| | | INDUSTROYER2 | [] | win.industroyer2 | ['Sandworm'] | 2025-01-29 | | | |
| | | BPFDoor | ['JustForFun'] | elf.bpfdoor | ['Red Menshen'] | 2025-01-29 | | | |
| | | Beavertail | [] | win.beavertail | ['WageMole'] | 2025-01-29 | | | |
| | | CreateHiddenAccount | [] | win.create_hidden_account | [] | 2025-01-29 | | | |
| | | KEYPLUG | ['ELFSHELF'] | elf.keyplug | ['APT41'] | 2025-01-29 | | | |
| | | JuicyPotato | [] | win.juicy_potato | [] | 2025-01-28 | | | |
| | | SlowStepper | [] | win.slowstepper | [] | 2025-01-27 | | | |
| | | WarmCookie | ['Badspace', 'Carrotstick', 'QUICKBIND'] | win.warmcookie | [] | 2025-01-27 | | | |
| | | SALTWATER | [] | elf.saltwater | [] | 2025-01-27 | | | |
| | | SEASPY | [] | elf.seaspy | [] | 2025-01-27 | | | |
| | | WHIRLPOOL | [] | elf.whirlpool | [] | 2025-01-27 | | | |
| | | 888 RAT | [] | apk.888_rat | [] | 2025-01-27 | | | |
| | | Aberebot | ['Escobar'] | apk.aberebot | [] | 2025-01-27 | | | |
| | | HemiGate | [] | win.hemigate | ['Earth Estries'] | 2025-01-27 | | | |
| | | SparrowDoor | [] | win.sparrow_door | ['GhostEmperor'] | 2025-01-27 | | | |
| | | ClearFake | [] | js.clearfake | [] | 2025-01-26 | | | |
| | | cd00r | [] | elf.cd00r | [] | 2025-01-24 | | | |
| | | J-Magic | [] | elf.j_magic | [] | 2025-01-24 | | | |
| | | HellDown | [] | elf.helldown | [] | 2025-01-24 | | | |
| | | QakBot | ['Oakboat', 'Pinkslipbot', 'Qbot', 'Quakbot'] | win.qakbot | ['GOLD CABIN'] | 2025-01-24 | | | |
| | | Quasar RAT | ['CinaRAT', 'QuasarRAT', 'Yggdrasil'] | win.quasar_rat | ['APT33', 'Dropping Elephant', 'Stone Panda', 'The Gorgon Group'] | 2025-01-23 | | | |
| | | Leslieloader | [] | win.leslieloader | [] | 2025-01-28 | | | |
| | | Svpeng | [] | apk.svpeng | [] | 2025-01-23 | | | |
| | | Braodo | [] | py.braodo | [] | 2025-01-23 | | | |
| | | KV | [] | sh.kv | ['Volt Typhoon'] | 2025-01-23 | | | |
| | | Ebury | [] | elf.ebury | [] | 2025-01-23 | | | |
| | | PLAY | ['PlayCrypt'] | win.play | [] | 2025-01-20 | | | |
| | | HijackLoader | ['DOILoader', 'GHOSTPULSE', 'IDAT Loader', 'SHADOWLADDER'] | win.hijackloader | [] | 2025-01-20 | | | |
| | | Carbanak | ['Anunak', 'Sekur RAT'] | win.carbanak | ['FIN7'] | 2025-01-20 | | | |
| | | Industroyer | ['Crash', 'CrashOverride'] | win.industroyer | ['ELECTRUM'] | 2024-05-23 | | | |
| | | Mirai | ['Katana'] | elf.mirai | [] | 2025-01-14 | | | |
| | | AIRASHI | [] | elf.airashi | [] | 2025-01-16 | | | |
| | | kitty-soks5 | [] | elf.kitty_soks5 | [] | 2025-01-16 | | | |
| | | Splinter | [] | win.splinter | [] | 2025-01-15 | | | |
| | | POORTRY | [] | win.poortry | [] | 2025-01-15 | | | |
| | | Yasso | [] | win.yasso | [] | 2025-01-15 | | | |
| | | Ladon | [] | win.ladon | [] | 2025-01-15 | | | |
| | | scanbox | [] | js.scanbox | ['Leviathan'] | 2025-01-15 | | | |
| | | Sync-Scheduler | [] | win.sync_scheduler | [] | 2025-01-15 | | | |
| | | MISTPEN | [] | win.mistpen | ['UNC2970'] | 2025-01-15 | | | |
| | | Rubeus | [] | win.rubeus | [] | 2025-01-15 | | | |
| | | Royal Ransom | [] | win.royal_ransom | [] | 2025-01-15 | | | |
| | | Royal Ransom | [] | ps1.royal_ransom | [] | 2025-01-15 | | | |
| | | BlackSuit | [] | win.blacksuit | [] | 2025-01-15 | | | |
| | | Royal Ransom | ['Royal_unix', 'Royal'] | elf.royal_ransom | [] | 2025-01-15 | | | |
| | | BlackSuit | [] | elf.blacksuit | [] | 2025-01-15 | | | |
| | | ComeBacker | [] | win.comebacker | ['Lazarus Group'] | 2025-01-14 | | | |
| | | SimpleTea | [] | osx.simpletea | ['Lazarus Group'] | 2025-01-14 | | | |
| | | SimpleTea | ['PondRAT', 'SimplexTea'] | elf.simpletea | ['Lazarus Group'] | 2025-01-14 | | | |
| | | More_eggs | ['SpicyOmelette', 'SKID'] | js.more_eggs | ['Cobalt', 'FIN6', 'VENOM SPIDER'] | 2025-01-14 | | | |
