| | | PortStarter | [] | win.portstarter | ['Vanilla Tempest'] | 2025-05-09 | | | |
| | | Mount Locker | ['DagonLocker', 'MountLocker', 'QuantumLocker'] | win.mount_locker | ['Vanilla Tempest'] | 2025-05-09 | | | |
| | | Supper | [] | win.supper | ['Vanilla Tempest'] | 2025-05-09 | | | |
| | | INC | [] | elf.inc | ['Storm-0494', 'Vanilla Tempest'] | 2025-05-19 | | | |
| | | XRed | [] | win.xred | [] | 2025-05-09 | | | |
| | | DevilsTongue | [] | win.devilstongue | ['Caramel Tsunami'] | 2025-05-09 | | | |
| | | Shopper | ['LeifAccess'] | apk.shopper | [] | 2025-05-09 | | | |
| | | GIFTEDCROOK | [] | win.giftedcrook | ['UAC-0226'] | 2025-05-06 | | | |
| | | tsunami | [] | win.tsunami | ['Lazarus Group'] | 2025-05-05 | | | |
| | | DCRat | ['DarkCrystal RAT'] | win.dcrat | [] | 2025-05-02 | | | |
| | | PerlBot | ['ShellBot', 'DDoS Perl IrcBot'] | elf.perlbot | [] | 2025-05-02 | | | |
| | | COOKBOX | [] | ps1.cookbox | ['UAC-0149'] | 2025-05-02 | | | |
| | | StormKittyRAT | [] | win.stormkitty_rat | [] | 2025-05-02 | | | |
| | | Owowa | [] | win.owowa | [] | 2025-05-02 | | | |
| | | ResolverRAT | [] | win.resolver_rat | [] | 2025-04-15 | | | |
| | | Mocky LNK | [] | win.mocky_lnk | ['APT28'] | 2025-05-02 | | | |
| | | OCEANMAP | [] | win.oceanmap | ['APT28'] | 2025-05-02 | | | |
| | | Fog | [] | win.fog | [] | 2025-05-02 | | | |
| | | STOP | ['KeyPass', 'Djvu'] | win.stop | [] | 2025-05-02 | | | |
| | | B0 | [] | win.b0 | [] | 2025-05-02 | | | |
| | | Virut | [] | win.virut | [] | 2025-05-02 | | | |
| | | GhostWeaver | [] | ps1.ghostweaver | [] | 2025-05-01 | | | |
| | | Oski Stealer | [] | win.oski | [] | 2025-05-01 | | | |
| | | PlugX | ['Destroy RAT', 'Kaba', 'Korplug', 'Sogu', 'TIGERPLUG', 'RedDelta'] | win.plugx | ['APT 22', 'APT 26', 'APT31', 'APT41', 'Aurora Panda', 'Calypso group', 'DragonOK', 'EMISSARY PANDA', 'Hellsing', 'Hurricane Panda', 'Leviathan', 'Mirage', 'Mustang Panda', 'NetTraveler', 'Nightshade Panda', 'SLIME29', 'Samurai Panda', 'Stone Panda', 'UPS', 'Violin Panda'] | 2025-03-21 | | | |
| | | Unidentified 121 | [] | win.unidentified_121 | [] | 2025-04-28 | | | |
| | | Venom RAT | [] | win.venom | [] | 2025-04-28 | | | |
| | | win.beast | ['blacklockbit'] | win.beast | [] | 2025-04-28 | | | |
| | | Black Basta | ['no_name_software'] | win.blackbasta | ['GOLD REBELLION', 'STAC5143', 'Storm-0506', 'Storm-0826', 'TA2101', 'UNC3973', 'UNC4393'] | 2025-04-28 | | | |
| | | SystemBC | [] | elf.systembc | [] | 2025-04-28 | | | |
| | | Black Basta | [] | elf.blackbasta | [] | 2025-04-28 | | | |
| | | WIREFIRE | ['GIFTEDVISITOR'] | py.wirefire | [] | 2025-04-28 | | | |
| | | SystemBC | ['Coroxy', 'DroxiDat'] | win.systembc | ['Vanilla Tempest'] | 2025-05-09 | | | |
