| | | DawDropper | [] | apk.dawdropper | [] | 2022-08-12 | | | |
| | | Unidentified 073 (Charming Kitten) | [] | win.unidentified_073 | ['Charming Kitten'] | 2020-03-03 | | | |
| | | SolidBit | [] | win.solidbit | [] | 2022-08-08 | | | |
| | | Denonia | [] | elf.denonia | [] | 2022-08-08 | | | |
| | | Sockbot | [] | win.sockbot | [] | 2022-08-08 | | | |
| | | QNAPCrypt | ['eCh0raix'] | elf.qnapcrypt | [] | 2022-02-10 | | | |
| | | Pandora RAT | ['Pandora hVNC RAT'] | win.pandora_rat | [] | 2022-08-05 | | | |
| | | Anubis Loader | ['Kraken', 'Pepega'] | win.anubis_loader | [] | 2022-08-05 | | | |
| | | Ousaban | [] | win.ousaban | [] | 2022-08-05 | | | |
| | | Sorillus RAT | [] | jar.sorillus | [] | 2025-02-03 | | | |
| | | Raindrop | [] | win.raindrop | ['UNC2452'] | 2022-08-02 | | | |
| | | TEARDROP | [] | win.teardrop | ['UNC2452'] | 2022-08-02 | | | |
| | | OopsIE | [] | win.oopsie | ['OilRig'] | 2022-07-29 | | | |
| | | Xbash | [] | elf.xbash | ['Iron Group'] | 2022-07-29 | | | |
| | | RelicRace | [] | win.relic_race | [] | 2022-07-29 | | | |
| | | TinyZbot | [] | win.tinyzbot | ['Cleaver'] | 2022-07-29 | | | |
| | | Eternity Ransomware | [] | win.eternity_ransomware | [] | 2022-07-28 | | | |
| | | Eternity Worm | [] | win.eternity_worm | [] | 2022-07-28 | | | |
| | | GoMet | [] | win.gomet | [] | 2022-07-27 | | | |
| | | CASHY200 | [] | ps1.cashy200 | [] | 2022-07-25 | | | |
| | | Snugy | [] | ps1.snugy | [] | 2022-07-25 | | | |
| | | oRAT | [] | osx.orat | [] | 2022-07-25 | | | |
| | | BIOPASS | [] | win.biopass | ['APT41'] | 2022-07-25 | | | |
| | | Khonsari | [] | win.khonsari | [] | 2022-07-25 | | | |
| | | TelegramGrabber | [] | win.telegram_grabber | ['Charming Kitten'] | 2022-07-25 | | | |
| | | Lightning Framework | [] | elf.lightning | [] | 2022-07-25 | | | |
| | | Backdoorit | ['backd00rit'] | elf.backdoorit | [] | 2022-07-15 | | | |
| | | Caligula | [] | elf.caligula | [] | 2022-07-15 | | | |
| | | Unidentified 093 (Sidewinder) | [] | win.unidentified_093 | ['RAZOR TIGER'] | 2022-07-15 | | | |
| | | Pirrit | [] | osx.pirrit | [] | 2022-07-13 | | | |
| | | Wroba | [] | apk.wroba | [] | 2022-07-13 | | | |
| | | FunkyBot | [] | apk.funkybot | ['Yanbian Gang'] | 2022-07-13 | | | |
| | | AlmondRAT | [] | win.almondrat | ['HAZY TIGER'] | 2022-07-13 | | | |
| | | T-Cmd | ['t_cmd'] | win.t_cmd | [] | 2022-07-13 | | | |
| | | QvoidStealer | ['Qvoid-Token-Grabber'] | win.qvoidstealer | [] | 2022-07-13 | | | |
| | | HavanaCrypt | [] | win.havana_crypt | [] | 2022-07-13 | | | |
| | | CodeCore | [] | win.code_core | [] | 2022-07-13 | | | |
| | | CobaltMirage FRP | [] | win.cobaltmirage_tunnel | [] | 2022-07-13 | | | |
| | | ChromeBack | [] | js.chromeback | [] | 2022-07-13 | | | |
| | | Rozena | [] | win.rozena | [] | 2022-07-12 | | | |
| | | Anubis | ['BankBot', 'android.bankbot', 'android.bankspy'] | apk.anubis | [] | 2022-07-12 | | | |
| | | ELMER | ['Elmost'] | win.elmer | ['Danti', 'APT 16'] | 2022-07-05 | | | |
| | | PennyWise Stealer | [] | win.pennywise | [] | 2022-07-05 | | | |
| | | Macaw | [] | win.macaw | [] | 2022-07-01 | | | |
| | | Keona | [] | win.keona | [] | 2022-07-01 | | | |
| | | Yunsip | [] | win.yunsip | [] | 2022-07-01 | | | |
| | | Matiex | [] | win.matiex | [] | 2022-07-01 | | | |
| | | ClipBanker | [] | win.clipbanker | [] | 2022-06-30 | | | |
| | | Barb(ie) Downloader | [] | win.barbie | ['AridViper'] | 2022-06-27 | | | |
| | | BABYMETAL | [] | win.babymetal | ['Anunak'] | 2022-06-27 | | | |
| | | Griffon | ['Harpy'] | js.griffon | ['FIN7'] | 2022-06-27 | | | |