| | | HLOADER | [] | osx.hloader | ['Lazarus Group'] | 2025-01-14 | | | |
| | | KANDYKORN | [] | osx.kandykorn | ['Lazarus Group'] | 2025-01-14 | | | |
| | | SUGARLOADER | [] | osx.sugarloader | ['Lazarus Group'] | 2025-01-14 | | | |
| | | FunkSec | [] | win.funksec | [] | 2025-01-14 | | | |
| | | RustBucket | [] | osx.rustbucket | ['Lazarus Group'] | 2025-01-14 | | | |
| | | ToxicPanda | [] | apk.toxic_panda | [] | 2025-01-14 | | | |
| | | Coper | ['ExobotCompact', 'Octo'] | apk.coper | [] | 2025-01-14 | | | |
| | | FluBot | ['Cabassous', 'FakeChat'] | apk.flubot | [] | 2025-01-14 | | | |
| | | Hook | [] | apk.hook | [] | 2025-01-14 | | | |
| | | DanaBot | [] | win.danabot | ['SCULLY SPIDER'] | 2025-01-14 | | | |
| | | BianLian | [] | win.bianlian | [] | 2025-01-14 | | | |
| | | Sliver | [] | win.sliver | [] | 2025-01-14 | | | |
| | | Remcos | ['RemcosRAT', 'Remvio', 'Socmer'] | win.remcos | ['APT33', 'The Gorgon Group', 'UAC-0050'] | 2025-01-14 | | | |
| | | Havoc | ['Havokiz'] | win.havoc | [] | 2025-01-14 | | | |
| | | NonEuclid RAT | [] | win.noneuclid_rat | [] | 2025-01-09 | | | |
| | | SpyMax | [] | apk.spymax | [] | 2025-01-07 | | | |
| | | SpyNote | ['CypherRat'] | apk.spynote | ['OilRig'] | 2025-01-07 | | | |
| | | ArdaMax | [] | win.ardamax | [] | 2025-01-07 | | | |
| | | CryptBot | [] | win.cryptbot | [] | 2025-01-07 | | | |
| | | PrivateLoader | [] | win.privateloader | [] | 2025-01-07 | | | |
| | | Broomstick | ['CLEANBOOST', 'CleanUp', 'CleanUpLoader', 'Oyster'] | win.broomstick | [] | 2025-01-07 | | | |
| | | SwaetRAT | [] | win.swaet_rat | [] | 2025-01-07 | | | |
| | | EagerBee | [] | win.eagerbee | [] | 2025-01-07 | | | |
| | | Emmenhtal | ['IDATDropper', 'PEAKLIGHT'] | win.emmenhtal | [] | 2025-01-02 | | | |
| | | SADBRIDGE | [] | win.sadbridge | [] | 2025-01-02 | | | |
| | | Gosar | [] | win.gosar | [] | 2025-01-02 | | | |
| | | RiseLoader | [] | win.riseloader | [] | 2025-01-02 | | | |
| | | Raccoon | ['Mohazo', 'RaccoonStealer', 'Racealer', 'Racoon'] | win.raccoon | [] | 2024-12-20 | | | |
| | | RecordBreaker | [] | win.recordbreaker | [] | 2024-12-20 | | | |
| | | Mailto | ['Koko Ransomware', 'NetWalker'] | win.mailto | [] | 2022-04-07 | | | |
| | | Glutton | [] | php.glutton | [] | 2024-12-20 | | | |
| | | PWNLNX | [] | elf.pwnlnx | [] | 2024-12-20 | | | |
| | | Ngioweb | [] | elf.ngioweb | ['Water Barghest'] | 2024-12-20 | | | |
| | | SSHDoor | [] | elf.sshdoor | [] | 2024-12-20 | | | |
| | | Winnti | ['BleDoor', 'JUMPALL', 'RbDoor', 'Pasteboy'] | win.winnti | ['APT17'] | 2024-12-20 | | | |
| | | Kimsuky | [] | win.kimsuky | ['Kimsuki', 'Kimsuky'] | 2024-12-20 | | | |
| | | EVILNUM | [] | win.evilnum | [] | 2024-12-20 | | | |
| | | MiyaRAT | [] | win.miya_rat | ['HAZY TIGER'] | 2024-12-20 | | | |
| | | Winnti | [] | elf.winnti | ['Winnti Umbrella'] | 2024-12-20 | | | |
| | | PUMAKIT | ['PUMA', 'Kitsune'] | elf.pumakit | [] | 2024-12-13 | | | |
| | | WmRAT | [] | win.wm_rat | ['HAZY TIGER'] | 2024-12-17 | | | |
| | | DEEPDATA | [] | win.deepdata | [] | 2024-12-16 | | | |
| | | PixPirate | [] | apk.pixpirate | [] | 2024-12-16 | | | |
| | | NetSupportManager RAT | ['NetSupport'] | win.netsupportmanager_rat | [] | 2024-12-16 | | | |
| | | RMS | ['Gussdoor', 'Remote Manipulator System', 'RuRAT'] | win.rms | ['TA505'] | 2024-12-16 | | | |
| | | Mocky LNK | [] | win.mocky_lnk | ['APT28'] | 2024-12-16 | | | |
| | | SpyGrace | ['SpyGlace'] | win.spygrace | ['APT-C-60'] | 2024-12-16 | | | |
| | | OctoberSeventh | ['ESET Wiper'] | win.october_seventh | [] | 2024-12-16 | | | |
| | | BiBi | ['BiBi-Windows'] | win.bibi | ['Void Manticore'] | 2024-12-16 | | | |
| | | Careto | ['TheMask'] | win.careto | ['Careto'] | 2024-12-16 | | | |