| | | Gh0stBins | ['Gh0stBins RAT'] | win.gh0stbins | [] | 2023-08-07 | | | |
| | | Clop | ['Cl0p'] | elf.clop | [] | 2023-08-03 | | | |
| | | Abyss Locker | ['elf.hellokitty'] | elf.abyss | [] | 2023-08-03 | | | |
| | | SharkBot | [] | apk.sharkbot | [] | 2023-08-03 | | | |
| | | Graphiron | [] | win.graphiron | ['SaintBear'] | 2023-07-31 | | | |
| | | AVrecon | [] | elf.avrecon | [] | 2023-07-31 | | | |
| | | Valak | ['Valek'] | js.valak | [] | 2023-07-28 | | | |
| | | POWERSOURCE | [] | ps1.powersource | ['Anunak'] | 2023-07-28 | | | |
| | | LaplasClipper | [] | win.laplas | [] | 2023-07-27 | | | |
| | | STRATOFEAR | [] | win.stratofear | [] | 2023-07-26 | | | |
| | | BundleBot | [] | win.bundlebot | [] | 2023-07-26 | | | |
| | | SPECTRALVIPER | [] | win.spectralviper | ['Rebel Jackal'] | 2023-07-26 | | | |
| | | FULLHOUSE | [] | osx.fullhouse | [] | 2023-07-25 | | | |
| | | FINTEAM | ['TeamBot'] | win.finteam | [] | 2023-07-24 | | | |
| | | KnSpy | [] | apk.knspy | ['APT-C-35'] | 2023-07-24 | | | |
| | | Unidentified 089 (Downloader) | ['5.t Downloader'] | win.unidentified_089 | [] | 2023-07-24 | | | |
| | | TeamBot | ['FINTEAM'] | win.teambot | [] | 2023-07-24 | | | |
| | | Unidentified 075 | [] | win.unidentified_075 | [] | 2023-07-24 | | | |
| | | Dofloo | ['AESDDoS'] | elf.dofloo | [] | 2023-07-24 | | | |
| | | Unidentified 102 (Donot) | [] | win.unidentified_102 | ['VICEROY TIGER'] | 2023-07-24 | | | |
| | | Unidentified 090 (Lazarus) | [] | win.unidentified_090 | ['Lazarus Group'] | 2023-07-24 | | | |
| | | Felixroot | [] | win.felixroot | ['GreyEnergy'] | 2023-07-24 | | | |
| | | Cardinal RAT | [] | win.cardinal_rat | [] | 2023-07-24 | | | |
| | | PowerHarbor | [] | ps1.powerharbor | [] | 2023-07-19 | | | |
| | | NetWire | [] | osx.netwire | [] | 2023-07-24 | | | |
| | | Dacls | [] | elf.dacls | [] | 2023-07-24 | | | |
| | | FakeCry | [] | win.fakecry | [] | 2023-07-24 | | | |
| | | InfinityLock | [] | win.infinitylock | [] | 2023-07-24 | | | |
| | | Matrix Ransom | [] | win.matrix_ransom | [] | 2023-07-24 | | | |
| | | Aurora Stealer | [] | win.aurora_stealer | [] | 2023-07-22 | | | |
| | | VoidRAT | [] | win.void_rat | [] | 2023-07-20 | | | |
| | | Waterbear | ['DbgPrint', 'EYEWELL'] | win.waterbear | ['BlackTech'] | 2023-07-19 | | | |
| | | ZuoRAT | [] | elf.zuo_rat | [] | 2023-07-19 | | | |
| | | Nemesis | ['Project Nemesis'] | win.nemesis | [] | 2023-07-19 | | | |
| | | Symbiote | [] | elf.symbiote | [] | 2023-07-16 | | | |
| | | Makop Ransomware | [] | win.makop_ransomware | [] | 2023-03-13 | | | |
| | | Unidentified 061 | [] | win.unidentified_061 | [] | 2019-07-31 | | | |
| | | p0wnyshell | ['Pownyshell', 'Ponyshell'] | php.p0wnyshell | [] | 2023-07-11 | | | |
| | | JokerSpy | [] | osx.jokerspy | [] | 2023-07-11 | | | |
| | | RedEnergy Stealer | [] | win.redenergy_stealer | [] | 2023-07-11 | | | |
| | | Klackring | [] | win.klackring | ['Lazarus Group'] | 2023-07-11 | | | |
| | | DNSMessenger | ['TEXTMATE'] | win.dnsmessenger | ['Anunak'] | 2023-07-05 | | | |
| | | Nitro | ['Hydra'] | win.nitro | [] | 2023-07-02 | | | |
| | | Unidentified 101 (Lazarus?) | [] | win.unidentified_101 | ['Lazarus Group'] | 2023-06-29 | | | |
| | | FluHorse | [] | apk.fluhorse | [] | 2023-06-26 | | | |
| | | DynamicRAT | ['DYNARAT'] | jar.dynamicrat | [] | 2023-06-23 | | | |
| | | Yasso | [] | win.yasso | [] | 2023-06-22 | | | |
| | | Invicta Stealer | [] | win.invicta_stealer | [] | 2023-06-22 | | | |
