| | | ScoutC2 | [] | win.scoutc2 | [] | 2025-05-21 | | | |
| | | AndroxGh0st | ['AndroxGhost', 'Androx'] | py.androxgh0st | ['Xcatze'] | 2025-05-21 | | | |
| | | Akira | ['REDBIKE'] | win.akira | ['Storm-1567'] | 2025-05-21 | | | |
| | | WebMonitor RAT | ['RevCode'] | win.webmonitor | [] | 2020-11-19 | | | |
| | | WRECKSTEEL | [] | ps1.wrecksteel | [] | 2025-05-21 | | | |
| | | StrelaStealer | [] | win.strelastealer | [] | 2025-05-21 | | | |
| | | ZXShell | ['Sensocode'] | win.zxshell | ['APT41', 'EMISSARY PANDA', 'Leviathan'] | 2025-05-21 | | | |
| | | Poison Ivy | ['SPIVY', 'pivy', 'poisonivy'] | win.poison_ivy | ['GALLIUM', 'Molerats', 'Mustang Panda', 'Nightshade Panda', 'Pirate Panda', 'Stone Panda', 'TA428', 'Temper Panda'] | 2025-05-21 | | | |
| | | Rhysida | [] | win.rhysida | ['Vanilla Tempest'] | 2025-05-21 | | | |
| | | Interlock | [] | win.interlock | [] | 2025-05-21 | | | |
| | | TheMoon | [] | elf.themoon | [] | 2025-05-21 | | | |
| | | Mimic Ransomware | [] | win.mimic | [] | 2025-05-21 | | | |
| | | LZRD | [] | elf.lzrd | [] | 2025-05-20 | | | |
| | | LOSTKEYS | [] | vbs.lostkeys | ['Callisto'] | 2025-05-20 | | | |
| | | SpyPress | [] | js.spypress | ['APT28'] | 2025-05-20 | | | |
| | | Crimson RAT | ['SEEDOOR', 'Scarimson'] | win.crimson | ['Operation C-Major'] | 2025-05-20 | | | |
| | | BlackCat | ['ALPHV', 'Noberus'] | win.blackcat | ['Vanilla Tempest'] | 2025-05-20 | | | |
| | | RansomHub | [] | win.ransomhub | ['RansomHub'] | 2025-05-20 | | | |
| | | DragonForce | [] | win.dragonforce | [] | 2025-05-20 | | | |
| | | KrustyLoader | [] | elf.krustyloader | [] | 2025-05-20 | | | |
| | | Ratty | [] | jar.ratty | [] | 2025-05-20 | | | |
| | | FAKEUPDATES | ['FakeUpdate', 'GhoLoader', 'SocGholish'] | js.fakeupdates | ['GOLD PRELUDE'] | 2025-07-09 | | | |
| | | KongTuke | ['TAG-124', 'js.LandUpdate808'] | js.kongtuke | [] | 2025-05-20 | | | |
| | | MintsLoader | [] | js.mints_loader | [] | 2025-05-20 | | | |
| | | Rhysida | [] | elf.rhysida | ['Vanilla Tempest'] | 2025-05-20 | | | |
| | | WarmCookie | ['Badspace', 'Carrotstick', 'QUICKBIND'] | win.warmcookie | [] | 2025-05-20 | | | |
| | | Sagerunex | [] | win.sagerunex | ['LOTUS PANDA'] | 2025-05-20 | | | |
| | | DBatLoader | ['ModiLoader', 'NatsoLoader'] | win.dbatloader | [] | 2025-05-20 | | | |
| | | VanHelsing | [] | win.vanhelsing | [] | 2025-05-20 | | | |
| | | NetfilterRootkit | [] | win.netfilter | [] | 2025-05-20 | | | |
| | | Raccoon | ['Mohazo', 'RaccoonStealer', 'Racealer', 'Racoon'] | win.raccoon | [] | 2025-05-19 | | | |
| | | LockBit | ['ABCD Ransomware'] | win.lockbit | [] | 2025-05-19 | | | |
| | | LockBit | [] | osx.lockbit | [] | 2025-05-19 | | | |
