| | | SuperBear RAT | [] | win.superbear | [] | 2023-09-04 | | | |
| | | SteamHide | [] | win.steamhide | [] | 2023-09-04 | | | |
| | | GoatRAT | [] | apk.goat_rat | [] | 2023-09-01 | | | |
| | | BlackRemote | ['BlackRAT'] | win.blackremote | [] | 2023-09-01 | | | |
| | | SapphireStealer | [] | win.sapphire_stealer | [] | 2023-09-01 | | | |
| | | Hidden Bee | [] | win.hiddenbee | [] | 2023-09-01 | | | |
| | | Cinoshi | ['Agniane'] | win.cinoshi | [] | 2023-08-31 | | | |
| | | MrBlack | ['AESDDoS', 'Dofloo'] | elf.mrblack | [] | 2023-08-31 | | | |
| | | XOR DDoS | ['XORDDOS'] | elf.xorddos | [] | 2023-08-31 | | | |
| | | Gigabud | [] | apk.gigabud | [] | 2023-08-30 | | | |
| | | PerlBot | ['ShellBot', 'DDoS Perl IrcBot'] | elf.perlbot | [] | 2023-08-28 | | | |
| | | Echobot | [] | elf.echobot | [] | 2023-08-28 | | | |
| | | YamaBot | ['Kaos'] | win.yamabot | ['Silent Chollima'] | 2023-08-28 | | | |
| | | ExByte | [] | win.exbyte | [] | 2023-08-25 | | | |
| | | Snake | ['EKANS', 'SNAKEHOSE'] | win.snake | [] | 2022-08-28 | | | |
| | | Nopyfy | [] | win.nopyfy | [] | 2023-08-21 | | | |
| | | NodeStealer | [] | win.node_stealer | [] | 2023-08-21 | | | |
| | | Unidentified macOS 001 (UnionCryptoTrader) | [] | osx.unidentified_001 | ['Lazarus Group'] | 2023-08-21 | | | |
| | | HiatusRAT | [] | elf.hiatus_rat | [] | 2023-08-21 | | | |
| | | Golroted | [] | win.golroted | [] | 2023-08-17 | | | |
| | | Nimbo-C2 | [] | elf.nimbo_c2 | [] | 2023-08-15 | | | |
| | | NirCmd | [] | win.nircmd | [] | 2023-08-15 | | | |
| | | Interception | [] | osx.interception | ['Lazarus Group'] | 2023-08-14 | | | |
| | | JanelaRAT | [] | win.janela_rat | [] | 2023-08-11 | | | |
| | | RedCap | [] | win.redcap | ['OilRig'] | 2023-08-10 | | | |
| | | PindOS | [] | js.pindos | [] | 2023-08-10 | | | |
| | | FunnySwitch | ['RouterGod'] | win.funnyswitch | ['Earth Lusca', 'Winnti Umbrella'] | 2023-08-09 | | | |
| | | Gh0stBins | ['Gh0stBins RAT'] | win.gh0stbins | [] | 2023-08-07 | | | |
| | | Clop | ['Cl0p'] | elf.clop | [] | 2023-08-03 | | | |
| | | Abyss Locker | ['elf.hellokitty'] | elf.abyss | [] | 2023-08-03 | | | |
| | | SharkBot | [] | apk.sharkbot | [] | 2023-08-03 | | | |
| | | Graphiron | [] | win.graphiron | ['SaintBear'] | 2023-07-31 | | | |
| | | AVrecon | [] | elf.avrecon | [] | 2023-07-31 | | | |
| | | Valak | ['Valek'] | js.valak | [] | 2023-07-28 | | | |
| | | POWERSOURCE | [] | ps1.powersource | ['Anunak'] | 2023-07-28 | | | |
| | | LaplasClipper | [] | win.laplas | [] | 2023-07-27 | | | |
| | | STRATOFEAR | [] | win.stratofear | [] | 2023-07-26 | | | |
| | | BundleBot | [] | win.bundlebot | [] | 2023-07-26 | | | |
| | | SPECTRALVIPER | [] | win.spectralviper | ['Rebel Jackal'] | 2023-07-26 | | | |
| | | FULLHOUSE | [] | osx.fullhouse | [] | 2023-07-25 | | | |
| | | FINTEAM | ['TeamBot'] | win.finteam | [] | 2023-07-24 | | | |
| | | KnSpy | [] | apk.knspy | ['APT-C-35'] | 2023-07-24 | | | |
| | | Unidentified 089 (Downloader) | ['5.t Downloader'] | win.unidentified_089 | [] | 2023-07-24 | | | |
| | | TeamBot | ['FINTEAM'] | win.teambot | [] | 2023-07-24 | | | |
| | | Unidentified 075 | [] | win.unidentified_075 | [] | 2023-07-24 | | | |
| | | Dofloo | ['AESDDoS'] | elf.dofloo | [] | 2023-07-24 | | | |
| | | Unidentified 102 (Donot) | [] | win.unidentified_102 | ['VICEROY TIGER'] | 2023-07-24 | | | |
| | | Unidentified 090 (Lazarus) | [] | win.unidentified_090 | ['Lazarus Group'] | 2023-07-24 | | | |
| | | Felixroot | [] | win.felixroot | ['GreyEnergy'] | 2023-07-24 | | | |
| | | Cardinal RAT | [] | win.cardinal_rat | [] | 2023-07-24 | | | |
