| | | Octowave Loader | [] | win.octowave | [] | 2025-03-21 | | | |
| | | BeaverTail | [] | js.beavertail | ['WageMole'] | 2025-03-12 | | | |
| | | InvisibleFerret | [] | py.invisibleferret | ['WageMole'] | 2025-03-12 | | | |
| | | OtterCookie | [] | js.otter_cookie | ['WageMole'] | 2025-02-17 | | | |
| | | ShadowPad | ['POISONPLUG.SHADOW', 'XShellGhost'] | win.shadowpad | ['APT23', 'APT41', 'APT17', 'DAGGER PANDA', 'Earth Lusca', 'Tonto Team', 'WET PANDA'] | 2025-03-21 | | | |
| | | Spyder | [] | win.spyder | [] | 2025-03-21 | | | |
| | | SodaMaster | ['dfls', 'HEAVYPOT', 'DelfsCake'] | win.sodamaster | ['Stone Panda'] | 2025-03-21 | | | |
| | | NetSupportManager RAT | ['NetSupport'] | win.netsupportmanager_rat | [] | 2025-03-21 | | | |
| | | Lumma Stealer | ['LummaC2 Stealer'] | win.lumma | [] | 2025-03-21 | | | |
| | | HijackLoader | ['DOILoader', 'GHOSTPULSE', 'IDAT Loader', 'SHADOWLADDER'] | win.hijackloader | [] | 2025-03-21 | | | |
| | | RedTiger Stealer | ['RedTiger Ste4ler', 'redtiger', 'redtiger-tools'] | py.redtiger | [] | 2025-03-21 | | | |
| | | Ymir | [] | win.ymir | [] | 2025-03-21 | | | |
| | | Quasar RAT | ['CinaRAT', 'QuasarRAT', 'Yggdrasil'] | win.quasar_rat | ['APT33', 'Dropping Elephant', 'Stone Panda', 'The Gorgon Group'] | 2025-03-21 | | | |
| | | r77 | ['r77 Rootkit'] | win.r77 | [] | 2025-03-21 | | | |
| | | Pykspa | [] | win.pykspa | [] | 2025-03-21 | | | |
| | | RansomHub | [] | win.ransomhub | ['RansomHub'] | 2025-03-21 | | | |
| | | TeamTNT | [] | elf.teamtnt | [] | 2025-03-21 | | | |
| | | Black Basta | ['no_name_software'] | win.blackbasta | ['GOLD REBELLION', 'STAC5143', 'Storm-0506', 'Storm-0826', 'TA2101', 'UNC3973', 'UNC4393'] | 2025-03-21 | | | |
| | | Mirai | ['Katana'] | elf.mirai | [] | 2025-03-21 | | | |
| | | PhantomCore | [] | win.phantomcore | [] | 2025-03-21 | | | |
| | | PlugX | ['Destroy RAT', 'Kaba', 'Korplug', 'Sogu', 'TIGERPLUG', 'RedDelta'] | win.plugx | ['APT 22', 'APT 26', 'APT31', 'APT41', 'Aurora Panda', 'Calypso group', 'DragonOK', 'EMISSARY PANDA', 'Hellsing', 'Hurricane Panda', 'Leviathan', 'Mirage', 'Mustang Panda', 'NetTraveler', 'Nightshade Panda', 'SLIME29', 'Samurai Panda', 'Stone Panda', 'UPS', 'Violin Panda'] | 2025-03-21 | | | |
| | | Cobalt Strike | ['Agentemis', 'BEACON', 'CobaltStrike', 'cobeacon'] | win.cobalt_strike | ['APT 29', 'APT32', 'APT41', 'AQUATIC PANDA', 'Anunak', 'Cobalt', 'Codoso', 'CopyKittens', 'DarkHydrus', 'Earth Baxia', 'FIN6', 'FIN7', 'Leviathan', 'Mustang Panda', 'Shell Crew', 'Stone Panda', 'TianWu', 'UNC1878', 'UNC2452', 'Winnti Umbrella'] | 2025-03-21 | | | |
| | | LaZagne | [] | py.lazagne | [] | 2025-03-21 | | | |
| | | MimiKatz | [] | win.mimikatz | ['APT32', 'Anunak', 'GALLIUM'] | 2025-03-21 | | | |
| | | Meterpreter | [] | win.meterpreter | [] | 2025-03-21 | | | |
