| | | Stealth Soldier | [] | win.stealth_soldier | [] | 2023-06-09 | | | |
| | | TSCookie | [] | elf.tscookie | ['BlackTech'] | 2022-09-30 | | | |
| | | Karkoff | ['CACTUSPIPE', 'MailDropper', 'OILYFACE'] | win.karkoff | ['DNSpionage', 'OilRig'] | 2023-02-06 | | | |
| | | Agent Smith | [] | apk.agentsmith | [] | 2023-06-06 | | | |
| | | Horse Shell | [] | elf.horseshell | [] | 2023-06-02 | | | |
| | | RandomQuery | [] | vbs.randomquery | ['Kimsuky'] | 2023-05-30 | | | |
| | | DAAM | ['BouldSpy'] | apk.daam | [] | 2023-05-30 | | | |
| | | KrakenKeylogger | [] | win.krakenkeylogger | [] | 2023-05-26 | | | |
| | | PIEHOP | [] | win.piehop | [] | 2023-05-26 | | | |
| | | Mamba | ['HDDCryptor', 'DiskCryptor'] | win.mamba | [] | 2023-05-26 | | | |
| | | MirrorBlast | [] | win.mirrorblast | ['TA505'] | 2023-05-26 | | | |
| | | Ares | [] | win.ares | [] | 2023-05-26 | | | |
| | | SUNBURST | ['Solorigate'] | win.sunburst | ['APT 29', 'UNC2452'] | 2023-05-25 | | | |
| | | NGLite | [] | win.nglite | [] | 2023-05-25 | | | |
| | | Numando | [] | win.numando | [] | 2023-05-25 | | | |
| | | SamoRAT | [] | win.samo_rat | [] | 2023-05-25 | | | |
| | | Jackal | [] | win.jackal | [] | 2023-05-23 | | | |
| | | Hajime | [] | elf.hajime | [] | 2023-05-23 | | | |
| | | Pink | [] | elf.pink | [] | 2023-05-23 | | | |
| | | HiddenLotus | [] | osx.hiddenlotus | [] | 2023-05-21 | | | |
| | | Hive | [] | elf.hive | [] | 2023-05-21 | | | |
| | | Cyrat | [] | win.cyrat | [] | 2023-05-21 | | | |
| | | dearcry | ['DoejoCrypt'] | win.dearcry | [] | 2023-05-21 | | | |
| | | Exorcist | [] | win.exorcist | [] | 2023-05-21 | | | |
| | | Gitpaste-12 | [] | elf.gitpaste12 | [] | 2023-05-21 | | | |
| | | ScrubCrypt | [] | win.scrubcrypter | [] | 2023-05-17 | | | |
| | | SideWinder | [] | apk.sidewinder | ['RAZOR TIGER'] | 2023-05-17 | | | |
| | | IRATA | [] | apk.irata | [] | 2023-05-16 | | | |
| | | OrBit | [] | elf.orbit | [] | 2023-05-16 | | | |
| | | Hermit | [] | apk.hermit | [] | 2023-05-16 | | | |
| | | ElectroRAT | [] | osx.electro_rat | [] | 2023-05-16 | | | |
| | | Gmera | ['StockSteal', 'Kassi'] | osx.gmera | [] | 2023-05-16 | | | |
| | | Shlayer | [] | osx.shlayer | [] | 2023-05-16 | | | |
| | | Revive | [] | apk.revive | [] | 2023-05-15 | | | |
| | | MasterFred | ['Brox'] | apk.masterfred | [] | 2023-05-15 | | | |
| | | FileCoder | [] | apk.filecoder | [] | 2023-05-15 | | | |
| | | BrasDex | [] | apk.brasdex | [] | 2023-05-15 | | | |
| | | AbstractEmu | [] | apk.abstract_emu | [] | 2023-05-15 | | | |
| | | ZeroBot | ['ZeroStresser'] | elf.zerobot | [] | 2023-05-09 | | | |
| | | CryCryptor | ['CryCrypter', 'CryDroid'] | apk.crycryptor | [] | 2023-05-15 | | | |
| | | BADCALL | [] | apk.badcall | ['Lazarus Group'] | 2023-05-15 | | | |
| | | Dacls | [] | osx.dacls | ['Lazarus Group'] | 2023-05-15 | | | |
| | | Babadeda | [] | win.babadeda | [] | 2023-05-15 | | | |
| | | Beapy | [] | win.beapy | [] | 2023-05-15 | | | |
| | | Zanubis | [] | apk.zanubis | [] | 2023-05-15 | | | |
| | | ext4 | [] | elf.ext4 | [] | 2023-05-15 | | | |
| | | Specter | [] | elf.specter | [] | 2023-05-15 | | | |
| | | DDG | [] | elf.ddg | [] | 2023-05-15 | | | |
| | | DEADBOLT | [] | elf.deadbolt | [] | 2023-05-11 | | | |
| | | Zeropadypt | ['Ouroboros'] | win.zeropadypt | [] | 2023-05-10 | | | |
| | | ModernLoader | ['AvatarBot'] | win.modern_loader | [] | 2023-05-10 | | | |
| | | EVILNUM | [] | js.evilnum | [] | 2023-05-10 | | | |
