| | | Roshtyak | [] | win.roshtyak | [] | 2023-11-17 | | | |
| | | Fauppod | [] | win.fauppod | [] | 2023-11-17 | | | |
| | | Houdini | ['Hworm', 'Jenxcus', 'Kognito', 'Njw0rm', 'WSHRAT', 'dinihou', 'dunihi'] | win.houdini | [] | 2023-11-17 | | | |
| | | GHAMBAR | [] | win.ghambar | [] | 2023-11-17 | | | |
| | | SILENTUPLOADER | [] | win.silentuploader | [] | 2023-11-17 | | | |
| | | BROKEYOLK | [] | win.brokeyolk | [] | 2023-11-17 | | | |
| | | DOSTEALER | [] | win.dostealer | [] | 2023-11-17 | | | |
| | | PINEFLOWER | [] | apk.pineflower | [] | 2023-11-17 | | | |
| | | VINETHORN | [] | apk.vinethorn | [] | 2023-11-17 | | | |
| | | CredoMap | [] | win.credomap | ['APT28'] | 2023-11-14 | | | |
| | | DriveOcean | ['Google Drive RAT'] | win.driveocean | ['APT28'] | 2023-11-14 | | | |
| | | IMAPLoader | [] | win.imap_loader | ['Tortoiseshell'] | 2023-11-14 | | | |
| | | IPStorm | ['InterPlanetary Storm'] | apk.ipstorm | [] | 2023-11-14 | | | |
| | | AxBanker | [] | apk.axbanker | [] | 2023-11-14 | | | |
| | | lampion | [] | vbs.lampion | [] | 2023-11-13 | | | |
| | | HiddenAd | [] | apk.hiddenad | [] | 2023-11-14 | | | |
| | | HLOADER | [] | osx.hloader | ['Lazarus Group'] | 2023-11-14 | | | |
| | | SUGARLOADER | [] | osx.sugarloader | ['Lazarus Group'] | 2023-11-14 | | | |
| | | KANDYKORN | [] | osx.kandykorn | ['Lazarus Group'] | 2023-11-14 | | | |
| | | Elibomi | ['Drinik'] | apk.elibomi | [] | 2023-11-14 | | | |
| | | EternalRocks | ['MicroBotMassiveNet'] | win.eternalrocks | [] | 2023-11-14 | | | |
| | | FakeUpdateRU | [] | js.fakeupdateru | [] | 2023-11-13 | | | |
| | | BiBi-Linux | [] | elf.bibi_linux | [] | 2023-11-13 | | | |
| | | Unidentified APK 005 | [] | apk.unidentified_005 | ['APT-C-35'] | 2023-07-24 | | | |
| | | Dacls | ['MATA'] | win.dacls | ['Lazarus Group'] | 2023-10-18 | | | |
| | | SEASPY | [] | elf.seaspy | [] | 2023-10-17 | | | |
| | | Astasia | [] | win.astasia | [] | 2023-10-17 | | | |
| | | ToxicEye | [] | win.toxiceye | [] | 2023-10-17 | | | |
| | | MOrder RAT | [] | apk.morder_rat | [] | 2023-10-12 | | | |
| | | Poseidon | [] | osx.poseidon | [] | 2023-10-12 | | | |
| | | Athena | [] | win.athena | [] | 2023-10-12 | | | |
| | | iceFire | [] | elf.icefire | [] | 2023-10-11 | | | |
| | | IZ1H9 | [] | elf.iz1h9 | [] | 2023-10-11 | | | |
| | | CustomerLoader | [] | win.customerloader | [] | 2023-10-11 | | | |
| | | LgoogLoader | [] | win.lgoogloader | [] | 2023-10-11 | | | |
| | | MarraCrypt | [] | win.marracrypt | [] | 2023-10-10 | | | |
| | | HILDACRYPT | [] | win.hildacrypt | [] | 2023-10-10 | | | |
| | | Godfather | [] | apk.godfather | [] | 2023-10-10 | | | |
| | | DragonEgg | ['LightSpy'] | apk.dragonegg | ['APT41'] | 2023-10-09 | | | |
| | | GoldDigger | [] | apk.gold_digger | [] | 2023-10-09 | | | |
| | | PirateStealer | [] | win.pirate_stealer | [] | 2023-10-09 | | | |
| | | ChargeWeapon | [] | win.chargeweapon | [] | 2023-10-06 | | | |
| | | HorusEyes RAT | [] | win.horuseyes | [] | 2021-02-06 | | | |
| | | Horus Eyes RAT | [] | win.horus_eyes_rat | [] | 2021-08-06 | | | |
| | | Warsaw | [] | win.warsaw | [] | 2021-08-06 | | | |
| | | Mango | [] | win.mango | ['OilRig'] | 2023-10-06 | | | |
| | | Solar | [] | win.solar | ['OilRig'] | 2023-10-06 | | | |
| | | AnchorMail | ['ANCHOR.MAIL', 'Delegatz'] | win.anchormail | [] | 2023-10-05 | | | |
| | | SUPERNOVA | [] | win.supernova | [] | 2023-10-05 | | | |
| | | Revenge RAT | ['Revetrat'] | win.revenge_rat | ['The Gorgon Group'] | 2023-10-05 | | | |
