| | | ReedBed | [] | win.reedbed | ['UNC4393'] | 2025-03-27 | | | |
| | | Roshtyak | [] | win.roshtyak | [] | 2025-03-27 | | | |
| | | Raspberry Robin | ['RaspberryRobin', 'QNAP-Worm', 'LINK_MSIEXEC'] | win.raspberry_robin | [] | 2025-03-27 | | | |
| | | CoffeeLoader | [] | win.coffee_loader | [] | 2025-03-27 | | | |
| | | RALord | [] | win.ralord | [] | 2025-03-27 | | | |
| | | WarmCookie | ['Badspace', 'Carrotstick', 'QUICKBIND'] | win.warmcookie | [] | 2025-01-27 | | | |
| | | Latrodectus | ['BLACKWIDOW', 'IceNova', 'Latrodectus', 'Lotus'] | win.latrodectus | [] | 2025-02-10 | | | |
| | | Adylkuzz | [] | win.adylkuzz | [] | 2025-03-27 | | | |
| | | Black Basta | ['no_name_software'] | win.blackbasta | ['GOLD REBELLION', 'STAC5143', 'Storm-0506', 'Storm-0826', 'TA2101', 'UNC3973', 'UNC4393'] | 2025-03-27 | | | |
| | | Black Basta | [] | elf.blackbasta | [] | 2025-03-27 | | | |
| | | Anubis Backdoor | [] | py.anubisbackdoor | ['FIN7'] | 2025-03-26 | | | |
| | | GhostSocks | [] | win.ghostsocks | [] | 2025-03-26 | | | |
| | | FROZENHILL | [] | win.frozenhill | ['MUSTANG PANDA'] | 2025-03-26 | | | |
| | | Koi Loader | [] | win.koiloader | [] | 2024-12-09 | | | |
| | | Koi Stealer | [] | win.koistealer | [] | 2024-12-09 | | | |
| | | Ballista | [] | elf.ballista | [] | 2025-03-26 | | | |
| | | OtterCookie | [] | js.otter_cookie | ['WageMole'] | 2025-02-17 | | | |
| | | BeaverTail | [] | js.beavertail | ['WageMole'] | 2025-03-12 | | | |
| | | MintsLoader | [] | js.mints_loader | [] | 2025-03-27 | | | |
| | | Nitrogen Loader | [] | win.nitrogen | [] | 2025-02-13 | | | |
| | | Emmenhtal | ['IDATDropper', 'PEAKLIGHT'] | win.emmenhtal | [] | 2025-03-25 | | | |
| | | Agent Tesla | ['AgenTesla', 'AgentTesla', 'Negasteal'] | win.agent_tesla | ['SWEED'] | 2025-03-25 | | | |
| | | Lumma Stealer | ['LummaC2 Stealer'] | win.lumma | [] | 2025-03-25 | | | |
| | | Vidar | [] | win.vidar | [] | 2025-03-25 | | | |
| | | Octowave Loader | [] | win.octowave | [] | 2025-03-21 | | | |
| | | InvisibleFerret | [] | py.invisibleferret | ['WageMole'] | 2025-03-12 | | | |
| | | ShadowPad | ['POISONPLUG.SHADOW', 'XShellGhost'] | win.shadowpad | ['APT23', 'APT41', 'APT17', 'DAGGER PANDA', 'Earth Lusca', 'Tonto Team', 'WET PANDA'] | 2025-03-21 | | | |
| | | Spyder | [] | win.spyder | [] | 2025-03-21 | | | |
| | | SodaMaster | ['dfls', 'HEAVYPOT', 'DelfsCake'] | win.sodamaster | ['Stone Panda'] | 2025-03-21 | | | |
| | | NetSupportManager RAT | ['NetSupport'] | win.netsupportmanager_rat | [] | 2025-03-21 | | | |
| | | HijackLoader | ['DOILoader', 'GHOSTPULSE', 'IDAT Loader', 'SHADOWLADDER'] | win.hijackloader | [] | 2025-03-21 | | | |
| | | RedTiger Stealer | ['RedTiger Ste4ler', 'redtiger', 'redtiger-tools'] | py.redtiger | [] | 2025-03-21 | | | |
| | | Ymir | [] | win.ymir | [] | 2025-03-21 | | | |
