| | | Anubis | ['BankBot', 'android.bankbot', 'android.bankspy'] | apk.anubis | [] | 2022-07-12 | | | |
| | | ELMER | ['Elmost'] | win.elmer | ['Danti', 'APT 16'] | 2022-07-05 | | | |
| | | PennyWise Stealer | [] | win.pennywise | [] | 2022-07-05 | | | |
| | | SMOKEDHAM | [] | win.smokedham | [] | 2022-07-05 | | | |
| | | Macaw | [] | win.macaw | [] | 2022-07-01 | | | |
| | | Keona | [] | win.keona | [] | 2022-07-01 | | | |
| | | Yunsip | [] | win.yunsip | [] | 2022-07-01 | | | |
| | | Matiex | [] | win.matiex | [] | 2022-07-01 | | | |
| | | ClipBanker | [] | win.clipbanker | [] | 2022-06-30 | | | |
| | | Barb(ie) Downloader | [] | win.barbie | ['AridViper'] | 2022-06-27 | | | |
| | | BABYMETAL | [] | win.babymetal | ['Anunak'] | 2022-06-27 | | | |
| | | Griffon | ['Harpy'] | js.griffon | ['FIN7'] | 2022-06-27 | | | |
| | | DownPaper | [] | win.downpaper | ['Charming Kitten'] | 2022-06-22 | | | |
| | | Dark | ['Dark.IoT'] | elf.dark | [] | 2022-06-15 | | | |
| | | RobinHood | ['RobbinHood'] | win.robinhood | [] | 2022-06-15 | | | |
| | | Lyceum .NET DNS Backdoor | [] | win.lyceum_dns_backdoor_dotnet | ['LYCEUM'] | 2022-06-10 | | | |
| | | ExoBot | [] | apk.exobot | [] | 2022-06-09 | | | |
| | | Aberebot | ['Escobar'] | apk.aberebot | [] | 2022-06-09 | | | |
| | | Imminent Monitor RAT | [] | win.imminent_monitor_rat | ['APT-C-36'] | 2022-06-09 | | | |
| | | Banload | [] | jar.banload | [] | 2022-06-09 | | | |
| | | AdoBot | [] | apk.adobot | [] | 2022-06-09 | | | |
| | | DynamicStealer | [] | win.dynamicstealer | [] | 2022-06-09 | | | |
| | | YourCyanide | ['GonnaCope', 'Kekpop', 'Kekware'] | win.your_cyanide | [] | 2022-06-08 | | | |
| | | UpdateAgent | [] | osx.update_agent | [] | 2022-06-04 | | | |
| | | systemd | ['Demsty', 'ReverseWindow'] | osx.systemd | [] | 2022-06-04 | | | |
| | | Hakbit | ['Thanos Ransomware'] | win.hakbit | [] | 2022-05-25 | | | |
| | | Prometheus Backdoor | [] | php.prometheus_backdoor | [] | 2022-05-25 | | | |
| | | PowGoop | [] | ps1.powgoop | ['MuddyWater'] | 2022-05-25 | | | |
| | | PyXie | ['PyXie RAT'] | win.pyxie | [] | 2022-05-25 | | | |
| | | Unidentified PS 003 (RAT) | [] | ps1.unidentified_003 | [] | 2022-05-17 | | | |
| | | FaceStealer | [] | apk.facestealer | [] | 2022-05-17 | | | |
| | | Octopus | [] | ps1.octopus | [] | 2022-05-17 | | | |
| | | Nerbian RAT | [] | win.nerbian_rat | [] | 2022-05-17 | | | |
| | | Lador | [] | osx.lador | [] | 2022-05-17 | | | |
| | | Mekotio | [] | win.mekotio | [] | 2022-05-13 | | | |
| | | Mumblehard | [] | elf.mumblehard | [] | 2022-05-11 | | | |
| | | Lazyscripter | [] | ps1.lazyscripter | [] | 2022-05-11 | | | |
| | | XCSSET | [] | osx.xcsset | [] | 2022-05-11 | | | |
| | | STASHLOG | [] | win.stashlog | [] | 2022-05-09 | | | |
| | | Borat RAT | [] | win.boratrat | [] | 2022-05-08 | | | |
| | | NetDooka | [] | win.netdooka | [] | 2022-05-05 | | | |
| | | PingBack | [] | win.pingback | [] | 2022-05-05 | | | |
| | | BOOSTWRITE | [] | win.boostwrite | ['Anunak'] | 2022-05-05 | | | |
| | | DRIFTPIN | ['Toshliph', 'Spy.Agent.ORM'] | win.driftpin | ['Anunak'] | 2022-05-05 | | | |
| | | Bateleur | [] | js.bateleur | ['Anunak'] | 2022-05-05 | | | |
| | | BELLHOP | [] | js.bellhop | ['Anunak'] | 2022-05-05 | | | |
| | | SQLRat | [] | js.sqlrat | ['Anunak'] | 2022-05-05 | | | |
| | | 000Stealer | [] | win.000stealer | [] | 2022-05-04 | | | |
| | | RURansom | [] | win.ruransom | [] | 2022-05-04 | | | |
| | | Unidentified APK 001 | [] | apk.unidentified_001 | [] | 2022-05-04 | | | |
| | | pyback | [] | py.pyback | [] | 2022-05-04 | | | |