| | | ViperSoftX | [] | ps1.vipersoftx | [] | 2023-10-05 | | | |
| | | 4h_rat | [] | win.4h_rat | ['Putter Panda'] | 2023-09-29 | | | |
| | | Penquin Turla | [] | elf.penquin_turla | ['Turla'] | 2023-09-25 | | | |
| | | Zyklon | [] | win.zyklon | [] | 2023-09-22 | | | |
| | | CapraRAT | [] | apk.capra_rat | ['Operation C-Major'] | 2023-09-20 | | | |
| | | Money Message | [] | win.moneymessage | [] | 2023-09-20 | | | |
| | | ElizaRAT | [] | win.eliza_rat | ['Operation C-Major'] | 2023-09-18 | | | |
| | | SprySOCKS | [] | elf.spry_socks | ['Earth Lusca'] | 2023-09-18 | | | |
| | | POWERSTATS | ['Valyria'] | ps1.powerstats | ['MuddyWater'] | 2023-09-12 | | | |
| | | StrikeSuit Gift | [] | win.strikesuit_gift | ['APT32'] | 2023-09-11 | | | |
| | | HDRoot | [] | win.hdroot | ['APT17'] | 2020-03-19 | | | |
| | | Winnti | [] | osx.winnti | ['APT17'] | 2018-01-17 | | | |
| | | Speculoos | [] | elf.speculoos | ['APT17'] | 2020-05-23 | | | |
| | | looChiper | [] | win.loochiper | [] | 2023-09-11 | | | |
| | | SALTWATER | [] | elf.saltwater | [] | 2023-07-19 | | | |
| | | Melofee | ['Mélofée'] | elf.melofee | [] | 2023-09-08 | | | |
| | | PingPull | [] | elf.pingpull | ['GALLIUM'] | 2023-09-08 | | | |
| | | SoWaT | [] | elf.sowat | ['APT31'] | 2023-09-08 | | | |
| | | Sword2033 | [] | elf.sword2033 | ['GALLIUM'] | 2023-09-08 | | | |
| | | Metamorfo | ['Casbaneiro'] | win.metamorfo | [] | 2023-09-05 | | | |
| | | TitanStealer | [] | win.titan_stealer | [] | 2023-09-04 | | | |
| | | SuperBear RAT | [] | win.superbear | [] | 2023-09-04 | | | |
| | | SteamHide | [] | win.steamhide | [] | 2023-09-04 | | | |
| | | GoatRAT | [] | apk.goat_rat | [] | 2023-09-01 | | | |
| | | BlackRemote | ['BlackRAT'] | win.blackremote | [] | 2023-09-01 | | | |
| | | SapphireStealer | [] | win.sapphire_stealer | [] | 2023-09-01 | | | |
| | | Hidden Bee | [] | win.hiddenbee | [] | 2023-09-01 | | | |
| | | Cinoshi | ['Agniane'] | win.cinoshi | [] | 2023-08-31 | | | |
| | | MrBlack | ['AESDDoS', 'Dofloo'] | elf.mrblack | [] | 2023-08-31 | | | |
| | | XOR DDoS | ['XORDDOS'] | elf.xorddos | [] | 2023-08-31 | | | |
| | | Gigabud | [] | apk.gigabud | [] | 2023-08-30 | | | |
| | | PerlBot | ['ShellBot', 'DDoS Perl IrcBot'] | elf.perlbot | [] | 2023-08-28 | | | |
| | | Echobot | [] | elf.echobot | [] | 2023-08-28 | | | |
| | | YamaBot | ['Kaos'] | win.yamabot | ['Silent Chollima'] | 2023-08-28 | | | |
| | | ExByte | [] | win.exbyte | [] | 2023-08-25 | | | |
| | | Snake | ['EKANS', 'SNAKEHOSE'] | win.snake | [] | 2022-08-28 | | | |
| | | Nopyfy | [] | win.nopyfy | [] | 2023-08-21 | | | |
| | | NodeStealer | [] | win.node_stealer | [] | 2023-08-21 | | | |
| | | Unidentified macOS 001 (UnionCryptoTrader) | [] | osx.unidentified_001 | ['Lazarus Group'] | 2023-08-21 | | | |
| | | HiatusRAT | [] | elf.hiatus_rat | [] | 2023-08-21 | | | |
| | | Golroted | [] | win.golroted | [] | 2023-08-17 | | | |
| | | Nimbo-C2 | [] | elf.nimbo_c2 | [] | 2023-08-15 | | | |
| | | NirCmd | [] | win.nircmd | [] | 2023-08-15 | | | |
| | | Royal Ransom | [] | ps1.royal_ransom | [] | 2023-08-15 | | | |
| | | Interception | [] | osx.interception | ['Lazarus Group'] | 2023-08-14 | | | |
| | | JanelaRAT | [] | win.janela_rat | [] | 2023-08-11 | | | |
| | | RedCap | [] | win.redcap | ['OilRig'] | 2023-08-10 | | | |
| | | PindOS | [] | js.pindos | [] | 2023-08-10 | | | |
| | | Winnti | [] | elf.winnti | ['Winnti Umbrella'] | 2023-08-09 | | | |
| | | FunnySwitch | ['RouterGod'] | win.funnyswitch | ['Earth Lusca', 'Winnti Umbrella'] | 2023-08-09 | | | |