| | | LgoogLoader | [] | win.lgoogloader | [] | 2023-10-11 | | | |
| | | MarraCrypt | [] | win.marracrypt | [] | 2023-10-10 | | | |
| | | HILDACRYPT | [] | win.hildacrypt | [] | 2023-10-10 | | | |
| | | Godfather | [] | apk.godfather | [] | 2023-10-10 | | | |
| | | DragonEgg | ['LightSpy'] | apk.dragonegg | ['APT41'] | 2023-10-09 | | | |
| | | GoldDigger | [] | apk.gold_digger | [] | 2023-10-09 | | | |
| | | PirateStealer | [] | win.pirate_stealer | [] | 2023-10-09 | | | |
| | | ChargeWeapon | [] | win.chargeweapon | [] | 2023-10-06 | | | |
| | | Warsaw | [] | win.warsaw | [] | 2021-08-06 | | | |
| | | HorusEyes RAT | [] | win.horuseyes | [] | 2021-02-06 | | | |
| | | Horus Eyes RAT | [] | win.horus_eyes_rat | [] | 2021-08-06 | | | |
| | | Mango | [] | win.mango | ['OilRig'] | 2023-10-06 | | | |
| | | Solar | [] | win.solar | ['OilRig'] | 2023-10-06 | | | |
| | | AnchorMail | ['ANCHOR.MAIL', 'Delegatz'] | win.anchormail | [] | 2023-10-05 | | | |
| | | SUPERNOVA | [] | win.supernova | [] | 2023-10-05 | | | |
| | | Revenge RAT | ['Revetrat'] | win.revenge_rat | ['The Gorgon Group'] | 2023-10-05 | | | |
| | | ViperSoftX | [] | ps1.vipersoftx | [] | 2023-10-05 | | | |
| | | 4h_rat | [] | win.4h_rat | ['Putter Panda'] | 2023-09-29 | | | |
| | | Penquin Turla | [] | elf.penquin_turla | ['Turla'] | 2023-09-25 | | | |
| | | Zyklon | [] | win.zyklon | [] | 2023-09-22 | | | |
| | | CapraRAT | [] | apk.capra_rat | ['Operation C-Major'] | 2023-09-20 | | | |
| | | Money Message | [] | win.moneymessage | [] | 2023-09-20 | | | |
| | | ElizaRAT | [] | win.eliza_rat | ['Operation C-Major'] | 2023-09-18 | | | |
| | | SprySOCKS | [] | elf.spry_socks | ['Earth Lusca'] | 2023-09-18 | | | |
| | | POWERSTATS | ['Valyria'] | ps1.powerstats | ['MuddyWater'] | 2023-09-12 | | | |
| | | StrikeSuit Gift | [] | win.strikesuit_gift | ['APT32'] | 2023-09-11 | | | |
| | | HDRoot | [] | win.hdroot | ['APT17'] | 2020-03-19 | | | |
| | | Winnti | [] | osx.winnti | ['APT17'] | 2018-01-17 | | | |
| | | Speculoos | [] | elf.speculoos | ['APT17'] | 2020-05-23 | | | |
| | | looChiper | [] | win.loochiper | [] | 2023-09-11 | | | |
| | | SALTWATER | [] | elf.saltwater | [] | 2023-07-19 | | | |
| | | PingPull | [] | elf.pingpull | ['GALLIUM'] | 2023-09-08 | | | |
| | | SoWaT | [] | elf.sowat | ['APT31'] | 2023-09-08 | | | |
| | | Sword2033 | [] | elf.sword2033 | ['GALLIUM'] | 2023-09-08 | | | |
| | | Metamorfo | ['Casbaneiro'] | win.metamorfo | [] | 2023-09-05 | | | |
| | | TitanStealer | [] | win.titan_stealer | [] | 2023-09-04 | | | |
| | | SuperBear RAT | [] | win.superbear | [] | 2023-09-04 | | | |
| | | SteamHide | [] | win.steamhide | [] | 2023-09-04 | | | |
| | | GoatRAT | [] | apk.goat_rat | [] | 2023-09-01 | | | |
| | | BlackRemote | ['BlackRAT'] | win.blackremote | [] | 2023-09-01 | | | |
| | | SapphireStealer | [] | win.sapphire_stealer | [] | 2023-09-01 | | | |
| | | Hidden Bee | [] | win.hiddenbee | [] | 2023-09-01 | | | |
| | | Cinoshi | ['Agniane'] | win.cinoshi | [] | 2023-08-31 | | | |
| | | MrBlack | ['AESDDoS', 'Dofloo'] | elf.mrblack | [] | 2023-08-31 | | | |
| | | XOR DDoS | ['XORDDOS'] | elf.xorddos | [] | 2023-08-31 | | | |
| | | Gigabud | [] | apk.gigabud | [] | 2023-08-30 | | | |
| | | PerlBot | ['ShellBot', 'DDoS Perl IrcBot'] | elf.perlbot | [] | 2023-08-28 | | | |
| | | Echobot | [] | elf.echobot | [] | 2023-08-28 | | | |
| | | YamaBot | ['Kaos'] | win.yamabot | ['Silent Chollima'] | 2023-08-28 | | | |
| | | ExByte | [] | win.exbyte | [] | 2023-08-25 | | | |
