| | | TerraStealer | ['StealerOne', 'SONE', 'Taurus Loader Stealer Module'] | win.terra_stealer | ['VENOM SPIDER', 'FIN6'] | 2020-08-10 | | | |
| | | GOTROJ | [] | win.gotroj | ['FIN7'] | 2021-09-02 | | | |
| | | LittleLooter | [] | apk.little_looter | ['Charming Kitten'] | 2021-09-02 | | | |
| | | Vulturi | [] | win.vulturi | [] | 2021-08-31 | | | |
| | | PRISM | ['waterdrop'] | elf.prism | [] | 2021-08-25 | | | |
| | | Triada | [] | apk.triada | [] | 2025-01-14 | | | |
| | | Jeniva | [] | js.jeniva | [] | 2021-08-24 | | | |
| | | Swid | [] | js.swid | [] | 2021-08-24 | | | |
| | | Jetriz | [] | js.jetriz | [] | 2021-08-24 | | | |
| | | Covicli | ['Covically'] | win.covicli | ['MuddyWater'] | 2021-08-17 | | | |
| | | SynAck | [] | win.synack | [] | 2021-08-15 | | | |
| | | BioSet | [] | elf.bioset | [] | 2021-08-11 | | | |
| | | FlyTrap | [] | apk.flytrap | [] | 2021-08-09 | | | |
| | | Venomous | [] | py.venomous | [] | 2021-08-06 | | | |
| | | xCaon | [] | win.xcaon | [] | 2021-08-03 | | | |
| | | Razy | [] | win.razy | [] | 2021-08-03 | | | |
| | | SysKit | ['IvizTech', 'MANGOPUNCH'] | win.syskit | ['APT35', 'Tortoiseshell'] | 2021-07-29 | | | |
| | | Oscorp | ['UBEL'] | apk.oscorp | [] | 2021-07-27 | | | |
| | | BazarNimrod | ['NimzaLoader'] | win.bazarnimrod | [] | 2021-07-27 | | | |
| | | DeepRAT | [] | win.deep_rat | [] | 2021-07-26 | | | |
| | | TerraTV | ['Taurus Loader TeamViewer Module'] | win.terra_tv | ['VENOM SPIDER'] | 2021-07-26 | | | |
| | | Unidentified 083 (AutoIT Stealer) | [] | win.unidentified_083 | [] | 2021-07-21 | | | |
| | | Gasket | [] | win.gasket | [] | 2021-07-21 | | | |
| | | FakeAdBlocker | [] | apk.fakeadblocker | [] | 2021-07-21 | | | |
| | | Unidentified JS 005 (Stealer) | [] | js.unidentified_005 | [] | 2021-07-20 | | | |
| | | RogueRobinNET | [] | win.roguerobin | ['DarkHydrus'] | 2021-07-20 | | | |
| | | PjobRAT | [] | apk.pjobrat | [] | 2021-07-20 | | | |
| | | FakeSpy | [] | apk.fakespy | [] | 2021-07-07 | | | |
| | | Cursed Murderer | [] | win.cursed_murderer | [] | 2020-02-10 | | | |
| | | AnteFrigus | [] | win.antefrigus | [] | 2020-01-17 | | | |
| | | Nextcry | [] | elf.nextcry | [] | 2019-11-17 | | | |
| | | CHCH | [] | win.chch | [] | 2019-12-18 | | | |
| | | ChinaJm | [] | win.chinajm | [] | 2020-08-05 | | | |
| | | Blackruby | [] | win.blackruby | [] | 2019-08-14 | | | |
| | | Sadogo | [] | win.sadogo | [] | 2020-04-20 | | | |
| | | Smrss32 | [] | win.smrss32 | [] | 2018-11-19 | | | |
| | | Eris | [] | win.eris | [] | 2019-10-10 | | | |
| | | SNC | [] | win.ransomware_snc | [] | 2019-12-11 | | | |
| | | RedRum | ['Grinch', 'Tycoon', 'Thanos'] | win.redrum | [] | 2020-12-23 | | | |
| | | RekenSom | ['GHack Ransomware'] | win.rekensom | [] | 2020-03-22 | | | |
| | | OutCrypt | [] | win.outcrypt | [] | 2020-08-05 | | | |
| | | Passlock | [] | win.passlock | [] | 2020-02-10 | | | |
| | | Jeno | ['Valeria', 'Jest'] | win.jeno | [] | 2020-04-20 | | | |
| | | KEKW | ['KEKW-Locker'] | win.kekw | [] | 2020-03-28 | | | |
| | | Leakthemall | [] | win.leakthemall | [] | 2020-09-15 | | | |
| | | InfoDot | [] | win.infodot | [] | 2020-04-01 | | | |
| | | WannaRen | [] | win.wannaren | [] | 2020-04-20 | | | |
| | | XP10 | ['FakeChrome Ransomware'] | win.xp10 | [] | 2020-09-15 | | | |
| | | Yarraq | [] | win.yarraq | [] | 2020-01-15 | | | |
| | | Z3 | ['Z3enc Ransomware'] | win.z3 | [] | 2020-09-15 | | | |
