| | | Cloud Snooper | ['Snoopy'] | elf.cloud_snooper | [] | 2022-01-28 | | | |
| | | CACTUSTORCH | [] | js.cactustorch | ['APT32', 'Leviathan'] | 2022-01-25 | | | |
| | | PrivetSanya | [] | elf.privet_sanya | [] | 2022-01-25 | | | |
| | | CetaRAT | [] | win.ceta_rat | [] | 2022-01-25 | | | |
| | | QSnatch | [] | elf.qsnatch | [] | 2022-01-24 | | | |
| | | HiAsm | [] | win.hiasm | [] | 2022-01-11 | | | |
| | | Xanthe | [] | elf.xanthe | [] | 2022-01-17 | | | |
| | | BlackNET RAT | [] | win.blacknet_rat | [] | 2022-01-12 | | | |
| | | Gomorrah stealer | [] | win.gomorrah_stealer | [] | 2022-01-12 | | | |
| | | Krachulka | [] | win.krachulka | [] | 2022-01-05 | | | |
| | | Lokorrito | [] | win.lokorrito | [] | 2022-01-05 | | | |
| | | MISTYVEAL | [] | win.mistyveal | ['Equation Group'] | 2022-01-05 | | | |
| | | PeddleCheap | [] | win.peddlecheap | ['Equation Group'] | 2022-01-05 | | | |
| | | Dark Nexus | [] | elf.darknexus | [] | 2022-01-05 | | | |
| | | BioData | [] | win.biodata | [] | 2022-01-03 | | | |
| | | elf.wellmess | [] | elf.wellmess | ['APT 29'] | 2021-12-31 | | | |
| | | bancos | [] | win.bancos | [] | 2021-12-31 | | | |
| | | ZStealer | ['Z*Stealer'] | win.zstealer | [] | 2021-12-22 | | | |
| | | MercurialGrabber | [] | win.mercurialgrabber | [] | 2021-12-22 | | | |
| | | HabitsRAT | [] | win.habitsrat | [] | 2021-04-28 | | | |
| | | USBCulprit | [] | win.usbculprit | ['Hellsing'] | 2021-12-17 | | | |
| | | ESPecter | [] | win.especter | [] | 2021-11-19 | | | |
| | | Guard | [] | py.guard | [] | 2021-12-17 | | | |
| | | jspRAT | [] | js.jsprat | [] | 2021-12-08 | | | |
| | | Chinotto | [] | apk.chinotto | ['APT37'] | 2021-12-07 | | | |
| | | EwDoor | [] | elf.ewdoor | [] | 2021-12-07 | | | |
| | | PoorWeb | [] | win.poorweb | ['APT37'] | 2021-12-07 | | | |
| | | SharpMapExec | [] | win.sharpmapexec | [] | 2021-12-01 | | | |
| | | CronRAT | [] | elf.cronrat | [] | 2021-11-29 | | | |
| | | PowerShortShell | [] | ps1.powershortshell | [] | 2021-11-29 | | | |
| | | AdWind | ['AlienSpy', 'JSocket', 'Frutas', 'UNRECOM', 'JBifrost', 'Sockrat'] | jar.adwind | [] | 2021-11-29 | | | |
| | | Ratty | [] | jar.ratty | [] | 2021-11-29 | | | |
| | | ostap | [] | js.ostap | [] | 2021-11-29 | | | |
| | | Povlsomware | [] | win.povlsomware | [] | 2021-11-27 | | | |
| | | ShellClient RAT | ['GhostShell'] | win.shellclient | [] | 2021-11-19 | | | |
| | | Unidentified APK 006 | [] | apk.unidentified_006 | [] | 2021-11-19 | | | |
| | | Mevade | ['Sefnit', 'SBC'] | win.mevade | [] | 2021-11-19 | | | |
| | | PixStealer | ['BrazKing'] | apk.pixstealer | [] | 2021-11-18 | | | |
| | | PhoneSpy | [] | apk.phonespy | [] | 2021-11-17 | | | |
| | | DCSrv | ['DCrSrv'] | win.dcsrv | [] | 2021-11-17 | | | |
| | | Unidentified ELF 004 | [] | elf.unidentified_004 | ['APT31'] | 2021-11-12 | | | |
| | | SharpBeacon | [] | win.sharpbeacon | [] | 2021-11-10 | | | |
| | | Shark | [] | win.shark | [] | 2021-11-09 | | | |
| | | Milan | [] | win.milan | [] | 2021-11-09 | | | |
| | | Graphon | [] | win.graphon | [] | 2021-11-03 | | | |
| | | UltimaSMS | [] | apk.ultima_sms | [] | 2021-11-03 | | | |
| | | GriftHorse | [] | apk.grifthorse | [] | 2021-10-24 | | | |
| | | FoxSocket | [] | win.foxsocket | [] | 2021-10-24 | | | |
| | | Turkojan | [] | win.turkojan | [] | 2021-10-24 | | | |
| | | Ranion | [] | win.ranion | [] | 2021-10-24 | | | |