| | | Pyramid | [] | py.pyramid | [] | 2025-04-28 | | | |
| | | MASOL | [] | elf.masol | ['Earth Estries'] | 2025-04-28 | | | |
| | | LightNeuron | ['NETTRANS', 'XTRANS'] | win.lightneuron | ['Turla'] | 2025-04-28 | | | |
| | | XOR DDoS | ['XORDDOS'] | elf.xorddos | [] | 2025-04-28 | | | |
| | | Quasar RAT | ['CinaRAT', 'QuasarRAT', 'Yggdrasil'] | win.quasar_rat | ['APT33', 'Dropping Elephant', 'Stone Panda', 'The Gorgon Group'] | 2025-04-28 | | | |
| | | NjRAT | ['Bladabindi', 'Lime-Worm'] | win.njrat | ['AQUATIC PANDA', 'Earth Lusca', 'Operation C-Major', 'The Gorgon Group'] | 2025-04-28 | | | |
| | | Parallax RAT | ['ParallaxRAT'] | win.parallax | [] | 2025-04-28 | | | |
| | | MysterySnail | [] | win.mystery_snail | [] | 2025-04-27 | | | |
| | | Lilith | [] | win.lilith | ['Silent Chollima', 'Tick'] | 2025-04-25 | | | |
| | | PipeMagic | [] | win.pipemagic | [] | 2025-04-25 | | | |
| | | GUIDLOADER | [] | win.guidloader | [] | 2025-04-25 | | | |
| | | FINALDRAFT | [] | win.finaldraft | [] | 2025-04-25 | | | |
| | | PATHLOADER | [] | win.pathloader | [] | 2025-04-25 | | | |
| | | FINALDRAFT | [] | elf.finaldraft | [] | 2025-04-25 | | | |
| | | RansomEXX | ['Ransom X', 'Defray777'] | win.ransomexx | ['GOLD DUPONT'] | 2025-04-25 | | | |
| | | Brute Ratel C4 | ['BOLDBADGER', 'BruteRatel'] | win.brute_ratel_c4 | [] | 2025-04-25 | | | |
| | | CloudEyE | ['GuLoader', 'vbdropper'] | win.cloudeye | [] | 2025-04-25 | | | |
| | | XiebroC2 | [] | win.xiebroc2 | [] | 2025-04-25 | | | |
| | | XWorm | [] | win.xworm | [] | 2025-04-25 | | | |
| | | TargetCompany | ['Fargo', 'Mallox', 'Tohnichi'] | win.targetcompany | [] | 2025-04-25 | | | |
| | | Pteranodon | ['Pterodo'] | win.pteranodon | ['Gamaredon Group', 'Operation Armageddon'] | 2025-04-25 | | | |
| | | DarkGate | ['Meh', 'MehCrypter'] | win.darkgate | [] | 2025-04-25 | | | |
| | | Industroyer | ['Crash', 'CrashOverride'] | win.industroyer | ['ELECTRUM'] | 2025-04-25 | | | |
| | | INDUSTROYER2 | [] | win.industroyer2 | ['Sandworm'] | 2025-04-25 | | | |
| | | FrostyGoop | ['BUSTLEBERM'] | win.frostygoop | [] | 2025-04-25 | | | |
| | | Sliver | [] | win.sliver | [] | 2025-04-25 | | | |
| | | Interlock | [] | elf.interlock | [] | 2025-04-17 | | | |
| | | Berserk Stealer | [] | win.berserk_stealer | [] | 2025-04-17 | | | |
| | | BLACKCOFFEE | ['PNGRAT', 'gresim', 'ZoxPNG'] | win.blackcoffee | ['APT41', 'Aurora Panda', 'Leviathan'] | 2025-04-17 | | | |
| | | Derusbi | ['PHOTO'] | win.derusbi | ['APT41', 'APT17', 'Leviathan', 'Stone Panda'] | 2025-04-17 | | | |
| | | HiKit | [] | win.hikit | ['Aurora Panda', 'Hurricane Panda'] | 2025-04-17 | | | |
| | | WINELOADER | [] | win.wineloader | ['APT29'] | 2025-04-16 | | | |
