | | | |
| | | SimpleTea | ['SimplexTea'] | elf.simpletea | ['Lazarus Group'] | 2023-12-19 | | | |
| | | Suterusu | ['HCRootkit'] | elf.suterusu | [] | 2024-03-12 | | | |
| | | ShadowPad | ['POISONPLUG.SHADOW', 'XShellGhost'] | win.shadowpad | ['APT23', 'APT41', 'APT17', 'DAGGER PANDA', 'Earth Lusca', 'Tonto Team', 'WET PANDA'] | 2024-03-12 | | | |
| | | Zeus | ['Zbot'] | win.zeus | [] | 2024-03-12 | | | |
| | | Agent Tesla | ['AgenTesla', 'AgentTesla', 'Negasteal'] | win.agent_tesla | ['SWEED'] | 2024-03-12 | | | |
| | | XWorm | [] | win.xworm | [] | 2024-03-12 | | | |
| | | RisePro | [] | win.risepro | [] | 2024-03-12 | | | |
| | | PrivateLoader | [] | win.privateloader | [] | 2024-03-12 | | | |
| | | CrimsonIAS | [] | win.crimsonias | ['Mustang Panda'] | 2024-03-07 | | | |
| | | Unidentified 115 (Nim Loader) | [] | win.unidentified_115 | [] | 2024-03-06 | | | |
| | | RokRAT | ['DOGCALL'] | win.rokrat | ['APT37'] | 2024-03-05 | | | |
| | | Joker | ['Bread'] | apk.joker | [] | 2024-03-05 | | | |
| | | Formbook | ['win.xloader'] | win.formbook | ['SWEED', 'Cobalt'] | 2024-03-04 | | | |
| | | Black Basta | ['no_name_software'] | win.blackbasta | [] | 2024-03-04 | | | |
| | | QakBot | ['Oakboat', 'Pinkslipbot', 'Qbot', 'Quakbot'] | win.qakbot | ['GOLD CABIN'] | 2024-03-04 | | | |
| | | Loki Password Stealer (PWS) | ['Burkina', 'Loki', 'LokiBot', 'LokiPWS'] | win.lokipws | ['SWEED', 'The Gorgon Group', 'Cobalt'] | 2024-03-04 | | | |
| | | IcedID | ['BokBot', 'IceID'] | win.icedid | ['GOLD CABIN', 'Lunar Spider'] | 2024-03-04 | | | |
| | | 404 Keylogger | ['404KeyLogger', 'Snake Keylogger'] | win.404keylogger | [] | 2024-03-04 | | | |
| | | FudModule | ['LIGHTSHOW'] | win.fudmodule | ['Lazarus Group'] | 2024-03-04 | | | |
| | | ZarDoor | [] | win.zardoor | [] | 2024-03-04 | | | |
| | | Venom Proxy | [] | win.venom_proxy | [] | 2024-03-04 | | | |
| | | HTran | ['HUC Packet Transmit Tool'] | win.htran | ['GALLIUM', 'UPS'] | 2024-03-04 | | | |
| | | reGeorg | [] | win.regeorg | [] | 2024-03-04 | | | |
| | | SmokeLoader | ['Dofoil', 'Sharik', 'Smoke', 'Smoke Loader'] | win.smokeloader | ['SMOKY SPIDER'] | 2024-03-04 | | | |
| | | GTPDOOR | [] | win.gtpdoor | ['LightBasin'] | 2024-03-04 | | | |
| | | Bitter RAT | [] | win.bitter_rat | [] | 2024-03-04 | | | |
| | | Winnti | ['BleDoor', 'JUMPALL', 'RbDoor', 'Pasteboy'] | win.winnti | ['APT17'] | 2024-03-04 | | | |
| | | WINELOADER | [] | win.wineloader | ['APT29'] | 2024-03-04 | | | |
| | | Trigona | [] | win.trigona | [] | 2024-03-04 | | | |
| | | 9002 RAT | ['McRAT', 'Hydraq', 'HOMEUNIX'] | win.9002 | ['Aurora Panda', 'APT31', 'Group 27'] | 2024-03-04 | | | |
| | | PlugX | ['Destroy RAT', 'Kaba', 'Korplug', 'Sogu', 'TIGERPLUG', 'RedDelta'] | win.plugx | ['APT 22', 'APT 26', 'APT31', 'APT41', 'Aurora Panda', 'Calypso group', 'DragonOK', 'EMISSARY PANDA', 'Hellsing', 'Hurricane Panda', 'Leviathan', 'Mirage', 'Mustang Panda', 'NetTraveler', 'Nightshade Panda', 'SLIME29', 'Samurai Panda', 'Stone Panda', 'UPS', 'Violin Panda'] | 2024-03-04 | | | |
