| | | ShadowV2 | [] | elf.shadowv2 | [] | 2025-11-28 | | | |
| | | CloudEyE | ['GuLoader', 'vbdropper'] | win.cloudeye | [] | 2025-11-28 | | | |
| | | DarkWatchman | [] | js.darkwatchman | [] | 2025-11-28 | | | |
| | | Remcos | ['RemcosRAT', 'Remvio', 'Socmer'] | win.remcos | ['APT33', 'The Gorgon Group', 'UAC-0050'] | 2025-11-28 | | | |
| | | PhantomCore | [] | win.phantomcore | [] | 2025-11-28 | | | |
| | | Formbook | ['win.xloader'] | win.formbook | ['SWEED', 'Cobalt'] | 2025-11-28 | | | |
| | | dynamichttp | [] | win.dynamichttp | ['RomCom'] | 2025-11-26 | | | |
| | | Charon | [] | win.charon | [] | 2025-11-26 | | | |
| | | PteroGraphin | [] | ps1.ptero_graphin | ['Gamaredon Group'] | 2025-11-26 | | | |
| | | Pteranodon | ['Pterodo'] | win.pteranodon | ['Gamaredon Group', 'Operation Armageddon'] | 2025-11-26 | | | |
| | | FAKEUPDATES | ['FakeUpdate', 'GhoLoader', 'SocGholish'] | js.fakeupdates | ['GOLD PRELUDE'] | 2025-11-26 | | | |
| | | AndroRAT | [] | apk.androrat | [] | 2025-11-26 | | | |
| | | Artra Downloader | [] | win.artra | [] | 2025-11-26 | | | |
| | | Bitter RAT | [] | win.bitter_rat | [] | 2025-11-26 | | | |
| | | VIP Keylogger | [] | win.vipkeylogger | [] | 2025-11-26 | | | |
| | | Pikabot | [] | win.pikabot | [] | 2025-11-25 | | | |
| | | splitloader | [] | win.splitloader | [] | 2025-11-25 | | | |
| | | ComeBacker | [] | win.comebacker | ['Lazarus Group'] | 2025-11-25 | | | |
| | | Cobalt Strike | ['Agentemis', 'BEACON', 'CobaltStrike', 'cobeacon'] | win.cobalt_strike | ['APT 29', 'APT29', 'APT32', 'APT41', 'AQUATIC PANDA', 'Anunak', 'Cobalt', 'Codoso', 'CopyKittens', 'DarkHydrus', 'Earth Baxia', 'FIN6', 'FIN7', 'Leviathan', 'Mustang Panda', 'Shell Crew', 'Stone Panda', 'TianWu', 'UNC1878', 'UNC2452', 'Winnti Umbrella'] | 2025-11-25 | | | |
| | | DanaBot | ['DanaTools'] | win.danabot | ['SCULLY SPIDER'] | 2025-11-25 | | | |
| | | Joker | ['Bread'] | apk.joker | [] | 2025-11-25 | | | |
| | | Hook | [] | apk.hook | [] | 2025-11-25 | | | |
| | | FluBot | ['Cabassous', 'FakeChat'] | apk.flubot | [] | 2025-11-25 | | | |
| | | Coper | ['ExobotCompact', 'Octo'] | apk.coper | [] | 2025-11-25 | | | |
| | | BumbleBee | ['COLDTRAIN', 'SHELLSTING', 'Shindig'] | win.bumblebee | ['EXOTIC LILY', 'GOLD CABIN', 'TA578', 'TA579'] | 2025-11-25 | | | |
| | | Chaos | ['FakeRyuk', 'RyukJoke', 'Yashma'] | win.chaos | [] | 2025-11-25 | | | |
| | | AsyncRAT | [] | win.asyncrat | [] | 2025-11-25 | | | |
| | | BianLian | [] | win.bianlian | [] | 2025-11-25 | | | |
| | | Mirai | ['Katana'] | elf.mirai | [] | 2025-11-25 | | | |
| | | NjRAT | ['Bladabindi', 'Lime-Worm'] | win.njrat | ['AQUATIC PANDA', 'Earth Lusca', 'Operation C-Major', 'The Gorgon Group'] | 2025-11-25 | | | |
