| | | Cactus | [] | win.cactus | [] | 2025-03-05 | | | |
| | | DanaBot | [] | win.danabot | ['SCULLY SPIDER'] | 2025-03-05 | | | |
| | | IcedID | ['BokBot', 'IceID'] | win.icedid | ['GOLD CABIN', 'Lunar Spider'] | 2025-03-05 | | | |
| | | DarkGate | ['Meh', 'MehCrypter'] | win.darkgate | [] | 2025-03-05 | | | |
| | | Cuba | ['COLDDRAW'] | win.cuba | [] | 2025-03-05 | | | |
| | | FINALDRAFT | [] | elf.finaldraft | [] | 2025-02-28 | | | |
| | | FINALDRAFT | [] | win.finaldraft | [] | 2025-02-28 | | | |
| | | PolarEdge | [] | elf.polaredge | [] | 2025-02-28 | | | |
| | | PANIX | [] | sh.panix | [] | 2025-02-28 | | | |
| | | ValleyRAT | ['Winos'] | win.valley_rat | [] | 2025-02-28 | | | |
| | | Winos | [] | win.winos | ['Void Arachne'] | 2025-02-28 | | | |
| | | TgToxic | [] | apk.tgtoxic | [] | 2025-02-28 | | | |
| | | Cyclops | [] | win.cyclops | [] | 2025-02-28 | | | |
| | | AllaSenha | [] | win.allasenha | [] | 2025-02-28 | | | |
| | | EvilGnome | [] | elf.evilgnome | ['Gamaredon Group'] | 2025-02-28 | | | |
| | | HiddenWasp | [] | elf.hiddenwasp | [] | 2025-02-28 | | | |
| | | Turla RAT | [] | elf.turla_rat | [] | 2025-02-28 | | | |
| | | BitRAT | [] | win.bit_rat | [] | 2025-02-28 | | | |
| | | OceanLotus | [] | osx.oceanlotus | ['APT32'] | 2025-02-28 | | | |
| | | RecordBreaker | [] | win.recordbreaker | [] | 2025-02-28 | | | |
| | | StegoLoader | [] | win.stegoloader | [] | 2025-02-28 | | | |
| | | DuQu | [] | win.duqu | ['Unit 8200'] | 2025-02-28 | | | |
| | | Nanocore RAT | ['Nancrat', 'NanoCore'] | win.nanocore | ['APT33', 'The Gorgon Group'] | 2025-02-28 | | | |
| | | RedTail | [] | elf.redtail | [] | 2025-02-28 | | | |
| | | Winnti | ['BleDoor', 'JUMPALL', 'RbDoor', 'Pasteboy'] | win.winnti | ['APT17'] | 2025-02-28 | | | |
| | | RAWDOOR | [] | win.rawdoor | ['APT31'] | 2025-02-28 | | | |
| | | AllaKore | [] | win.allakore | [] | 2025-02-28 | | | |
| | | donut_injector | ['Donut'] | win.donut_injector | [] | 2025-02-28 | | | |
| | | Sliver | [] | win.sliver | [] | 2025-02-28 | | | |
| | | BellaCiao | [] | win.bellaciao | [] | 2025-02-28 | | | |
| | | xmrig | [] | win.xmrig | [] | 2025-02-28 | | | |
| | | Godzilla Webshell | [] | jsp.godzilla_webshell | [] | 2025-02-28 | | | |
| | | Behinder | [] | php.behinder | [] | 2025-02-28 | | | |
| | | LCRYX | [] | vbs.lcryx | [] | 2025-02-26 | | | |
| | | MarraCrypt | [] | win.marracrypt | [] | 2025-02-26 | | | |
| | | Hermes | [] | win.hermes | ['Lazarus Group'] | 2025-02-26 | | | |
| | | ToxicEye | [] | win.toxiceye | [] | 2025-02-25 | | | |
| | | CashRansomware | [] | win.cashransom | [] | 2025-02-25 | | | |
| | | TAMECAT | [] | vbs.tamecat | ['APT42'] | 2025-02-25 | | | |
| | | ShrinkLocker | [] | win.shrinklocker | [] | 2025-02-25 | | | |
| | | Darktrack RAT | [] | win.darktrack_rat | [] | 2025-02-25 | | | |
| | | MoqHao | ['Shaoye', 'Wroba', 'XLoader'] | apk.moqhao | ['Yanbian Gang'] | 2025-02-25 | | | |
| | | xHelper | [] | apk.xhelper | [] | 2025-02-25 | | | |
| | | BlackSuit | [] | win.blacksuit | [] | 2025-02-25 | | | |
| | | Slocker | ['Jisut', 'Simple Locker'] | apk.slocker | [] | 2025-02-28 | | | |
| | | Zloader | ['DELoader', 'SILENTNIGHT', 'Terdot'] | win.zloader | [] | 2025-02-25 | | | |
| | | KV | [] | sh.kv | ['Volt Typhoon'] | 2025-01-23 | | | |
| | | KrustyLoader | [] | elf.krustyloader | [] | 2025-02-21 | | | |
| | | Cring | [] | win.cring | [] | 2025-02-20 | | | |
| | | ElizaRAT | [] | win.eliza_rat | ['Operation C-Major'] | 2025-02-19 | | | |