| | | LockBit | [] | elf.lockbit | [] | 2025-05-19 | | | |
| | | Chihuahua | [] | win.chihuahua | [] | 2025-05-19 | | | |
| | | Terralogger | [] | win.terralogger | ['VENOM SPIDER'] | 2025-05-19 | | | |
| | | TransferLoader | [] | win.transferloader | [] | 2025-05-19 | | | |
| | | SnipVex | [] | win.snipvex | [] | 2025-05-19 | | | |
| | | SharpRhino | [] | win.sharp_rhino | [] | 2025-05-19 | | | |
| | | Hunters International | [] | win.hunters_international | ['Storm-0501'] | 2025-05-19 | | | |
| | | AdaptixC2 | [] | win.adaptix_c2 | [] | 2025-05-19 | | | |
| | | Ave Maria | ['AVE_MARIA', 'AveMariaRAT', 'Warzone RAT', 'WarzoneRAT', 'avemaria'] | win.ave_maria | ['Anunak'] | 2025-05-19 | | | |
| | | Emmenhtal | ['IDATDropper', 'PEAKLIGHT'] | win.emmenhtal | [] | 2025-05-12 | | | |
| | | Akira | ['REDBIKE'] | elf.akira | ['Storm-1567'] | 2025-05-19 | | | |
| | | GootLoader | ['SLOWPOUR'] | js.gootloader | ['Storm-0249'] | 2025-05-09 | | | |
| | | PortStarter | [] | win.portstarter | ['Vanilla Tempest'] | 2025-05-09 | | | |
| | | Mount Locker | ['DagonLocker', 'MountLocker', 'QuantumLocker'] | win.mount_locker | ['Vanilla Tempest'] | 2025-05-09 | | | |
| | | INC | [] | elf.inc | ['Storm-0494', 'Vanilla Tempest'] | 2025-05-19 | | | |
| | | XRed | [] | win.xred | [] | 2025-06-23 | | | |
| | | DevilsTongue | [] | win.devilstongue | ['Caramel Tsunami'] | 2025-05-09 | | | |
| | | Shopper | ['LeifAccess'] | apk.shopper | [] | 2025-05-09 | | | |
| | | tsunami | [] | win.tsunami | ['Lazarus Group'] | 2025-05-05 | | | |
| | | DCRat | ['DarkCrystal RAT'] | win.dcrat | [] | 2025-05-02 | | | |
| | | PerlBot | ['ShellBot', 'DDoS Perl IrcBot'] | elf.perlbot | [] | 2025-05-02 | | | |
| | | COOKBOX | [] | ps1.cookbox | ['UAC-0149'] | 2025-05-02 | | | |
| | | StormKittyRAT | [] | win.stormkitty_rat | [] | 2025-05-02 | | | |
| | | Owowa | [] | win.owowa | [] | 2025-05-02 | | | |
| | | ResolverRAT | [] | win.resolver_rat | [] | 2025-04-15 | | | |
| | | Mocky LNK | [] | win.mocky_lnk | ['APT28'] | 2025-05-02 | | | |
| | | OCEANMAP | [] | win.oceanmap | ['APT28'] | 2025-05-02 | | | |
| | | STOP | ['KeyPass', 'Djvu'] | win.stop | [] | 2025-05-02 | | | |
| | | B0 | [] | win.b0 | [] | 2025-05-02 | | | |
| | | Virut | [] | win.virut | [] | 2025-05-02 | | | |
| | | GhostWeaver | [] | ps1.ghostweaver | [] | 2025-05-01 | | | |
| | | Oski Stealer | [] | win.oski | [] | 2025-05-01 | | | |
| | | Unidentified 121 | [] | win.unidentified_121 | [] | 2025-04-28 | | | |
| | | win.beast | ['blacklockbit'] | win.beast | [] | 2025-04-28 | | | |