| | | JuicyPotato | [] | win.juicy_potato | [] | 2025-03-21 | | | |
| | | Lethic | [] | win.lethic | [] | 2025-03-21 | | | |
| | | AMOS | ['Atomic macOS Stealer'] | osx.amos | [] | 2025-03-21 | | | |
| | | DOPLUGS | [] | win.doplugs | ['MUSTANG PANDA'] | 2025-03-21 | | | |
| | | LockBit | ['ABCD Ransomware'] | win.lockbit | [] | 2025-03-21 | | | |
| | | BlackMatter | [] | win.blackmatter | [] | 2025-03-21 | | | |
| | | AsyncRAT | [] | win.asyncrat | [] | 2025-03-21 | | | |
| | | Anel | ['UPPERCUT', 'lena'] | win.anel | ['Stone Panda'] | 2025-03-21 | | | |
| | | FAKEUPDATES | ['FakeUpdate', 'SocGholish'] | js.fakeupdates | ['GOLD PRELUDE'] | 2025-03-14 | | | |
| | | Akira | [] | elf.akira | [] | 2025-03-14 | | | |
| | | tsh | ['TINYSHELL'] | elf.tsh | [] | 2025-03-14 | | | |
| | | Emmenhtal | ['IDATDropper', 'PEAKLIGHT'] | win.emmenhtal | [] | 2025-03-14 | | | |
| | | SectopRAT | ['1xxbot', 'ArechClient'] | win.sectop_rat | [] | 2025-03-14 | | | |
| | | Rhadamanthys | [] | win.rhadamanthys | ['Sandworm'] | 2025-03-14 | | | |
| | | Anubis Backdoor | [] | py.anubisbackdoor | ['FIN7'] | 2025-03-13 | | | |
| | | KoSpy | [] | apk.kospy | ['APT37'] | 2025-03-13 | | | |
| | | Remcos | ['RemcosRAT', 'Remvio', 'Socmer'] | win.remcos | ['APT33', 'The Gorgon Group', 'UAC-0050'] | 2025-03-12 | | | |
| | | NjRAT | ['Bladabindi', 'Lime-Worm'] | win.njrat | ['AQUATIC PANDA', 'Earth Lusca', 'Operation C-Major', 'The Gorgon Group'] | 2025-03-12 | | | |
| | | SmartLoader | [] | win.smartloader | [] | 2025-03-12 | | | |
| | | DCRat | ['DarkCrystal RAT'] | win.dcrat | [] | 2025-03-12 | | | |
| | | DragonForce | [] | win.dragonforce | [] | 2025-03-12 | | | |
| | | BumbleBee | ['COLDTRAIN', 'SHELLSTING', 'Shindig'] | win.bumblebee | ['EXOTIC LILY', 'GOLD CABIN', 'TA578', 'TA579'] | 2025-01-14 | | | |
| | | ERMAC | [] | apk.ermac | [] | 2025-03-12 | | | |
| | | STOP | ['KeyPass', 'Djvu'] | win.stop | [] | 2025-03-12 | | | |
| | | Akira | [] | win.akira | [] | 2025-03-12 | | | |
| | | Anatsa | ['ReBot', 'TeaBot', 'Toddler'] | apk.anatsa | [] | 2025-03-11 | | | |
| | | RandomQuery | [] | ps1.randomquery | ['Kimsuky'] | 2025-03-11 | | | |
| | | vo1d | [] | apk.vo1d | [] | 2025-03-06 | | | |
| | | Moose | [] | elf.moose | [] | 2025-03-10 | | | |
| | | QakBot | ['Oakboat', 'Pinkslipbot', 'Qbot', 'Quakbot'] | win.qakbot | ['GOLD CABIN'] | 2025-03-10 | | | |
| | | Black Basta | [] | elf.blackbasta | [] | 2025-03-10 | | | |
| | | Hunters International | [] | win.hunters_international | ['Storm-0501'] | 2025-03-06 | | | |
| | | Fickle Stealer | [] | win.fickle | [] | 2025-03-10 | | | |
| | | Agent Tesla | ['AgenTesla', 'AgentTesla', 'Negasteal'] | win.agent_tesla | ['SWEED'] | 2025-03-10 | | | |
| | | Abyss Locker | ['elf.hellokitty'] | elf.abyss | [] | 2025-03-10 | | | |