| | | Quasar RAT | ['CinaRAT', 'QuasarRAT', 'Yggdrasil'] | win.quasar_rat | ['APT33', 'Dropping Elephant', 'Stone Panda', 'The Gorgon Group'] | 2025-03-21 | | | |
| | | r77 | ['r77 Rootkit'] | win.r77 | [] | 2025-03-21 | | | |
| | | Pykspa | [] | win.pykspa | [] | 2025-03-21 | | | |
| | | RansomHub | [] | win.ransomhub | ['RansomHub'] | 2025-03-21 | | | |
| | | TeamTNT | [] | elf.teamtnt | [] | 2025-03-21 | | | |
| | | Mirai | ['Katana'] | elf.mirai | [] | 2025-03-21 | | | |
| | | PhantomCore | [] | win.phantomcore | [] | 2025-03-21 | | | |
| | | PlugX | ['Destroy RAT', 'Kaba', 'Korplug', 'Sogu', 'TIGERPLUG', 'RedDelta'] | win.plugx | ['APT 22', 'APT 26', 'APT31', 'APT41', 'Aurora Panda', 'Calypso group', 'DragonOK', 'EMISSARY PANDA', 'Hellsing', 'Hurricane Panda', 'Leviathan', 'Mirage', 'Mustang Panda', 'NetTraveler', 'Nightshade Panda', 'SLIME29', 'Samurai Panda', 'Stone Panda', 'UPS', 'Violin Panda'] | 2025-03-21 | | | |
| | | Cobalt Strike | ['Agentemis', 'BEACON', 'CobaltStrike', 'cobeacon'] | win.cobalt_strike | ['APT 29', 'APT32', 'APT41', 'AQUATIC PANDA', 'Anunak', 'Cobalt', 'Codoso', 'CopyKittens', 'DarkHydrus', 'Earth Baxia', 'FIN6', 'FIN7', 'Leviathan', 'Mustang Panda', 'Shell Crew', 'Stone Panda', 'TianWu', 'UNC1878', 'UNC2452', 'Winnti Umbrella'] | 2025-03-21 | | | |
| | | LaZagne | [] | py.lazagne | [] | 2025-03-21 | | | |
| | | JuicyPotato | [] | win.juicy_potato | [] | 2025-03-21 | | | |
| | | Meterpreter | [] | win.meterpreter | [] | 2025-03-21 | | | |
| | | MimiKatz | [] | win.mimikatz | ['APT32', 'Anunak', 'GALLIUM'] | 2025-03-21 | | | |
| | | Lethic | [] | win.lethic | [] | 2025-03-21 | | | |
| | | AMOS | ['Atomic macOS Stealer'] | osx.amos | [] | 2025-03-21 | | | |
| | | DOPLUGS | [] | win.doplugs | ['MUSTANG PANDA'] | 2025-03-21 | | | |
| | | LockBit | ['ABCD Ransomware'] | win.lockbit | [] | 2025-03-21 | | | |
| | | BlackMatter | [] | win.blackmatter | [] | 2025-03-21 | | | |
| | | AsyncRAT | [] | win.asyncrat | [] | 2025-03-27 | | | |
| | | Anel | ['UPPERCUT', 'lena'] | win.anel | ['Stone Panda'] | 2025-03-21 | | | |
| | | FAKEUPDATES | ['FakeUpdate', 'SocGholish'] | js.fakeupdates | ['GOLD PRELUDE'] | 2025-03-14 | | | |
| | | Akira | [] | elf.akira | [] | 2025-03-14 | | | |
| | | tsh | ['TINYSHELL'] | elf.tsh | [] | 2025-03-14 | | | |
| | | SectopRAT | ['1xxbot', 'ArechClient'] | win.sectop_rat | [] | 2025-03-14 | | | |
| | | Rhadamanthys | [] | win.rhadamanthys | ['Sandworm'] | 2025-03-14 | | | |
| | | KoSpy | [] | apk.kospy | ['APT37'] | 2025-03-13 | | | |
| | | Remcos | ['RemcosRAT', 'Remvio', 'Socmer'] | win.remcos | ['APT33', 'The Gorgon Group', 'UAC-0050'] | 2025-03-12 | | | |
| | | NjRAT | ['Bladabindi', 'Lime-Worm'] | win.njrat | ['AQUATIC PANDA', 'Earth Lusca', 'Operation C-Major', 'The Gorgon Group'] | 2025-03-12 | | | |
| | | SmartLoader | [] | win.smartloader | [] | 2025-03-12 | | | |