| | | LODEINFO | [] | win.lodeinfo | ['MirrorFace'] | 2025-02-19 | | | |
| | | NOOPDOOR | ['HiddenFace'] | win.noopdoor | ['MirrorFace'] | 2025-02-19 | | | |
| | | COOKBOX | [] | ps1.cookbox | ['UAC-0149'] | 2025-02-19 | | | |
| | | DarkSide | [] | elf.darkside | [] | 2025-02-19 | | | |
| | | DarkSide | ['BlackMatter'] | win.darkside | [] | 2025-02-19 | | | |
| | | SMOKEDHAM | [] | win.smokedham | [] | 2025-02-19 | | | |
| | | SECONDDATE | [] | elf.seconddate | [] | 2025-02-19 | | | |
| | | Marcher | ['ExoBot'] | apk.marcher | [] | 2025-02-19 | | | |
| | | FrigidStealer | [] | osx.frigid_stealer | [] | 2025-02-19 | | | |
| | | Unidentified 120 | [] | win.unidentified_120 | [] | 2025-02-19 | | | |
| | | magecart | [] | js.magecart | ['FIN6', 'MageCart'] | 2025-02-18 | | | |
| | | Moisha Ransomware | [] | win.moisha | [] | 2025-02-18 | | | |
| | | tsunami | [] | win.tsunami | ['Lazarus Group'] | 2025-02-10 | | | |
| | | BlankGrabber | [] | py.blankgrabber | [] | 2025-02-18 | | | |
| | | PATHLOADER | [] | win.pathloader | [] | 2025-02-17 | | | |
| | | BACKORDER | [] | win.backorder | ['Sandworm'] | 2025-02-17 | | | |
| | | Kalambur | [] | ps1.kalambur | ['Sandworm'] | 2025-02-17 | | | |
| | | STEELHOOK | [] | ps1.steelhook | ['APT28'] | 2025-02-17 | | | |
| | | MASEPIE | [] | py.masepie | ['APT28'] | 2025-02-17 | | | |
| | | HATVIBE | [] | vbs.hatvibe | ['UAC-0063'] | 2025-02-17 | | | |
| | | MooBot | [] | elf.moobot | [] | 2025-02-17 | | | |
| | | CredoMap | [] | win.credomap | ['APT28'] | 2025-02-17 | | | |
| | | OCEANMAP | [] | win.oceanmap | ['APT28'] | 2025-02-17 | | | |
| | | Headlace | [] | win.headlace | [] | 2025-02-17 | | | |
| | | Lynx | [] | win.lynx | [] | 2025-02-17 | | | |
| | | TelePowerBot | [] | win.telepowerbot | [] | 2025-02-13 | | | |
| | | KamiKakaBot | ['Kami'] | win.kami | [] | 2025-02-13 | | | |
| | | Luxy | [] | win.luxy | [] | 2025-02-13 | | | |
| | | GoRed | [] | win.go_red | ['ExCobalt'] | 2025-02-13 | | | |
| | | LocalOlive | [] | asp.localolive | ['Sandworm'] | 2025-02-13 | | | |
| | | Antidot | [] | apk.antidot | [] | 2025-02-25 | | | |
| | | CMS8000 Backdoor | [] | elf.cms8000_backdoor | [] | 2025-02-11 | | | |
| | | PureLogs Stealer | [] | win.purelogs | [] | 2025-02-03 | | | |
| | | BlackCat | ['ALPHV', 'Noberus'] | win.blackcat | [] | 2025-02-10 | | | |
| | | Brute Ratel C4 | ['BOLDBADGER', 'BruteRatel'] | win.brute_ratel_c4 | [] | 2025-02-10 | | | |
| | | Parite | [] | win.parite | [] | 2025-02-10 | | | |
| | | php.shin_webshell | [] | php.shin_webshell | [] | 2025-02-10 | | | |
| | | Unidentified PS 005 (Telegram Bot) | [] | ps1.unidentified_005 | ['YoroTrooper'] | 2025-02-10 | | | |
| | | Creal Stealer | [] | py.creal_stealer | [] | 2025-02-10 | | | |
| | | Sshdinjector | [] | elf.sshdinjector | [] | 2025-02-10 | | | |
| | | BADBOX | [] | apk.badbox | [] | 2025-02-10 | | | |
| | | INC | [] | elf.inc | [] | 2025-02-06 | | | |
| | | FlexibleFerret | [] | osx.flexibleferret | ['WageMole'] | 2025-02-04 | | | |
| | | FriendlyFerret | [] | osx.friendlyferret | ['WageMole'] | 2025-02-04 | | | |
| | | FrostyFerret | [] | osx.frostyferret | ['WageMole'] | 2025-02-04 | | | |
| | | Satacom | ['CurlyGate', 'LegionLoader', 'RobotDropper'] | win.satacom | [] | 2025-02-04 | | | |
| | | FrostyGoop | ['BUSTLEBERM'] | win.frostygoop | [] | 2025-02-04 | | | |
| | | KillDisk | [] | win.killdisk | ['Sandworm', 'TeleBots'] | 2025-02-03 | | | |
| | | Ozone RAT | [] | win.ozone | [] | 2025-02-03 | | | |
| | | Monokle | [] | apk.monokle | [] | 2025-02-03 | | | |