| | | RokRAT | ['DOGCALL'] | win.rokrat | ['APT37'] | 2025-03-10 | | | |
| | | Joker | ['Bread'] | apk.joker | [] | 2025-03-07 | | | |
| | | lightSpy | [] | ios.lightspy | [] | 2025-03-07 | | | |
| | | SmokeLoader | ['Dofoil', 'Sharik', 'Smoke', 'Smoke Loader'] | win.smokeloader | ['SMOKY SPIDER', 'UAC-0006'] | 2025-03-07 | | | |
| | | Qilin | [] | elf.qilin | [] | 2025-03-07 | | | |
| | | Pyramid | [] | py.pyramid | [] | 2025-03-07 | | | |
| | | Stealc | [] | win.stealc | [] | 2025-03-07 | | | |
| | | Simda | ['iBank'] | win.simda | [] | 2025-03-07 | | | |
| | | SparkRAT | [] | win.spark_rat | [] | 2025-03-07 | | | |
| | | Revenge RAT | ['Revetrat'] | win.revenge_rat | ['The Gorgon Group'] | 2025-03-07 | | | |
| | | Babuk | [] | elf.babuk | [] | 2025-03-07 | | | |
| | | EvilExtractor | [] | win.evilextractor | [] | 2025-03-07 | | | |
| | | Phoenix Locker | [] | win.phoenix_locker | [] | 2025-03-07 | | | |
| | | Hades | [] | win.hades | ['GOLD WINTER'] | 2025-03-07 | | | |
| | | Conti | [] | win.conti | ['WIZARD SPIDER'] | 2025-03-07 | | | |
| | | Unidentified 103 (FIN8) | ['Ragnar Loader', 'Sardonic'] | win.unidentified_103 | [] | 2025-03-06 | | | |
| | | XWorm | [] | win.xworm | [] | 2025-03-06 | | | |
| | | NailaoLocker | [] | win.nailao_locker | [] | 2025-03-05 | | | |
| | | SystemBC | ['Coroxy', 'DroxiDat'] | win.systembc | [] | 2025-03-05 | | | |
| | | Loki RAT | [] | py.lokirat | ['El Machete'] | 2025-03-05 | | | |
| | | I2PRAT | ['I2Parcae'] | win.i2prat | [] | 2025-03-05 | | | |
| | | Unidentified 118 | [] | win.unidentified_118 | [] | 2025-03-05 | | | |
| | | GootLoader | ['SLOWPOUR'] | js.gootloader | [] | 2025-03-05 | | | |
| | | MintStealer | [] | win.mintstealer | [] | 2025-03-05 | | | |
| | | ReedBed | [] | win.reedbed | [] | 2025-03-05 | | | |
| | | Cactus | [] | win.cactus | [] | 2025-03-05 | | | |
| | | DanaBot | [] | win.danabot | ['SCULLY SPIDER'] | 2025-03-05 | | | |
| | | IcedID | ['BokBot', 'IceID'] | win.icedid | ['GOLD CABIN', 'Lunar Spider'] | 2025-03-05 | | | |
| | | DarkGate | ['Meh', 'MehCrypter'] | win.darkgate | [] | 2025-03-05 | | | |
| | | Cuba | ['COLDDRAW'] | win.cuba | [] | 2025-03-05 | | | |
| | | FINALDRAFT | [] | elf.finaldraft | [] | 2025-02-28 | | | |
| | | FINALDRAFT | [] | win.finaldraft | [] | 2025-02-28 | | | |
| | | PolarEdge | [] | elf.polaredge | [] | 2025-02-28 | | | |
| | | PANIX | [] | sh.panix | [] | 2025-02-28 | | | |
| | | ValleyRAT | ['Winos'] | win.valley_rat | [] | 2025-02-28 | | | |
| | | Winos | [] | win.winos | ['Void Arachne'] | 2025-02-28 | | | |
| | | TgToxic | [] | apk.tgtoxic | [] | 2025-02-28 | | | |
| | | Cyclops | [] | win.cyclops | [] | 2025-02-28 | | | |
| | | AllaSenha | [] | win.allasenha | [] | 2025-02-28 | | | |
| | | Turla RAT | [] | elf.turla_rat | [] | 2025-02-28 | | | |