| | | GRAPELOADER | [] | win.grapeloader | ['APT29'] | 2025-04-16 | | | |
| | | Lynx | [] | win.lynx | [] | 2025-04-16 | | | |
| | | RN Stealer | [] | py.rn_stealer | ['TraderTraitor'] | 2025-04-15 | | | |
| | | WhiteSnake Stealer | [] | win.whitesnake | [] | 2025-04-14 | | | |
| | | neshta | [] | win.neshta | [] | 2025-04-14 | | | |
| | | JSOutProx | [] | win.jsoutprox | ['SOLAR SPIDER'] | 2024-04-08 | | | |
| | | Octowave Loader | [] | win.octowave | [] | 2025-04-01 | | | |
| | | Sheriff | [] | win.sheriff | [] | 2025-04-10 | | | |
| | | ReedBed | [] | win.reedbed | ['MALLARD SPIDER', 'UNC4393'] | 2025-03-28 | | | |
| | | SPAWNSNARE | [] | elf.spawnsnare | [] | 2025-04-11 | | | |
| | | RAILSETTER | [] | win.railsetter | [] | 2025-04-11 | | | |
| | | Godzilla Webshell | [] | jsp.godzilla_webshell | [] | 2025-04-11 | | | |
| | | HyperSSL | ['SysUpdate'] | elf.hyperssl | ['APT27'] | 2023-03-13 | | | |
| | | DarkWisp | [] | ps1.dark_wisp | ['Larva-208'] | 2025-04-11 | | | |
| | | SilentPrism | [] | ps1.silent_prism | ['Larva-208'] | 2025-04-11 | | | |
| | | Rhadamanthys | [] | win.rhadamanthys | ['Sandworm'] | 2025-04-11 | | | |
| | | Kematian Stealer | [] | win.kematian | [] | 2025-04-11 | | | |
| | | INCONTROLLER | [] | win.incontroller | [] | 2025-04-10 | | | |
| | | HijackLoader | ['DOILoader', 'GHOSTPULSE', 'IDAT Loader', 'SHADOWLADDER'] | win.hijackloader | [] | 2025-04-10 | | | |
| | | Crocodilus | [] | apk.crocodilus | [] | 2025-04-10 | | | |
| | | TsarBot | [] | apk.tsarbot | [] | 2025-04-10 | | | |
| | | Salvador Stealer | [] | apk.salvador | [] | 2025-04-10 | | | |
| | | kitty-socks5 | [] | elf.kitty_soks5 | [] | 2025-04-10 | | | |
| | | Deputy | [] | win.deputy | [] | 2025-04-10 | | | |
| | | VIP Keylogger | [] | win.vipkeylogger | [] | 2025-04-09 | | | |
| | | CurlBack RAT | [] | win.curlback | ['SideCopy'] | 2025-04-09 | | | |
| | | badbazaar | [] | apk.badbazaar | ['APT15'] | 2025-04-09 | | | |
| | | XenoRAT | [] | win.xenorat | [] | 2025-04-09 | | | |
| | | ShadowPad | ['POISONPLUG.SHADOW', 'XShellGhost'] | win.shadowpad | ['APT23', 'APT41', 'APT17', 'DAGGER PANDA', 'Earth Lusca', 'Tonto Team', 'WET PANDA'] | 2025-04-09 | | | |
| | | ValleyRAT | ['Winos'] | win.valley_rat | [] | 2025-04-09 | | | |
| | | Rugmi | ['Penguish'] | win.rugmi | [] | 2025-04-09 | | | |
| | | Grenam | ['Renamer', 'gnamer'] | win.grenam | [] | 2025-04-07 | | | |
| | | Auto-Color | [] | elf.auto_color | [] | 2025-04-01 | | | |
| | | DOPLUGS | [] | win.doplugs | ['MUSTANG PANDA'] | 2025-03-21 | | | |
| | | NetSupportManager RAT | ['NetSupport'] | win.netsupportmanager_rat | [] | 2025-04-01 | | | |
| | | sLoad | ['Starslord'] | ps1.sload | [] | 2025-04-01 | | | |