| | | Growtopia | [] | win.growtopia | [] | 2023-06-22 | | | |
| | | ConnectBack | ['Getshell'] | elf.connectback | [] | 2023-06-19 | | | |
| | | Chimera | [] | win.chimera | [] | 2023-06-19 | | | |
| | | LokiLocker | [] | win.lokilocker | [] | 2023-06-12 | | | |
| | | RMS | ['Gussdoor', 'Remote Manipulator System', 'RuRAT'] | win.rms | ['TA505'] | 2023-06-12 | | | |
| | | elf.corona | [] | elf.corona | [] | | | | |
| | | OutSteel | [] | win.outsteel | [] | 2023-06-09 | | | |
| | | SMAUG | [] | win.smaug | [] | 2023-06-09 | | | |
| | | surtr | [] | win.surtr | [] | 2023-06-09 | | | |
| | | Sekhmet | [] | win.sekhmet | [] | 2023-06-09 | | | |
| | | SquirtDanger | [] | win.squirtdanger | [] | 2023-06-09 | | | |
| | | YTStealer | [] | win.ytstealer | [] | 2023-06-09 | | | |
| | | Stealth Soldier | [] | win.stealth_soldier | [] | 2023-06-09 | | | |
| | | Karkoff | ['CACTUSPIPE', 'MailDropper', 'OILYFACE'] | win.karkoff | ['DNSpionage', 'OilRig'] | 2023-02-06 | | | |
| | | TSCookie | [] | elf.tscookie | ['BlackTech'] | 2022-09-30 | | | |
| | | Satacom | ['LegionLoader'] | win.satacom | [] | 2023-06-06 | | | |
| | | Agent Smith | [] | apk.agentsmith | [] | 2023-06-06 | | | |
| | | BlackSuit | [] | elf.blacksuit | [] | 2023-06-05 | | | |
| | | Horse Shell | [] | elf.horseshell | [] | 2023-06-02 | | | |
| | | RandomQuery | [] | vbs.randomquery | ['Kimsuky'] | 2023-05-30 | | | |
| | | DAAM | ['BouldSpy'] | apk.daam | [] | 2023-05-30 | | | |
| | | KrakenKeylogger | [] | win.krakenkeylogger | [] | 2023-05-26 | | | |
| | | PIEHOP | [] | win.piehop | [] | 2023-05-26 | | | |
| | | Mamba | ['HDDCryptor', 'DiskCryptor'] | win.mamba | [] | 2023-05-26 | | | |
| | | MirrorBlast | [] | win.mirrorblast | ['TA505'] | 2023-05-26 | | | |
| | | ZXShell | ['Sensocode'] | win.zxshell | ['APT41', 'EMISSARY PANDA', 'Leviathan'] | 2023-05-26 | | | |
| | | Ares | [] | win.ares | [] | 2023-05-26 | | | |
| | | SUNBURST | ['Solorigate'] | win.sunburst | ['APT 29', 'UNC2452'] | 2023-05-25 | | | |
| | | NGLite | [] | win.nglite | [] | 2023-05-25 | | | |
| | | Numando | [] | win.numando | [] | 2023-05-25 | | | |
| | | SamoRAT | [] | win.samo_rat | [] | 2023-05-25 | | | |
| | | Jackal | [] | win.jackal | [] | 2023-05-23 | | | |
| | | Turla RAT | [] | elf.turla_rat | [] | 2023-05-23 | | | |
| | | Hajime | [] | elf.hajime | [] | 2023-05-23 | | | |
| | | Pink | [] | elf.pink | [] | 2023-05-23 | | | |
| | | HiddenLotus | [] | osx.hiddenlotus | [] | 2023-05-21 | | | |
| | | Hive | [] | elf.hive | [] | 2023-05-21 | | | |
| | | Cyrat | [] | win.cyrat | [] | 2023-05-21 | | | |
| | | dearcry | ['DoejoCrypt'] | win.dearcry | [] | 2023-05-21 | | | |
| | | Exorcist | [] | win.exorcist | [] | 2023-05-21 | | | |
| | | Hades | [] | win.hades | ['GOLD WINTER'] | 2023-05-21 | | | |
| | | Gitpaste-12 | [] | elf.gitpaste12 | [] | 2023-05-21 | | | |
| | | ScrubCrypt | [] | win.scrubcrypter | [] | 2023-05-17 | | | |
| | | SideWinder | [] | apk.sidewinder | ['RAZOR TIGER'] | 2023-05-17 | | | |
| | | IRATA | [] | apk.irata | [] | 2023-05-16 | | | |
| | | OrBit | [] | elf.orbit | [] | 2023-05-16 | | | |
| | | HiddenWasp | [] | elf.hiddenwasp | [] | 2023-05-16 | | | |
| | | EvilGnome | [] | elf.evilgnome | ['Gamaredon Group'] | 2023-05-16 | | | |
| | | Hermit | [] | apk.hermit | [] | 2023-05-16 | | | |
| | | ElectroRAT | [] | osx.electro_rat | [] | 2023-05-16 | | | |
| | | Gmera | ['StockSteal', 'Kassi'] | osx.gmera | [] | 2023-05-16 | | | |
| | | Shlayer | [] | osx.shlayer | [] | 2023-05-16 | | | |