| | | Latrodectus | ['BLACKWIDOW', 'IceNova', 'Latrodectus', 'Lotus'] | win.latrodectus | [] | 2025-11-25 | | | |
| | | DCRat | ['DarkCrystal RAT'] | win.dcrat | [] | 2025-11-25 | | | |
| | | Havoc | ['Havokiz'] | win.havoc | [] | 2025-11-25 | | | |
| | | Quasar RAT | ['CinaRAT', 'QuasarRAT', 'Yggdrasil'] | win.quasar_rat | ['APT33', 'Dropping Elephant', 'Stone Panda', 'The Gorgon Group'] | 2025-11-25 | | | |
| | | RedLine Stealer | ['RECORDSTEALER'] | win.redline_stealer | [] | 2025-11-25 | | | |
| | | Sliver | [] | win.sliver | [] | 2025-11-25 | | | |
| | | XWorm | [] | win.xworm | ['Hive0137'] | 2025-11-25 | | | |
| | | Rhadamanthys | [] | win.rhadamanthys | ['Sandworm'] | 2025-11-25 | | | |
| | | WarmCookie | ['Badspace', 'Carrotstick', 'QUICKBIND'] | win.warmcookie | [] | 2025-11-25 | | | |
| | | ValleyRAT | ['Winos'] | win.valley_rat | [] | 2025-11-25 | | | |
| | | Broomstick | ['CLEANBOOST', 'CleanUp', 'CleanUpLoader', 'Oyster'] | win.broomstick | [] | 2025-11-03 | | | |
| | | GreyEnergy | [] | win.grey_energy | ['GreyEnergy', 'TeleBots'] | 2025-11-25 | | | |
| | | MeltingClaw | [] | win.meltingclaw | [] | 2025-11-25 | | | |
| | | ROMCOM RAT | ['PEAPOD', 'SingleCamper', 'SnipBot'] | win.romcom_rat | [] | 2025-11-25 | | | |
| | | RustyClaw | [] | win.rusty_claw | ['RomCom'] | 2025-11-25 | | | |
| | | ShadyHammock | [] | win.shady_hammock | [] | 2025-11-25 | | | |
| | | SlipScreen | [] | win.slip_screen | ['RomCom'] | 2025-11-25 | | | |
| | | TransferLoader | [] | win.transferloader | [] | 2025-11-25 | | | |
| | | BURNBOOK | [] | win.burnbook | ['UNC2970'] | 2025-11-21 | | | |
| | | QuanPinLoader | [] | win.quan_pin_loader | ['Lazarus Group'] | 2025-11-21 | | | |
| | | ScoringMathTea | [] | win.scoring_math_tea | ['Lazarus Group'] | 2025-11-21 | | | |
| | | GAMYBEAR | [] | win.gamybear | [] | 2025-11-21 | | | |
| | | DragonBreath | [] | win.dragonbreath | [] | 2025-11-18 | | | |
| | | BADAUDIO | [] | win.badaudio | ['APT24'] | 2025-11-21 | | | |
| | | Sturnus | [] | apk.sturnus | [] | 2025-11-21 | | | |
| | | LittleDaemon | [] | elf.little_daemon | ['PlushDaemon'] | 2025-11-21 | | | |
| | | EdgeStepper | [] | elf.edgestepper | ['PlushDaemon'] | 2025-11-21 | | | |
| | | Supper | ['SocksShell', 'ZAPCAT'] | win.supper | ['Vanilla Tempest'] | 2025-11-11 | | | |
| | | Venom RAT | [] | win.venom | [] | 2025-11-21 | | | |
| | | MISTPEN | [] | win.mistpen | ['UNC2970'] | 2025-11-21 | | | |
| | | tsunami | [] | win.tsunami | ['Lazarus Group'] | 2025-11-21 | | | |
| | | TsunamiKit | [] | win.tsunamikit | ['WageMole'] | 2025-11-21 | | | |
| | | InvisibleFerret | [] | py.invisibleferret | ['WageMole'] | 2025-11-21 | | | |
| | | BeaverTail | [] | js.beavertail | ['WageMole'] | 2025-11-21 | | | |
