| | | N3Cr0m0rPh | ['FreakOut', 'Necro'] | py.n3cr0m0rph | [] | 2024-01-12 | | | |
| | | LoupeLoader | [] | win.loupeloader | [] | 2024-01-11 | | | |
| | | OriginLogger | [] | win.originlogger | [] | 2024-01-10 | | | |
| | | STONEBOAT | [] | win.stoneboat | [] | 2023-12-12 | | | |
| | | RansomExx2 | [] | elf.ransomexx2 | [] | 2024-01-08 | | | |
| | | Roaming Mantis | [] | apk.roaming_mantis | [] | 2024-01-08 | | | |
| | | RansomEXX | ['Defray777'] | elf.ransomexx | ['GOLD DUPONT'] | 2024-01-08 | | | |
| | | Serpent Stealer | [] | win.serpent | [] | 2024-01-02 | | | |
| | | FiveHands | ['Thieflock'] | win.fivehands | ['[Unnamed group]'] | 2023-12-28 | | | |
| | | Gwisin | [] | elf.gwisin | [] | 2023-12-27 | | | |
| | | Paradise | [] | win.paradise | [] | 2023-12-27 | | | |
| | | Ares | [] | py.ares | [] | 2023-12-27 | | | |
| | | Monti | [] | elf.monti | [] | 2023-12-27 | | | |
| | | WyrmSpy | ['AndroidControl'] | apk.wyrmspy | ['APT41'] | 2023-12-19 | | | |
| | | BianLian | ['Hydra'] | apk.bianlian | [] | 2023-12-19 | | | |
| | | S.O.V.A. | [] | apk.sova | [] | 2023-12-19 | | | |
| | | BADCALL | [] | elf.badcall | ['Lazarus Group'] | 2023-12-14 | | | |
| | | Krasue RAT | [] | elf.krasue_rat | [] | 2023-12-12 | | | |
| | | LuaDream | ['DreamLand'] | win.luadream | [] | 2023-12-12 | | | |
| | | OriginBot | ['OriginBotnet', 'OriginLoader'] | win.originbot | [] | 2023-12-11 | | | |
| | | RustBucket | [] | win.rustbucket | ['Lazarus Group'] | 2023-12-11 | | | |
| | | CageyChameleon | ['Cabbage RAT'] | vbs.cageychameleon | [] | 2023-12-11 | | | |
| | | GoTitan | [] | elf.gotitan | [] | 2023-12-11 | | | |
| | | OnlinerSpambot | ['SBot', 'Onliner'] | win.onliner | [] | 2023-01-25 | | | |
| | | Medusa | [] | win.medusa | [] | 2020-05-11 | | | |
| | | MyKings Spreader | [] | win.mykings_spreader | [] | 2021-10-25 | | | |
| | | Narilam | [] | win.narilam | [] | 2018-06-28 | | | |
| | | SideTwist | [] | win.sidetwist | ['OilRig'] | 2023-09-07 | | | |
| | | BlueSky | [] | win.bluesky | [] | 2023-12-04 | | | |
| | | LIONTAIL | [] | win.liontail | [' Scarred Manticore'] | 2023-12-04 | | | |
| | | Tunna | [] | asp.tunna | [] | 2023-12-04 | | | |
| | | tomiris | [] | win.tomiris | [] | 2023-12-04 | | | |
| | | QUIETCANARY | ['Kapushka', 'Tunnus'] | win.quietcanary | ['Turla'] | 2023-12-04 | | | |
| | | GoldMax | ['SUNSHUTTLE'] | win.goldmax | ['UNC2452'] | 2023-12-04 | | | |
| | | Loda | ['LodaRAT', 'Nymeria'] | win.loda | [] | 2023-12-04 | | | |
| | | PowerMagic | [] | ps1.power_magic | [] | 2023-12-04 | | | |
| | | NAPLISTENER | [] | win.naplistener | [] | 2023-12-04 | | | |
| | | SiestaGraph | [] | win.siesta_graph | [] | 2023-12-04 | | | |
| | | LitterDrifter | [] | vbs.litterdrifter | ['Gamaredon Group'] | 2023-12-04 | | | |
| | | DeimosC2 | [] | win.deimos_c2 | [] | 2023-12-04 | | | |
| | | WellMess | [] | win.wellmess | [] | 2023-12-04 | | | |
| | | VBREVSHELL | [] | vbs.vbrevshell | [] | 2023-12-04 | | | |
| | | Serpent | [] | py.serpent | [] | 2023-11-30 | | | |
| | | DeliveryCheck | ['GAMEDAY', 'CAPIBAR'] | win.delivery_check | ['Turla'] | 2023-07-20 | | | |
| | | MACAMAX | [] | win.macamax | ['1937CN'] | 2023-11-27 | | | |
| | | Choziosi | ['ChromeLoader'] | win.choziosi | [] | 2023-11-23 | | | |
| | | ParaSiteSnatcher | [] | js.parasitesnatcher | [] | 2023-11-27 | | | |
| | | Choziosi | ['ChromeLoader', 'Chropex'] | osx.choziosi | [] | 2023-11-23 | | | |
| | | win.idat_loader | [] | win.idat_loader | [] | | | | |
| | | EDA2 | [] | win.eda2_ransom | [] | 2023-11-22 | | | |