| | | FastCash | [] | aix.fastcash | ['Lazarus Group'] | 2022-05-03 | | | |
| | | FlexiSpy | [] | apk.flexispy | [] | 2021-05-25 | | | |
| | | HilalRAT | [] | apk.hilalrat | [] | 2022-04-25 | | | |
| | | CrossRAT | ['Trupto'] | jar.crossrat | ['Dark Caracal'] | 2020-06-08 | | | |
| | | EagleMonitorRAT | [] | win.eagle_monitor_rat | [] | 2022-04-20 | | | |
| | | SunSeed | [] | win.sunseed | [] | 2022-04-15 | | | |
| | | DEWMODE | [] | php.dewmode | [] | 2022-04-15 | | | |
| | | Loki RAT | [] | py.lokirat | ['El Machete'] | 2022-04-05 | | | |
| | | Lightning Stealer | [] | win.lightning_stealer | [] | 2022-04-12 | | | |
| | | Unidentified APK 008 | [] | apk.unidentified_008 | [] | 2022-04-08 | | | |
| | | POWERPLANT | [] | ps1.powerplant | ['FIN7'] | 2022-04-07 | | | |
| | | El Machete APT Backdoor Dropper | [] | win.elmachete_dropper_2022 | ['El Machete'] | 2022-04-05 | | | |
| | | Lyceum Golang HTTP Backdoor | [] | win.lyceum_http_backdoor_golang | ['LYCEUM'] | 2022-04-05 | | | |
| | | Lyceum .NET TCP Backdoor | [] | win.lyceum_http_backdoor_dotnet | ['LYCEUM'] | 2022-04-05 | | | |
| | | Liderc | ['LEMPO'] | win.liderc | ['Tortoiseshell'] | 2022-04-05 | | | |
| | | RTM | ['Redaman'] | win.rtm | [] | 2022-04-04 | | | |
| | | SysJoker | [] | osx.sysjoker | [] | 2022-04-04 | | | |
| | | SysJoker | [] | elf.sysjoker | [] | 2022-04-04 | | | |
| | | VajraSpy | [] | apk.vajraspy | [] | 2022-03-31 | | | |
| | | Unidentified PS 002 (RAT) | [] | ps1.unidentified_002 | [] | 2022-03-31 | | | |
| | | xPack | ['NERAPACK'] | win.xpack | ['Antlion', 'Pirate Panda'] | 2022-03-30 | | | |
| | | Midas | [] | win.midas | [] | 2022-03-30 | | | |
| | | DirtyMoe | [] | win.dirtymoe | [] | 2022-03-29 | | | |
| | | Glupteba Proxy | [] | elf.glupteba_proxy | [] | 2022-03-28 | | | |
| | | AvD Crypto Stealer | [] | win.avd | [] | 2022-03-28 | | | |
| | | AridHelper | [] | win.aridhelper | ['AridViper'] | 2022-03-25 | | | |
| | | Vigram | ['WizardUpdate'] | osx.vigram | [] | 2022-03-25 | | | |
| | | GIMMICK | [] | osx.gimmick | [] | 2022-03-25 | | | |
| | | Bella | [] | osx.bella | [] | 2022-03-23 | | | |
| | | Silver Sparrow | [] | osx.silver_sparrow | [] | 2022-03-23 | | | |
| | | Yellow Cockatoo RAT | ['Polazer'] | win.yellow_cockatoo | [] | 2022-03-23 | | | |
| | | PeaceNotWar | [] | js.peacenotwar | [] | 2022-03-22 | | | |
| | | RMOT | [] | ps1.rmot | ['DarkHotel'] | 2022-03-18 | | | |
| | | VegaLocker | ['Buran', 'Vega'] | win.vegalocker | [] | 2022-03-22 | | | |
| | | Snatch | [] | win.snatch | [] | 2022-03-18 | | | |
| | | BlackKingdom Ransomware | [] | win.blackkingdom_ransomware | [] | 2022-03-18 | | | |
| | | Cring | [] | win.cring | [] | 2022-03-18 | | | |
| | | Gofing | ['Velocity Polymorphic Compression Malware'] | win.gofing | [] | 2022-03-18 | | | |
| | | SLAPSTICK | [] | elf.slapstick | [] | 2022-03-17 | | | |
| | | STEELCORGI | [] | elf.steelcorgi | [] | 2022-03-17 | | | |
| | | lsassDumper | [] | win.lsassdumper | [] | 2022-03-10 | | | |
| | | B1txor20 | [] | elf.b1txor20 | [] | 2022-03-17 | | | |
| | | GRAMDOOR | ['Small Sieve'] | win.gramdoor | ['MuddyWater'] | 2022-03-14 | | | |
| | | KazyLoader | [] | win.kazyloader | [] | 2022-03-08 | | | |
| | | SBIDIOT | [] | elf.sbidiot | [] | 2022-03-07 | | | |
| | | Gh0stnet | ['Remosh'] | win.ghostnet | [] | 2022-03-07 | | | |
| | | Prometheus | [] | win.prometheus | [] | 2022-03-02 | | | |
| | | EvilPlayout | [] | win.evilplayout | [] | 2022-03-02 | | | |
| | | WinScreeny | [] | win.winscreeny | [] | 2022-03-02 | | | |