| | | Black Basta | ['no_name_software'] | win.blackbasta | ['GOLD REBELLION', 'STAC5143', 'Storm-0506', 'Storm-0826', 'TA2101', 'UNC3973', 'UNC4393'] | 2025-04-28 | | | |
| | | WIREFIRE | ['GIFTEDVISITOR'] | py.wirefire | [] | 2025-04-28 | | | |
| | | Black Basta | [] | elf.blackbasta | [] | 2025-04-28 | | | |
| | | SystemBC | [] | elf.systembc | [] | 2025-04-28 | | | |
| | | SystemBC | ['Coroxy', 'DroxiDat'] | win.systembc | ['Vanilla Tempest'] | 2025-05-09 | | | |
| | | Pyramid | [] | py.pyramid | [] | 2025-04-28 | | | |
| | | MASOL | [] | elf.masol | ['Earth Estries'] | 2025-04-28 | | | |
| | | LightNeuron | ['NETTRANS', 'XTRANS'] | win.lightneuron | ['Turla'] | 2025-04-28 | | | |
| | | XOR DDoS | ['XORDDOS'] | elf.xorddos | [] | 2025-04-28 | | | |
| | | NjRAT | ['Bladabindi', 'Lime-Worm'] | win.njrat | ['AQUATIC PANDA', 'Earth Lusca', 'Operation C-Major', 'The Gorgon Group'] | 2025-04-28 | | | |
| | | Parallax RAT | ['ParallaxRAT'] | win.parallax | [] | 2025-04-28 | | | |
| | | MysterySnail | [] | win.mystery_snail | [] | 2025-04-27 | | | |
| | | Lilith | [] | win.lilith | ['Silent Chollima', 'Tick'] | 2025-04-25 | | | |
| | | PipeMagic | [] | win.pipemagic | [] | 2025-04-25 | | | |
| | | GUIDLOADER | [] | win.guidloader | [] | 2025-04-25 | | | |
| | | FINALDRAFT | [] | win.finaldraft | [] | 2025-04-25 | | | |
| | | PATHLOADER | [] | win.pathloader | [] | 2025-04-25 | | | |
| | | FINALDRAFT | [] | elf.finaldraft | [] | 2025-04-25 | | | |
| | | RansomEXX | ['Ransom X', 'Defray777'] | win.ransomexx | ['GOLD DUPONT'] | 2025-04-25 | | | |
| | | XiebroC2 | [] | win.xiebroc2 | [] | 2025-04-25 | | | |
| | | TargetCompany | ['Fargo', 'Mallox', 'Tohnichi'] | win.targetcompany | [] | 2025-04-25 | | | |
| | | Industroyer | ['Crash', 'CrashOverride'] | win.industroyer | ['ELECTRUM'] | 2025-04-25 | | | |
| | | INDUSTROYER2 | [] | win.industroyer2 | ['Sandworm'] | 2025-04-25 | | | |
| | | FrostyGoop | ['BUSTLEBERM'] | win.frostygoop | [] | 2025-04-25 | | | |
| | | Interlock | [] | elf.interlock | [] | 2025-04-17 | | | |
| | | Berserk Stealer | [] | win.berserk_stealer | [] | 2025-04-17 | | | |
| | | BLACKCOFFEE | ['PNGRAT', 'gresim', 'ZoxPNG'] | win.blackcoffee | ['APT41', 'Aurora Panda', 'Leviathan'] | 2025-04-17 | | | |
| | | Derusbi | ['PHOTO'] | win.derusbi | ['APT41', 'APT17', 'Leviathan', 'Stone Panda'] | 2025-04-17 | | | |
| | | HiKit | [] | win.hikit | ['Aurora Panda', 'Hurricane Panda'] | 2025-04-17 | | | |
| | | WINELOADER | [] | win.wineloader | ['APT29'] | 2025-04-16 | | | |
| | | GRAPELOADER | [] | win.grapeloader | ['APT29'] | 2025-04-16 | | | |
| | | Lynx | [] | win.lynx | [] | 2025-04-16 | | | |
| | | RN Stealer | [] | py.rn_stealer | ['TraderTraitor'] | 2025-04-15 | | | |