| | | AthenaGo RAT | [] | win.athenago | [] | 2017-02-13 | | | |
| | | Reshell | [] | win.reshell | ['GALLIUM'] | 2024-04-11 | | | |
| | | Poison Ivy | ['SPIVY', 'pivy', 'poisonivy'] | win.poison_ivy | ['GALLIUM', 'Molerats', 'Mustang Panda', 'Nightshade Panda', 'Pirate Panda', 'Stone Panda', 'TA428', 'Temper Panda'] | 2024-04-11 | | | |
| | | CryptNET | [] | win.cryptnet | [] | 2024-04-10 | | | |
| | | AndroxGh0st | ['AndroxGhost', 'Androx'] | py.androxgh0st | ['Xcatze'] | 2024-04-10 | | | |
| | | MuddyC2Go | [] | win.muddyc2go | ['MuddyWater'] | 2024-04-08 | | | |
| | | Shurk Steal | [] | win.shurk | [] | 2024-04-03 | | | |
| | | LooCipher | [] | win.loocipher | [] | 2023-09-11 | | | |
| | | Brunhilda | [] | apk.brunhilda | [] | 2024-03-28 | | | |
| | | POWERSTAR | [] | ps1.powerstar | [] | 2024-03-28 | | | |
| | | BASICSTAR | [] | vbs.basicstar | [] | 2024-03-28 | | | |
| | | TheMoon | [] | elf.themoon | [] | 2024-03-28 | | | |
| | | Chrysaor | ['Pegasus', 'JigglyPuff'] | apk.chrysaor | [] | 2024-03-28 | | | |
| | | Evil Ant | [] | py.evil_ant | [] | 2024-03-25 | | | |
| | | Gazavat | [] | win.gazavat | [] | 2024-03-25 | | | |
| | | FritzFrog | [] | elf.fritzfrog | [] | 2024-03-25 | | | |
| | | GhostLocker | [] | win.ghost_locker | [] | 2024-03-25 | | | |
| | | TripleCross | [] | elf.triplecross | [] | 2024-03-19 | | | |
| | | RagnarLocker | [] | elf.ragnarlocker | [] | 2024-03-18 | | | |
| | | NewBot Loader | [] | win.newbot_loader | [] | 2024-03-18 | | | |
| | | SpectralBlur | [] | elf.spectral_blur | ['Lazarus Group'] | 2024-03-18 | | | |
| | | SpectralBlur | [] | osx.spectral_blur | ['Lazarus Group'] | 2024-03-18 | | | |
| | | Unidentified JS 006 (Winter Wyvern) | [] | js.unidentified_006 | ['Winter Vivern'] | 2024-02-20 | | | |
| | | Unidentified PS 004 (RAT) | [] | ps1.unidentified_004 | ['Kimsuky'] | 2024-03-18 | | | |
| | | STRRAT | [] | jar.strrat | [] | 2024-03-18 | | | |
| | | Evilginx | [] | elf.evilginx | [] | 2024-03-18 | | | |
| | | OFFODE | [] | js.offode | [] | 2024-03-18 | | | |
| | | Mispadu | ['URSA'] | win.mispadu | [] | 2024-03-13 | | | |
| | | Elevator | [] | elf.elevator | [] | 2024-03-12 | | | |
| | | Suterusu | ['HCRootkit'] | elf.suterusu | [] | 2024-03-12 | | | |
| | | CrimsonIAS | [] | win.crimsonias | ['Mustang Panda'] | 2024-03-07 | | | |
| | | Venom Proxy | [] | win.venom_proxy | [] | 2024-03-04 | | | |
| | | Trigona | [] | win.trigona | [] | 2024-03-04 | | | |
| | | WikiLoader | ['WailingCrab'] | win.wikiloader | [] | 2024-03-04 | | | |
| | | GIMMICK | [] | win.gimmick | [] | 2024-02-28 | | | |
| | | Hydra | [] | apk.hydra | [] | 2024-02-28 | | | |
| | | HTTP-Shell | [] | ps1.http_shell | [] | 2024-02-22 | | | |
| | | BianLian | [] | elf.bianlian | [] | 2024-02-21 | | | |
| | | Egregor | [] | win.egregor | [] | 2024-02-16 | | | |
| | | SnappyTCP | [] | elf.snappy_tcp | ['Sea Turtle'] | 2024-02-15 | | | |
| | | Dot Ransomware | ['MZP Ransomware'] | win.dot_ransomware | [] | 2024-02-09 | | | |
| | | Konni | [] | apk.konni | [] | 2024-02-09 | | | |
| | | AlphaLocker | [] | win.alphalocker | [] | 2024-02-09 | | | |
| | | AlphaSeed | [] | win.alphaseed | ['Kimsuky'] | 2024-02-09 | | | |
| | | PhonyC2 | [] | ps1.phonyc2 | ['MuddyWater'] | 2024-02-08 | | | |
| | | SiennaBlue | ['HolyLocker', 'H0lyGh0st'] | win.sienna_blue | [] | 2024-02-08 | | | |
| | | TriangleDB | [] | ios.triangledb | [] | 2024-02-08 | | | |
| | | OpGhoul | [] | win.opghoul | [] | 2024-02-08 | | | |
| | | Bahamut | [] | apk.bahamut | ['Bahamut', 'Dropping Elephant'] | 2024-02-08 | | | |