| | | Spyder | [] | win.spyder | [] | 2024-03-04 | | | |
| | | Cobalt Strike | ['Agentemis', 'BEACON', 'CobaltStrike', 'cobeacon'] | win.cobalt_strike | ['APT 29', 'APT32', 'APT41', 'AQUATIC PANDA', 'Anunak', 'Cobalt', 'Codoso', 'CopyKittens', 'DarkHydrus', 'FIN6', 'FIN7', 'Leviathan', 'Mustang Panda', 'Shell Crew', 'Stone Panda', 'TianWu', 'UNC1878', 'UNC2452', 'Winnti Umbrella'] | 2024-03-04 | | | |
| | | Phemedrone Stealer | ['Ov3r_Stealer'] | win.phemedrone_stealer | [] | 2024-03-04 | | | |
| | | WikiLoader | ['WailingCrab'] | win.wikiloader | [] | 2024-03-04 | | | |
| | | MooBot | [] | elf.moobot | [] | 2024-02-28 | | | |
| | | CatB | [] | win.catb | [] | 2024-02-28 | | | |
| | | GIMMICK | [] | win.gimmick | [] | 2024-02-28 | | | |
| | | DoorMe | [] | win.doorme | [] | 2024-02-28 | | | |
| | | SectopRAT | ['1xxbot', 'ArechClient'] | win.sectop_rat | [] | 2024-02-28 | | | |
| | | Hydra | [] | apk.hydra | [] | 2024-02-28 | | | |
| | | Hook | [] | apk.hook | [] | 2024-02-28 | | | |
| | | NetSupportManager RAT | ['NetSupport'] | win.netsupportmanager_rat | [] | 2024-02-28 | | | |
| | | Grandoreiro | [] | win.grandoreiro | [] | 2024-02-28 | | | |
| | | JSOutProx | [] | win.jsoutprox | ['SOLAR SPIDER'] | 2022-04-05 | | | |
| | | Anatsa | ['ReBot', 'TeaBot', 'Toddler'] | apk.anatsa | [] | 2024-02-23 | | | |
| | | PEBBLEDASH | [] | win.pebbledash | [] | 2024-02-22 | | | |
| | | DICELOADER | ['Lizar'] | win.diceloader | [] | 2023-12-12 | | | |
| | | HTTP-Shell | [] | ps1.http_shell | [] | 2024-02-22 | | | |
| | | Konni | [] | win.konni | ['APT37'] | 2024-02-21 | | | |
| | | TinyTurlaNG | ['TTNG'] | win.tinyturla_ng | ['Turla'] | 2024-02-16 | | | |
| | | Oderoor | ['Bobax', 'Kraken'] | win.oderoor | [] | 2024-02-21 | | | |
| | | BunnyLoader | [] | win.bunnyloader | [] | 2024-02-21 | | | |
| | | Phobos | [] | win.phobos | [] | 2024-02-21 | | | |
| | | solarmarker | ['Jupyter', 'Polazert', 'Yellow Cockatoo'] | win.solarmarker | [] | 2024-01-18 | | | |
| | | BianLian | [] | elf.bianlian | [] | 2024-02-21 | | | |
| | | BianLian | [] | win.bianlian | [] | 2024-02-21 | | | |
| | | LockBit | ['ABCD Ransomware'] | win.lockbit | [] | 2024-02-20 | | | |
| | | LockBit | [] | osx.lockbit | [] | 2024-02-20 | | | |
| | | LockBit | [] | elf.lockbit | [] | 2024-02-20 | | | |
| | | DanaBot | [] | win.danabot | ['SCULLY SPIDER'] | 2024-02-08 | | | |
| | | RedCurl | [] | win.redcurl | [] | 2024-02-16 | | | |
| | | Lumma Stealer | ['LummaC2 Stealer'] | win.lumma | [] | 2024-02-16 | | | |
| | | Zloader | ['DELoader', 'SILENTNIGHT', 'Terdot'] | win.zloader | [] | 2024-02-16 | | | |
| | | GootLoader | [] | js.gootloader | [] | 2024-02-16 | | | |
| | | Egregor | [] | win.egregor | [] | 2024-02-16 | | | |
| | | Maze | ['ChaCha'] | win.maze | ['FIN6', 'TA2101'] | 2024-02-16 | | | |
| | | SnappyTCP | [] | elf.snappy_tcp | ['Sea Turtle'] | 2024-02-15 | | | |