| | | Kaolin RAT | ['KaolinTea'] | win.kaolin_rat | ['Lazarus Group'] | 2025-11-21 | | | |
| | | NikiTeaR | [] | win.nikitear | ['Kimsuky'] | 2025-11-19 | | | |
| | | Vidar | [] | win.vidar | [] | 2025-11-19 | | | |
| | | Pureland | [] | osx.pureland | [] | 2025-11-19 | | | |
| | | KeySteal | [] | osx.keysteal | [] | 2025-11-19 | | | |
| | | EggShell RAT | [] | osx.eggshell_rat | [] | 2025-11-19 | | | |
| | | CloudMensis | ['BadRAT'] | osx.cloud_mensis | [] | 2025-11-19 | | | |
| | | AMOS | ['Atomic macOS Stealer'] | osx.amos | [] | 2025-11-19 | | | |
| | | Poseidon Stealer | ['Rodrigo Stealer'] | osx.poseidonstealer | [] | 2025-11-19 | | | |
| | | Odyssey Stealer | [] | osx.odyssey_stealer | [] | 2025-11-19 | | | |
| | | Phantom Stealer | [] | win.phantom_stealer | [] | 2025-11-19 | | | |
| | | Warp Stealer | [] | win.warp_stealer | [] | 2025-11-19 | | | |
| | | DRATzarus | ['ThreatNeedle', 'ThreatNeedleTea'] | win.dratzarus | ['Lazarus Group'] | 2025-11-19 | | | |
| | | NikiHTTP | [] | win.nikihttp | ['Kimsuky'] | 2025-10-28 | | | |
| | | RONINGLOADER | [] | win.roningloader | [] | 2025-11-18 | | | |
| | | Abyss Locker | ['elf.hellokitty'] | elf.abyss | [] | 2025-03-10 | | | |
| | | GodRAT | [] | win.godrat | ['APT41'] | 2025-11-18 | | | |
| | | Beavertail | [] | win.beavertail | ['WageMole'] | 2025-11-17 | | | |
| | | OtterCookie | [] | js.otter_cookie | ['WageMole'] | 2025-11-17 | | | |
| | | PXA Stealer | ['PXAStealer', 'PXA'] | py.pxa_stealer | [] | 2025-11-17 | | | |
| | | TAMECAT | [] | vbs.tamecat | ['APT42'] | 2025-11-14 | | | |
| | | SilentSweeper | [] | win.silent_sweeper | [] | 2025-11-13 | | | |
| | | Laplas (Reverseshell) | [] | win.laplas_shell | [] | 2025-11-13 | | | |
| | | Shadow RAT | [] | win.shadow_rat | [] | 2025-11-13 | | | |
| | | RAILSETTER | [] | win.railsetter | [] | 2025-11-13 | | | |
| | | FINALDRAFT | [] | win.finaldraft | [] | 2025-11-13 | | | |
| | | Godzilla Webshell | [] | jsp.godzilla_webshell | [] | 2025-11-13 | | | |
| | | Unidentified 093 (Sidewinder) | [] | win.unidentified_093 | ['RAZOR TIGER'] | 2025-11-13 | | | |
| | | RunForestRun | ['Blackhole', 'Sutra'] | js.runforestrun | [] | 2025-11-13 | | | |
| | | GootKit | ['Waldek', 'Xswkit', 'talalpek'] | win.gootkit | [] | 2025-11-13 | | | |
| | | PureRAT | ['PureHVNC', 'ResolverRAT'] | win.pure_rat | [] | 2025-11-13 | | | |
| | | Pterois | [] | win.pterois | ['Swan Vector'] | 2025-11-13 | | | |
| | | Meterpreter | [] | win.meterpreter | [] | 2025-11-13 | | | |
| | | Unidentified PS 005 (Telegram Bot) | [] | ps1.unidentified_005 | ['YoroTrooper'] | 2025-11-13 | | | |
| | | FULLMETAL | [] | win.fullmetal | [] | 2025-11-13 | | | |
| | | GootLoader | ['SLOWPOUR'] | js.gootloader | ['Storm-0249'] | 2025-11-11 | | | |