| | | Snake | ['EKANS', 'SNAKEHOSE'] | win.snake | [] | 2022-08-28 | | | |
| | | Nopyfy | [] | win.nopyfy | [] | 2023-08-21 | | | |
| | | NodeStealer | [] | win.node_stealer | [] | 2023-08-21 | | | |
| | | Unidentified macOS 001 (UnionCryptoTrader) | [] | osx.unidentified_001 | ['Lazarus Group'] | 2023-08-21 | | | |
| | | HiatusRAT | [] | elf.hiatus_rat | [] | 2023-08-21 | | | |
| | | Golroted | [] | win.golroted | [] | 2023-08-17 | | | |
| | | Nimbo-C2 | [] | elf.nimbo_c2 | [] | 2023-08-15 | | | |
| | | NirCmd | [] | win.nircmd | [] | 2023-08-15 | | | |
| | | Royal Ransom | [] | ps1.royal_ransom | [] | 2023-08-15 | | | |
| | | Interception | [] | osx.interception | ['Lazarus Group'] | 2023-08-14 | | | |
| | | JanelaRAT | [] | win.janela_rat | [] | 2023-08-11 | | | |
| | | RedCap | [] | win.redcap | ['OilRig'] | 2023-08-10 | | | |
| | | PindOS | [] | js.pindos | [] | 2023-08-10 | | | |
| | | FunnySwitch | ['RouterGod'] | win.funnyswitch | ['Earth Lusca', 'Winnti Umbrella'] | 2023-08-09 | | | |
| | | Gh0stBins | ['Gh0stBins RAT'] | win.gh0stbins | [] | 2023-08-07 | | | |
| | | Clop | ['Cl0p'] | elf.clop | [] | 2023-08-03 | | | |
| | | Abyss Locker | ['elf.hellokitty'] | elf.abyss | [] | 2023-08-03 | | | |
| | | SharkBot | [] | apk.sharkbot | [] | 2023-08-03 | | | |
| | | Graphiron | [] | win.graphiron | ['SaintBear'] | 2023-07-31 | | | |
| | | AVrecon | [] | elf.avrecon | [] | 2023-07-31 | | | |
| | | Valak | ['Valek'] | js.valak | [] | 2023-07-28 | | | |
| | | POWERSOURCE | [] | ps1.powersource | ['Anunak'] | 2023-07-28 | | | |
| | | LaplasClipper | [] | win.laplas | [] | 2023-07-27 | | | |
| | | STRATOFEAR | [] | win.stratofear | [] | 2023-07-26 | | | |
| | | BundleBot | [] | win.bundlebot | [] | 2023-07-26 | | | |
| | | SPECTRALVIPER | [] | win.spectralviper | ['Rebel Jackal'] | 2023-07-26 | | | |
| | | FULLHOUSE | [] | osx.fullhouse | [] | 2023-07-25 | | | |
| | | FINTEAM | ['TeamBot'] | win.finteam | [] | 2023-07-24 | | | |
| | | KnSpy | [] | apk.knspy | ['APT-C-35'] | 2023-07-24 | | | |
| | | Unidentified 089 (Downloader) | ['5.t Downloader'] | win.unidentified_089 | [] | 2023-07-24 | | | |
| | | TeamBot | ['FINTEAM'] | win.teambot | [] | 2023-07-24 | | | |
| | | Unidentified 075 | [] | win.unidentified_075 | [] | 2023-07-24 | | | |
| | | Dofloo | ['AESDDoS'] | elf.dofloo | [] | 2023-07-24 | | | |
| | | Unidentified 102 (Donot) | [] | win.unidentified_102 | ['VICEROY TIGER'] | 2023-07-24 | | | |
| | | Unidentified 090 (Lazarus) | [] | win.unidentified_090 | ['Lazarus Group'] | 2023-07-24 | | | |
| | | Felixroot | [] | win.felixroot | ['GreyEnergy'] | 2023-07-24 | | | |
| | | Cardinal RAT | [] | win.cardinal_rat | [] | 2023-07-24 | | | |
| | | PowerHarbor | [] | ps1.powerharbor | [] | 2023-07-19 | | | |
| | | NetWire | [] | osx.netwire | [] | 2023-07-24 | | | |
| | | Dacls | [] | elf.dacls | [] | 2023-07-24 | | | |
| | | FakeCry | [] | win.fakecry | [] | 2023-07-24 | | | |
| | | InfinityLock | [] | win.infinitylock | [] | 2023-07-24 | | | |
| | | Matrix Ransom | [] | win.matrix_ransom | [] | 2023-07-24 | | | |
| | | VoidRAT | [] | win.void_rat | [] | 2023-07-20 | | | |
| | | Waterbear | ['DbgPrint', 'EYEWELL'] | win.waterbear | ['BlackTech'] | 2023-07-19 | | | |
| | | ZuoRAT | [] | elf.zuo_rat | [] | 2023-07-19 | | | |
| | | Nemesis | ['Project Nemesis'] | win.nemesis | [] | 2023-07-19 | | | |
| | | Symbiote | [] | elf.symbiote | [] | 2023-07-16 | | | |
| | | Makop Ransomware | [] | win.makop_ransomware | [] | 2023-03-13 | | | |
| | | Unidentified 061 | [] | win.unidentified_061 | [] | 2019-07-31 | | | |