| | | Lambert | ['GreenLambert'] | osx.lambert | ['Longhorn'] | 2021-10-24 | | | |
| | | ZuRu | [] | osx.zuru | [] | 2021-10-19 | | | |
| | | WireX | [] | apk.wirex | [] | 2021-10-13 | | | |
| | | FontOnLake | [] | elf.fontonlake | [] | 2021-10-11 | | | |
| | | FinFisher | [] | osx.finfisher | [] | 2021-10-08 | | | |
| | | FinFisher | [] | elf.finfisher | [] | 2021-10-08 | | | |
| | | FinFisher | [] | apk.finfisher | [] | 2021-10-08 | | | |
| | | BloodyStealer | [] | win.bloodystealer | [] | 2021-10-05 | | | |
| | | OpenSUpdater | [] | win.opensupdater | [] | 2021-10-01 | | | |
| | | Maxtrilha | [] | win.maxtrilha | [] | 2021-09-14 | | | |
| | | NuggetPhantom | [] | win.nugget_phantom | [] | 2021-09-20 | | | |
| | | Unidentified 085 | [] | win.unidentified_085 | [] | 2021-09-19 | | | |
| | | Capoae | [] | elf.capoae | [] | 2021-09-19 | | | |
| | | goontact | [] | apk.goontact | [] | 2021-09-19 | | | |
| | | FlowerPower | ['BoBoStealer'] | ps1.flowerpower | ['Kimsuky'] | 2021-09-14 | | | |
| | | pbot | [] | elf.pbot | [] | 2021-09-14 | | | |
| | | CTB Locker | [] | win.ctb_locker | [] | 2021-09-12 | | | |
| | | HabitsRAT | [] | elf.habitsrat | [] | 2021-09-10 | | | |
| | | Haron Ransomware | [] | win.haron | [] | 2021-09-09 | | | |
| | | Vovalex | [] | win.vovalex | [] | 2021-02-06 | | | |
| | | GOTROJ | [] | win.gotroj | ['FIN7'] | 2021-09-02 | | | |
| | | LittleLooter | [] | apk.little_looter | ['Charming Kitten'] | 2021-09-02 | | | |
| | | Vulturi | [] | win.vulturi | [] | 2021-08-31 | | | |
| | | PRISM | ['waterdrop'] | elf.prism | [] | 2021-08-25 | | | |
| | | Triada | [] | apk.triada | [] | 2025-01-14 | | | |
| | | Jeniva | [] | js.jeniva | [] | 2021-08-24 | | | |
| | | Swid | [] | js.swid | [] | 2021-08-24 | | | |
| | | Jetriz | [] | js.jetriz | [] | 2021-08-24 | | | |
| | | Covicli | ['Covically'] | win.covicli | ['MuddyWater'] | 2021-08-17 | | | |
| | | SynAck | [] | win.synack | [] | 2021-08-15 | | | |
| | | BioSet | [] | elf.bioset | [] | 2021-08-11 | | | |
| | | FlyTrap | [] | apk.flytrap | [] | 2021-08-09 | | | |
| | | Venomous | [] | py.venomous | [] | 2021-08-06 | | | |
| | | xCaon | [] | win.xcaon | [] | 2021-08-03 | | | |
| | | Razy | [] | win.razy | [] | 2021-08-03 | | | |
| | | SysKit | ['IvizTech', 'MANGOPUNCH'] | win.syskit | ['APT35', 'Tortoiseshell'] | 2021-07-29 | | | |
| | | Oscorp | ['UBEL'] | apk.oscorp | [] | 2021-07-27 | | | |
| | | BazarNimrod | ['NimzaLoader'] | win.bazarnimrod | [] | 2021-07-27 | | | |
| | | DeepRAT | [] | win.deep_rat | [] | 2021-07-26 | | | |
| | | TerraTV | ['Taurus Loader TeamViewer Module'] | win.terra_tv | ['VENOM SPIDER'] | 2021-07-26 | | | |
| | | Unidentified 083 (AutoIT Stealer) | [] | win.unidentified_083 | [] | 2021-07-21 | | | |
| | | Gasket | [] | win.gasket | [] | 2021-07-21 | | | |
| | | FakeAdBlocker | [] | apk.fakeadblocker | [] | 2021-07-21 | | | |
| | | Unidentified JS 005 (Stealer) | [] | js.unidentified_005 | [] | 2021-07-20 | | | |
| | | RogueRobinNET | [] | win.roguerobin | ['DarkHydrus'] | 2021-07-20 | | | |
| | | PjobRAT | [] | apk.pjobrat | [] | 2021-07-20 | | | |
| | | FakeSpy | [] | apk.fakespy | [] | 2021-07-07 | | | |
| | | Nextcry | [] | elf.nextcry | [] | 2019-11-17 | | | |
| | | Cursed Murderer | [] | win.cursed_murderer | [] | 2020-02-10 | | | |
| | | Blackruby | [] | win.blackruby | [] | 2019-08-14 | | | |