| | | SUBTLE-PAWS | [] | ps1.subtle_paws | [] | 2024-02-05 | | | |
| | | Unidentified 114 (APT28 InfoStealer) | [] | win.unidentified_114 | ['APT28'] | 2024-02-02 | | | |
| | | DracuLoader | [] | win.dracu_loader | ['Earth Estries'] | 2024-10-18 | | | |
| | | CherryLoader | [] | win.cherryloader | [] | 2024-02-02 | | | |
| | | Kasseika | [] | win.kasseika | [] | 2024-02-02 | | | |
| | | EnvyScout | ['ROOTSAW'] | win.envyscout | [] | 2024-02-02 | | | |
| | | BOOMBOX | [] | win.boombox | ['APT29'] | 2024-02-02 | | | |
| | | VileRAT | [] | py.vilerat | [] | 2024-02-02 | | | |
| | | Parrot TDS | [] | js.parrot_tds | [] | 2024-01-31 | | | |
| | | Parrot TDS WebShell | [] | php.parrot_tds_shell | [] | 2024-01-31 | | | |
| | | Empire Downloader | [] | win.empire_downloader | [] | 2024-01-31 | | | |
| | | GRUNT | [] | win.grunt | [] | 2024-01-31 | | | |
| | | Merlin | [] | win.merlin | [] | 2024-01-31 | | | |
| | | QUIETBOARD | [] | py.quietboard | [] | 2024-01-31 | | | |
| | | AhMyth | [] | apk.ahmyth | [] | 2024-01-31 | | | |
| | | AndroRAT | [] | apk.androrat | [] | 2024-01-31 | | | |
| | | NoaBot | [] | elf.noabot | [] | 2024-01-19 | | | |
| | | DUCKTAIL | [] | win.ducktail | [] | 2024-01-18 | | | |
| | | Kuiper | [] | win.kuiper | [] | 2024-01-17 | | | |
| | | Kuiper | [] | elf.kuiper | [] | 2024-01-17 | | | |
| | | Kuiper | [] | osx.kuiper | [] | 2024-01-17 | | | |
| | | N3Cr0m0rPh | ['FreakOut', 'Necro'] | py.n3cr0m0rph | [] | 2024-01-12 | | | |
| | | LoupeLoader | [] | win.loupeloader | [] | 2024-01-11 | | | |
| | | OriginLogger | [] | win.originlogger | [] | 2024-01-10 | | | |
| | | STONEBOAT | [] | win.stoneboat | [] | 2023-12-12 | | | |
| | | RansomExx2 | [] | elf.ransomexx2 | [] | 2024-01-08 | | | |
| | | Roaming Mantis | [] | apk.roaming_mantis | [] | 2024-01-08 | | | |
| | | RansomEXX | ['Defray777'] | elf.ransomexx | ['GOLD DUPONT'] | 2024-01-08 | | | |
| | | Serpent Stealer | [] | win.serpent | [] | 2024-01-02 | | | |
| | | FiveHands | ['Thieflock'] | win.fivehands | ['[Unnamed group]'] | 2023-12-28 | | | |
| | | Gwisin | [] | elf.gwisin | [] | 2023-12-27 | | | |
| | | wAgentTea | ['wAgent'] | win.wagenttea | ['Lazarus Group'] | 2023-12-27 | | | |
| | | Paradise | [] | win.paradise | [] | 2023-12-27 | | | |
| | | Ares | [] | py.ares | [] | 2023-12-27 | | | |
| | | Conti | ['Conti Locker'] | elf.conti | [] | 2023-12-27 | | | |
| | | Monti | [] | elf.monti | [] | 2023-12-27 | | | |
| | | WyrmSpy | ['AndroidControl'] | apk.wyrmspy | ['APT41'] | 2023-12-19 | | | |
| | | BianLian | ['Hydra'] | apk.bianlian | [] | 2023-12-19 | | | |
| | | S.O.V.A. | [] | apk.sova | [] | 2023-12-19 | | | |
| | | BADCALL | [] | elf.badcall | ['Lazarus Group'] | 2023-12-14 | | | |
| | | Krasue RAT | [] | elf.krasue_rat | [] | 2023-12-12 | | | |
| | | LuaDream | ['DreamLand'] | win.luadream | [] | 2023-12-12 | | | |
| | | OriginBot | ['OriginBotnet', 'OriginLoader'] | win.originbot | [] | 2023-12-11 | | | |
| | | RustBucket | [] | win.rustbucket | ['Lazarus Group'] | 2023-12-11 | | | |
| | | CageyChameleon | ['Cabbage RAT'] | vbs.cageychameleon | [] | 2023-12-11 | | | |
| | | GoTitan | [] | elf.gotitan | [] | 2023-12-11 | | | |
| | | MyKings Spreader | [] | win.mykings_spreader | [] | 2021-10-25 | | | |
| | | Narilam | [] | win.narilam | [] | 2018-06-28 | | | |
| | | OnlinerSpambot | ['SBot', 'Onliner'] | win.onliner | [] | 2023-01-25 | | | |
| | | SideTwist | [] | win.sidetwist | ['OilRig'] | 2023-09-07 | | | |
| | | Medusa | [] | win.medusa | [] | 2020-05-11 | | | |