| | | DiamondFox | ['Crystal', 'Gorynych', 'Gorynch'] | win.diamondfox | [] | 2023-05-10 | | | |
| | | M00nD3V Logger | [] | win.m00nd3v | [] | 2023-05-10 | | | |
| | | Abcbot | [] | elf.abcbot | [] | 2023-05-09 | | | |
| | | Fakecalls | [] | apk.fakecalls | [] | 2023-05-09 | | | |
| | | HinataBot | [] | elf.hinata_bot | [] | 2023-05-09 | | | |
| | | Octopus | [] | win.octopus | [] | 2023-05-08 | | | |
| | | Bookworm | [] | win.bookworm | [] | 2022-09-19 | | | |
| | | Typhon Stealer | ['Typhon Reborn V2'] | win.typhon_stealer | [] | 2023-05-02 | | | |
| | | FantomCrypt | [] | win.fantomcrypt | [] | 2023-05-02 | | | |
| | | WhiteRabbit | [] | elf.whiterabbit | [] | 2023-04-28 | | | |
| | | HIGHNOON | [] | win.highnoon | ['APT41', 'Aurora Panda'] | 2023-04-28 | | | |
| | | Topinambour | [] | win.topinambour | [] | 2023-04-26 | | | |
| | | Telemiris | [] | win.telemiris | [] | 2023-04-26 | | | |
| | | KopiLuwak | [] | js.kopiluwak | ['Turla'] | 2023-04-26 | | | |
| | | CrossLock | [] | win.crosslock | [] | 2023-04-25 | | | |
| | | Arid Gopher | [] | win.aridgopher | ['AridViper'] | 2023-04-25 | | | |
| | | Empyrean | [] | py.empyrean | [] | 2023-04-25 | | | |
| | | OpcJacker | [] | win.opcjacker | [] | 2023-04-25 | | | |
| | | DesertBlade | [] | win.desertblade | [] | 2023-04-25 | | | |
| | | DoubleZero | ['FiberLake'] | win.doublezero | [] | 2023-04-25 | | | |
| | | SwiftSlicer | ['JaguarBlade'] | win.swiftslicer | ['Sandworm'] | 2023-04-25 | | | |
| | | DealPly | [] | win.dealply | [] | 2023-04-25 | | | |
| | | Gdrive | ['DoomDrive', 'GoogleDriveSucks'] | win.gdrive | ['APT 29', 'APT29'] | 2023-04-22 | | | |
| | | QUIETEXIT | [] | elf.quietexit | [] | 2023-04-18 | | | |
| | | CryptoJoker | ['PlutoCrypt'] | win.cryptojoker | [] | 2023-04-18 | | | |
| | | HelloBot | [] | elf.hellobot | [] | 2023-04-18 | | | |
| | | HelloBot | [] | win.hellobot | ['Earth Berberoka'] | 2023-04-18 | | | |
| | | ArguePatch | [] | win.arguepatch | ['APT28', 'Sandworm'] | 2022-09-26 | | | |
| | | Nexus | [] | apk.nexus | [] | 2023-04-12 | | | |
| | | WorldWind | [] | win.worldwind | [] | 2023-04-08 | | | |
| | | 3CX Backdoor | [] | osx.3cx_backdoor | ['Lazarus Group'] | 2023-04-06 | | | |
| | | ACBackdoor | [] | elf.acbackdoor | [] | 2023-04-06 | | | |
| | | Vjw0rm | [] | win.vjw0rm | [] | 2023-01-18 | | | |
| | | RambleOn | [] | apk.rambleon | [] | 2023-03-27 | | | |
| | | Kaiten | ['STD'] | elf.kaiten | [] | 2023-03-27 | | | |
| | | FFDroider | [] | win.ffdroider | [] | 2023-03-27 | | | |
| | | Dracarys | [] | apk.dracarys | ['HAZY TIGER'] | 2022-08-15 | | | |
| | | CloudMensis | [] | osx.cloud_mensis | [] | 2023-03-24 | | | |
| | | PyAesLoader | [] | py.pyaesloader | [] | 2023-03-23 | | | |
| | | Entropy | [] | win.entropy | [] | 2023-03-23 | | | |
| | | Unidentified 025 (Clickfraud) | [] | win.unidentified_025_clickfraud | [] | 2023-03-23 | | | |
| | | Eternity Clipper | [] | win.eternity_clipper | [] | 2023-03-23 | | | |
| | | Cryakl | ['CryLock'] | win.cryakl | [] | 2023-03-20 | | | |
| | | Poet RAT | [] | py.poet_rat | [] | 2023-03-20 | | | |
| | | Orcus RAT | ['Schnorchel'] | win.orcus_rat | [] | 2023-03-20 | | | |
| | | NetFlash | [] | win.netflash | ['Turla'] | 2020-06-05 | | | |
| | | Neuron | [] | win.neuron | ['APT34', 'Turla'] | 2020-05-23 | | | |
| | | XP PrivEsc (CVE-2014-4076) | [] | win.xp_privesc | ['APT28'] | 2017-02-15 | | | |