| | | DownPaper | [] | win.downpaper | ['Charming Kitten'] | 2022-06-22 | | | |
| | | Dark | ['Dark.IoT'] | elf.dark | [] | 2022-06-15 | | | |
| | | RobinHood | ['RobbinHood'] | win.robinhood | [] | 2022-06-15 | | | |
| | | Lyceum .NET DNS Backdoor | [] | win.lyceum_dns_backdoor_dotnet | ['LYCEUM'] | 2022-06-10 | | | |
| | | ExoBot | [] | apk.exobot | [] | 2022-06-09 | | | |
| | | Imminent Monitor RAT | [] | win.imminent_monitor_rat | ['APT-C-36'] | 2022-06-09 | | | |
| | | Banload | [] | jar.banload | [] | 2022-06-09 | | | |
| | | AdoBot | [] | apk.adobot | [] | 2022-06-09 | | | |
| | | DynamicStealer | [] | win.dynamicstealer | [] | 2022-06-09 | | | |
| | | YourCyanide | ['GonnaCope', 'Kekpop', 'Kekware'] | win.your_cyanide | [] | 2022-06-08 | | | |
| | | UpdateAgent | [] | osx.update_agent | [] | 2022-06-04 | | | |
| | | systemd | ['Demsty', 'ReverseWindow'] | osx.systemd | [] | 2022-06-04 | | | |
| | | Hakbit | ['Thanos Ransomware'] | win.hakbit | [] | 2022-05-25 | | | |
| | | Prometheus Backdoor | [] | php.prometheus_backdoor | [] | 2022-05-25 | | | |
| | | PowGoop | [] | ps1.powgoop | ['MuddyWater'] | 2022-05-25 | | | |
| | | PyXie | ['PyXie RAT'] | win.pyxie | [] | 2022-05-25 | | | |
| | | Unidentified PS 003 (RAT) | [] | ps1.unidentified_003 | [] | 2022-05-17 | | | |
| | | FaceStealer | [] | apk.facestealer | [] | 2022-05-17 | | | |
| | | Octopus | [] | ps1.octopus | [] | 2022-05-17 | | | |
| | | Nerbian RAT | [] | win.nerbian_rat | [] | 2022-05-17 | | | |
| | | Lador | [] | osx.lador | [] | 2022-05-17 | | | |
| | | Mekotio | [] | win.mekotio | [] | 2022-05-13 | | | |
| | | Mumblehard | [] | elf.mumblehard | [] | 2022-05-11 | | | |
| | | Lazyscripter | [] | ps1.lazyscripter | [] | 2022-05-11 | | | |
| | | XCSSET | [] | osx.xcsset | [] | 2022-05-11 | | | |
| | | STASHLOG | [] | win.stashlog | [] | 2022-05-09 | | | |
| | | Borat RAT | [] | win.boratrat | [] | 2022-05-08 | | | |
| | | NetDooka | [] | win.netdooka | [] | 2022-05-05 | | | |
| | | PingBack | [] | win.pingback | [] | 2022-05-05 | | | |
| | | DRIFTPIN | ['Toshliph', 'Spy.Agent.ORM'] | win.driftpin | ['Anunak'] | 2022-05-05 | | | |
| | | BOOSTWRITE | [] | win.boostwrite | ['Anunak'] | 2022-05-05 | | | |
| | | Bateleur | [] | js.bateleur | ['Anunak'] | 2022-05-05 | | | |
| | | BELLHOP | [] | js.bellhop | ['Anunak'] | 2022-05-05 | | | |
| | | SQLRat | [] | js.sqlrat | ['Anunak'] | 2022-05-05 | | | |
| | | 000Stealer | [] | win.000stealer | [] | 2022-05-04 | | | |
| | | RURansom | [] | win.ruransom | [] | 2022-05-04 | | | |
| | | Unidentified APK 001 | [] | apk.unidentified_001 | [] | 2022-05-04 | | | |
| | | pyback | [] | py.pyback | [] | 2022-05-04 | | | |
| | | FlexiSpy | [] | apk.flexispy | [] | 2021-05-25 | | | |
| | | HilalRAT | [] | apk.hilalrat | [] | 2022-04-25 | | | |
| | | CrossRAT | ['Trupto'] | jar.crossrat | ['Dark Caracal'] | 2020-06-08 | | | |
| | | EagleMonitorRAT | [] | win.eagle_monitor_rat | [] | 2022-04-20 | | | |
| | | SunSeed | [] | win.sunseed | [] | 2022-04-15 | | | |
| | | DEWMODE | [] | php.dewmode | [] | 2022-04-15 | | | |
| | | Lightning Stealer | [] | win.lightning_stealer | [] | 2022-04-12 | | | |
| | | Unidentified APK 008 | [] | apk.unidentified_008 | [] | 2022-04-08 | | | |
| | | POWERPLANT | [] | ps1.powerplant | ['FIN7'] | 2022-04-07 | | | |
| | | El Machete APT Backdoor Dropper | [] | win.elmachete_dropper_2022 | ['El Machete'] | 2022-04-05 | | | |
| | | Lyceum Golang HTTP Backdoor | [] | win.lyceum_http_backdoor_golang | ['LYCEUM'] | 2022-04-05 | | | |