| | | PowerHarbor | [] | ps1.powerharbor | [] | 2023-07-19 | | | |
| | | NetWire | [] | osx.netwire | [] | 2023-07-24 | | | |
| | | Dacls | [] | elf.dacls | [] | 2023-07-24 | | | |
| | | FakeCry | [] | win.fakecry | [] | 2023-07-24 | | | |
| | | InfinityLock | [] | win.infinitylock | [] | 2023-07-24 | | | |
| | | Matrix Ransom | [] | win.matrix_ransom | [] | 2023-07-24 | | | |
| | | VoidRAT | [] | win.void_rat | [] | 2023-07-20 | | | |
| | | Waterbear | ['DbgPrint', 'EYEWELL'] | win.waterbear | ['BlackTech'] | 2023-07-19 | | | |
| | | ZuoRAT | [] | elf.zuo_rat | [] | 2023-07-19 | | | |
| | | Nemesis | ['Project Nemesis'] | win.nemesis | [] | 2023-07-19 | | | |
| | | Symbiote | [] | elf.symbiote | [] | 2023-07-16 | | | |
| | | Makop Ransomware | [] | win.makop_ransomware | [] | 2023-03-13 | | | |
| | | Unidentified 061 | [] | win.unidentified_061 | [] | 2019-07-31 | | | |
| | | p0wnyshell | ['Pownyshell', 'Ponyshell'] | php.p0wnyshell | [] | 2023-07-11 | | | |
| | | JokerSpy | [] | osx.jokerspy | [] | 2023-07-11 | | | |
| | | RedEnergy Stealer | [] | win.redenergy_stealer | [] | 2023-07-11 | | | |
| | | Klackring | [] | win.klackring | ['Lazarus Group'] | 2023-07-11 | | | |
| | | DNSMessenger | ['TEXTMATE'] | win.dnsmessenger | ['Anunak'] | 2023-07-05 | | | |
| | | Nitro | ['Hydra'] | win.nitro | [] | 2023-07-02 | | | |
| | | Unidentified 101 (Lazarus?) | [] | win.unidentified_101 | ['Lazarus Group'] | 2023-06-29 | | | |
| | | FluHorse | [] | apk.fluhorse | [] | 2023-06-26 | | | |
| | | DynamicRAT | ['DYNARAT'] | jar.dynamicrat | [] | 2023-06-23 | | | |
| | | Invicta Stealer | [] | win.invicta_stealer | [] | 2023-06-22 | | | |
| | | Growtopia | [] | win.growtopia | [] | 2023-06-22 | | | |
| | | ConnectBack | ['Getshell'] | elf.connectback | [] | 2023-06-19 | | | |
| | | Chimera | [] | win.chimera | [] | 2023-06-19 | | | |
| | | LokiLocker | [] | win.lokilocker | [] | 2023-06-12 | | | |
| | | elf.corona | [] | elf.corona | [] | | | | |
| | | OutSteel | [] | win.outsteel | [] | 2023-06-09 | | | |
| | | SMAUG | [] | win.smaug | [] | 2023-06-09 | | | |
| | | surtr | [] | win.surtr | [] | 2023-06-09 | | | |
| | | Sekhmet | [] | win.sekhmet | [] | 2023-06-09 | | | |
| | | SquirtDanger | [] | win.squirtdanger | [] | 2023-06-09 | | | |
| | | YTStealer | [] | win.ytstealer | [] | 2023-06-09 | | | |
| | | Stealth Soldier | [] | win.stealth_soldier | [] | 2023-06-09 | | | |
| | | Karkoff | ['CACTUSPIPE', 'MailDropper', 'OILYFACE'] | win.karkoff | ['DNSpionage', 'OilRig'] | 2023-02-06 | | | |
| | | TSCookie | [] | elf.tscookie | ['BlackTech'] | 2022-09-30 | | | |
| | | Agent Smith | [] | apk.agentsmith | [] | 2023-06-06 | | | |
| | | Horse Shell | [] | elf.horseshell | [] | 2023-06-02 | | | |
| | | RandomQuery | [] | vbs.randomquery | ['Kimsuky'] | 2023-05-30 | | | |
| | | DAAM | ['BouldSpy'] | apk.daam | [] | 2023-05-30 | | | |
| | | KrakenKeylogger | [] | win.krakenkeylogger | [] | 2023-05-26 | | | |
| | | PIEHOP | [] | win.piehop | [] | 2023-05-26 | | | |
| | | Mamba | ['HDDCryptor', 'DiskCryptor'] | win.mamba | [] | 2023-05-26 | | | |
| | | MirrorBlast | [] | win.mirrorblast | ['TA505'] | 2023-05-26 | | | |
| | | ZXShell | ['Sensocode'] | win.zxshell | ['APT41', 'EMISSARY PANDA', 'Leviathan'] | 2023-05-26 | | | |
| | | Ares | [] | win.ares | [] | 2023-05-26 | | | |
| | | SUNBURST | ['Solorigate'] | win.sunburst | ['APT 29', 'UNC2452'] | 2023-05-25 | | | |
| | | NGLite | [] | win.nglite | [] | 2023-05-25 | | | |
| | | Numando | [] | win.numando | [] | 2023-05-25 | | | |