| | | DCRat | ['DarkCrystal RAT'] | win.dcrat | [] | 2025-03-12 | | | |
| | | DragonForce | [] | win.dragonforce | [] | 2025-03-12 | | | |
| | | BumbleBee | ['COLDTRAIN', 'SHELLSTING', 'Shindig'] | win.bumblebee | ['EXOTIC LILY', 'GOLD CABIN', 'TA578', 'TA579'] | 2025-01-14 | | | |
| | | ERMAC | [] | apk.ermac | [] | 2025-03-12 | | | |
| | | STOP | ['KeyPass', 'Djvu'] | win.stop | [] | 2025-03-12 | | | |
| | | Akira | [] | win.akira | [] | 2025-03-12 | | | |
| | | Anatsa | ['ReBot', 'TeaBot', 'Toddler'] | apk.anatsa | [] | 2025-03-11 | | | |
| | | RandomQuery | [] | ps1.randomquery | ['Kimsuky'] | 2025-03-11 | | | |
| | | vo1d | [] | apk.vo1d | [] | 2025-03-06 | | | |
| | | Moose | [] | elf.moose | [] | 2025-03-10 | | | |
| | | QakBot | ['Oakboat', 'Pinkslipbot', 'Qbot', 'Quakbot'] | win.qakbot | ['GOLD CABIN'] | 2025-03-10 | | | |
| | | Hunters International | [] | win.hunters_international | ['Storm-0501'] | 2025-03-06 | | | |
| | | Fickle Stealer | [] | win.fickle | [] | 2025-03-10 | | | |
| | | Abyss Locker | ['elf.hellokitty'] | elf.abyss | [] | 2025-03-10 | | | |
| | | RokRAT | ['DOGCALL'] | win.rokrat | ['APT37'] | 2025-03-10 | | | |
| | | Joker | ['Bread'] | apk.joker | [] | 2025-03-07 | | | |
| | | lightSpy | [] | ios.lightspy | [] | 2025-03-07 | | | |
| | | SmokeLoader | ['Dofoil', 'Sharik', 'Smoke', 'Smoke Loader'] | win.smokeloader | ['SMOKY SPIDER', 'UAC-0006'] | 2025-03-07 | | | |
| | | Qilin | [] | elf.qilin | [] | 2025-03-07 | | | |
| | | Pyramid | [] | py.pyramid | [] | 2025-03-07 | | | |
| | | Stealc | [] | win.stealc | [] | 2025-03-07 | | | |
| | | Simda | ['iBank'] | win.simda | [] | 2025-03-07 | | | |
| | | SparkRAT | [] | win.spark_rat | [] | 2025-03-07 | | | |
| | | Revenge RAT | ['Revetrat'] | win.revenge_rat | ['The Gorgon Group'] | 2025-03-07 | | | |
| | | Babuk | [] | elf.babuk | [] | 2025-03-07 | | | |
| | | EvilExtractor | [] | win.evilextractor | [] | 2025-03-07 | | | |
| | | Phoenix Locker | [] | win.phoenix_locker | [] | 2025-03-07 | | | |
| | | Hades | [] | win.hades | ['GOLD WINTER'] | 2025-03-07 | | | |
| | | Conti | [] | win.conti | ['WIZARD SPIDER'] | 2025-03-07 | | | |
| | | Unidentified 103 (FIN8) | ['Ragnar Loader', 'Sardonic'] | win.unidentified_103 | [] | 2025-03-06 | | | |
| | | XWorm | [] | win.xworm | [] | 2025-03-06 | | | |
| | | NailaoLocker | [] | win.nailao_locker | [] | 2025-03-05 | | | |
| | | SystemBC | ['Coroxy', 'DroxiDat'] | win.systembc | [] | 2025-03-05 | | | |
| | | Loki RAT | [] | py.lokirat | ['El Machete'] | 2025-03-05 | | | |
| | | I2PRAT | ['I2Parcae'] | win.i2prat | [] | 2025-03-05 | | | |
| | | Unidentified 118 | [] | win.unidentified_118 | [] | 2025-03-05 | | | |
| | | GootLoader | ['SLOWPOUR'] | js.gootloader | [] | 2025-03-05 | | | |
| | | MintStealer | [] | win.mintstealer | [] | 2025-03-05 | | | |