| | | IPStorm | [] | win.ipstorm | [] | 2023-11-22 | | | |
| | | IPStorm | ['InterPlanetary Storm'] | elf.ipstorm | [] | 2023-11-22 | | | |
| | | Easy Stealer | [] | win.easystealer | [] | 2023-11-13 | | | |
| | | Unidentified 030 (Ransomware) | [] | win.unidentified_030 | [] | 2023-11-22 | | | |
| | | Unidentified 005 (Sidecopy) | [] | elf.unidentified_005 | ['SideCopy'] | 2023-11-22 | | | |
| | | Jigsaw | [] | win.jigsaw | [] | 2023-11-22 | | | |
| | | Fauppod | [] | win.fauppod | [] | 2023-11-17 | | | |
| | | Houdini | ['Hworm', 'Jenxcus', 'Kognito', 'Njw0rm', 'WSHRAT', 'dinihou', 'dunihi'] | win.houdini | [] | 2023-11-17 | | | |
| | | GHAMBAR | [] | win.ghambar | [] | 2023-11-17 | | | |
| | | DOSTEALER | [] | win.dostealer | [] | 2023-11-17 | | | |
| | | SILENTUPLOADER | [] | win.silentuploader | [] | 2023-11-17 | | | |
| | | PINEFLOWER | [] | apk.pineflower | [] | 2023-11-17 | | | |
| | | VINETHORN | [] | apk.vinethorn | [] | 2023-11-17 | | | |
| | | BROKEYOLK | [] | win.brokeyolk | [] | 2023-11-17 | | | |
| | | DriveOcean | ['Google Drive RAT'] | win.driveocean | ['APT28'] | 2023-11-14 | | | |
| | | IMAPLoader | [] | win.imap_loader | ['Tortoiseshell'] | 2023-11-14 | | | |
| | | AxBanker | [] | apk.axbanker | [] | 2023-11-14 | | | |
| | | lampion | [] | vbs.lampion | [] | 2023-11-13 | | | |
| | | HiddenAd | [] | apk.hiddenad | [] | 2023-11-14 | | | |
| | | Elibomi | ['Drinik'] | apk.elibomi | [] | 2023-11-14 | | | |
| | | EternalRocks | ['MicroBotMassiveNet'] | win.eternalrocks | [] | 2023-11-14 | | | |
| | | FakeUpdateRU | [] | js.fakeupdateru | [] | 2023-11-13 | | | |
| | | Unidentified APK 005 | [] | apk.unidentified_005 | ['APT-C-35'] | 2023-07-24 | | | |
| | | Astasia | [] | win.astasia | [] | 2023-10-17 | | | |
| | | MOrder RAT | [] | apk.morder_rat | [] | 2023-10-12 | | | |
| | | Poseidon | [] | osx.poseidon | [] | 2023-10-12 | | | |
| | | Athena | [] | win.athena | [] | 2023-10-12 | | | |
| | | iceFire | [] | elf.icefire | [] | 2023-10-11 | | | |
| | | IZ1H9 | [] | elf.iz1h9 | [] | 2023-10-11 | | | |
| | | LgoogLoader | [] | win.lgoogloader | [] | 2023-10-11 | | | |
| | | HILDACRYPT | [] | win.hildacrypt | [] | 2023-10-10 | | | |
| | | DragonEgg | ['LightSpy'] | apk.dragonegg | ['APT41'] | 2023-10-09 | | | |
| | | GoldDigger | [] | apk.gold_digger | [] | 2023-10-09 | | | |
| | | PirateStealer | [] | win.pirate_stealer | [] | 2023-10-09 | | | |
| | | ChargeWeapon | [] | win.chargeweapon | [] | 2023-10-06 | | | |
| | | HorusEyes RAT | [] | win.horuseyes | [] | 2021-02-06 | | | |
| | | Horus Eyes RAT | [] | win.horus_eyes_rat | [] | 2021-08-06 | | | |
| | | Warsaw | [] | win.warsaw | [] | 2021-08-06 | | | |
| | | Mango | [] | win.mango | ['OilRig'] | 2023-10-06 | | | |
| | | Solar | [] | win.solar | ['OilRig'] | 2023-10-06 | | | |
| | | AnchorMail | ['ANCHOR.MAIL', 'Delegatz'] | win.anchormail | [] | 2023-10-05 | | | |
| | | SUPERNOVA | [] | win.supernova | [] | 2023-10-05 | | | |
| | | 4h_rat | [] | win.4h_rat | ['Putter Panda'] | 2023-09-29 | | | |
| | | Penquin Turla | [] | elf.penquin_turla | ['Turla'] | 2023-09-25 | | | |
| | | Zyklon | [] | win.zyklon | [] | 2023-09-22 | | | |
| | | CapraRAT | [] | apk.capra_rat | ['Operation C-Major'] | 2023-09-20 | | | |
| | | Money Message | [] | win.moneymessage | [] | 2023-09-20 | | | |
| | | SprySOCKS | [] | elf.spry_socks | ['Earth Lusca'] | 2023-09-18 | | | |
| | | POWERSTATS | ['Valyria'] | ps1.powerstats | ['MuddyWater'] | 2023-09-12 | | | |
| | | StrikeSuit Gift | [] | win.strikesuit_gift | ['APT32'] | 2023-09-11 | | | |