| | | WellMail | [] | elf.wellmail | ['APT 29'] | 2021-06-30 | | | |
| | | NiuB | [] | elf.niub | [] | 2021-06-30 | | | |
| | | POWRUNER | [] | ps1.powruner | ['APT34'] | 2021-06-29 | | | |
| | | QUADAGENT | [] | ps1.quadagent | ['APT34'] | 2021-06-29 | | | |
| | | VALUEVAULT | [] | win.valuevault | ['APT34'] | 2021-06-29 | | | |
| | | MOUSEISLAND | [] | vbs.mouseisland | [] | 2021-06-29 | | | |
| | | Momentum | [] | elf.momentum | [] | 2021-06-29 | | | |
| | | HackSpy | [] | win.hackspy | [] | 2021-06-29 | | | |
| | | Unidentified Linux 001 | [] | elf.unidentified_001 | [] | 2021-06-29 | | | |
| | | MINEBRIDGE | ['GazGolder'] | win.minebridge | [] | 2021-06-29 | | | |
| | | DarkRadiation | [] | elf.dark_radiation | [] | 2021-06-23 | | | |
| | | EpicSplit RAT | [] | jar.epicsplit | [] | 2021-06-22 | | | |
| | | Bundlore | ['SurfBuyer'] | osx.bundlore | [] | 2021-06-23 | | | |
| | | KlingonRAT | [] | win.klingon_rat | [] | 2021-06-21 | | | |
| | | MarkiRAT | [] | win.markirat | [] | 2021-06-21 | | | |
| | | Postlo | [] | ios.postlo | [] | 2021-06-21 | | | |
| | | Responder | ['SpiderLabs Responder'] | py.responder | [] | 2021-06-16 | | | |
| | | Cpuminer | [] | elf.cpuminer | [] | 2021-06-16 | | | |
| | | win.fujinama | [] | win.fujinama | [] | 2021-06-16 | | | |
| | | win.JobCrypter | [] | win.jobcrypter | [] | 2021-06-16 | | | |
| | | Janeleiro | [] | win.janeleiro | [] | 2021-06-16 | | | |
| | | Vadokrist | [] | win.vadokrist | [] | 2021-06-16 | | | |
| | | Kobalos | [] | elf.kobalos | [] | 2021-06-16 | | | |
| | | ColdLock | [] | win.coldlock | ['APT41'] | 2021-06-09 | | | |
| | | Facefish | [] | elf.facefish | [] | 2021-06-07 | | | |
| | | Abaddon | [] | win.abaddon | [] | 2020-10-27 | | | |
| | | Unidentified 022 (Ransom) | [] | win.unidentified_022_ransom | [] | 2017-04-29 | | | |
| | | ZeroLocker | [] | win.zerolocker | [] | 2019-07-31 | | | |
| | | Ranscam | [] | win.ranscam | [] | 2017-02-15 | | | |
| | | GnatSpy | [] | apk.gnatspy | ['AridViper'] | 2021-05-26 | | | |
| | | Smackdown | [] | win.smackdown | [] | 2021-05-19 | | | |
| | | WeSteal | [] | win.westeal | [] | 2021-05-19 | | | |
| | | WeControl | [] | win.wecontrol | [] | 2021-05-19 | | | |
| | | Phenakite | ['Dakkatoni'] | ios.phenakite | ['AridViper'] | 2021-05-13 | | | |
| | | HawkShaw | [] | apk.hawkshaw | [] | 2021-05-12 | | | |
| | | Immortal Stealer | [] | win.immortal_stealer | [] | 2021-05-12 | | | |
| | | KilllSomeOne | [] | win.killsomeone | [] | 2021-05-11 | | | |
| | | Prometei | [] | elf.prometei | [] | 2021-05-11 | | | |
| | | RotaJakiro | [] | elf.rotajakiro | ['APT32'] | 2021-05-08 | | | |
| | | Gustuff | [] | apk.gustuff | [] | 2021-05-04 | | | |
| | | Moserpass | [] | win.moserpass | [] | 2021-05-04 | | | |
| | | AgeLocker | [] | elf.age_locker | [] | 2021-05-03 | | | |
| | | DILLJUICE | [] | win.dilljuice | ['Stone Panda'] | 2021-04-29 | | | |
| | | Bozok | [] | win.bozok | ['Operation C-Major', 'Temper Panda'] | 2021-04-29 | | | |
| | | PAS | [] | php.pas | [] | 2021-04-29 | | | |
| | | MS Exchange Tool | [] | win.exchange_tool | ['Mirage'] | 2021-04-29 | | | |
| | | Viper RAT | [] | apk.viper_rat | [] | 2021-04-28 | | | |
| | | MASS Logger | [] | win.masslogger | [] | 2021-04-28 | | | |
| | | Poulight Stealer | ['Poullight'] | win.poulight_stealer | [] | 2021-04-21 | | | |
| | | Convuster | [] | osx.convuster | [] | 2021-04-16 | | | |